$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft File: 21972f4a-b949-4223-9030-d9f0e37f8edd.mft (raw, json) Hash identifier: lybO0Qlx7Y2k37fkVH3nPqWhqbfjIkqMWPqTNn7/LPw= Subject key identifier: D0:CC:3D:32:B2:21:29:47:48:E7:19:F4:A3:A2:C5:6A:E0:03:22:21 Authority key identifier: 98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 Certificate issuer: /CN=21972f4a-b949-4223-9030-d9f0e37f8edd Certificate serial: 010D0C9F4328584F570ECBBF788B56E787AC5300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft Manifest number: 010D0C9F4328584AAF164585E46E2B63713FC3AB Signing time: Tue 29 Sep 2026 22:00:23 +0000 Manifest this update: Tue 29 Sep 2026 22:00:23 +0000 Manifest next update: Thu 01 Oct 2026 22:00:00 +0000 Files and hashes: 1: 21972f4a-b949-4223-9030-d9f0e37f8edd.crl (hash: HXCa2ULUt081x3tNdU9XsLWuLH3nxtecJZVfpFcwWU4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:0e:cb:bf:78:8b:56:e7:87:ac:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21972f4a-b949-4223-9030-d9f0e37f8edd Validity Not Before: Sep 29 22:00:23 2026 GMT Not After : Oct 1 22:00:00 2026 GMT Subject: CN=afe197e9-6081-4cc9-8b78-272d073ccf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4b:e9:cb:8f:3d:c6:98:3c:7e:eb:9f:e4:ae: 9d:53:e3:19:9a:2b:a1:ff:04:61:8f:09:e9:3e:73: e2:d9:a6:7e:59:2c:33:aa:7d:61:62:49:49:8f:7b: a4:b9:10:88:6c:43:6a:14:94:d8:d2:9a:47:3b:a2: 3a:b7:8c:39:06:07:74:3c:c0:27:39:e8:b3:af:e7: 5e:c6:6d:3d:d7:71:58:24:e3:ed:ff:4f:62:74:55: 7b:39:ec:e3:2a:aa:c5:8d:72:e3:eb:9e:86:b9:9c: de:11:11:2f:de:25:b9:10:20:f0:db:33:b3:22:c8: 46:3b:7b:f2:b4:76:5b:be:e7:c1:95:c1:27:01:66: 8b:ed:f2:a3:a7:8e:fc:79:1f:fd:d1:bf:21:24:e3: e8:2a:79:ac:de:a9:32:61:5c:46:30:c3:99:1f:9b: 41:b3:46:72:05:c1:94:b5:6a:30:34:fb:ca:83:65: 60:e1:46:f0:cd:cf:34:52:31:78:ae:94:10:a2:8e: 84:08:a5:d4:77:bb:98:4a:10:0a:ca:5d:a7:51:3e: 54:ad:b5:03:5d:73:2b:12:78:e4:47:d3:4e:7e:a7: e7:58:26:ff:e4:af:94:e1:7e:74:1b:8f:c7:a5:fa: 5d:e0:06:1f:ce:1b:03:20:c6:b7:28:64:72:2e:b4: c2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CC:3D:32:B2:21:29:47:48:E7:19:F4:A3:A2:C5:6A:E0:03:22:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl X509v3 Authority Key Identifier: keyid:98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:00:6a:03:90:8e:0a:c1:3e:d1:6f:00:87:3b:1d:28:bb:04: 0a:24:fc:a1:2c:cc:8d:86:18:ef:07:57:0a:ab:b2:3e:ec:3c: 09:48:ad:60:9a:5c:e8:f9:61:74:ce:8e:16:eb:ee:fe:17:63: 4c:9e:54:d4:7f:6f:e3:47:97:34:f4:fd:01:3e:ac:bf:5c:97: 5e:f3:a7:90:2f:48:0a:41:b2:ce:48:5a:d9:a3:2b:65:fc:3a: 99:18:e0:86:48:2c:6f:00:d5:94:11:f8:5e:56:6c:4b:af:78: ec:6f:34:08:94:b3:41:2f:30:60:91:bd:14:38:2a:3d:20:99: 8f:c9:5c:4b:ea:4a:a6:10:4b:36:ba:40:17:d3:67:10:c1:84: c7:38:fe:d9:b2:0f:7c:e9:8a:76:6c:b2:a0:df:46:08:ce:d9: b5:d7:08:32:41:c2:ff:cb:7f:c9:aa:39:9d:78:8f:11:62:6c: 5f:9c:12:11:91:e1:e3:38:76:59:b3:62:4b:2b:43:8b:1a:24: 28:4e:d2:e5:1b:53:e8:09:5d:50:a3:ed:36:52:25:89:cf:bc: f4:bf:5f:83:1a:e3:62:0c:8f:1e:4e:a5:84:75:03:3d:fe:be: e9:b0:f1:e5:c0:08:62:75:cd:8c:23:2b:7d:73:c1:62:76:e6: 00:5d:b4:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9XDsu/eItW54esUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NzJmNGEtYjk0OS00MjIzLTkwMzAtZDlmMGUzN2Y4 ZWRkMB4XDTI2MDkyOTIyMDAyM1oXDTI2MTAwMTIyMDAwMFowLzEtMCsGA1UEAxMk YWZlMTk3ZTktNjA4MS00Y2M5LThiNzgtMjcyZDA3M2NjZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0vpy489xpg8fuuf5K6dU+MZmiuh/wRhjwnp PnPi2aZ+WSwzqn1hYklJj3ukuRCIbENqFJTY0ppHO6I6t4w5Bgd0PMAnOeizr+de xm0913FYJOPt/09idFV7OezjKqrFjXLj656GuZzeEREv3iW5ECDw2zOzIshGO3vy tHZbvufBlcEnAWaL7fKjp478eR/90b8hJOPoKnms3qkyYVxGMMOZH5tBs0ZyBcGU tWowNPvKg2Vg4Ubwzc80UjF4rpQQoo6ECKXUd7uYShAKyl2nUT5UrbUDXXMrEnjk R9NOfqfnWCb/5K+U4X50G4/Hpfpd4AYfzhsDIMa3KGRyLrTCfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNDMPTKyISlHSOcZ9KOixWrgAyIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3 MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYwZTM3ZjhlZGQvMjE5NzJmNGEtYjk0OS00 MjIzLTkwMzAtZDlmMGUzN2Y4ZWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjE5NzJmNGEtYjk0OS00MjIzLTkw MzAtZDlmMGUzN2Y4ZWRkLzIxOTcyZjRhLWI5NDktNDIyMy05MDMwLWQ5ZjBlMzdm OGVkZC5jcmwwHwYDVR0jBBgwFoAUmEhNlI2Wb0uiz1xvp4McJFubFcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYw ZTM3ZjhlZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAAGoDkI4KwT7RbwCHOx0o uwQKJPyhLMyNhhjvB1cKq7I+7DwJSK1gmlzo+WF0zo4W6+7+F2NMnlTUf2/jR5c0 9P0BPqy/XJde86eQL0gKQbLOSFrZoytl/DqZGOCGSCxvANWUEfheVmxLr3jsbzQI lLNBLzBgkb0UOCo9IJmPyVxL6kqmEEs2ukAX02cQwYTHOP7Zsg986Yp2bLKg30YI ztm11wgyQcL/y3/JqjmdeI8RYmxfnBIRkeHjOHZZs2JLK0OLGiQoTtLlG1PoCV1Q o+02UiWJz7z0v1+DGuNiDI8eTqWEdQM9/r7psPHlwAhidc2MIyt9c8FiduYAXbSj -----END CERTIFICATE-----Generated at Wed Sep 30 07:30:36 2026 by rpki-client