$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft File: 21972f4a-b949-4223-9030-d9f0e37f8edd.mft (raw, json) Hash identifier: g1rQPEH/3CjQdH2B6Lzd2ayX4gxMtoxUvaWlZuye0TM= Subject key identifier: 26:1C:EB:C8:49:CC:A9:AA:1E:C2:E9:C3:54:DA:82:83:45:9A:73:D4 Authority key identifier: 98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 Certificate issuer: /CN=21972f4a-b949-4223-9030-d9f0e37f8edd Certificate serial: 010D0C9F4328584DD036CC7005DA47902B1FB0E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft Manifest number: 010D0C9F4328584AAF164585E46E2B63713FC31F Signing time: Tue 12 May 2026 22:00:04 +0000 Manifest this update: Tue 12 May 2026 22:00:04 +0000 Manifest next update: Thu 14 May 2026 22:00:00 +0000 Files and hashes: 1: 21972f4a-b949-4223-9030-d9f0e37f8edd.crl (hash: JOY4dkujHdkvWRIlxZEj5coVffrDpACBENOyOX02blg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:36:cc:70:05:da:47:90:2b:1f:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21972f4a-b949-4223-9030-d9f0e37f8edd Validity Not Before: May 12 22:00:04 2026 GMT Not After : May 14 22:00:00 2026 GMT Subject: CN=3452df0c-42e7-4a84-b70a-e3465ee55237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:4c:20:54:68:05:ff:a0:97:1a:65:2e:50: b4:d0:bc:e9:95:a5:83:57:f2:e6:7c:7f:e2:4a:09: 1e:5c:59:3a:a0:51:63:05:2c:2e:27:38:4d:fa:6c: 76:7b:1f:c5:51:96:f7:9c:4a:f8:7e:c1:30:33:c1: 02:97:b2:75:4f:d1:7c:14:72:61:8d:69:03:11:f1: b5:83:d2:2b:bb:1b:fd:fd:07:fb:56:59:4c:0e:83: 49:bc:b1:b6:e6:df:3f:2b:ea:d3:cc:f5:5b:2f:68: 63:0d:25:49:15:ff:e9:aa:49:79:d6:02:da:91:58: 89:fb:20:f4:ce:ba:ac:da:35:2b:7d:a9:e5:3a:a2: 6b:9c:05:1d:84:3f:89:9c:47:9d:6d:c3:0c:eb:d8: 1a:ab:22:5a:a5:19:a7:a6:d9:6a:a5:28:47:51:f8: 90:d7:0b:cb:c8:74:a5:91:30:57:ac:11:a6:82:80: b1:30:3d:71:07:35:58:8a:77:07:d0:f9:e0:9e:91: 05:bd:5b:4c:38:6d:c1:6c:3d:23:11:d5:e8:62:d4: e9:15:0d:1d:2a:b2:5b:22:94:b5:12:51:64:55:60: c6:5d:f4:23:55:b8:d1:f6:30:d9:21:68:99:7c:e9: 14:9c:b2:72:c1:3a:6a:31:8f:37:ec:fa:7c:28:a1: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1C:EB:C8:49:CC:A9:AA:1E:C2:E9:C3:54:DA:82:83:45:9A:73:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl X509v3 Authority Key Identifier: keyid:98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:5b:2c:6e:34:6e:d4:e2:16:45:02:6e:b3:23:8f:77:ae:0c: ac:14:ee:03:72:9e:6f:10:94:7e:c1:78:d8:5d:65:9f:da:3c: b2:a0:c5:c3:86:30:b5:95:02:29:bf:b9:29:5c:26:03:c2:f4: 64:b2:08:03:bd:fa:60:8b:6b:2d:26:c4:97:12:1d:cc:61:f0: be:e3:20:f3:d9:50:5a:dd:ee:1c:1b:bc:84:f4:1c:50:95:6e: 3a:0e:af:40:91:ba:af:82:f6:e9:52:3b:65:3d:a1:ce:89:de: 73:14:f4:6c:77:b6:30:88:33:ab:be:c8:0f:d2:b0:f5:56:2a: 0d:27:82:31:3d:c1:b1:bb:f8:fb:4d:b1:95:da:ac:26:e5:28: 8b:2a:3e:59:d3:27:cd:87:91:80:30:d2:fe:bc:43:8c:2b:72: 30:fd:82:f6:37:ae:cc:9e:fb:8d:6f:db:e2:bc:21:6a:f6:7a: ca:48:f5:94:32:e0:7b:62:7b:1a:00:9f:de:10:84:5c:5b:e5: 9d:23:85:31:f5:3f:d1:a3:ba:71:4f:d6:4c:2a:65:6f:b1:ab: 91:d3:ac:71:9b:84:d0:5c:a8:f0:3f:95:ad:01:2d:39:58:a1: 57:11:fa:08:d1:70:af:1b:62:70:5a:08:be:70:e9:c2:3f:7f: 17:40:7e:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QNsxwBdpHkCsfsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NzJmNGEtYjk0OS00MjIzLTkwMzAtZDlmMGUzN2Y4 ZWRkMB4XDTI2MDUxMjIyMDAwNFoXDTI2MDUxNDIyMDAwMFowLzEtMCsGA1UEAxMk MzQ1MmRmMGMtNDJlNy00YTg0LWI3MGEtZTM0NjVlZTU1MjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh5MIFRoBf+glxplLlC00LzplaWDV/LmfH/i SgkeXFk6oFFjBSwuJzhN+mx2ex/FUZb3nEr4fsEwM8ECl7J1T9F8FHJhjWkDEfG1 g9Iruxv9/Qf7VllMDoNJvLG25t8/K+rTzPVbL2hjDSVJFf/pqkl51gLakViJ+yD0 zrqs2jUrfanlOqJrnAUdhD+JnEedbcMM69gaqyJapRmnptlqpShHUfiQ1wvLyHSl kTBXrBGmgoCxMD1xBzVYincH0PngnpEFvVtMOG3BbD0jEdXoYtTpFQ0dKrJbIpS1 ElFkVWDGXfQjVbjR9jDZIWiZfOkUnLJywTpqMY837Pp8KKGKnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCYc68hJzKmqHsLpw1TagoNFmnPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3 MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYwZTM3ZjhlZGQvMjE5NzJmNGEtYjk0OS00 MjIzLTkwMzAtZDlmMGUzN2Y4ZWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjE5NzJmNGEtYjk0OS00MjIzLTkw MzAtZDlmMGUzN2Y4ZWRkLzIxOTcyZjRhLWI5NDktNDIyMy05MDMwLWQ5ZjBlMzdm OGVkZC5jcmwwHwYDVR0jBBgwFoAUmEhNlI2Wb0uiz1xvp4McJFubFcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYw ZTM3ZjhlZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDSWyxuNG7U4hZFAm6zI493 rgysFO4Dcp5vEJR+wXjYXWWf2jyyoMXDhjC1lQIpv7kpXCYDwvRksggDvfpgi2st JsSXEh3MYfC+4yDz2VBa3e4cG7yE9BxQlW46Dq9AkbqvgvbpUjtlPaHOid5zFPRs d7YwiDOrvsgP0rD1VioNJ4IxPcGxu/j7TbGV2qwm5SiLKj5Z0yfNh5GAMNL+vEOM K3Iw/YL2N67MnvuNb9vivCFq9nrKSPWUMuB7YnsaAJ/eEIRcW+WdI4Ux9T/Ro7px T9ZMKmVvsauR06xxm4TQXKjwP5WtAS05WKFXEfoI0XCvG2JwWgi+cOnCP38XQH7B -----END CERTIFICATE-----Generated at Wed May 13 11:26:48 2026 by rpki-client