$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: CWiXUIgntpfFXJ/kseyi9jEE91e3hJb4ETHyEnt6/70= Subject key identifier: BB:63:69:76:37:9B:3D:6F:49:67:06:6A:A1:5D:3B:15:F7:26:05:C6 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584F4B1398E111580AE400490380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF855 Signing time: Fri 25 Sep 2026 15:00:24 +0000 Manifest this update: Fri 25 Sep 2026 15:00:24 +0000 Manifest next update: Sun 27 Sep 2026 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: +CRPUfgS+PXtKMk8ZGpfzHd0ygIKvWVrxPGSgWAyWvY=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: USxLDMnOhR3bgC0H7N/qe/eQ1BZLYk77J2jnbfhB+AY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4b:13:98:e1:11:58:0a:e4:00:49:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Sep 25 15:00:24 2026 GMT Not After : Sep 27 15:00:00 2026 GMT Subject: CN=50232682-51c0-42bb-ab70-6d4e649e436a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:10:9c:a6:fe:bd:01:45:f1:12:40:b9:5b: c3:e5:b4:19:65:21:1e:28:c5:83:23:f9:5b:ad:42: 39:52:16:49:b2:23:8f:10:4d:94:5f:4b:4d:fa:db: 46:08:8a:23:8d:2d:29:be:ce:3e:ba:db:d0:c5:40: 47:dc:d7:52:7d:0d:57:e0:a5:5f:67:31:7a:0b:58: ec:90:ec:50:24:75:af:23:c9:cd:5d:f2:4e:9f:9c: 8b:cc:8b:19:eb:df:c3:37:2d:1b:92:44:7e:81:c0: fc:b2:2a:65:08:83:5f:3f:f5:07:84:bd:4c:b4:2f: 6b:75:3b:3c:82:61:85:4a:ce:f5:dc:98:d4:09:9c: 8b:a5:76:2c:62:bc:9a:a4:b4:42:b5:b1:62:72:92: 08:bc:98:0e:9e:62:ae:be:63:02:79:0a:4f:c7:1c: 8b:86:0e:16:32:f8:01:ef:2f:52:02:a4:4c:1a:01: 8b:d0:03:ca:58:3e:52:8b:a3:40:54:27:6a:6d:18: 5f:f6:f6:db:14:9c:de:b2:94:a7:59:82:f1:03:9d: a5:51:5e:af:ee:1b:b9:52:8c:f9:29:dc:8a:9f:0a: 86:8a:13:53:aa:7a:41:06:15:bb:75:a6:1f:a6:14: 69:e4:ba:5b:87:6b:4b:68:49:36:08:d4:36:d3:5d: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:63:69:76:37:9B:3D:6F:49:67:06:6A:A1:5D:3B:15:F7:26:05:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9a:18:d1:26:11:e1:54:dd:96:3e:9e:10:27:ce:61:6b:b1: 59:85:04:f2:53:5b:db:f5:a4:bf:60:ac:34:5a:1d:49:db:af: 2c:cb:6b:53:a7:a9:4f:44:e2:4d:f7:73:c1:de:f0:4e:6e:2d: 98:f5:53:5d:c1:d8:d4:5e:f9:04:c4:77:53:d7:0c:68:55:27: 95:f7:98:61:4c:e6:5c:3e:0d:44:a8:f7:55:7c:7e:c1:94:bc: 89:e5:cf:78:46:4c:c3:9c:6e:fb:8a:8e:6c:46:0b:1a:6c:71: 69:19:67:ab:1a:70:38:8f:2f:5e:28:57:dc:40:13:42:e7:42: 71:2f:32:7b:00:0e:a7:0c:24:a0:e1:88:f9:b8:5f:1c:3c:0e: a5:8e:43:31:c0:f5:83:39:15:a0:02:a8:a8:27:e6:66:dd:4f: a2:1e:de:e6:d2:f3:49:49:ce:11:30:9d:41:51:4b:af:03:e5: 5c:ea:21:e0:5d:55:e0:0f:36:3f:c0:96:03:b6:3a:67:0c:ce: 88:71:0f:d9:27:82:6b:b3:6e:6c:2b:1d:d3:58:e2:0d:0b:04: ca:4b:bb:ae:3b:de:37:94:2d:32:a5:19:5a:75:5e:9d:70:10: f4:b5:3b:0d:24:fc:79:32:2c:6b:42:e7:e2:2e:d8:65:1d:08: 00:f1:9e:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9LE5jhEVgK5ABJA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDkyNTE1MDAyNFoXDTI2MDkyNzE1MDAwMFowLzEtMCsGA1UEAxMk NTAyMzI2ODItNTFjMC00MmJiLWFiNzAtNmQ0ZTY0OWU0MzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfEQnKb+vQFF8RJAuVvD5bQZZSEeKMWDI/lb rUI5UhZJsiOPEE2UX0tN+ttGCIojjS0pvs4+utvQxUBH3NdSfQ1X4KVfZzF6C1js kOxQJHWvI8nNXfJOn5yLzIsZ69/DNy0bkkR+gcD8siplCINfP/UHhL1MtC9rdTs8 gmGFSs713JjUCZyLpXYsYryapLRCtbFicpIIvJgOnmKuvmMCeQpPxxyLhg4WMvgB 7y9SAqRMGgGL0APKWD5Si6NAVCdqbRhf9vbbFJzespSnWYLxA52lUV6v7hu5Uoz5 KdyKnwqGihNTqnpBBhW7daYfphRp5Lpbh2tLaEk2CNQ2011MyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLtjaXY3mz1vSWcGaqFdOxX3JgXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLmhjRJhHhVN2WPp4QJ85h a7FZhQTyU1vb9aS/YKw0Wh1J268sy2tTp6lPROJN93PB3vBObi2Y9VNdwdjUXvkE xHdT1wxoVSeV95hhTOZcPg1EqPdVfH7BlLyJ5c94RkzDnG77io5sRgsabHFpGWer GnA4jy9eKFfcQBNC50JxLzJ7AA6nDCSg4Yj5uF8cPA6ljkMxwPWDORWgAqioJ+Zm 3U+iHt7m0vNJSc4RMJ1BUUuvA+Vc6iHgXVXgDzY/wJYDtjpnDM6IcQ/ZJ4Jrs25s Kx3TWOINCwTKS7uuO943lC0ypRladV6dcBD0tTsNJPx5MixrQufiLthlHQgA8Z4B -----END CERTIFICATE-----Generated at Sat Sep 26 07:18:15 2026 by rpki-client