$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft File: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft (raw, json) Hash identifier: fawfJUT1263yOoFeZfQxWA7vyXKBiJ4Phxe2tXt9+tM= Subject key identifier: EA:D7:FA:5A:59:0A:C2:1A:E8:FF:FC:B6:D4:94:E9:FF:F4:CE:04:D2 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584D87BECA31B7DEC2B6AB512000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft Manifest number: 010D0C9F4328584B728422C8F4B1EE7ECA7B0B44 Signing time: Thu 16 Apr 2026 23:00:03 +0000 Manifest this update: Thu 16 Apr 2026 23:00:03 +0000 Manifest next update: Sat 18 Apr 2026 23:00:00 +0000 Files and hashes: 1: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (hash: i0TE8bHBroHVMJzjhS4S8z0lm++ndlNHk3LkzoXpw0o=) 2: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl (hash: 0In04if9QQrqo2lffCXlW5leE+dRXQn2AcUPB9cvCf8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:be:ca:31:b7:de:c2:b6:ab:51:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Apr 16 23:00:03 2026 GMT Not After : Apr 18 23:00:00 2026 GMT Subject: CN=6ceef8ba-df53-4bc0-a904-3f327a115cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:d1:57:b5:ac:90:dc:6b:ad:eb:06:93:76: cf:12:e7:75:7b:f7:fa:cc:10:82:08:9a:5e:1c:ce: fc:76:92:9d:a1:9e:b4:12:07:96:ee:85:80:1e:96: 67:e2:af:fe:53:14:c0:32:d7:ca:aa:8d:0c:29:4a: 3a:5b:75:08:41:ed:70:39:1c:45:e6:a7:bb:7e:3a: a0:b2:e4:97:e9:df:1e:6e:d5:59:d2:e5:99:99:94: e2:02:2d:58:43:31:f7:54:50:06:21:ce:5f:55:52: 1d:e9:db:10:af:f4:29:72:49:b3:2b:ad:10:4b:70: 04:46:4b:ba:19:7d:51:b2:f8:91:e7:1c:81:fb:1e: ba:4a:ad:1b:78:a4:27:94:f9:4c:f1:11:86:ed:81: 83:61:29:87:e7:fd:17:bd:e1:fc:64:49:3f:23:fb: f8:4e:0a:45:9a:1d:cb:ce:5c:6e:bf:0f:4c:27:6c: f6:9c:2b:0a:cd:fe:4a:3f:ee:51:01:07:29:0d:bb: 04:69:ef:69:4d:2e:b4:be:c8:cb:16:a8:14:ba:c9: 0f:29:d8:7b:83:24:12:e1:38:15:c1:0d:1d:35:f7: 85:f8:38:5f:ed:4f:a0:78:80:38:60:da:7a:97:96: 21:ae:9d:b2:75:90:21:a0:14:2d:e6:db:02:0c:5b: e6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D7:FA:5A:59:0A:C2:1A:E8:FF:FC:B6:D4:94:E9:FF:F4:CE:04:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9b:d5:52:64:47:15:0c:7f:02:99:4c:0c:a4:77:05:64:3b: dc:73:34:c3:ff:bc:e6:88:e7:c7:91:fe:8a:15:85:3c:7e:74: 68:31:c0:f4:15:1e:0d:48:d3:cc:32:4f:47:9d:89:7c:4f:73: 66:05:07:22:e9:ad:d7:cd:8a:24:2e:a9:6e:9b:22:e1:81:96: 65:d6:51:9d:eb:6a:4f:f9:05:ca:57:7a:b4:4a:dd:c2:14:02: 55:05:aa:ef:7e:df:0f:bc:91:66:b0:e6:a9:af:d8:26:87:ec: 1b:a1:ab:19:1f:5c:ae:77:7c:26:27:4d:4d:f2:88:d3:5f:7a: 63:62:4a:03:d1:b9:ac:b8:26:c9:cf:f9:70:cf:2b:91:7c:54: 43:29:31:8c:c5:da:58:ab:ac:d0:24:0d:55:99:80:e1:80:39: cb:1e:4c:30:b3:15:37:31:1f:d7:f4:4a:62:5d:12:5b:e5:05: 5f:ec:20:7b:50:39:fb:a7:e8:3e:47:a2:3a:9f:c8:56:9b:ad: 5c:69:d5:72:ec:91:40:28:03:92:c6:ef:af:ea:e6:c5:38:e5: 31:cc:69:da:e8:24:9f:99:a5:88:66:62:84:eb:d5:41:fa:c2: 14:b9:f3:7b:52:bd:a8:ad:51:a3:5d:25:10:82:ec:7c:61:30: 70:17:e9:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2Hvsoxt97CtqtRIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI2MDQxNjIzMDAwM1oXDTI2MDQxODIzMDAwMFowLzEtMCsGA1UEAxMk NmNlZWY4YmEtZGY1My00YmMwLWE5MDQtM2YzMjdhMTE1Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSrRV7WskNxrresGk3bPEud1e/f6zBCCCJpe HM78dpKdoZ60EgeW7oWAHpZn4q/+UxTAMtfKqo0MKUo6W3UIQe1wORxF5qe7fjqg suSX6d8ebtVZ0uWZmZTiAi1YQzH3VFAGIc5fVVId6dsQr/QpckmzK60QS3AERku6 GX1RsviR5xyB+x66Sq0beKQnlPlM8RGG7YGDYSmH5/0XveH8ZEk/I/v4TgpFmh3L zlxuvw9MJ2z2nCsKzf5KP+5RAQcpDbsEae9pTS60vsjLFqgUuskPKdh7gyQS4TgV wQ0dNfeF+Dhf7U+geIA4YNp6l5Yhrp2ydZAhoBQt5tsCDFvmkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOrX+lpZCsIa6P/8ttSU6f/0zgTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMjFhMjBhZDktYTg0OC00 ZDBkLWExMTktM2RmNWQ2ZGJjYjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOm9VSZEcVDH8CmUwMpHcF ZDvcczTD/7zmiOfHkf6KFYU8fnRoMcD0FR4NSNPMMk9HnYl8T3NmBQci6a3XzYok LqlumyLhgZZl1lGd62pP+QXKV3q0St3CFAJVBarvft8PvJFmsOapr9gmh+wboasZ H1yud3wmJ01N8ojTX3pjYkoD0bmsuCbJz/lwzyuRfFRDKTGMxdpYq6zQJA1VmYDh gDnLHkwwsxU3MR/X9EpiXRJb5QVf7CB7UDn7p+g+R6I6n8hWm61cadVy7JFAKAOS xu+v6ubFOOUxzGna6CSfmaWIZmKE69VB+sIUufN7Ur2orVGjXSUQgux8YTBwF+n1 -----END CERTIFICATE-----Generated at Fri Apr 17 13:24:13 2026 by rpki-client