$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: KxwsKoVegVT0psrAPdp40CoVf7cAQdfWu95ASXb+4rE= Subject key identifier: BA:D8:A3:2F:B4:33:1C:16:F2:A8:FF:6E:54:A1:15:CC:D0:06:3F:33 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584F3788D771B314C3FCE6199460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF84D Signing time: Fri 18 Sep 2026 15:00:22 +0000 Manifest this update: Fri 18 Sep 2026 15:00:22 +0000 Manifest next update: Mon 21 Sep 2026 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: e2HsvthuUeaG6C4jt/B2w3jcq/5ykFKJN9bWpBw+BHc=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: Y9kVZxAylziJ5thMvFLOtWFyzsZ3bdjKVgPP6vAbURQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:88:d7:71:b3:14:c3:fc:e6:19:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Sep 18 15:00:22 2026 GMT Not After : Sep 21 15:00:00 2026 GMT Subject: CN=73dcaecb-8549-48e4-93d1-7f7cdca5410f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:d9:75:79:30:53:5e:4d:78:84:0a:87:d1: 0d:9e:e2:c5:50:68:76:74:38:6f:f7:99:98:38:85: 21:d2:d3:17:b6:3d:ef:1c:74:d4:dc:f1:f0:ce:50: 68:f2:d0:0b:f4:7f:1c:ab:83:32:74:10:ee:d6:31: 50:ee:1d:c5:c9:30:94:75:43:0f:39:a6:4d:ef:8a: e6:05:84:18:a1:16:36:98:9b:71:43:ea:c6:69:9c: 59:dc:ce:e4:6f:2d:69:6a:02:41:c2:2b:ef:45:99: d0:63:59:52:2a:f3:7b:dc:79:dd:fa:0f:ce:65:5a: c6:b6:c8:65:22:4a:11:3c:60:dc:ef:71:33:8b:b3: 3c:83:97:ca:71:64:7c:59:15:94:57:aa:a5:a3:f1: a9:c4:73:67:f5:eb:24:fe:38:88:94:5d:08:75:bd: 5d:cb:34:b7:1a:4e:a7:aa:f0:e2:09:73:8e:94:3e: 29:d9:9c:1c:bb:d7:7e:4f:a3:41:0f:49:c1:49:55: 55:53:be:e9:32:f1:97:0e:fc:2e:d3:ac:19:8a:5a: c8:c9:de:6b:0b:ae:30:cc:71:b0:6d:d1:08:aa:30: 1d:25:9d:e3:75:14:4a:45:e6:69:0e:be:b7:b0:56: b9:aa:29:4a:92:5c:bb:8c:29:ed:c7:f5:ad:15:fa: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D8:A3:2F:B4:33:1C:16:F2:A8:FF:6E:54:A1:15:CC:D0:06:3F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ba:0e:12:91:26:79:d5:27:0e:ac:37:c5:2f:88:73:67:3c: c5:d8:e9:86:15:5c:dc:44:87:60:23:05:b7:13:91:13:c0:9d: 57:76:17:ea:39:ef:98:30:5f:c9:70:dc:b4:c9:d7:bf:fd:14: 28:26:67:bb:2f:44:84:07:f4:0f:25:d1:08:01:0c:93:4d:d8: 53:e5:15:80:3c:40:76:05:12:27:fa:c5:09:25:72:3d:2b:d7: 58:7c:1c:d0:f7:a4:10:fb:2a:21:12:03:3c:e4:3f:0c:17:d7: 90:06:2b:bc:80:ce:99:98:36:87:13:cd:da:1b:e6:b5:20:84: 58:ea:52:e6:e1:e7:2b:91:ba:2d:6f:31:c8:4a:25:97:7e:c4: 40:cb:52:44:b6:6f:e3:4b:09:11:00:00:27:69:fa:e4:0e:f6: 18:c0:c5:2c:e3:ff:9b:99:47:ce:2c:50:72:86:3f:c5:b4:c7: bc:f2:04:38:32:de:2d:20:bd:40:63:09:cb:1f:0f:bc:0b:64: 64:6f:c6:0a:a3:e1:3f:47:3d:a4:e9:9e:2b:02:eb:75:68:73: 95:17:a6:80:b7:f2:60:30:29:92:14:fe:3e:38:a5:57:c5:fc: 04:cc:e8:2e:fb:66:3d:99:c3:a7:54:67:b1:3b:7e:74:7f:3b: a0:65:1d:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE83iNdxsxTD/OYZlGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDkxODE1MDAyMloXDTI2MDkyMTE1MDAwMFowLzEtMCsGA1UEAxMk NzNkY2FlY2ItODU0OS00OGU0LTkzZDEtN2Y3Y2RjYTU0MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGnZdXkwU15NeIQKh9ENnuLFUGh2dDhv95mY OIUh0tMXtj3vHHTU3PHwzlBo8tAL9H8cq4MydBDu1jFQ7h3FyTCUdUMPOaZN74rm BYQYoRY2mJtxQ+rGaZxZ3M7kby1pagJBwivvRZnQY1lSKvN73Hnd+g/OZVrGtshl IkoRPGDc73Ezi7M8g5fKcWR8WRWUV6qlo/GpxHNn9esk/jiIlF0Idb1dyzS3Gk6n qvDiCXOOlD4p2Zwcu9d+T6NBD0nBSVVVU77pMvGXDvwu06wZilrIyd5rC64wzHGw bdEIqjAdJZ3jdRRKReZpDr63sFa5qilKkly7jCntx/WtFfrR7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLrYoy+0MxwW8qj/blShFczQBj8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAug4SkSZ51ScOrDfFL4hz ZzzF2OmGFVzcRIdgIwW3E5ETwJ1XdhfqOe+YMF/JcNy0yde//RQoJme7L0SEB/QP JdEIAQyTTdhT5RWAPEB2BRIn+sUJJXI9K9dYfBzQ96QQ+yohEgM85D8MF9eQBiu8 gM6ZmDaHE83aG+a1IIRY6lLm4ecrkbotbzHISiWXfsRAy1JEtm/jSwkRAAAnafrk DvYYwMUs4/+bmUfOLFByhj/FtMe88gQ4Mt4tIL1AYwnLHw+8C2Rkb8YKo+E/Rz2k 6Z4rAut1aHOVF6aAt/JgMCmSFP4+OKVXxfwEzOgu+2Y9mcOnVGexO350fzugZR2p -----END CERTIFICATE-----Generated at Sat Sep 19 01:58:43 2026 by rpki-client