$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft File: 21a7c020-ebbc-4762-8841-54efb508a7c7.mft (raw, json) Hash identifier: 5Ddn7BcYX43gHRG0+UQrBSycV7qa7ik+1YKrCiIDvKM= Subject key identifier: 1C:AD:E7:3D:88:CF:A6:E6:F8:85:86:E0:4B:FA:EE:A5:59:9E:35:3C Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Certificate serial: 010D0C9F4328584D8853AC1BB2537FA80759D2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft Manifest number: 010D0C9F4328584073A83BD55261AAC0C84A3033 Signing time: Fri 17 Apr 2026 04:00:03 +0000 Manifest this update: Fri 17 Apr 2026 04:00:03 +0000 Manifest next update: Sun 19 Apr 2026 04:00:00 +0000 Files and hashes: 1: 16591207-7557-378f-91cc-68c03f1a278a.roa (hash: cNgs5tTkG7oJO5MEhwbyoOQVYKm//yWXX3wN84eMzQY=) 2: 21a7c020-ebbc-4762-8841-54efb508a7c7.crl (hash: IrrxxFENx494rjzVmLxDRfjZNkcS+Oe+xC73QhRx5xE=) 3: 4c31ef02-9049-3a69-bdae-e0e93a1e447f.roa (hash: MRpZj+OtXb9G9jHmOMJQK0NEjm8gWmEKU7lw5eUj/Ac=) 4: 65b660a1-3975-385b-add8-d9b4f1e98a18.roa (hash: fc/HeCQCKV2VichupXOe0591mv/BU/p1/tRy5F/dprk=) 5: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (hash: 6RxLJlNTUs7CMYQpLU8HrhcVlgR+iYk2VO/0jCG2UXI=) 6: b233c099-01b4-3727-a701-02cd60f48355.roa (hash: 6LDbUJV6ZdvNdTfhaXyKB+QofV7j6+xO9mEQk7V3Vg0=) 7: ed01e030-9725-3706-a152-4c292fbd1f32.roa (hash: CI3U97MTNzvQvltFi5A7sXMU1AyHr58R5/lpeBxFfK0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:88:53:ac:1b:b2:53:7f:a8:07:59:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Validity Not Before: Apr 17 04:00:03 2026 GMT Not After : Apr 19 04:00:00 2026 GMT Subject: CN=b58b70a6-d552-463a-9250-3ea93b4fb9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:4a:54:93:df:6a:8b:14:ae:ce:0e:92:3f: 88:68:dc:ff:08:36:3b:71:63:21:ed:3d:c1:1a:95: 46:6e:ba:ac:36:84:b2:9f:98:f6:19:a8:a2:9e:9b: 5e:dc:06:91:bb:98:02:0f:08:2b:27:fa:a6:b1:63: 4b:c0:f9:ca:59:c2:42:33:61:29:39:e5:4d:aa:16: ed:a8:a5:03:30:13:cc:44:0f:3b:47:1c:3e:3f:52: f0:b1:a9:00:f6:00:68:23:3f:19:fd:6c:4b:8a:d2: c4:b9:34:97:7d:54:cf:ee:43:7b:42:c3:f3:e5:45: 74:5f:ff:d8:90:02:e8:00:1b:9d:42:33:6e:9b:67: d4:cb:d6:c2:87:69:af:95:33:e6:97:e2:40:2e:e8: d8:0a:53:d7:03:f2:be:fe:e1:c1:86:cc:e6:77:7c: 84:ae:4a:b5:fb:48:95:3a:c6:66:67:5a:66:ef:44: 1f:d5:9a:63:db:ed:53:ed:ef:0d:d7:51:49:24:bb: bd:f0:34:75:e5:74:47:d9:4f:14:4d:07:6d:49:3a: 35:2e:3a:a9:17:61:8e:d7:40:6d:6e:37:b3:94:4b: cc:92:e5:70:b0:63:2d:ea:53:8e:8e:09:96:34:aa: 1e:78:8f:74:fc:0f:d3:bb:77:9f:71:e0:45:fc:30: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AD:E7:3D:88:CF:A6:E6:F8:85:86:E0:4B:FA:EE:A5:59:9E:35:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl X509v3 Authority Key Identifier: keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c9:65:e0:2f:f3:63:c3:64:e4:c7:39:6a:bd:19:2e:8d:a4: 64:f9:76:63:f2:2b:ad:e1:6c:b4:62:07:d1:9e:78:b3:e7:de: 87:7e:e7:9e:62:9c:1e:f7:f3:16:39:70:f7:0a:c6:98:96:64: ed:a3:97:7e:05:b8:13:50:00:42:80:6d:97:27:d2:f9:a6:5a: 0f:1b:8b:b1:b2:a6:4d:2a:04:f7:59:74:2f:70:b0:1a:8e:b2: e1:66:0b:2b:02:59:3d:77:f8:be:4c:83:13:51:18:69:a2:c8: a8:b7:46:fe:ea:a0:c6:f0:78:17:e8:ed:2b:51:60:43:b5:5f: 2f:2b:11:27:f9:c6:e9:45:58:d0:cc:2c:1b:13:3f:0a:8f:86: 61:e0:14:e4:80:1c:c3:2c:71:27:38:5d:c6:38:6b:25:b6:49: 04:ef:db:4e:96:74:ae:b9:af:a4:aa:7f:da:ee:e6:a7:82:53: aa:53:f9:c2:24:46:5d:44:0c:59:eb:14:15:99:37:91:ca:7f: 4b:f0:69:eb:05:2a:a0:9c:9a:3e:3f:d0:a6:62:32:3b:d0:62: 8d:04:c0:c2:b3:99:2e:ca:cb:78:5b:92:f1:a6:46:e3:d6:2e: ce:c2:76:93:7e:56:ac:9d:b2:6b:b8:70:22:30:69:61:dc:db: eb:d7:6c:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2IU6wbslN/qAdZ0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh N2M3MB4XDTI2MDQxNzA0MDAwM1oXDTI2MDQxOTA0MDAwMFowLzEtMCsGA1UEAxMk YjU4YjcwYTYtZDU1Mi00NjNhLTkyNTAtM2VhOTNiNGZiOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+hKVJPfaosUrs4Okj+IaNz/CDY7cWMh7T3B GpVGbrqsNoSyn5j2Gaiinpte3AaRu5gCDwgrJ/qmsWNLwPnKWcJCM2EpOeVNqhbt qKUDMBPMRA87Rxw+P1LwsakA9gBoIz8Z/WxLitLEuTSXfVTP7kN7QsPz5UV0X//Y kALoABudQjNum2fUy9bCh2mvlTPml+JALujYClPXA/K+/uHBhszmd3yErkq1+0iV OsZmZ1pm70Qf1Zpj2+1T7e8N11FJJLu98DR15XRH2U8UTQdtSTo1LjqpF2GO10Bt bjezlEvMkuVwsGMt6lOOjgmWNKoeeI90/A/Tu3efceBF/DBW0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFByt5z2Iz6bm+IWG4Ev67qVZnjU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3 YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvMjFhN2MwMjAtZWJiYy00 NzYyLTg4NDEtNTRlZmI1MDhhN2M3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4 NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4 YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdyWXgL/Njw2TkxzlqvRku jaRk+XZj8iut4Wy0YgfRnniz596HfueeYpwe9/MWOXD3CsaYlmTto5d+BbgTUABC gG2XJ9L5ploPG4uxsqZNKgT3WXQvcLAajrLhZgsrAlk9d/i+TIMTURhposiot0b+ 6qDG8HgX6O0rUWBDtV8vKxEn+cbpRVjQzCwbEz8Kj4Zh4BTkgBzDLHEnOF3GOGsl tkkE79tOlnSuua+kqn/a7uanglOqU/nCJEZdRAxZ6xQVmTeRyn9L8GnrBSqgnJo+ P9CmYjI70GKNBMDCs5kuyst4W5Lxpkbj1i7OwnaTflasnbJruHAiMGlh3Nvr12wW -----END CERTIFICATE-----Generated at Fri Apr 17 22:07:45 2026 by rpki-client