$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft File: 21a7c020-ebbc-4762-8841-54efb508a7c7.mft (raw, json) Hash identifier: +RmRVuNSOgOD5nIGd8/aA8V5zLU2fvsQ0VclAFFkNIg= Subject key identifier: 2D:5A:D2:B0:CE:AC:E6:95:6C:66:28:07:03:D5:64:88:18:C6:22:46 Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Certificate serial: 010D0C9F4328584FA05737F1473C9CC19EBC2C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft Manifest number: 010D0C9F4328584073A83BD55261AAC0C84A310A Signing time: Mon 26 Oct 2026 04:00:23 +0000 Manifest this update: Mon 26 Oct 2026 04:00:23 +0000 Manifest next update: Wed 28 Oct 2026 04:00:00 +0000 Files and hashes: 1: 16591207-7557-378f-91cc-68c03f1a278a.roa (hash: a4o2cZaw1/wKzryX5srokBCoGwFGwuzBzqdZs7JQmzE=) 2: 21a7c020-ebbc-4762-8841-54efb508a7c7.crl (hash: ed0PqKRbw7hHXkYfgKQxvSpeqrd/Tej+R4W5DPwYxy0=) 3: 4c31ef02-9049-3a69-bdae-e0e93a1e447f.roa (hash: kphI7/9qL5DCde2kK97fei21aO3ViaswhflvOX1zW/w=) 4: 65b660a1-3975-385b-add8-d9b4f1e98a18.roa (hash: xXIlYrXRX6Ka+L+EVrlIZUukwXWJDFhxA95hD/6iY1w=) 5: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (hash: flrX5BFMyOKD0OogPVA13F/RV3sfT9Yfp2cndr1OzcQ=) 6: b233c099-01b4-3727-a701-02cd60f48355.roa (hash: WgfqZ9xpsbSaqo2Yfuj5Z+D7OMtUjPF+TDPnnovbJHM=) 7: ed01e030-9725-3706-a152-4c292fbd1f32.roa (hash: oYrfHhZD/oGp6lwGKoEfT5pXyNJDNjeUWSwNXFXa7FA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a0:57:37:f1:47:3c:9c:c1:9e:bc:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Validity Not Before: Oct 26 04:00:23 2026 GMT Not After : Oct 28 04:00:00 2026 GMT Subject: CN=871ff287-46ae-4ae4-9ac6-6fb55082abeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:49:a5:bf:b3:c6:5e:b0:b5:7c:b2:e4:b1: 5c:45:d7:6e:8a:45:41:cc:85:a5:40:9c:6d:f7:ca: 21:27:b9:e3:ac:ab:68:0e:79:ad:7b:c7:19:33:21: 16:9c:7a:e3:b3:4d:d2:96:b5:cb:aa:d4:46:97:ee: 55:26:f1:5b:1b:50:c8:72:c2:ff:81:6b:a8:7e:99: 82:4c:46:00:0a:18:37:60:76:ad:93:97:82:47:30: 4b:85:8f:bc:a9:94:7b:b8:45:17:8e:19:49:eb:ec: 2c:58:de:15:f2:63:a6:8e:80:04:40:1a:9a:94:3c: 09:7b:4e:a3:9c:e7:d4:13:6c:9c:11:94:ac:58:d3: 4f:62:6a:dc:10:18:33:30:39:75:ac:64:1a:22:2d: 76:e1:9d:54:96:b8:6b:d3:80:80:bb:3e:22:72:4b: 63:95:26:8d:17:4d:83:d7:2e:76:f6:15:18:e0:a3: 94:a0:1c:6f:13:90:6d:55:d1:87:23:3f:8a:b5:2f: 4f:c9:8d:f0:20:70:db:39:09:d1:ae:ef:32:c0:7c: 8b:58:ae:4b:90:e6:81:71:dc:85:e3:a2:68:f1:8d: 47:e1:83:7e:7b:15:ac:51:55:4e:70:69:e2:a2:8f: 50:27:92:71:8c:75:7c:36:b2:9d:9b:86:83:46:1f: 65:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5A:D2:B0:CE:AC:E6:95:6C:66:28:07:03:D5:64:88:18:C6:22:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl X509v3 Authority Key Identifier: keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b3:11:f2:0a:34:49:6f:ee:cb:e6:fb:8f:e1:35:ef:69:35: 2f:cb:1d:77:25:54:3d:8f:84:69:b9:86:b8:18:ad:2c:15:55: d8:f3:97:30:0f:68:ea:f2:1a:7a:7e:62:e1:94:26:78:61:23: 11:56:2c:55:a2:e9:09:2d:c8:e1:f3:e1:e9:14:ee:a8:65:54: d7:02:a0:37:5f:97:1c:c9:ff:ef:10:2a:e0:5e:c3:84:59:5b: 1b:b3:c7:26:df:85:c4:99:41:7b:05:2f:e2:4c:d3:e0:7c:b5: e9:84:49:52:b0:81:74:a1:eb:be:d6:5c:60:62:11:58:e7:a7: 37:06:8a:73:13:3d:62:cc:c6:a6:ba:66:be:a1:54:1c:bb:4f: 37:8f:72:0b:1c:84:fa:04:f7:15:84:f8:7e:ed:6e:5a:3f:94: e3:04:1e:93:35:e2:c9:b8:12:58:8a:f6:c0:b3:56:ba:79:80: a0:7c:3f:41:23:47:20:8d:bc:9c:33:3f:c9:d5:e5:ee:ec:2b: e2:11:d2:e3:bc:af:82:49:e7:da:b8:3b:90:68:a2:04:c7:0e: 22:6f:08:7d:6b:67:43:62:aa:75:3f:79:41:fb:fa:59:0b:c8: 32:83:ec:c2:65:98:06:0e:c2:a6:ac:c1:7d:32:0f:bf:ce:a5: 5b:81:bc:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+gVzfxRzycwZ68LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh N2M3MB4XDTI2MTAyNjA0MDAyM1oXDTI2MTAyODA0MDAwMFowLzEtMCsGA1UEAxMk ODcxZmYyODctNDZhZS00YWU0LTlhYzYtNmZiNTUwODJhYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/tJpb+zxl6wtXyy5LFcRdduikVBzIWlQJxt 98ohJ7njrKtoDnmte8cZMyEWnHrjs03SlrXLqtRGl+5VJvFbG1DIcsL/gWuofpmC TEYAChg3YHatk5eCRzBLhY+8qZR7uEUXjhlJ6+wsWN4V8mOmjoAEQBqalDwJe06j nOfUE2ycEZSsWNNPYmrcEBgzMDl1rGQaIi124Z1Ulrhr04CAuz4icktjlSaNF02D 1y529hUY4KOUoBxvE5BtVdGHIz+KtS9PyY3wIHDbOQnRru8ywHyLWK5LkOaBcdyF 46Jo8Y1H4YN+exWsUVVOcGnioo9QJ5JxjHV8NrKdm4aDRh9lRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC1a0rDOrOaVbGYoBwPVZIgYxiJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3 YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvMjFhN2MwMjAtZWJiYy00 NzYyLTg4NDEtNTRlZmI1MDhhN2M3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4 NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4 YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApsxHyCjRJb+7L5vuP4TXv aTUvyx13JVQ9j4RpuYa4GK0sFVXY85cwD2jq8hp6fmLhlCZ4YSMRVixVoukJLcjh 8+HpFO6oZVTXAqA3X5ccyf/vECrgXsOEWVsbs8cm34XEmUF7BS/iTNPgfLXphElS sIF0oeu+1lxgYhFY56c3BopzEz1izMamuma+oVQcu083j3ILHIT6BPcVhPh+7W5a P5TjBB6TNeLJuBJYivbAs1a6eYCgfD9BI0cgjbycMz/J1eXu7CviEdLjvK+CSefa uDuQaKIExw4ibwh9a2dDYqp1P3lB+/pZC8gyg+zCZZgGDsKmrMF9Mg+/zqVbgbw9 -----END CERTIFICATE-----Generated at Mon Oct 26 19:50:59 2026 by rpki-client