$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft File: 21972f4a-b949-4223-9030-d9f0e37f8edd.mft (raw, json) Hash identifier: t9dJmntKQzu/Nkx3DRtL+XpLJWnuxicmiTSyYutPJNw= Subject key identifier: 89:CC:26:32:A7:9B:50:BE:CC:A3:5D:FB:79:5C:82:47:4E:71:1B:7C Authority key identifier: 98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 Certificate issuer: /CN=21972f4a-b949-4223-9030-d9f0e37f8edd Certificate serial: 010D0C9F4328584D073594C90F7CC994EC9A6890 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft Manifest number: 010D0C9F4328584AAF164585E46E2B63713FC2D7 Signing time: Sun 01 Mar 2026 22:00:09 +0000 Manifest this update: Sun 01 Mar 2026 22:00:09 +0000 Manifest next update: Tue 03 Mar 2026 22:00:00 +0000 Files and hashes: 1: 21972f4a-b949-4223-9030-d9f0e37f8edd.crl (hash: aRhMMnVQLIcA1BNpXj9qGdEv9OzW9zL/gcMSyM36NfM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:35:94:c9:0f:7c:c9:94:ec:9a:68:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21972f4a-b949-4223-9030-d9f0e37f8edd Validity Not Before: Mar 1 22:00:09 2026 GMT Not After : Mar 3 22:00:00 2026 GMT Subject: CN=c3f3fa59-8a24-4d34-903d-e0c77901c5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:28:0c:74:31:e9:75:ef:e0:fa:37:34:e2:c3: b8:f1:88:b8:18:45:4b:59:8b:e0:03:0e:dc:c9:db: 06:3d:9d:11:60:f0:64:cd:12:e6:5b:3b:d9:5c:88: 73:08:b9:f0:bd:55:e8:a4:9c:2e:73:c0:c1:db:1e: a7:64:7c:0b:c4:74:0e:03:38:6f:94:fb:aa:97:6e: 36:21:c8:0d:bd:fb:b7:cf:92:df:69:7e:60:d2:44: ab:75:90:e3:ea:1d:35:28:3f:14:88:0d:ee:16:48: 8e:4b:69:ce:fa:42:44:d2:1b:cc:1e:e2:48:ec:7d: 8c:ee:b0:b0:5f:86:37:d7:73:ee:b9:a9:29:c1:15: bb:ff:52:36:11:d5:e5:74:12:d8:47:8f:7a:9e:53: 54:40:6a:01:b1:f6:97:c7:ea:3b:fe:27:b9:9c:46: 1d:fe:f9:3f:97:fe:9b:cd:1a:84:06:84:43:40:bb: 53:97:f2:77:0f:f7:79:73:af:4c:4a:8b:07:1c:28: 6d:db:98:ce:f3:8b:94:ab:51:bb:59:64:2c:dc:0e: 97:82:f0:87:7e:e9:a7:b5:25:7d:dd:9f:49:6a:04: c5:0d:06:5a:47:fa:63:7a:16:81:f8:a0:b9:53:bf: fb:09:69:15:d5:e5:33:a2:73:56:5f:fa:da:58:41: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CC:26:32:A7:9B:50:BE:CC:A3:5D:FB:79:5C:82:47:4E:71:1B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl X509v3 Authority Key Identifier: keyid:98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:0f:49:5e:27:4d:81:84:2f:72:6e:09:7d:33:1f:4e:7b:a1: 93:60:af:4f:b9:ee:5b:b9:bb:44:74:65:b2:d8:e4:1c:57:39: 00:2e:7d:70:84:70:a8:87:57:ad:ce:a8:69:06:da:a5:87:c7: 36:5a:73:2b:83:93:89:e7:3d:29:0b:97:d8:57:b4:9b:d8:d7: f7:c9:8f:31:23:c1:26:73:a9:17:ba:37:85:f7:57:70:4f:77: e6:27:3b:b6:35:a2:4e:fe:e0:5b:c5:bf:9f:50:9e:49:d9:fb: bd:7b:cd:4b:7c:5f:51:ba:c9:c5:5e:60:b3:7c:ee:2a:97:c3: 4f:f9:fb:83:94:41:e9:a6:b8:5e:50:05:e6:de:1b:f8:8c:3b: 42:16:92:1f:e6:8e:2b:96:ea:4e:bc:9c:de:ca:8e:23:fd:ae: df:ab:1a:62:bc:85:ca:71:65:e2:d8:d0:7f:0e:58:97:29:bb: 17:8e:5f:de:79:fe:b7:56:b0:28:1d:ae:96:5b:25:8c:90:e2: 42:13:be:f4:a5:2e:28:10:66:6d:88:98:f6:cc:75:dc:1f:a5: 1a:70:c0:f5:44:47:d3:e2:8a:be:00:e5:5b:d6:ed:e1:0e:90: 7a:2a:b4:95:5e:17:09:bf:6a:5e:7b:8a:64:f4:54:30:2b:66: 08:e6:80:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HNZTJD3zJlOyaaJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NzJmNGEtYjk0OS00MjIzLTkwMzAtZDlmMGUzN2Y4 ZWRkMB4XDTI2MDMwMTIyMDAwOVoXDTI2MDMwMzIyMDAwMFowLzEtMCsGA1UEAxMk YzNmM2ZhNTktOGEyNC00ZDM0LTkwM2QtZTBjNzc5MDFjNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgigMdDHpde/g+jc04sO48Yi4GEVLWYvgAw7c ydsGPZ0RYPBkzRLmWzvZXIhzCLnwvVXopJwuc8DB2x6nZHwLxHQOAzhvlPuql242 IcgNvfu3z5LfaX5g0kSrdZDj6h01KD8UiA3uFkiOS2nO+kJE0hvMHuJI7H2M7rCw X4Y313PuuakpwRW7/1I2EdXldBLYR496nlNUQGoBsfaXx+o7/ie5nEYd/vk/l/6b zRqEBoRDQLtTl/J3D/d5c69MSosHHCht25jO84uUq1G7WWQs3A6XgvCHfumntSV9 3Z9JagTFDQZaR/pjehaB+KC5U7/7CWkV1eUzonNWX/raWEFCAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFInMJjKnm1C+zKNd+3lcgkdOcRt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3 MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYwZTM3ZjhlZGQvMjE5NzJmNGEtYjk0OS00 MjIzLTkwMzAtZDlmMGUzN2Y4ZWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjE5NzJmNGEtYjk0OS00MjIzLTkw MzAtZDlmMGUzN2Y4ZWRkLzIxOTcyZjRhLWI5NDktNDIyMy05MDMwLWQ5ZjBlMzdm OGVkZC5jcmwwHwYDVR0jBBgwFoAUmEhNlI2Wb0uiz1xvp4McJFubFcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYw ZTM3ZjhlZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDKD0leJ02BhC9ybgl9Mx9O e6GTYK9Pue5bubtEdGWy2OQcVzkALn1whHCoh1etzqhpBtqlh8c2WnMrg5OJ5z0p C5fYV7Sb2Nf3yY8xI8Emc6kXujeF91dwT3fmJzu2NaJO/uBbxb+fUJ5J2fu9e81L fF9RusnFXmCzfO4ql8NP+fuDlEHpprheUAXm3hv4jDtCFpIf5o4rlupOvJzeyo4j /a7fqxpivIXKcWXi2NB/DliXKbsXjl/eef63VrAoHa6WWyWMkOJCE770pS4oEGZt iJj2zHXcH6UacMD1REfT4oq+AOVb1u3hDpB6KrSVXhcJv2pee4pk9FQwK2YI5oCL -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:10 2026 by rpki-client