$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: z+rGsRYDF46bRUeO4RioPpXLPR+DhGWiBiUG+N0TKjI= Subject key identifier: FE:65:46:A0:30:DF:96:29:73:CD:6B:B1:06:1F:2A:91:9C:E7:42:35 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584D4C4DF74DF46E7ACEDDBE9180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E3A8 Signing time: Thu 26 Mar 2026 16:00:04 +0000 Manifest this update: Thu 26 Mar 2026 16:00:04 +0000 Manifest next update: Sat 28 Mar 2026 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: 12MQDjaqbIx1B6zjN8dN/5es0ud0LI9BrBO2d9RDtmQ=) 2: a48abf00-c06c-348f-93b5-677951e2c9f1.roa (hash: jroRXGNXWt8RuNq13eTaJ5TqlXHBcvR7XzBYvGRvtrY=) 3: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: jLBfRlxG+LDpqtzrtgXBGDs4c3LXj7BMoCU5q1BMqbk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:4d:f7:4d:f4:6e:7a:ce:dd:be:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Mar 26 16:00:04 2026 GMT Not After : Mar 28 16:00:00 2026 GMT Subject: CN=bc5a3093-5962-414c-82a6-82ca315875e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:6c:74:29:7b:07:03:27:94:fb:d6:bd:b3: 43:16:97:6d:6e:a7:26:79:d3:fe:c1:44:5f:e7:95: 4e:f4:1b:53:0e:9e:3d:3e:a4:60:62:4e:bb:40:d6: f6:e6:ea:6e:af:5e:61:df:9c:5d:87:db:f9:c3:e6: 9d:8b:52:b0:76:88:5c:6e:07:67:77:f3:d9:c0:c0: 23:3f:41:1f:46:1f:99:63:b7:1d:fa:c0:d7:08:e4: 9d:74:90:f7:db:37:f6:85:aa:91:26:ec:2f:43:4b: 83:db:be:92:cd:68:58:e3:52:23:3c:ff:0c:4f:3c: bf:9c:bc:68:ab:1a:23:cd:44:43:da:bb:cb:11:7c: 29:a4:c6:b3:74:89:3e:20:0f:60:6d:45:87:03:4b: 19:1f:ff:58:90:e4:f0:1a:4c:82:4d:23:44:96:c1: c3:50:c0:11:e3:2a:b7:40:4e:4f:a7:94:48:2d:d9: 6f:63:9e:e0:c1:05:d9:2f:30:c4:92:3c:2a:25:dd: e9:33:98:f7:bd:aa:64:64:ac:87:61:d3:e8:45:fa: 88:1a:b1:53:21:a8:e1:70:38:f1:c3:a2:1e:76:15: dc:6f:7e:b2:17:39:b3:4a:2c:f3:e7:58:8a:33:b7: f7:86:d2:85:f7:61:0a:6d:47:a4:45:77:37:d2:0c: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:65:46:A0:30:DF:96:29:73:CD:6B:B1:06:1F:2A:91:9C:E7:42:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:94:8a:67:d1:33:bf:9b:9f:34:76:21:26:75:0c:9a:66:f0: 16:15:c2:03:c6:bb:60:61:62:48:0d:d8:54:11:90:97:aa:e9: b2:62:2f:05:9f:54:63:bb:b8:50:0d:d2:9f:aa:e4:ee:91:a0: 8b:ba:9d:a3:46:b9:5a:95:f9:1d:1d:83:ce:00:3b:67:eb:95: 66:17:ba:16:b5:06:08:d8:99:9e:e3:11:ca:b5:2a:44:e2:f0: c3:e4:c1:e0:af:52:71:d9:8a:09:2b:99:73:6e:8e:5d:01:bb: 62:6e:4c:53:7a:55:f3:28:45:f6:58:9b:4f:03:b0:2a:5d:61: 34:72:82:3a:17:6f:80:89:50:e0:42:96:3e:bf:f7:90:ca:0e: c6:ce:9c:bf:ef:f0:1f:ee:5a:ab:4b:8d:6d:71:95:3b:de:b5: f8:80:f9:c9:2c:6b:2e:6b:4b:cb:69:fb:f9:97:b8:81:bb:72: 5f:19:7f:70:91:2e:5e:a9:c5:cf:4a:d4:da:0d:95:8c:12:e5: f0:a9:35:6c:a7:a1:20:63:13:6a:e3:a1:c5:4e:9a:b5:6b:25: ea:3e:db:8c:20:b7:dc:d4:23:8e:a5:c7:d9:e3:e8:c4:14:cc: ce:00:1e:91:76:83:41:6a:7d:2d:72:4f:6d:6f:55:b2:c7:2a: 3c:2a:04:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MTfdN9G56zt2+kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI2MDMyNjE2MDAwNFoXDTI2MDMyODE2MDAwMFowLzEtMCsGA1UEAxMk YmM1YTMwOTMtNTk2Mi00MTRjLTgyYTYtODJjYTMxNTg3NWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkFsdCl7BwMnlPvWvbNDFpdtbqcmedP+wURf 55VO9BtTDp49PqRgYk67QNb25upur15h35xdh9v5w+adi1Kwdohcbgdnd/PZwMAj P0EfRh+ZY7cd+sDXCOSddJD32zf2haqRJuwvQ0uD276SzWhY41IjPP8MTzy/nLxo qxojzURD2rvLEXwppMazdIk+IA9gbUWHA0sZH/9YkOTwGkyCTSNElsHDUMAR4yq3 QE5Pp5RILdlvY57gwQXZLzDEkjwqJd3pM5j3vapkZKyHYdPoRfqIGrFTIajhcDjx w6IedhXcb36yFzmzSizz51iKM7f3htKF92EKbUekRXc30gzLyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP5lRqAw35Ypc81rsQYfKpGc50I1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBClIpn0TO/m580diEmdQya ZvAWFcIDxrtgYWJIDdhUEZCXqumyYi8Fn1Rju7hQDdKfquTukaCLup2jRrlalfkd HYPOADtn65VmF7oWtQYI2Jme4xHKtSpE4vDD5MHgr1Jx2YoJK5lzbo5dAbtibkxT elXzKEX2WJtPA7AqXWE0coI6F2+AiVDgQpY+v/eQyg7Gzpy/7/Af7lqrS41tcZU7 3rX4gPnJLGsua0vLafv5l7iBu3JfGX9wkS5eqcXPStTaDZWMEuXwqTVsp6EgYxNq 46HFTpq1ayXqPtuMILfc1COOpcfZ4+jEFMzOAB6RdoNBan0tck9tb1Wyxyo8KgQ/ -----END CERTIFICATE-----Generated at Thu Mar 26 20:28:58 2026 by rpki-client