$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: hbo29CavtE98luZINT+3a4C68hb+JE8FEtwJo3kburM= Subject key identifier: 77:37:BD:57:CA:7F:EE:18:9C:44:66:C5:27:E0:4B:3A:FF:BE:13:C9 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584E9007C2BDABB1A14918BF2480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF80F Signing time: Mon 20 Jul 2026 15:00:24 +0000 Manifest this update: Mon 20 Jul 2026 15:00:24 +0000 Manifest next update: Thu 23 Jul 2026 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: 47HR9nAGpyJDrVHBXXJ25Hu66cQsMDDexeG3KtJ/DOA=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: 6W+Oiicp5gMoTzlkV4+8OjeNxLf4kk9i54HQQgyIXzc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:07:c2:bd:ab:b1:a1:49:18:bf:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Jul 20 15:00:24 2026 GMT Not After : Jul 23 15:00:00 2026 GMT Subject: CN=0a884b8d-917f-44be-a259-05cc87307d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:7f:07:3a:21:42:eb:8c:2c:67:5a:99:b6: 37:5a:3c:bf:5f:0d:5d:31:88:be:b1:80:33:65:4e: 17:35:52:01:70:95:ba:7d:73:48:61:0a:74:65:fa: c1:20:71:9f:01:42:8a:56:35:59:f4:06:f6:b4:02: f1:53:ca:8f:73:6b:c0:b8:43:f7:16:fd:6d:4d:10: 06:8b:93:9b:a8:da:2f:b7:5f:b9:72:7d:69:76:fd: 17:02:41:d1:3b:ac:3a:d3:35:c7:b7:d5:58:1b:49: de:53:5e:bf:f9:3f:94:c6:78:68:5f:51:db:06:4b: a3:d9:68:04:8f:f4:94:ed:62:99:b5:f9:72:55:b9: a5:75:bf:72:10:3b:65:96:54:a8:95:bb:65:dc:0d: 59:8d:18:aa:c8:76:1c:c3:91:45:5b:e8:2b:dc:e5: cd:5a:7c:f7:26:93:55:a9:30:5c:d3:41:e0:8a:06: ba:95:9b:f5:87:2a:92:11:51:e9:8b:b6:71:47:38: a7:05:88:4b:e2:0b:b8:ec:f9:fe:15:22:77:88:b2: fb:8f:e8:94:0b:14:b1:1e:fb:ca:3a:b7:e2:4c:02: b5:26:8f:72:9b:da:3e:76:31:01:ab:ae:0d:e9:78: 72:c2:0c:f8:89:ea:5d:3f:b5:c8:1a:e3:1d:77:df: c9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:37:BD:57:CA:7F:EE:18:9C:44:66:C5:27:E0:4B:3A:FF:BE:13:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c9:6c:90:7c:f2:f0:ff:5b:06:dd:56:f3:56:a7:13:b5:80: a9:d8:76:8f:b7:4e:5a:f9:22:b6:0e:ed:a6:98:cf:b5:38:f0: 7d:e3:0c:8a:8b:1e:16:bb:66:87:12:4a:8b:9c:f2:4d:76:b2: 41:8e:a8:7b:37:21:ed:3e:dd:93:1a:1f:54:48:59:a8:8d:13: 63:5b:52:03:cc:b4:b5:f1:73:64:30:36:26:65:11:4c:62:5a: dd:c1:74:a0:52:65:8c:6e:6a:66:d4:ff:87:1f:cc:f1:ba:d2: f4:0e:58:0e:50:70:1a:6e:39:91:cb:ec:f0:92:aa:60:01:25: e1:bd:ff:e0:45:18:af:a1:c3:79:14:44:9b:41:e4:6b:51:2c: 6e:88:f6:fa:58:f8:cf:20:d7:3f:e6:b7:8f:a0:39:41:e8:fb: 8e:ff:0e:d6:99:96:c6:73:b0:57:08:02:a1:97:a7:8f:89:4f: 47:c8:38:6b:68:f3:f2:05:eb:d0:97:c6:3c:82:22:77:73:71: 1c:38:3a:f8:be:f3:dc:b3:12:8f:54:21:04:60:f6:33:da:80: e0:d3:68:a7:60:bf:e2:fc:41:47:b9:0b:8e:b5:5a:0d:f5:e9: ca:68:0e:1d:96:7d:43:05:8b:e1:29:93:92:bc:81:51:57:f9: aa:49:1d:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6QB8K9q7GhSRi/JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI2MDcyMDE1MDAyNFoXDTI2MDcyMzE1MDAwMFowLzEtMCsGA1UEAxMk MGE4ODRiOGQtOTE3Zi00NGJlLWEyNTktMDVjYzg3MzA3ZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bd/BzohQuuMLGdambY3Wjy/Xw1dMYi+sYAz ZU4XNVIBcJW6fXNIYQp0ZfrBIHGfAUKKVjVZ9Ab2tALxU8qPc2vAuEP3Fv1tTRAG i5ObqNovt1+5cn1pdv0XAkHRO6w60zXHt9VYG0neU16/+T+UxnhoX1HbBkuj2WgE j/SU7WKZtflyVbmldb9yEDtlllSolbtl3A1ZjRiqyHYcw5FFW+gr3OXNWnz3JpNV qTBc00Hgiga6lZv1hyqSEVHpi7ZxRzinBYhL4gu47Pn+FSJ3iLL7j+iUCxSxHvvK OrfiTAK1Jo9ym9o+djEBq64N6Xhywgz4iepdP7XIGuMdd9/JGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHc3vVfKf+4YnERmxSfgSzr/vhPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIyWyQfPLw/1sG3VbzVqcT tYCp2HaPt05a+SK2Du2mmM+1OPB94wyKix4Wu2aHEkqLnPJNdrJBjqh7NyHtPt2T Gh9USFmojRNjW1IDzLS18XNkMDYmZRFMYlrdwXSgUmWMbmpm1P+HH8zxutL0DlgO UHAabjmRy+zwkqpgASXhvf/gRRivocN5FESbQeRrUSxuiPb6WPjPINc/5rePoDlB 6PuO/w7WmZbGc7BXCAKhl6ePiU9HyDhraPPyBevQl8Y8giJ3c3EcODr4vvPcsxKP VCEEYPYz2oDg02inYL/i/EFHuQuOtVoN9enKaA4dln1DBYvhKZOSvIFRV/mqSR0r -----END CERTIFICATE-----Generated at Tue Jul 21 13:39:44 2026 by rpki-client