$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: Y/bujy2EkD/vHKy66Dp+tQDz1fm1/Gv6nzg2zSgxDqg= Subject key identifier: 41:C7:13:F4:E6:67:98:5B:D3:74:36:4B:9C:40:1C:16:36:22:8C:53 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584DE886831C13584463DAB48198 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF7D3 Signing time: Thu 21 May 2026 15:00:03 +0000 Manifest this update: Thu 21 May 2026 15:00:03 +0000 Manifest next update: Sun 24 May 2026 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: VefLcN1H+jQhOse9nxcIC9Q7+RiSM23HS0asAi1soJo=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: 6W+Oiicp5gMoTzlkV4+8OjeNxLf4kk9i54HQQgyIXzc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:86:83:1c:13:58:44:63:da:b4:81:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: May 21 15:00:03 2026 GMT Not After : May 24 15:00:00 2026 GMT Subject: CN=8ff7eea7-3e6e-49eb-a4cd-73b3a42ecd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2e:e1:ae:7d:a1:f1:46:96:8b:43:e6:67:e5: c0:d2:3f:37:a0:96:0f:6b:30:2e:3a:81:49:ff:d4: 4a:10:34:88:9e:10:06:93:58:cf:98:e4:89:8e:77: 82:6a:aa:f7:bb:48:8e:fe:d4:1a:b2:26:34:6a:ea: 84:bc:3a:e3:38:eb:27:a4:55:32:1f:68:7b:bb:47: c9:3b:b2:39:c4:13:db:20:bd:28:c4:fc:6b:ed:15: 6d:0a:2d:c6:c9:17:78:2b:03:17:0e:9f:25:f8:27: ae:00:f8:66:25:0e:08:3f:30:54:f3:51:65:f0:8f: 56:25:cf:4b:5e:1f:3d:db:24:2c:cb:6c:aa:e0:ce: 50:a9:9f:f6:c7:29:51:30:3b:81:de:6e:cc:1a:98: da:7e:49:91:ef:a3:23:c7:c0:ea:08:ce:9b:1b:12: 66:6d:c5:bc:ea:c1:b9:10:1f:fa:97:cc:1d:9d:ff: 1c:ff:c3:ab:0c:a7:56:bd:64:94:c9:6e:49:75:2c: 4c:5b:b3:e7:7e:f6:e5:93:85:fb:db:6b:65:61:e4: 17:88:95:e2:49:42:6a:e4:eb:9b:71:ef:98:fb:50: 8d:44:65:d1:55:41:76:5c:ce:58:25:93:33:02:27: 87:6f:c6:62:e1:d9:59:20:eb:3c:42:ff:a3:ee:04: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C7:13:F4:E6:67:98:5B:D3:74:36:4B:9C:40:1C:16:36:22:8C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cc:e7:1d:c8:37:9d:3f:46:18:6e:b7:a9:7a:20:cc:df:b8: 91:53:8c:f5:d1:1e:82:5d:b9:30:a0:de:e5:27:24:98:55:8b: 0d:bc:47:03:ef:73:b2:81:e7:c0:a0:c9:d1:7c:cb:5c:14:7f: 6b:3b:a2:d2:c6:3f:48:24:71:96:3d:2f:0a:37:3b:23:df:55: e9:d5:a6:39:80:35:ff:b9:a6:21:fa:49:b3:da:73:bd:33:14: a8:b8:19:5a:91:db:2d:04:2d:96:84:7c:f8:4b:e9:67:13:31: 22:b3:95:3e:9f:21:aa:84:38:76:04:9e:5b:bf:40:f5:32:7d: 78:a1:f3:8a:c7:92:aa:74:24:79:d6:ca:53:d1:1d:d3:42:6f: f5:1a:cc:89:56:44:ed:f1:44:ce:8d:7a:e9:ba:9c:8c:8f:cb: ae:58:71:50:68:08:42:0a:87:7f:b9:10:64:c9:8d:55:de:40: 24:3a:58:d6:aa:ab:79:77:a8:f9:a5:45:4a:6f:da:58:10:44: a2:8c:ed:81:96:ca:67:1c:f4:6d:f1:a1:5b:28:e6:74:ec:d9: b2:5b:6e:05:fb:2c:43:b6:77:3b:c1:7f:d8:88:9a:d2:76:2f: 44:49:c1:84:00:46:cf:d1:7d:80:b4:34:ef:87:ff:53:78:04: ef:0f:10:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3ohoMcE1hEY9q0gZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDUyMTE1MDAwM1oXDTI2MDUyNDE1MDAwMFowLzEtMCsGA1UEAxMk OGZmN2VlYTctM2U2ZS00OWViLWE0Y2QtNzNiM2E0MmVjZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy7hrn2h8UaWi0PmZ+XA0j83oJYPazAuOoFJ /9RKEDSInhAGk1jPmOSJjneCaqr3u0iO/tQasiY0auqEvDrjOOsnpFUyH2h7u0fJ O7I5xBPbIL0oxPxr7RVtCi3GyRd4KwMXDp8l+CeuAPhmJQ4IPzBU81Fl8I9WJc9L Xh892yQsy2yq4M5QqZ/2xylRMDuB3m7MGpjafkmR76Mjx8DqCM6bGxJmbcW86sG5 EB/6l8wdnf8c/8OrDKdWvWSUyW5JdSxMW7Pnfvblk4X722tlYeQXiJXiSUJq5Oub ce+Y+1CNRGXRVUF2XM5YJZMzAieHb8Zi4dlZIOs8Qv+j7gSuCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEHHE/TmZ5hb03Q2S5xAHBY2IoxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNzOcdyDedP0YYbrepeiDM 37iRU4z10R6CXbkwoN7lJySYVYsNvEcD73OygefAoMnRfMtcFH9rO6LSxj9IJHGW PS8KNzsj31Xp1aY5gDX/uaYh+kmz2nO9MxSouBlakdstBC2WhHz4S+lnEzEis5U+ nyGqhDh2BJ5bv0D1Mn14ofOKx5KqdCR51spT0R3TQm/1GsyJVkTt8UTOjXrpupyM j8uuWHFQaAhCCod/uRBkyY1V3kAkOljWqqt5d6j5pUVKb9pYEESijO2BlspnHPRt 8aFbKOZ07NmyW24F+yxDtnc7wX/YiJrSdi9EScGEAEbP0X2AtDTvh/9TeATvDxAh -----END CERTIFICATE-----Generated at Thu May 21 18:55:22 2026 by rpki-client