$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft File: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft (raw, json) Hash identifier: hCYzCdjqdcmOwAfd3XXYpoCHs+zxe5fiBKJi+CIk9N8= Subject key identifier: CB:95:87:A0:21:C7:4C:0D:C0:2B:AD:9D:E2:5C:10:10:3E:95:91:E4 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584F75E2128FBC3DAD039B737980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft Manifest number: 010D0C9F4328584B728422C8F4B1EE7ECA7B0BFA Signing time: Sat 10 Oct 2026 23:00:24 +0000 Manifest this update: Sat 10 Oct 2026 23:00:24 +0000 Manifest next update: Tue 13 Oct 2026 23:00:00 +0000 Files and hashes: 1: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (hash: ZtO2X+DLgdAEvzqqABQ8NetEbgdrxioIMwx3wdW+2HA=) 2: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl (hash: xIPt+/TkFXlMNdY3FNVf3U9jArvLKNfx8IBpKsf8Hk0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:e2:12:8f:bc:3d:ad:03:9b:73:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Oct 10 23:00:24 2026 GMT Not After : Oct 13 23:00:00 2026 GMT Subject: CN=43d018aa-800a-424b-904a-e727920bd9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:c3:db:43:51:c9:32:14:de:ee:85:87:80: 35:cb:49:90:35:6f:d0:84:b0:bc:9a:1a:c0:89:c2: 34:6f:45:2b:1c:4f:a7:ca:00:d4:dd:87:ca:e5:33: 28:6c:42:0c:98:3f:05:d3:21:28:f2:99:47:14:d2: 89:5e:8e:cd:47:14:37:a7:d2:b2:cc:07:cb:cd:c6: 9d:9c:b5:f3:7d:a4:9e:a5:a6:0b:a9:b7:d8:be:c1: 6a:50:1e:32:43:48:88:15:1b:d5:e9:06:e8:e8:06: 94:5f:60:5f:c1:ad:09:7d:29:35:06:69:71:df:17: 16:88:cd:2e:f0:2d:69:ea:40:b1:d9:a6:e1:b6:82: e4:19:18:e4:98:3d:06:28:05:c5:5a:82:2e:75:59: d3:71:74:47:67:bb:66:8d:04:c1:d9:1f:40:09:6f: 63:7b:40:67:a7:ba:ee:4a:04:17:10:1c:63:dc:5c: 51:8e:02:14:7f:5a:7a:d3:64:67:a8:92:97:f0:0c: a1:dd:57:aa:f4:13:f3:e7:43:d3:69:f6:ee:20:df: dc:6b:ae:78:19:31:05:a9:73:07:3e:49:36:1e:3e: 42:e2:22:bc:73:41:d9:66:1e:2d:05:9f:eb:82:4f: ce:f9:24:7f:f9:34:75:4b:7a:73:99:8e:8e:f1:ea: 20:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:95:87:A0:21:C7:4C:0D:C0:2B:AD:9D:E2:5C:10:10:3E:95:91:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b0:db:6d:70:86:4f:0f:ec:80:95:3e:d9:f9:90:dc:9d:b9: ed:bc:7c:22:f8:f1:55:37:63:82:f1:61:5d:43:50:52:05:19: 9f:bb:b8:16:8b:2c:9c:2c:4d:62:53:17:ac:d7:f9:62:da:10: 1b:91:af:41:03:e6:b4:a1:25:25:79:4d:1b:b2:17:5c:5e:2b: ed:18:88:51:5a:ea:d0:c1:cb:4a:04:44:07:c4:91:03:c7:a6: 01:a7:d8:ea:0b:cd:a4:94:f4:1b:7e:99:e3:47:99:2f:5f:d1: 2e:20:a2:fe:36:36:02:05:a8:52:a4:de:b0:d4:25:4c:00:e9: 16:0b:a8:58:4f:a2:9a:1b:b3:89:62:58:38:52:a3:2c:94:28: f2:c5:14:dc:5f:a3:fe:5f:61:05:8e:43:9a:a0:75:19:82:f0: 38:8d:c9:a6:bf:0b:b9:aa:55:b6:98:90:5c:ad:e6:3b:af:e5: 6f:a9:ab:5e:6f:dc:d1:aa:26:9b:fe:fb:da:07:5e:40:3f:70: f7:29:01:e0:f8:34:43:ee:96:07:5e:94:29:83:95:3e:f6:0a: fa:c7:7e:c2:de:97:70:cc:f6:3e:d7:9e:6c:d6:13:c9:a6:90: f6:a5:de:5f:55:09:02:a4:be:ca:c5:a5:2e:96:ec:a0:c7:cb: ef:e8:e5:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE914hKPvD2tA5tzeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI2MTAxMDIzMDAyNFoXDTI2MTAxMzIzMDAwMFowLzEtMCsGA1UEAxMk NDNkMDE4YWEtODAwYS00MjRiLTkwNGEtZTcyNzkyMGJkOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+fD20NRyTIU3u6Fh4A1y0mQNW/QhLC8mhrA icI0b0UrHE+nygDU3YfK5TMobEIMmD8F0yEo8plHFNKJXo7NRxQ3p9KyzAfLzcad nLXzfaSepaYLqbfYvsFqUB4yQ0iIFRvV6Qbo6AaUX2Bfwa0JfSk1Bmlx3xcWiM0u 8C1p6kCx2abhtoLkGRjkmD0GKAXFWoIudVnTcXRHZ7tmjQTB2R9ACW9je0Bnp7ru SgQXEBxj3FxRjgIUf1p602RnqJKX8Ayh3Veq9BPz50PTafbuIN/ca654GTEFqXMH Pkk2Hj5C4iK8c0HZZh4tBZ/rgk/O+SR/+TR1S3pzmY6O8eogrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMuVh6Ahx0wNwCutneJcEBA+lZHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMjFhMjBhZDktYTg0OC00 ZDBkLWExMTktM2RmNWQ2ZGJjYjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQsNttcIZPD+yAlT7Z+ZDc nbntvHwi+PFVN2OC8WFdQ1BSBRmfu7gWiyycLE1iUxes1/li2hAbka9BA+a0oSUl eU0bshdcXivtGIhRWurQwctKBEQHxJEDx6YBp9jqC82klPQbfpnjR5kvX9EuIKL+ NjYCBahSpN6w1CVMAOkWC6hYT6KaG7OJYlg4UqMslCjyxRTcX6P+X2EFjkOaoHUZ gvA4jcmmvwu5qlW2mJBcreY7r+Vvqateb9zRqiab/vvaB15AP3D3KQHg+DRD7pYH XpQpg5U+9gr6x37C3pdwzPY+155s1hPJppD2pd5fVQkCpL7KxaUuluygx8vv6OVC -----END CERTIFICATE-----Generated at Sun Oct 11 09:17:24 2026 by rpki-client