$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft File: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft (raw, json) Hash identifier: rJrw3szkTisbdgsCLfIlV9MZWDzP/a0hc3zGQJx5LyU= Subject key identifier: BF:4B:6B:A3:C0:A7:08:E2:39:F0:A0:C3:FE:34:26:E3:8E:9D:2E:56 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584EA74B72ABA26A9E45DB317040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft Manifest number: 010D0C9F4328584B728422C8F4B1EE7ECA7B0BAD Signing time: Tue 28 Jul 2026 23:00:22 +0000 Manifest this update: Tue 28 Jul 2026 23:00:22 +0000 Manifest next update: Fri 31 Jul 2026 23:00:00 +0000 Files and hashes: 1: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (hash: wOfxHQx5RWV7ciXktrRRwJpV+lTyGlAdZdqCrF2Xq/M=) 2: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl (hash: 50H33JYFARzsucmPAkK+B8bYj8iwoq5nB+Ef/2q21yc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:4b:72:ab:a2:6a:9e:45:db:31:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Jul 28 23:00:22 2026 GMT Not After : Jul 31 23:00:00 2026 GMT Subject: CN=9f5b13ea-2337-40c0-9104-3914f789d303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:2d:26:74:6b:26:11:0b:5c:c8:9c:81:c6: b8:5b:7f:ad:3f:c0:39:86:ed:a7:63:4d:1f:92:1c: 92:13:ee:19:8f:8f:a5:cf:89:a9:7a:1d:ce:8c:ce: 3f:3c:20:66:5f:bd:ce:9e:d8:c2:f2:c1:8d:a1:c9: ab:c8:3b:6f:bd:f4:c2:08:76:8f:e4:25:eb:ac:0c: 25:a4:f9:a1:03:95:57:14:cf:1c:db:85:03:f2:2c: 04:37:54:98:03:ab:c3:b0:85:5b:e7:e0:59:ef:e8: 88:53:2c:ca:6d:51:69:c1:11:8f:fc:46:73:a7:9e: 72:86:a5:f7:64:45:e5:7c:07:ad:7d:4c:81:d4:8d: 57:c8:b4:ca:eb:15:13:37:0e:0e:9f:e2:58:f2:bf: d2:7b:af:dc:47:9a:d9:03:fc:67:7f:14:fd:8a:60: 8c:98:a5:f4:c1:c2:a7:63:e4:a9:0a:b9:c7:08:5f: 26:af:a1:b5:83:9b:56:fd:97:01:e2:9b:a8:49:17: 6f:23:33:af:c1:a7:d6:1c:31:df:44:d5:89:6f:6b: fe:2d:d5:5f:bf:3b:c1:cf:58:b8:2f:4c:87:d9:e4: c7:cf:15:b2:c2:8c:be:68:8d:3e:a7:df:ff:5f:9c: 33:03:f4:c2:82:e0:34:a7:59:3f:b6:80:8b:50:c6: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4B:6B:A3:C0:A7:08:E2:39:F0:A0:C3:FE:34:26:E3:8E:9D:2E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e6:f9:1b:34:fa:1a:b3:17:19:f6:ab:d8:5e:3f:08:42:0f: e3:e5:28:af:d7:65:bc:e6:d4:48:36:e0:9d:90:85:48:d6:85: 98:1f:ff:d6:4f:a9:66:bd:01:e6:44:c5:72:61:70:ef:c2:fa: d6:8d:c7:7a:8d:87:fb:86:14:13:3f:40:cd:e8:bb:35:35:1a: 1c:2b:45:88:e2:b4:f0:d8:91:a6:1e:a2:30:a4:d6:ea:cd:e4: 9e:3b:55:c6:a7:78:23:f3:b5:03:18:63:83:4d:4e:c4:f2:6e: 54:c5:fd:15:20:48:b4:05:41:3e:e5:bf:f5:ab:6e:3f:34:9a: b7:2a:5b:f3:55:af:10:fd:d1:0d:71:10:d4:43:8b:25:6c:9e: f5:ac:38:89:11:4e:5d:a2:56:78:bb:75:84:11:a7:d5:9c:09: 75:15:3a:1c:da:b0:f5:f8:56:4f:2c:ee:c3:98:5a:b4:11:65: 1b:c3:fd:5d:bf:46:fa:50:f7:94:5b:aa:ab:77:03:81:6b:80: a8:07:24:85:be:c8:b0:1c:84:77:53:dc:5b:65:7d:56:f8:fb: ec:85:c9:56:f1:9d:73:cf:e7:18:81:11:2a:49:3f:6a:05:83: 40:f6:3c:5e:2b:9d:54:1b:8f:6a:7e:8a:71:e2:4d:67:12:d6: ec:10:c0:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6nS3KromqeRdsxcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI2MDcyODIzMDAyMloXDTI2MDczMTIzMDAwMFowLzEtMCsGA1UEAxMk OWY1YjEzZWEtMjMzNy00MGMwLTkxMDQtMzkxNGY3ODlkMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mstJnRrJhELXMicgca4W3+tP8A5hu2nY00f khySE+4Zj4+lz4mpeh3OjM4/PCBmX73OntjC8sGNocmryDtvvfTCCHaP5CXrrAwl pPmhA5VXFM8c24UD8iwEN1SYA6vDsIVb5+BZ7+iIUyzKbVFpwRGP/EZzp55yhqX3 ZEXlfAetfUyB1I1XyLTK6xUTNw4On+JY8r/Se6/cR5rZA/xnfxT9imCMmKX0wcKn Y+SpCrnHCF8mr6G1g5tW/ZcB4puoSRdvIzOvwafWHDHfRNWJb2v+LdVfvzvBz1i4 L0yH2eTHzxWywoy+aI0+p9//X5wzA/TCguA0p1k/toCLUMacpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL9La6PApwjiOfCgw/40JuOOnS5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMjFhMjBhZDktYTg0OC00 ZDBkLWExMTktM2RmNWQ2ZGJjYjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBe5vkbNPoasxcZ9qvYXj8I Qg/j5Siv12W85tRINuCdkIVI1oWYH//WT6lmvQHmRMVyYXDvwvrWjcd6jYf7hhQT P0DN6Ls1NRocK0WI4rTw2JGmHqIwpNbqzeSeO1XGp3gj87UDGGODTU7E8m5Uxf0V IEi0BUE+5b/1q24/NJq3KlvzVa8Q/dENcRDUQ4slbJ71rDiJEU5dolZ4u3WEEafV nAl1FToc2rD1+FZPLO7DmFq0EWUbw/1dv0b6UPeUW6qrdwOBa4CoBySFvsiwHIR3 U9xbZX1W+PvshclW8Z1zz+cYgREqST9qBYNA9jxeK51UG49qfopx4k1nEtbsEMCt -----END CERTIFICATE-----Generated at Wed Jul 29 23:27:20 2026 by rpki-client