$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft File: 21972f4a-b949-4223-9030-d9f0e37f8edd.mft (raw, json) Hash identifier: IjRXFP2KVY3bzzbIeE09exGeAYSsMzqZ9Lbn3C6jb+c= Subject key identifier: 4C:A2:29:58:D8:84:17:58:F6:BE:FD:9C:E0:8B:62:4C:26:7A:BD:74 Authority key identifier: 98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 Certificate issuer: /CN=21972f4a-b949-4223-9030-d9f0e37f8edd Certificate serial: 010D0C9F4328584F75C45691932FBCE4BB799080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft Manifest number: 010D0C9F4328584AAF164585E46E2B63713FC3B6 Signing time: Sat 10 Oct 2026 22:00:24 +0000 Manifest this update: Sat 10 Oct 2026 22:00:24 +0000 Manifest next update: Tue 13 Oct 2026 22:00:00 +0000 Files and hashes: 1: 21972f4a-b949-4223-9030-d9f0e37f8edd.crl (hash: d/SKrnRH9COo5KpShAcTQ7qAMlFSiXXg4yaG/URwXXo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:c4:56:91:93:2f:bc:e4:bb:79:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21972f4a-b949-4223-9030-d9f0e37f8edd Validity Not Before: Oct 10 22:00:24 2026 GMT Not After : Oct 13 22:00:00 2026 GMT Subject: CN=b69dcb42-15c3-4dc3-8bcc-9a19643f654d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:dc:29:55:79:15:ee:57:5c:fa:44:4a:5a: 79:7d:23:59:e9:b8:fa:6e:f0:c9:72:ac:05:9e:90: d7:a2:10:91:64:d3:97:6a:ee:93:c8:1a:d8:38:5c: 24:9a:6d:13:b8:70:b6:8a:9f:23:80:7e:68:6b:97: ed:e2:1b:d7:8b:e3:2d:5c:f5:6f:2c:5d:ae:6a:31: f9:1f:81:aa:ec:70:0e:15:a1:e2:30:59:f7:c7:04: 87:4b:22:11:b2:c4:fd:3d:37:1c:c7:67:81:fc:d2: dc:f7:cf:28:b2:b0:7e:7d:5b:c2:96:10:59:f6:4d: b1:49:2d:ab:78:8c:ac:ef:4f:f7:a0:83:8c:bd:f4: 8e:9c:73:bb:2a:88:e5:bb:db:ef:22:d2:19:60:a4: 4a:ac:58:ea:b9:fd:a3:ed:b5:de:d5:0b:ff:13:42: 80:91:d4:38:cd:a7:8c:0b:e9:ca:1c:94:d9:c7:bf: 94:61:ce:b3:10:94:09:98:18:77:a1:75:92:1a:0c: bd:47:e6:7f:43:7a:a9:78:6d:de:6f:fe:2e:8a:1a: 7b:34:58:66:e7:55:bf:cb:37:3d:7a:1d:8d:7e:69: 90:3a:17:50:ca:8d:a4:ab:ef:d9:4c:c9:66:0e:a7: 17:7b:c7:b9:77:fc:b8:1f:01:b2:f0:6e:2e:d5:81: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A2:29:58:D8:84:17:58:F6:BE:FD:9C:E0:8B:62:4C:26:7A:BD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl X509v3 Authority Key Identifier: keyid:98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4d:c1:32:ef:69:d7:c5:26:e3:2b:76:99:7d:58:3f:14:7f: b2:ee:c2:78:08:3c:96:04:f5:56:e2:db:a0:6c:05:e3:51:2a: a5:f8:50:7d:b9:58:1e:0c:ec:a5:88:b5:a9:ba:4e:2a:ba:97: 01:5f:80:a5:59:7e:8c:78:17:98:80:52:26:b4:4e:d9:88:34: bc:e1:8f:d2:ee:86:f8:a8:9e:4b:5b:fb:b7:f1:16:b2:da:7a: 86:a5:9f:b9:b2:bf:30:a6:58:58:ae:ad:8d:0b:4e:8e:3f:19: 32:33:a6:0f:58:9d:52:2a:65:cd:33:ce:a2:0e:43:ac:5e:fa: a0:84:08:ad:7c:ae:f4:46:6d:90:6d:5e:39:42:11:99:f4:37: ae:96:b8:37:32:22:2f:54:2e:34:53:1d:e4:90:af:66:89:4d: 0b:24:18:01:32:a9:17:e7:8a:8a:7d:f7:6c:14:b6:38:ef:e6: f6:77:13:a7:8b:16:14:b0:f4:ad:f2:72:eb:42:21:a0:d4:a5: a4:ea:45:19:f5:05:42:e3:dd:39:03:7e:8a:10:12:9d:e2:e1: 55:1a:1c:74:43:0f:a8:0a:e5:57:8e:f3:18:a7:04:79:84:a3: b2:6a:68:5e:c5:f3:e9:0f:9c:f3:f3:79:f3:de:ca:87:8d:88: 0a:a3:04:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE91xFaRky+85Lt5kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NzJmNGEtYjk0OS00MjIzLTkwMzAtZDlmMGUzN2Y4 ZWRkMB4XDTI2MTAxMDIyMDAyNFoXDTI2MTAxMzIyMDAwMFowLzEtMCsGA1UEAxMk YjY5ZGNiNDItMTVjMy00ZGMzLThiY2MtOWExOTY0M2Y2NTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXLcKVV5Fe5XXPpESlp5fSNZ6bj6bvDJcqwF npDXohCRZNOXau6TyBrYOFwkmm0TuHC2ip8jgH5oa5ft4hvXi+MtXPVvLF2uajH5 H4Gq7HAOFaHiMFn3xwSHSyIRssT9PTccx2eB/NLc988osrB+fVvClhBZ9k2xSS2r eIys70/3oIOMvfSOnHO7Kojlu9vvItIZYKRKrFjquf2j7bXe1Qv/E0KAkdQ4zaeM C+nKHJTZx7+UYc6zEJQJmBh3oXWSGgy9R+Z/Q3qpeG3eb/4uihp7NFhm51W/yzc9 eh2NfmmQOhdQyo2kq+/ZTMlmDqcXe8e5d/y4HwGy8G4u1YHFHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEyiKVjYhBdY9r79nOCLYkwmer10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3 MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYwZTM3ZjhlZGQvMjE5NzJmNGEtYjk0OS00 MjIzLTkwMzAtZDlmMGUzN2Y4ZWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjE5NzJmNGEtYjk0OS00MjIzLTkw MzAtZDlmMGUzN2Y4ZWRkLzIxOTcyZjRhLWI5NDktNDIyMy05MDMwLWQ5ZjBlMzdm OGVkZC5jcmwwHwYDVR0jBBgwFoAUmEhNlI2Wb0uiz1xvp4McJFubFcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYw ZTM3ZjhlZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFTcEy72nXxSbjK3aZfVg/ FH+y7sJ4CDyWBPVW4tugbAXjUSql+FB9uVgeDOyliLWpuk4qupcBX4ClWX6MeBeY gFImtE7ZiDS84Y/S7ob4qJ5LW/u38Ray2nqGpZ+5sr8wplhYrq2NC06OPxkyM6YP WJ1SKmXNM86iDkOsXvqghAitfK70Rm2QbV45QhGZ9Deulrg3MiIvVC40Ux3kkK9m iU0LJBgBMqkX54qKffdsFLY47+b2dxOnixYUsPSt8nLrQiGg1KWk6kUZ9QVC4905 A36KEBKd4uFVGhx0Qw+oCuVXjvMYpwR5hKOyamhexfPpD5zz83nz3sqHjYgKowQy -----END CERTIFICATE-----Generated at Sun Oct 11 06:35:40 2026 by rpki-client