$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft File: 21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft (raw, json) Hash identifier: hDnoCaPiKFcIOeUzldbRjgJVJgGT9fESwYNTLql1tQA= Subject key identifier: 79:55:09:4E:BA:81:DE:56:91:21:29:0F:8E:A4:5C:6B:EE:1B:21:6B Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584D3F290B75D1BD8E1823A8FD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft Manifest number: 010D0C9F43285849D82F82E2AB1B69D3282B5F4B Signing time: Sat 21 Mar 2026 23:00:09 +0000 Manifest this update: Sat 21 Mar 2026 23:00:09 +0000 Manifest next update: Tue 24 Mar 2026 23:00:00 +0000 Files and hashes: 1: 21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl (hash: 0AVoN+iN89i4kEHi0fAebyXSCTEhUbCPoUHZqpqzLe4=) 2: 268cad49-8fe0-3114-93b6-1669c6777057.roa (hash: UB2JB++qDBMgj2S9g9lTPiu+aR5b0oqCX38jb+LuR8w=) 3: 2eb97f2f-5704-3f2a-a6fc-34b5c3ecaafd.roa (hash: vlY7QZjhoaG8WW0Fm09K6NOyWvIiafGRxkQpfKsD+kE=) 4: 35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (hash: m8/MlaO5oMaZFJDik54bXJo2WEkQzastsi5jPBArjkc=) 5: 96536b0c-989f-35e3-b9f9-49a8990df0d2.roa (hash: VUIxvmaB1HiSdF8TA0qUvyxL8Kvj4H5+8fh1sN0pE6M=) 6: d9d2edf2-a2b8-340a-871f-8915988ad447.roa (hash: WIV4clUYmhBV0+F/JDi6X3DGue8ByL+BYkx1+sNIEgw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:29:0b:75:d1:bd:8e:18:23:a8:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Mar 21 23:00:09 2026 GMT Not After : Mar 24 23:00:00 2026 GMT Subject: CN=3fc191f8-8f9e-4454-a243-a2a5e6da1c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0d:0b:a3:40:74:62:10:15:ac:50:bd:63:b2: 4a:ba:6c:b6:1a:20:02:50:d9:b2:c5:87:09:af:e4: 55:33:ea:87:40:4b:ed:d3:45:bd:d6:16:ef:03:3f: 1b:37:da:f3:f6:6b:b7:fa:0f:e7:8e:07:63:09:7e: 72:ae:7f:a8:09:3b:5a:3a:f5:7e:f8:64:4d:7e:47: 57:22:5c:a4:1b:0e:0a:96:bd:9f:29:08:0e:25:1c: 9a:2e:2d:6d:96:d6:6d:a9:02:0b:c0:7a:d5:7d:fb: 49:2f:16:b6:b7:24:da:25:22:0c:f4:24:d0:44:02: de:4f:74:07:45:a5:8f:67:ab:e2:86:ea:b7:24:9b: de:9b:f1:72:44:55:77:01:ec:07:5a:64:a1:73:0f: 0b:81:cd:23:b2:d6:09:9b:1b:37:e9:22:f9:03:54: a2:d6:e6:bb:45:e6:14:77:00:3b:8f:cd:7e:25:bd: 5e:0d:51:67:15:fc:88:4a:1a:3d:f9:de:8a:30:b7: 3e:6f:b2:8f:4a:c4:44:b5:21:88:ac:bc:e3:a8:cf: 45:b7:34:49:bf:2e:c6:5e:da:2b:80:30:b5:f2:e4: 8d:26:d9:3b:95:a2:cf:bc:b8:0e:8d:a6:50:cb:2e: ee:59:03:36:6d:7d:d4:3f:25:9f:fb:05:4a:d5:be: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:55:09:4E:BA:81:DE:56:91:21:29:0F:8E:A4:5C:6B:EE:1B:21:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:aa:66:66:d1:2d:f2:88:99:4f:03:03:91:4d:74:bf:82:f4: a2:70:05:ff:64:17:d4:0d:5e:4f:9a:e2:a6:e2:68:bb:9e:18: 6f:d7:71:1f:37:3c:3c:b5:42:60:97:bb:59:96:9d:50:6e:b4: ff:ee:db:81:5c:f2:3c:37:95:77:9e:bb:45:84:55:5e:92:5a: ca:75:29:2e:ae:55:ab:f1:63:2a:43:ac:10:ba:ee:09:18:36: 58:48:f3:d9:ef:55:24:b2:d8:ac:a1:b9:d6:d2:e0:08:15:2e: a5:d8:2e:7e:c8:d2:2e:b7:b2:09:0e:40:02:44:8f:40:1f:20: d8:a5:78:e3:39:a5:22:20:93:98:6b:51:6f:d4:ff:15:65:38: 4b:9d:13:8e:5d:ed:3d:65:06:e2:ff:f7:9c:90:fb:7d:46:49: 3d:a4:55:f1:3f:81:b9:d8:ee:cd:ea:e4:88:ef:ae:04:cb:47: 5b:97:6f:72:8d:22:3d:b9:0e:c4:d4:49:98:48:f1:3d:e9:55: 56:cc:c5:d7:73:d7:54:a7:c2:d5:5a:ad:79:a8:34:68:95:ad: 52:73:e5:36:98:1e:c1:58:8a:4f:2a:32:19:45:c9:e6:79:12: 16:80:65:7b:00:15:c8:47:52:ca:74:bf:4a:65:99:c7:bd:f0: 4e:e5:2c:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0/KQt10b2OGCOo/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI2MDMyMTIzMDAwOVoXDTI2MDMyNDIzMDAwMFowLzEtMCsGA1UEAxMk M2ZjMTkxZjgtOGY5ZS00NDU0LWEyNDMtYTJhNWU2ZGExYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA0Lo0B0YhAVrFC9Y7JKumy2GiACUNmyxYcJ r+RVM+qHQEvt00W91hbvAz8bN9rz9mu3+g/njgdjCX5yrn+oCTtaOvV++GRNfkdX IlykGw4Klr2fKQgOJRyaLi1tltZtqQILwHrVfftJLxa2tyTaJSIM9CTQRALeT3QH RaWPZ6vihuq3JJvem/FyRFV3AewHWmShcw8Lgc0jstYJmxs36SL5A1Si1ua7ReYU dwA7j81+Jb1eDVFnFfyISho9+d6KMLc+b7KPSsREtSGIrLzjqM9FtzRJvy7GXtor gDC18uSNJtk7laLPvLgOjaZQyy7uWQM2bX3UPyWf+wVK1b4B8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHlVCU66gd5WkSEpD46kXGvuGyFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMjFjNTgwYzEtYTA1ZC00 ZTI4LWE0OGQtOWVhMGVjNWVkY2FjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjqmZm0S3yiJlPAwORTXS/ gvSicAX/ZBfUDV5PmuKm4mi7nhhv13EfNzw8tUJgl7tZlp1QbrT/7tuBXPI8N5V3 nrtFhFVeklrKdSkurlWr8WMqQ6wQuu4JGDZYSPPZ71UkstisobnW0uAIFS6l2C5+ yNIut7IJDkACRI9AHyDYpXjjOaUiIJOYa1Fv1P8VZThLnROOXe09ZQbi//eckPt9 Rkk9pFXxP4G52O7N6uSI764Ey0dbl29yjSI9uQ7E1EmYSPE96VVWzMXXc9dUp8LV Wq15qDRola1Sc+U2mB7BWIpPKjIZRcnmeRIWgGV7ABXIR1LKdL9KZZnHvfBO5SzW -----END CERTIFICATE-----Generated at Sun Mar 22 00:27:10 2026 by rpki-client