
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
File: 21a7c020-ebbc-4762-8841-54efb508a7c7.mft (raw, json)
Hash identifier: 2MNHJ9EONG57PUaEX8Tl/qVZuy4Dlgg0xfqd8VbuBcY=
Subject key identifier: 4A:D5:DC:25:72:E6:07:4C:FB:61:03:D5:0C:62:62:07:B7:75:6E:42
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial: 010D0C9F4328584D5348AE0EACB139C4A113E780
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
Manifest number: 010D0C9F4328584073A83BD55261AAC0C84A301D
Signing time: Sun 29 Mar 2026 04:00:03 +0000
Manifest this update: Sun 29 Mar 2026 04:00:03 +0000
Manifest next update: Wed 01 Apr 2026 04:00:00 +0000
Files and hashes: 1: 16591207-7557-378f-91cc-68c03f1a278a.roa (hash: cNgs5tTkG7oJO5MEhwbyoOQVYKm//yWXX3wN84eMzQY=)
2: 21a7c020-ebbc-4762-8841-54efb508a7c7.crl (hash: IJ6rfa7rQ5A+oXoE58ntsfoD9fIhTNAQUcQuXhZw8jo=)
3: 4c31ef02-9049-3a69-bdae-e0e93a1e447f.roa (hash: MRpZj+OtXb9G9jHmOMJQK0NEjm8gWmEKU7lw5eUj/Ac=)
4: 65b660a1-3975-385b-add8-d9b4f1e98a18.roa (hash: fc/HeCQCKV2VichupXOe0591mv/BU/p1/tRy5F/dprk=)
5: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (hash: b0aGs6uZCkYCwl9egiVgrIjPrW4C3OzTLOztitZA1i4=)
6: b233c099-01b4-3727-a701-02cd60f48355.roa (hash: 6LDbUJV6ZdvNdTfhaXyKB+QofV7j6+xO9mEQk7V3Vg0=)
7: ed01e030-9725-3706-a152-4c292fbd1f32.roa (hash: CI3U97MTNzvQvltFi5A7sXMU1AyHr58R5/lpeBxFfK0=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:53:48:ae:0e:ac:b1:39:c4:a1:13:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Validity
Not Before: Mar 29 04:00:03 2026 GMT
Not After : Apr 1 04:00:00 2026 GMT
Subject: CN=5c0fb7ff-dbf2-43b6-98a5-68a1b71d81be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:e3:75:83:57:06:61:65:75:62:a5:65:01:
55:48:52:5f:be:a3:0a:6c:26:ac:83:a1:5e:89:0b:
39:3e:57:3c:52:dc:d8:9d:37:a6:31:20:ee:fc:b8:
74:d7:97:79:0b:89:01:07:c9:20:87:c9:dd:f9:56:
1c:35:ac:b3:72:3d:a3:23:2a:e0:7a:35:4a:6a:0c:
ea:44:61:cc:30:8c:39:56:8a:0c:f4:4a:ae:0d:a0:
59:97:6a:16:7b:24:1c:2d:6b:7a:53:53:ef:97:22:
fa:40:f9:b0:e1:09:c6:87:9f:d3:f5:ee:29:e1:71:
bf:88:80:c8:13:43:36:db:ab:bc:b0:4a:68:46:75:
9c:34:28:e7:fb:20:0a:5c:a6:5e:22:92:35:f3:9f:
1f:45:1b:90:e3:c6:f3:0b:ed:c6:8f:93:d4:4b:f2:
dc:5c:11:93:a1:a5:db:8c:49:89:f1:11:98:51:b3:
57:fb:c3:c9:ef:5d:6b:1f:c2:b8:88:59:ca:3a:91:
24:37:0d:c9:af:29:b6:df:34:bd:fc:e1:54:0a:fa:
5d:95:25:ce:ab:0d:6f:08:3c:11:e5:a2:f3:07:59:
75:20:0a:91:e7:7e:26:c7:84:81:f6:c7:0d:08:b1:
81:ba:93:f0:02:e6:66:3f:0b:48:54:29:26:af:05:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D5:DC:25:72:E6:07:4C:FB:61:03:D5:0C:62:62:07:B7:75:6E:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl
X509v3 Authority Key Identifier:
keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:c4:c4:c2:45:ca:58:b9:15:7d:76:5c:48:0e:a9:80:f0:21:
64:12:b6:3c:7b:f8:5e:a7:f0:f1:bf:5c:c8:a6:61:df:d8:a2:
c1:c1:4c:a7:ca:8f:f6:29:b8:a8:9e:77:0e:8b:d1:a3:49:e2:
49:e4:f7:84:94:77:74:ca:42:72:6a:a2:b4:1c:ca:11:d4:55:
2d:e3:3d:a1:0a:ad:b5:df:6f:7a:2e:67:49:12:45:49:38:0b:
cc:74:73:fd:3e:3f:64:ad:5b:95:b8:16:17:be:14:33:ab:84:
5c:04:d1:59:68:05:5d:2c:be:b0:90:5d:a2:ad:25:ab:7a:e7:
9b:5f:7d:4f:07:d4:3a:04:e3:b6:9b:04:ec:15:f4:ff:ec:bc:
3d:f1:ca:63:86:84:24:a8:91:23:65:99:8f:6e:50:07:1b:04:
b4:a1:d8:68:10:86:0d:36:38:35:14:de:5a:ac:54:dd:4d:bc:
fb:75:c7:3c:69:09:a5:97:35:21:d1:d8:b5:fc:49:51:ed:22:
d7:b7:8f:29:11:f6:7c:b5:b1:a2:a1:a9:b5:22:34:e8:5e:3b:
31:e2:0e:a2:4c:09:9c:12:02:e8:82:85:fd:cf:f1:04:b7:3b:
a5:f5:51:cb:6e:2d:5d:9e:d9:06:9c:25:22:34:1e:e4:9c:a1:
09:dc:6e:2d
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1TSK4OrLE5xKET54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh
N2M3MB4XDTI2MDMyOTA0MDAwM1oXDTI2MDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWMwZmI3ZmYtZGJmMi00M2I2LTk4YTUtNjhhMWI3MWQ4MWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA7jdYNXBmFldWKlZQFVSFJfvqMKbCasg6Fe
iQs5Plc8UtzYnTemMSDu/Lh015d5C4kBB8kgh8nd+VYcNayzcj2jIyrgejVKagzq
RGHMMIw5VooM9EquDaBZl2oWeyQcLWt6U1PvlyL6QPmw4QnGh5/T9e4p4XG/iIDI
E0M226u8sEpoRnWcNCjn+yAKXKZeIpI1858fRRuQ48bzC+3Gj5PUS/LcXBGToaXb
jEmJ8RGYUbNX+8PJ711rH8K4iFnKOpEkNw3Jrym23zS9/OFUCvpdlSXOqw1vCDwR
5aLzB1l1IAqR534mx4SB9scNCLGBupPwAuZmPwtIVCkmrwUqLwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFErV3CVy5gdM+2ED1QxiYge3dW5CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3
YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvMjFhN2MwMjAtZWJiYy00
NzYyLTg4NDEtNTRlZmI1MDhhN2M3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4
NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4
YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm
YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChxMTCRcpYuRV9dlxIDqmA
8CFkErY8e/hep/Dxv1zIpmHf2KLBwUynyo/2KbionncOi9GjSeJJ5PeElHd0ykJy
aqK0HMoR1FUt4z2hCq213296LmdJEkVJOAvMdHP9Pj9krVuVuBYXvhQzq4RcBNFZ
aAVdLL6wkF2irSWreuebX31PB9Q6BOO2mwTsFfT/7Lw98cpjhoQkqJEjZZmPblAH
GwS0odhoEIYNNjg1FN5arFTdTbz7dcc8aQmllzUh0di1/ElR7SLXt48pEfZ8tbGi
oam1IjToXjsx4g6iTAmcEgLogoX9z/EEtzul9VHLbi1dntkGnCUiNB7knKEJ3G4t
-----END CERTIFICATE-----
Generated at Sun Mar 29 06:14:27 2026 by rpki-client