$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: eaJDVX3GdS1TQC8Tw1gPVzPfGeq/A/NlnHC0gJRixIU= Subject key identifier: 25:01:FE:92:9A:E5:DA:C3:ED:E5:F7:B2:47:C5:02:71:07:DB:77:25 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584D3E3AC53C68D438493CEB3E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF794 Signing time: Sat 21 Mar 2026 15:00:04 +0000 Manifest this update: Sat 21 Mar 2026 15:00:04 +0000 Manifest next update: Mon 23 Mar 2026 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: nQDVRAsQJrKgcQ/iRmFX2nhYIRKlaaMoORA/t2IvlG4=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: c5qzFmbFqng6+KHePTvglV9revkGiX36DAaho1tPvlQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:3a:c5:3c:68:d4:38:49:3c:eb:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Mar 21 15:00:04 2026 GMT Not After : Mar 23 15:00:00 2026 GMT Subject: CN=95ff5937-815f-4bbd-a849-fbd0e540b037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:26:a7:c9:16:f2:1a:f4:2e:e7:94:04:8c:59: 75:8b:33:96:7f:75:29:98:bb:e3:ae:fb:42:e0:ab: cd:d8:56:bd:54:7a:f3:da:c4:d3:54:a0:98:0c:33: 28:df:d8:94:49:a3:32:43:62:a7:4c:d2:57:a8:53: 3a:95:01:4f:3a:5b:47:79:41:63:bd:0e:ac:d0:d9: 84:a5:ac:70:b2:08:4e:15:db:18:59:ac:fc:72:93: 20:24:48:3c:03:46:14:e2:fc:37:b6:73:df:75:d2: 1d:ba:a4:f6:54:fe:75:b5:9f:3d:15:02:f2:44:68: 67:02:ef:d7:87:2e:2b:c0:a1:a2:b4:d1:e3:7e:95: c6:bf:c8:29:c8:47:8b:45:3c:7f:7d:d0:33:22:6b: b3:50:c3:29:4f:9e:d1:69:c4:ab:1c:50:d1:f9:0b: 5d:ac:d6:cd:43:0f:72:c4:23:e5:c0:ad:5e:93:22: ba:c3:7e:5c:f0:a6:c9:dd:9e:d6:34:64:39:17:ad: e4:3f:d1:a8:86:8f:7e:5e:37:f2:ad:b5:90:88:7a: 6d:6d:76:ab:2a:b9:d9:48:e8:31:2c:da:9c:58:87: f3:96:c9:05:98:79:5c:8e:7e:cd:cb:bd:25:64:37: d2:bf:34:97:35:70:18:4b:2c:cf:cf:09:52:09:05: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:01:FE:92:9A:E5:DA:C3:ED:E5:F7:B2:47:C5:02:71:07:DB:77:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:15:34:42:3d:f7:ee:2c:e9:18:10:ec:2c:51:6a:9a:4a:0c: 84:b0:3b:54:0f:f2:22:4c:14:78:9a:83:fa:27:f7:16:5d:cf: 9b:ae:d2:fb:b1:f8:a8:c1:36:33:dd:e1:79:96:50:87:9c:7f: aa:82:fd:49:17:c6:30:19:d7:ef:06:81:a8:9c:7b:2e:90:28: c5:76:d2:bb:99:75:03:be:25:55:0e:c8:69:2a:a3:06:da:4b: ef:58:ac:1c:d8:ca:68:03:b2:e0:c6:50:a2:60:35:bf:99:74: 59:1a:77:55:d4:93:cf:60:0f:f5:ea:8b:4f:e9:cc:8c:fb:8d: fe:68:dd:42:fc:a7:6f:ba:87:f0:1f:57:3d:f5:22:43:ae:a1: fa:70:47:39:90:35:a0:94:a3:fc:23:53:22:6d:99:ac:4b:08: 74:f5:d5:69:e5:33:14:7b:47:07:dc:81:4d:eb:e0:38:1d:a0: 89:ea:f3:fc:1f:95:a4:f7:36:d9:eb:0b:17:b3:ef:83:cd:48: 4a:72:3e:19:74:bc:06:d5:15:37:27:60:cb:da:8b:d8:e0:7a: 76:a5:6d:31:49:74:9e:13:f7:2a:74:89:44:77:03:da:07:cd: 1f:68:5f:0a:15:1f:7f:45:d7:89:a3:d6:88:31:3c:c5:e2:37: b5:93:79:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0+OsU8aNQ4STzrPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDMyMTE1MDAwNFoXDTI2MDMyMzE1MDAwMFowLzEtMCsGA1UEAxMk OTVmZjU5MzctODE1Zi00YmJkLWE4NDktZmJkMGU1NDBiMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyanyRbyGvQu55QEjFl1izOWf3UpmLvjrvtC 4KvN2Fa9VHrz2sTTVKCYDDMo39iUSaMyQ2KnTNJXqFM6lQFPOltHeUFjvQ6s0NmE paxwsghOFdsYWaz8cpMgJEg8A0YU4vw3tnPfddIduqT2VP51tZ89FQLyRGhnAu/X hy4rwKGitNHjfpXGv8gpyEeLRTx/fdAzImuzUMMpT57RacSrHFDR+QtdrNbNQw9y xCPlwK1ekyK6w35c8KbJ3Z7WNGQ5F63kP9Goho9+XjfyrbWQiHptbXarKrnZSOgx LNqcWIfzlskFmHlcjn7Ny70lZDfSvzSXNXAYSyzPzwlSCQXK1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCUB/pKa5drD7eX3skfFAnEH23clMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASFTRCPffuLOkYEOwsUWqa SgyEsDtUD/IiTBR4moP6J/cWXc+brtL7sfiowTYz3eF5llCHnH+qgv1JF8YwGdfv BoGonHsukCjFdtK7mXUDviVVDshpKqMG2kvvWKwc2MpoA7LgxlCiYDW/mXRZGndV 1JPPYA/16otP6cyM+43+aN1C/KdvuofwH1c99SJDrqH6cEc5kDWglKP8I1MibZms Swh09dVp5TMUe0cH3IFN6+A4HaCJ6vP8H5Wk9zbZ6wsXs++DzUhKcj4ZdLwG1RU3 J2DL2ovY4Hp2pW0xSXSeE/cqdIlEdwPaB80faF8KFR9/RdeJo9aIMTzF4je1k3mZ -----END CERTIFICATE-----Generated at Sun Mar 22 08:27:29 2026 by rpki-client