$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft File: 21972f4a-b949-4223-9030-d9f0e37f8edd.mft (raw, json) Hash identifier: xhLOU+hDbf18ScWOeROYSD9E4AQm7impF9IenwuF2qQ= Subject key identifier: 52:59:C4:38:99:7A:13:97:74:E6:94:AE:09:90:B1:7F:80:40:94:B4 Authority key identifier: 98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 Certificate issuer: /CN=21972f4a-b949-4223-9030-d9f0e37f8edd Certificate serial: 010D0C9F4328584F6D64479C007FEEA8BC941640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft Manifest number: 010D0C9F4328584AAF164585E46E2B63713FC3B3 Signing time: Wed 07 Oct 2026 22:00:23 +0000 Manifest this update: Wed 07 Oct 2026 22:00:23 +0000 Manifest next update: Fri 09 Oct 2026 22:00:00 +0000 Files and hashes: 1: 21972f4a-b949-4223-9030-d9f0e37f8edd.crl (hash: gaIukpl2vOxRtxoC+boiJKzzvPju5yc4hgWRRTfcCEk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:64:47:9c:00:7f:ee:a8:bc:94:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21972f4a-b949-4223-9030-d9f0e37f8edd Validity Not Before: Oct 7 22:00:23 2026 GMT Not After : Oct 9 22:00:00 2026 GMT Subject: CN=bc30cfd1-ff5b-45eb-b380-5f48fc0b1805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:fd:ac:99:36:42:ad:b3:73:51:88:12:68: 84:ee:c0:a0:5a:aa:e4:85:0a:b2:64:46:46:7b:93: ed:66:49:2f:98:bd:80:05:2b:20:7a:33:95:b1:8f: 56:2d:f5:91:4b:5f:61:e9:f1:93:b5:44:59:66:17: 5c:74:ce:cf:4a:be:9e:e8:e8:d1:8f:b4:1f:5d:b2: 62:cb:bb:2c:15:57:be:f6:c1:a2:8b:15:a8:28:a1: 75:06:03:cc:bd:11:95:42:de:74:ba:db:82:3a:ab: c5:de:be:ac:07:1c:0c:83:57:88:5a:51:8d:22:e7: af:5b:bd:fa:22:6e:a1:67:87:43:ca:14:8d:70:ed: bd:0a:3c:16:33:46:08:db:53:88:2c:3c:3f:9f:58: cb:99:b3:39:05:1b:8d:cc:b1:22:47:ff:80:67:83: ea:81:31:18:be:ae:61:46:67:3f:31:48:d4:d1:e4: 8a:cc:0e:62:47:5e:12:fc:fc:cf:6e:0f:57:71:16: f0:2e:33:07:39:3c:8c:b9:5b:1c:bb:e8:c8:10:21: c0:f3:06:00:9a:33:37:9a:b1:2b:f8:7b:cd:56:2d: 54:40:16:ee:08:de:4c:05:66:b0:32:b1:4f:8b:f1: ad:d5:8a:1b:01:7a:68:f2:e6:d3:b6:27:b0:fd:2a: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:59:C4:38:99:7A:13:97:74:E6:94:AE:09:90:B1:7F:80:40:94:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl X509v3 Authority Key Identifier: keyid:98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:1f:e8:56:1e:02:22:19:76:f3:ff:87:70:87:59:48:63:14: 0f:c7:35:96:b8:24:9a:51:bf:60:b0:b2:7e:1a:9d:16:33:0e: b5:61:d6:f2:3c:b4:f8:6b:42:09:11:28:16:80:91:ca:4a:85: cd:c5:c1:fa:2f:93:e1:23:8c:51:39:60:4e:38:9c:f1:b6:f5: 30:d5:69:9a:fb:93:35:d5:d2:73:ed:47:56:8e:c8:80:a4:25: e8:0a:bc:05:d6:b4:10:b2:74:dc:eb:80:6e:4d:a0:11:09:a7: 0e:f7:87:ad:97:f5:3e:3d:e5:4a:fb:5d:de:b4:3d:57:00:4f: a9:c9:e2:e0:4d:2b:dc:ab:58:91:2f:14:26:8e:9f:0e:6c:61: 02:86:30:8e:07:af:82:aa:ee:32:23:6e:1b:6f:b4:2e:d7:d6: 72:aa:07:8d:be:b3:23:9e:85:7d:78:7e:ed:60:b6:44:07:7b: 54:bd:0f:24:96:d0:ce:43:a6:fe:cb:52:48:4a:aa:95:73:63: 78:df:2e:b7:d8:5c:0b:dc:1e:28:d7:8c:c2:53:db:f2:bb:b2: c7:1c:f4:23:84:ef:2e:82:77:81:1f:0f:84:c0:5b:3c:6e:87: 2a:7e:c6:8a:66:e5:20:a4:a1:20:bd:87:00:1a:9e:25:32:0f: 60:35:df:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9tZEecAH/uqLyUFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NzJmNGEtYjk0OS00MjIzLTkwMzAtZDlmMGUzN2Y4 ZWRkMB4XDTI2MTAwNzIyMDAyM1oXDTI2MTAwOTIyMDAwMFowLzEtMCsGA1UEAxMk YmMzMGNmZDEtZmY1Yi00NWViLWIzODAtNWY0OGZjMGIxODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxn9rJk2Qq2zc1GIEmiE7sCgWqrkhQqyZEZG e5PtZkkvmL2ABSsgejOVsY9WLfWRS19h6fGTtURZZhdcdM7PSr6e6OjRj7QfXbJi y7ssFVe+9sGiixWoKKF1BgPMvRGVQt50utuCOqvF3r6sBxwMg1eIWlGNIuevW736 Im6hZ4dDyhSNcO29CjwWM0YI21OILDw/n1jLmbM5BRuNzLEiR/+AZ4PqgTEYvq5h Rmc/MUjU0eSKzA5iR14S/PzPbg9XcRbwLjMHOTyMuVscu+jIECHA8wYAmjM3mrEr +HvNVi1UQBbuCN5MBWawMrFPi/Gt1YobAXpo8ubTtiew/SpZpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFJZxDiZehOXdOaUrgmQsX+AQJS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3 MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYwZTM3ZjhlZGQvMjE5NzJmNGEtYjk0OS00 MjIzLTkwMzAtZDlmMGUzN2Y4ZWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjE5NzJmNGEtYjk0OS00MjIzLTkw MzAtZDlmMGUzN2Y4ZWRkLzIxOTcyZjRhLWI5NDktNDIyMy05MDMwLWQ5ZjBlMzdm OGVkZC5jcmwwHwYDVR0jBBgwFoAUmEhNlI2Wb0uiz1xvp4McJFubFcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYw ZTM3ZjhlZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPH+hWHgIiGXbz/4dwh1lI YxQPxzWWuCSaUb9gsLJ+Gp0WMw61YdbyPLT4a0IJESgWgJHKSoXNxcH6L5PhI4xR OWBOOJzxtvUw1Wma+5M11dJz7UdWjsiApCXoCrwF1rQQsnTc64BuTaARCacO94et l/U+PeVK+13etD1XAE+pyeLgTSvcq1iRLxQmjp8ObGEChjCOB6+Cqu4yI24bb7Qu 19ZyqgeNvrMjnoV9eH7tYLZEB3tUvQ8kltDOQ6b+y1JISqqVc2N43y632FwL3B4o 14zCU9vyu7LHHPQjhO8ugneBHw+EwFs8bocqfsaKZuUgpKEgvYcAGp4lMg9gNd8g -----END CERTIFICATE-----Generated at Thu Oct 8 20:32:30 2026 by rpki-client