$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: Bqn3fIVbCTZfWw4JY5LDG3Bf/NdYf2wjaknTqhqx7QU= Subject key identifier: B1:3A:24:62:8E:26:BF:81:23:D1:68:A7:E9:FA:4A:0B:F0:1F:60:07 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584D066518250B3DD9F89F321500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF780 Signing time: Sun 01 Mar 2026 15:00:03 +0000 Manifest this update: Sun 01 Mar 2026 15:00:03 +0000 Manifest next update: Tue 03 Mar 2026 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: MFQdxML5geEbPkKdqQMuHXsnKKY/1hCyv5LVkhtVKMY=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: c5qzFmbFqng6+KHePTvglV9revkGiX36DAaho1tPvlQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:65:18:25:0b:3d:d9:f8:9f:32:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Mar 1 15:00:03 2026 GMT Not After : Mar 3 15:00:00 2026 GMT Subject: CN=3b2d9a9d-d7ae-45b7-a3d6-917dddc90475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a5:1f:b1:1b:2b:e2:28:26:83:a4:5d:df:96: 80:be:9f:0e:c2:14:8a:aa:9a:22:f3:fa:69:81:5c: d2:0f:bc:6a:4c:c4:65:f6:34:43:e4:42:37:62:7c: 30:83:c5:4d:4f:f3:bc:d9:65:47:f0:61:1b:7e:6d: 8f:d5:24:62:c7:d0:f0:d3:80:7e:3d:85:21:d6:fa: 41:0a:80:3b:3f:b9:40:8e:aa:46:38:da:fe:74:42: ae:61:f4:35:11:90:c6:2b:32:72:bc:60:ed:4e:ec: 16:ab:88:19:b8:2a:e9:02:72:f5:c6:d9:19:b7:54: 32:0c:b0:08:c3:e3:c8:c7:f3:42:7a:d2:2a:b5:34: ae:34:bd:af:4d:05:06:cf:29:eb:48:3c:a4:bc:d7: 15:43:04:92:bc:50:c7:22:e4:1e:71:56:a8:36:ec: 5d:48:25:34:1e:92:0f:70:28:14:58:7e:f9:48:5b: 6e:2c:95:28:03:8e:56:d1:40:60:b2:0f:d6:85:60: af:42:47:bc:32:41:97:e6:fb:6a:0f:cc:ee:4b:dd: a3:98:d2:e4:87:4c:34:82:4c:db:c8:18:67:a0:a0: 05:0a:cf:cc:48:42:4c:5d:69:5d:81:91:a4:c1:d6: 48:99:e9:8f:b7:6d:e5:e9:9b:e1:7d:be:5d:cc:b5: 74:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3A:24:62:8E:26:BF:81:23:D1:68:A7:E9:FA:4A:0B:F0:1F:60:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2b:81:14:62:f3:1e:9e:4f:02:79:f4:19:7a:27:df:15:c1: 8e:ef:26:0b:43:08:61:c4:65:3c:5e:0a:3d:63:4d:eb:71:77: e5:a1:b6:7c:e9:be:4a:fc:75:06:16:8c:93:a9:6a:58:27:77: 1a:e1:47:b2:0e:0c:0f:31:56:c5:fd:76:0c:2f:f0:06:1b:76: 42:05:fb:f2:67:d9:08:9a:15:f7:aa:74:80:f1:4a:a1:e2:75: 3b:5a:17:f2:6f:34:70:73:09:ba:53:e6:63:b3:08:ae:4d:57: 20:2f:6b:04:9f:7b:a6:b7:f4:39:12:92:95:40:ec:52:9b:5d: 91:ad:34:1c:35:ea:24:27:9e:98:85:2c:8e:fb:47:5b:ba:ec: 85:90:a5:c6:5a:59:86:94:9c:09:3f:bf:04:66:94:ef:e4:4a: 96:54:ce:c5:ee:26:e0:ab:68:38:5f:3f:d6:c6:af:80:d3:6a: 27:a6:ba:87:e4:97:b8:be:fb:02:6e:af:10:f2:6c:c9:40:8a: ad:34:07:55:d2:82:77:ef:b2:41:d5:9f:c5:40:92:d5:24:39: c9:a5:9f:00:e2:d7:9a:be:be:e6:17:97:17:0e:4a:34:ed:1e: c1:96:96:41:b1:49:9d:b8:17:ea:2a:77:19:03:9b:de:3f:cf: e2:43:fc:28 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GZRglCz3Z+J8yFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDMwMTE1MDAwM1oXDTI2MDMwMzE1MDAwMFowLzEtMCsGA1UEAxMk M2IyZDlhOWQtZDdhZS00NWI3LWEzZDYtOTE3ZGRkYzkwNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56UfsRsr4igmg6Rd35aAvp8OwhSKqpoi8/pp gVzSD7xqTMRl9jRD5EI3Ynwwg8VNT/O82WVH8GEbfm2P1SRix9Dw04B+PYUh1vpB CoA7P7lAjqpGONr+dEKuYfQ1EZDGKzJyvGDtTuwWq4gZuCrpAnL1xtkZt1QyDLAI w+PIx/NCetIqtTSuNL2vTQUGzynrSDykvNcVQwSSvFDHIuQecVaoNuxdSCU0HpIP cCgUWH75SFtuLJUoA45W0UBgsg/WhWCvQke8MkGX5vtqD8zuS92jmNLkh0w0gkzb yBhnoKAFCs/MSEJMXWldgZGkwdZImemPt23l6Zvhfb5dzLV0EQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLE6JGKOJr+BI9Fop+n6SgvwH2AHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASK4EUYvMenk8CefQZeiff FcGO7yYLQwhhxGU8Xgo9Y03rcXflobZ86b5K/HUGFoyTqWpYJ3ca4UeyDgwPMVbF /XYML/AGG3ZCBfvyZ9kImhX3qnSA8Uqh4nU7WhfybzRwcwm6U+ZjswiuTVcgL2sE n3umt/Q5EpKVQOxSm12RrTQcNeokJ56YhSyO+0dbuuyFkKXGWlmGlJwJP78EZpTv 5EqWVM7F7ibgq2g4Xz/Wxq+A02onprqH5Je4vvsCbq8Q8mzJQIqtNAdV0oJ377JB 1Z/FQJLVJDnJpZ8A4teavr7mF5cXDko07R7BlpZBsUmduBfqKncZA5veP8/iQ/wo -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:23 2026 by rpki-client