$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft File: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft (raw, json) Hash identifier: xwbBxyZ/Vgeqiv2pdweR/McxoDrZnKRocLYbe/vCmno= Subject key identifier: 2D:5E:EA:7E:8C:32:3F:A4:F5:04:15:26:8E:ED:E8:00:D0:D6:05:57 Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F4328584B71F1459B8BA56752E1375940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft Manifest number: 010D0C9F432858438A0A161212CB83FF1869C5D6 Signing time: Tue 07 Oct 2025 18:00:08 +0000 Manifest this update: Tue 07 Oct 2025 18:00:08 +0000 Manifest next update: Thu 09 Oct 2025 18:00:00 +0000 Files and hashes: 1: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl (hash: Auu/khq94wcpdtY3RAGQbmhhBPjn6E4r+JVKCYCA65w=) 2: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (hash: GQsXCetoiPUIyEN285XdrTseNxbqh2OGN0+tJv7WOXs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:f1:45:9b:8b:a5:67:52:e1:37:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: Oct 7 18:00:08 2025 GMT Not After : Oct 9 18:00:00 2025 GMT Subject: CN=58cd741e-f480-4928-8cfb-dc78297b3ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:cc:58:d9:fb:fe:88:98:20:23:6b:12:a2: 62:a9:d5:63:f1:17:3d:ce:12:1f:2c:a8:14:8a:df: 9a:77:f3:c0:4e:42:b5:ed:d7:3a:ab:c9:71:4e:0c: 72:44:ec:2d:96:41:15:af:70:06:78:80:1c:dd:39: 2b:cd:27:1c:2e:3b:a0:98:8b:05:69:64:9c:d2:ab: dd:79:d5:5e:b3:ef:0d:64:88:b3:7f:ee:e3:30:f0: c8:1b:12:fe:d8:66:3b:48:73:ef:11:5b:a4:d7:22: c1:72:11:b0:c6:a2:ea:69:e0:34:7a:24:7c:d0:8c: 08:79:df:83:56:3c:8e:3f:60:fb:e7:76:66:f3:4f: dd:fc:53:4c:e5:fb:fd:fc:26:5f:a2:1a:45:b3:c5: c6:9f:e3:ec:ca:51:f8:36:8b:96:97:c3:fe:77:4c: e4:c8:d9:ed:45:f4:d4:31:57:c5:67:ba:20:09:ae: c5:16:76:32:00:76:18:13:6a:dc:1f:0f:fc:69:93: e8:4f:9c:1d:d4:b9:cd:00:7d:2c:dd:ec:9f:55:e6: a4:c4:5c:93:54:84:f3:f5:42:d3:ed:b5:1e:2d:df: 78:96:29:26:42:3c:7c:02:40:41:b0:93:ce:34:f4: 60:07:4d:3a:57:73:25:8c:c4:75:a0:90:3e:2e:ad: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5E:EA:7E:8C:32:3F:A4:F5:04:15:26:8E:ED:E8:00:D0:D6:05:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:10:bc:80:97:45:1a:c0:63:78:65:a7:06:6d:ec:6e:41:82: 76:22:e7:2b:64:c4:f8:95:96:5e:1e:0b:e6:51:bc:74:ca:79: 30:22:30:f5:38:8a:62:14:68:11:c5:02:2b:fb:9d:64:4a:01: 3f:72:ce:26:51:a0:77:13:3b:a6:91:ed:35:73:10:d5:d3:2d: 96:d8:6a:fa:cb:a3:63:35:3f:8f:6e:0e:6c:73:63:0f:ca:3d: f1:48:a5:4a:06:68:e1:05:48:3d:e9:64:21:96:3a:90:d7:7c: 71:98:31:11:ca:87:99:90:7c:60:7e:b8:40:2d:d1:a8:f0:c0: d5:55:f6:f3:4e:04:cb:77:0f:cf:4a:67:48:01:0b:a7:9b:75: a4:a0:31:e1:c5:21:98:df:97:c5:ca:b5:04:25:c8:87:ca:44: 8f:91:b3:db:da:c8:f7:6a:f2:ed:84:4b:47:5f:ff:e4:a1:de: fd:3b:42:0a:cc:11:77:b3:6c:ad:c2:f1:56:3a:02:e4:33:12: 2d:87:ea:27:01:54:fa:9c:7e:b0:39:e7:66:e5:b3:45:ff:b6: 7d:21:4a:d7:e3:cc:98:ae:b9:35:a9:02:c7:37:8d:c7:1c:b6: 6f:8a:96:bd:4f:bf:fe:2b:11:0d:2f:4e:ce:9c:0e:b1:7f:59: 89:53:46:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtx8UWbi6VnUuE3WUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI1MTAwNzE4MDAwOFoXDTI1MTAwOTE4MDAwMFowLzEtMCsGA1UEAxMk NThjZDc0MWUtZjQ4MC00OTI4LThjZmItZGM3ODI5N2IzZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLbMWNn7/oiYICNrEqJiqdVj8Rc9zhIfLKgU it+ad/PATkK17dc6q8lxTgxyROwtlkEVr3AGeIAc3TkrzSccLjugmIsFaWSc0qvd edVes+8NZIizf+7jMPDIGxL+2GY7SHPvEVuk1yLBchGwxqLqaeA0eiR80IwIed+D VjyOP2D753Zm80/d/FNM5fv9/CZfohpFs8XGn+PsylH4NouWl8P+d0zkyNntRfTU MVfFZ7ogCa7FFnYyAHYYE2rcHw/8aZPoT5wd1LnNAH0s3eyfVeakxFyTVITz9ULT 7bUeLd94likmQjx8AkBBsJPONPRgB006V3MljMR1oJA+Lq2kuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC1e6n6MMj+k9QQVJo7t6ADQ1gVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvMjFhMGUwMzYtZTRiYi00 YWJmLThlZGUtOGFkOWEyMTNmOTFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvELyAl0UawGN4ZacGbexu QYJ2IucrZMT4lZZeHgvmUbx0ynkwIjD1OIpiFGgRxQIr+51kSgE/cs4mUaB3Ezum ke01cxDV0y2W2Gr6y6NjNT+Pbg5sc2MPyj3xSKVKBmjhBUg96WQhljqQ13xxmDER yoeZkHxgfrhALdGo8MDVVfbzTgTLdw/PSmdIAQunm3WkoDHhxSGY35fFyrUEJciH ykSPkbPb2sj3avLthEtHX//kod79O0IKzBF3s2ytwvFWOgLkMxIth+onAVT6nH6w Oedm5bNF/7Z9IUrX48yYrrk1qQLHN43HHLZvipa9T7/+KxENL07OnA6xf1mJU0ay -----END CERTIFICATE-----Generated at Wed Oct 8 17:28:24 2025 by rpki-client