$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft File: 21972f4a-b949-4223-9030-d9f0e37f8edd.mft (raw, json) Hash identifier: U31xHqL7KZKcY+SxpbJfqpfdL5jA6Q2ty7/nYQWU/aI= Subject key identifier: 2F:27:21:CA:7A:D7:CE:25:3D:D6:C3:F7:C7:60:3F:D4:8C:54:91:30 Authority key identifier: 98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 Certificate issuer: /CN=21972f4a-b949-4223-9030-d9f0e37f8edd Certificate serial: 010D0C9F4328584EE763633D74519BE1EFAD0B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft Manifest number: 010D0C9F4328584AAF164585E46E2B63713FC383 Signing time: Thu 20 Aug 2026 22:00:22 +0000 Manifest this update: Thu 20 Aug 2026 22:00:22 +0000 Manifest next update: Sat 22 Aug 2026 22:00:00 +0000 Files and hashes: 1: 21972f4a-b949-4223-9030-d9f0e37f8edd.crl (hash: BPVGV/5oE22uSWEVkOt+dWV0lkjtiOOwlrSVymqzMm8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:63:63:3d:74:51:9b:e1:ef:ad:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21972f4a-b949-4223-9030-d9f0e37f8edd Validity Not Before: Aug 20 22:00:22 2026 GMT Not After : Aug 22 22:00:00 2026 GMT Subject: CN=51cc72e3-5dde-4b17-aed5-d831f49d35bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7f:b3:4f:d1:00:7b:9e:a9:4e:39:e1:58:53: 12:74:6e:93:18:79:c4:28:d2:42:f7:9b:fb:a6:29: a4:36:2c:ec:ab:fd:02:63:7d:d0:95:24:63:35:7d: 89:ff:8b:d3:49:b1:7a:75:b6:11:a5:55:b5:3d:eb: 08:02:52:f6:4b:c6:4f:69:99:02:98:97:9d:67:8f: 33:f4:ce:40:4e:b5:57:0a:d1:1f:17:56:da:19:92: 69:0b:04:22:53:6b:c9:e7:bf:b9:c3:24:6a:0a:23: 22:3e:93:d7:9c:a4:8f:64:5d:9e:2a:8b:ee:c8:c2: f6:b0:e0:c7:65:c1:ed:21:60:18:ec:08:6c:21:92: 53:29:3c:3d:8d:41:b8:e9:94:61:44:52:22:70:b1: 06:30:7e:53:d3:08:fb:44:ef:d7:eb:f9:00:1e:35: 95:64:a4:5c:3a:d4:27:65:4e:c8:27:ec:ef:11:53: dd:dc:b8:64:8d:d1:33:e0:27:20:8b:19:e8:d8:73: 50:9d:df:f1:6b:d7:a9:83:2e:75:11:db:0e:51:62: d4:90:91:3d:5d:44:20:e6:2f:47:92:07:b4:83:07: da:55:b7:8f:67:a2:a3:aa:2d:f4:d2:0f:0f:36:c5: bb:56:e9:5d:38:73:8f:28:cc:a4:7e:55:3f:47:f2: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:27:21:CA:7A:D7:CE:25:3D:D6:C3:F7:C7:60:3F:D4:8C:54:91:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl X509v3 Authority Key Identifier: keyid:98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bd:18:79:b8:cb:1a:71:fe:39:25:58:8f:f7:f2:90:3c:29: 7b:ee:8a:6f:54:eb:e0:c7:b7:03:c5:aa:0b:c1:1f:82:12:43: d0:7a:75:27:62:17:47:78:3f:2c:73:14:0e:2c:88:2f:7a:65: 58:12:6e:35:ee:dd:56:58:9d:f4:a8:af:01:68:d9:d2:83:c4: 65:f6:16:3d:46:22:9a:24:1a:9a:4c:ac:8e:21:a3:5a:ca:1e: f9:98:9b:e6:9b:7b:b1:99:a5:57:e3:7a:9b:12:d7:c7:f8:ce: d7:1a:53:16:3b:f5:4a:7b:7f:0c:17:0b:14:58:32:84:4b:f7: 45:de:b8:29:9a:20:5c:39:ae:9c:bb:e2:21:59:78:69:bc:f8: f3:89:92:64:d4:90:f2:34:70:9f:a8:dc:56:39:e5:ce:da:97: 99:16:bb:36:a3:8b:72:4d:62:df:9e:10:35:f2:2f:43:a5:aa: a4:e6:2b:d3:df:c9:c7:d6:5b:62:1a:05:f9:a0:cc:0a:78:fa: ea:ed:9e:e0:2a:e6:e9:8a:2f:bb:e9:ed:fb:dc:74:9d:42:d5: 0b:1e:8d:49:70:84:21:0c:57:20:a7:b5:22:18:4b:79:22:78: 46:12:12:3d:88:32:bb:86:f5:c0:e5:53:34:5c:4f:2a:c3:da: 25:d5:4c:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7nY2M9dFGb4e+tC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NzJmNGEtYjk0OS00MjIzLTkwMzAtZDlmMGUzN2Y4 ZWRkMB4XDTI2MDgyMDIyMDAyMloXDTI2MDgyMjIyMDAwMFowLzEtMCsGA1UEAxMk NTFjYzcyZTMtNWRkZS00YjE3LWFlZDUtZDgzMWY0OWQzNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX+zT9EAe56pTjnhWFMSdG6TGHnEKNJC95v7 pimkNizsq/0CY33QlSRjNX2J/4vTSbF6dbYRpVW1PesIAlL2S8ZPaZkCmJedZ48z 9M5ATrVXCtEfF1baGZJpCwQiU2vJ57+5wyRqCiMiPpPXnKSPZF2eKovuyML2sODH ZcHtIWAY7AhsIZJTKTw9jUG46ZRhRFIicLEGMH5T0wj7RO/X6/kAHjWVZKRcOtQn ZU7IJ+zvEVPd3LhkjdEz4Ccgixno2HNQnd/xa9epgy51EdsOUWLUkJE9XUQg5i9H kge0gwfaVbePZ6Kjqi300g8PNsW7VuldOHOPKMykflU/R/Is3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC8nIcp6184lPdbD98dgP9SMVJEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3 MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYwZTM3ZjhlZGQvMjE5NzJmNGEtYjk0OS00 MjIzLTkwMzAtZDlmMGUzN2Y4ZWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjE5NzJmNGEtYjk0OS00MjIzLTkw MzAtZDlmMGUzN2Y4ZWRkLzIxOTcyZjRhLWI5NDktNDIyMy05MDMwLWQ5ZjBlMzdm OGVkZC5jcmwwHwYDVR0jBBgwFoAUmEhNlI2Wb0uiz1xvp4McJFubFcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYw ZTM3ZjhlZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMvRh5uMsacf45JViP9/KQ PCl77opvVOvgx7cDxaoLwR+CEkPQenUnYhdHeD8scxQOLIgvemVYEm417t1WWJ30 qK8BaNnSg8Rl9hY9RiKaJBqaTKyOIaNayh75mJvmm3uxmaVX43qbEtfH+M7XGlMW O/VKe38MFwsUWDKES/dF3rgpmiBcOa6cu+IhWXhpvPjziZJk1JDyNHCfqNxWOeXO 2peZFrs2o4tyTWLfnhA18i9Dpaqk5ivT38nH1ltiGgX5oMwKePrq7Z7gKubpii+7 6e373HSdQtULHo1JcIQhDFcgp7UiGEt5InhGEhI9iDK7hvXA5VM0XE8qw9ol1Uwd -----END CERTIFICATE-----Generated at Fri Aug 21 00:19:43 2026 by rpki-client