$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: n/BYB2xOVnWmX+LjL4qFVt49qMif/Up/k6kIN99OzkE= Subject key identifier: 04:AA:58:BE:C8:0A:EA:DC:75:9C:B9:11:9C:9B:FC:46:C3:4D:BD:86 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584E0A24AEBA1F8709160E961800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E3F0 Signing time: Tue 02 Jun 2026 16:00:23 +0000 Manifest this update: Tue 02 Jun 2026 16:00:23 +0000 Manifest next update: Thu 04 Jun 2026 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: REJFRnhBJdrXCQ6ojBUzcyFal2XTjYZL4pxYZUDEleA=) 2: a48abf00-c06c-348f-93b5-677951e2c9f1.roa (hash: Z7j43tpu5Bs0EklWxw1y9zu8TNuxxILDDa3drCOvkDg=) 3: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: ZDeY72t9DMb2ui8TPNM9/iRhg3vPmlqiOwLEtzWXrhk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:24:ae:ba:1f:87:09:16:0e:96:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Jun 2 16:00:23 2026 GMT Not After : Jun 4 16:00:00 2026 GMT Subject: CN=22c302a1-069f-4a4c-a2db-42f031edfb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:78:b6:08:9b:c5:dd:2a:b8:bc:c2:5a:2d: b3:48:6c:fe:4b:68:0a:f5:7c:86:c1:21:80:b9:71: c0:b1:d1:8b:56:c7:2d:c6:54:23:19:38:4a:b4:a9: 8e:e5:39:b8:6d:d5:9c:36:43:95:57:b9:b1:cf:df: a2:fe:6d:fb:68:a7:f4:3f:00:c2:2a:2f:09:d7:7c: 3b:3c:bc:f6:76:b6:95:eb:17:33:35:7b:bb:5b:88: 37:36:29:78:8f:57:67:dd:3f:6b:a9:01:a2:94:a5: 65:d9:c0:15:4c:62:6a:1f:e1:7f:ab:8e:b7:13:b4: 64:01:f9:fd:b2:c5:b1:6e:58:5a:29:ff:48:42:c3: 90:6a:a8:7d:b1:ae:b4:d1:ce:5a:78:9d:28:b3:29: ca:70:83:41:77:14:78:5a:69:fa:53:10:ea:79:0d: 52:c9:93:8a:33:f7:2b:d5:5a:ac:87:ff:de:7e:70: e5:0f:47:7b:25:f2:c6:98:43:e4:f5:29:29:a9:8a: 4c:41:e4:0c:81:5c:75:95:9e:96:df:da:7b:c4:86: 3c:bc:6b:ae:d7:02:36:d4:cb:a8:45:3c:6c:18:0e: f1:89:6b:71:3b:a1:6b:a8:3b:af:e7:ab:6d:c8:41: 4d:ec:e5:3f:90:56:4a:ae:08:a3:92:a4:9f:b1:c0: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AA:58:BE:C8:0A:EA:DC:75:9C:B9:11:9C:9B:FC:46:C3:4D:BD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:99:88:0f:b0:1e:f3:68:0e:42:e3:33:2d:e0:d3:83:d5:ea: 4d:ee:0a:43:d6:e5:f1:c6:4d:c6:ad:b3:b4:d6:1a:77:69:c2: 1c:84:3d:bf:c1:e6:4a:42:23:b1:78:9f:81:cb:40:fd:85:73: b3:35:f1:28:9f:ef:b8:96:a0:d1:bd:59:bc:28:36:6f:cf:d7: 86:af:12:f8:26:02:a2:bb:9e:b3:ef:23:77:40:37:19:70:74: 0a:30:3b:e3:0c:6e:75:eb:6b:95:c3:f6:25:05:ee:7b:59:28: 4e:e1:7e:8a:3f:2d:58:c1:9f:77:c0:4c:11:de:5f:d3:f5:88: 9e:bc:fb:f4:a4:5b:be:22:72:4b:74:1c:ed:a0:be:d0:2a:02: 94:52:b7:9b:99:17:1d:ae:ad:88:eb:6c:ff:c9:0d:76:47:6d: 84:40:36:c1:4a:a1:98:6d:46:8e:04:d1:8f:ea:87:98:d2:6f: f1:44:90:4e:c6:e8:15:6b:f8:8f:8f:44:83:1c:b6:57:47:a9: 5d:d4:77:b2:31:d3:09:ab:2d:04:8a:f9:a1:79:b3:49:ca:b2: cd:b7:83:5f:81:e6:d9:cb:d0:e6:53:85:7d:ac:b0:88:64:8f: 7a:2e:dd:b5:6b:bf:41:1f:25:67:2a:f7:99:23:ee:17:5d:ff: 35:2a:6b:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE4KJK66H4cJFg6WGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI2MDYwMjE2MDAyM1oXDTI2MDYwNDE2MDAwMFowLzEtMCsGA1UEAxMk MjJjMzAyYTEtMDY5Zi00YTRjLWEyZGItNDJmMDMxZWRmYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu854tgibxd0quLzCWi2zSGz+S2gK9XyGwSGA uXHAsdGLVsctxlQjGThKtKmO5Tm4bdWcNkOVV7mxz9+i/m37aKf0PwDCKi8J13w7 PLz2draV6xczNXu7W4g3Nil4j1dn3T9rqQGilKVl2cAVTGJqH+F/q463E7RkAfn9 ssWxblhaKf9IQsOQaqh9sa600c5aeJ0osynKcINBdxR4Wmn6UxDqeQ1SyZOKM/cr 1Vqsh//efnDlD0d7JfLGmEPk9SkpqYpMQeQMgVx1lZ6W39p7xIY8vGuu1wI21Muo RTxsGA7xiWtxO6FrqDuv56ttyEFN7OU/kFZKrgijkqSfscD76QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFASqWL7ICurcdZy5EZyb/EbDTb2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4mYgPsB7zaA5C4zMt4NOD 1epN7gpD1uXxxk3GrbO01hp3acIchD2/weZKQiOxeJ+By0D9hXOzNfEon++4lqDR vVm8KDZvz9eGrxL4JgKiu56z7yN3QDcZcHQKMDvjDG5162uVw/YlBe57WShO4X6K Py1YwZ93wEwR3l/T9YievPv0pFu+InJLdBztoL7QKgKUUrebmRcdrq2I62z/yQ12 R22EQDbBSqGYbUaOBNGP6oeY0m/xRJBOxugVa/iPj0SDHLZXR6ld1HeyMdMJqy0E ivmhebNJyrLNt4NfgebZy9DmU4V9rLCIZI96Lt21a79BHyVnKveZI+4XXf81Kmsh -----END CERTIFICATE-----Generated at Tue Jun 2 21:55:58 2026 by rpki-client