$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b/21a40e23-f801-4663-a7a2-477c201b515b.mft File: 21a40e23-f801-4663-a7a2-477c201b515b.mft (raw, json) Hash identifier: F552QAha3PLFDExnM24Dr2hTLQkITGcncqNkMtwRmFM= Subject key identifier: D3:10:11:AD:47:21:41:E9:73:A2:97:94:21:4D:95:24:AE:D3:18:DC Authority key identifier: 6D:BE:AF:20:19:0B:D8:05:DC:EC:A4:50:B9:79:AB:27:96:37:69:4A Certificate issuer: /CN=21a40e23-f801-4663-a7a2-477c201b515b Certificate serial: 010D0C9F4328584F74D61B29BE5873D8C3332A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b/21a40e23-f801-4663-a7a2-477c201b515b.mft Manifest number: 010D0C9F4328584F21285E9AF9F784DE34C7D11E Signing time: Sat 10 Oct 2026 14:00:25 +0000 Manifest this update: Sat 10 Oct 2026 14:00:25 +0000 Manifest next update: Tue 13 Oct 2026 14:00:00 +0000 Files and hashes: 1: 21a40e23-f801-4663-a7a2-477c201b515b.crl (hash: jpV96mkt0OUJC+yzR0ZRn4lNz92+yqd9Tqgau+VgFNg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b/21a40e23-f801-4663-a7a2-477c201b515b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b/21a40e23-f801-4663-a7a2-477c201b515b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:d6:1b:29:be:58:73:d8:c3:33:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a40e23-f801-4663-a7a2-477c201b515b Validity Not Before: Oct 10 14:00:25 2026 GMT Not After : Oct 13 14:00:00 2026 GMT Subject: CN=78ffe0e8-57e0-4341-adeb-c7f783a0d28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:dc:21:e0:de:23:19:44:d2:32:c5:8d:24: 57:eb:f3:1a:1c:2a:d1:9f:f2:20:4f:e8:6f:25:e5: ba:e0:7c:06:b2:a9:15:58:98:4d:74:4b:63:82:a4: 1a:21:22:27:88:4d:29:e8:33:0d:7e:14:ca:ad:75: e2:4d:d7:d2:c5:65:87:42:d5:b3:66:26:75:8f:51: 8f:56:5c:56:c4:19:a2:3f:2d:fa:68:d7:4f:62:e5: 19:33:a7:0d:f0:e4:cc:14:aa:74:46:92:94:37:dc: ad:b0:7a:d6:c3:a8:b5:41:86:79:5e:91:a1:d2:9b: d1:91:23:a1:b4:cb:d9:08:87:79:90:22:ab:d5:e8: 0a:d7:59:43:77:3b:10:c1:b6:4e:7b:82:c5:2c:dd: 24:0c:60:44:86:64:39:9c:d2:cc:4a:15:9d:81:a5: f1:c6:7b:c4:b2:68:d7:32:c1:ed:0e:3d:53:f9:93: ec:98:53:c5:3d:27:49:be:7c:d4:e9:f8:c3:55:7e: a5:01:a3:ac:5d:f0:c1:f4:4c:3a:6d:df:b8:30:a7: ef:be:c0:d9:ff:2b:19:e0:23:1b:36:d8:8a:31:34: 34:5e:aa:60:ef:e4:03:94:4d:e7:22:1d:92:78:b1: 5f:f8:44:a6:e1:92:af:fa:40:d6:d5:ba:91:9c:72: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:10:11:AD:47:21:41:E9:73:A2:97:94:21:4D:95:24:AE:D3:18:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b/21a40e23-f801-4663-a7a2-477c201b515b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b/21a40e23-f801-4663-a7a2-477c201b515b.crl X509v3 Authority Key Identifier: keyid:6D:BE:AF:20:19:0B:D8:05:DC:EC:A4:50:B9:79:AB:27:96:37:69:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/21a40e23-f801-4663-a7a2-477c201b515b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:41:46:f5:da:ef:a6:b5:4f:cf:d9:7c:f7:7f:30:9b:13:92: 03:49:0d:2c:a1:5f:4f:4c:aa:99:6e:0b:0d:56:c5:f2:3e:75: 9e:3a:ab:9d:02:d1:f7:8c:3f:98:70:1b:9d:63:63:eb:e1:fd: 87:95:88:42:f2:0a:69:0f:30:83:96:ec:e7:c6:a8:1f:78:4e: 28:08:5b:85:47:04:d7:07:26:9c:32:4a:56:7f:fe:86:4e:19: 5f:18:ca:5e:2f:1e:46:7e:94:b5:71:96:9f:b2:5d:e3:2f:bd: 4b:e2:27:ae:1f:2a:e8:ad:11:08:d0:c1:a9:cd:e5:49:5c:37: 2b:f2:3d:48:be:33:46:6f:87:92:72:d9:c6:71:cf:25:c2:5b: 52:e1:cb:1e:b5:25:27:ae:ca:fa:37:68:30:75:c7:08:fb:8b: 3f:f4:46:af:1f:13:0c:0f:b4:40:b9:2b:21:29:59:e0:f0:1b: 7b:74:dc:2d:79:e8:4b:1f:6f:74:4e:58:0c:3d:12:4e:4b:88: 17:ad:82:73:56:99:fd:af:18:45:ca:1e:68:3b:97:29:be:c9: dd:e0:b4:19:98:a5:19:2f:15:77:11:4c:0d:51:52:b4:4c:74: 81:31:ad:8d:fe:17:cc:3f:57:cf:fd:5e:68:44:80:58:fb:fb: 15:4d:4a:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE901hspvlhz2MMzKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhNDBlMjMtZjgwMS00NjYzLWE3YTItNDc3YzIwMWI1 MTViMB4XDTI2MTAxMDE0MDAyNVoXDTI2MTAxMzE0MDAwMFowLzEtMCsGA1UEAxMk NzhmZmUwZTgtNTdlMC00MzQxLWFkZWItYzdmNzgzYTBkMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOXcIeDeIxlE0jLFjSRX6/MaHCrRn/IgT+hv JeW64HwGsqkVWJhNdEtjgqQaISIniE0p6DMNfhTKrXXiTdfSxWWHQtWzZiZ1j1GP VlxWxBmiPy36aNdPYuUZM6cN8OTMFKp0RpKUN9ytsHrWw6i1QYZ5XpGh0pvRkSOh tMvZCId5kCKr1egK11lDdzsQwbZOe4LFLN0kDGBEhmQ5nNLMShWdgaXxxnvEsmjX MsHtDj1T+ZPsmFPFPSdJvnzU6fjDVX6lAaOsXfDB9Ew6bd+4MKfvvsDZ/ysZ4CMb NtiKMTQ0Xqpg7+QDlE3nIh2SeLFf+ESm4ZKv+kDW1bqRnHI5KwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNMQEa1HIUHpc6KXlCFNlSSu0xjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yMWE0 MGUyMy1mODAxLTQ2NjMtYTdhMi00NzdjMjAxYjUxNWIvMjFhNDBlMjMtZjgwMS00 NjYzLWE3YTItNDc3YzIwMWI1MTViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMjFhNDBlMjMtZjgwMS00NjYzLWE3 YTItNDc3YzIwMWI1MTViLzIxYTQwZTIzLWY4MDEtNDY2My1hN2EyLTQ3N2MyMDFi NTE1Yi5jcmwwHwYDVR0jBBgwFoAUbb6vIBkL2AXc7KRQuXmrJ5Y3aUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8yMWE0MGUyMy1mODAxLTQ2NjMtYTdhMi00Nzdj MjAxYjUxNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArQUb12u+mtU/P2Xz3fzCb E5IDSQ0soV9PTKqZbgsNVsXyPnWeOqudAtH3jD+YcBudY2Pr4f2HlYhC8gppDzCD luznxqgfeE4oCFuFRwTXByacMkpWf/6GThlfGMpeLx5GfpS1cZafsl3jL71L4ieu HyrorREI0MGpzeVJXDcr8j1IvjNGb4eSctnGcc8lwltS4csetSUnrsr6N2gwdccI +4s/9EavHxMMD7RAuSshKVng8Bt7dNwteehLH290TlgMPRJOS4gXrYJzVpn9rxhF yh5oO5cpvsnd4LQZmKUZLxV3EUwNUVK0THSBMa2N/hfMP1fP/V5oRIBY+/sVTUqm -----END CERTIFICATE-----Generated at Sat Oct 10 17:14:41 2026 by rpki-client