$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft File: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft (raw, json) Hash identifier: ieIXBgSI5zPccbvT+q/K3iOJgRvy/78BxFgJInjWrew= Subject key identifier: E8:AD:00:01:86:11:B4:E6:83:DC:5C:48:34:8A:9D:E4:98:E2:10:85 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584B72872ADE47E746F033204060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft Manifest number: 010D0C9F4328584B728422C8F4B1EE7ECA7B0A82 Signing time: Tue 07 Oct 2025 23:02:08 +0000 Manifest this update: Tue 07 Oct 2025 23:02:08 +0000 Manifest next update: Fri 10 Oct 2025 22:00:00 +0000 Files and hashes: 1: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (hash: 0q+0xLacODrOIfHkXqHz9nra1FOYoK/t4WZdGuM3XkU=) 2: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl (hash: v+YsZEjByGnKt3Q1TmkQ81zTH987+Zc7A5whezWv44E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:87:2a:de:47:e7:46:f0:33:20:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Oct 7 23:02:08 2025 GMT Not After : Oct 10 22:00:00 2025 GMT Subject: CN=ec6469f5-136f-4871-ba62-6c10c8b96722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:3c:35:66:12:9d:fd:1b:93:d8:ec:12:31: 8d:7a:1a:06:d0:af:45:8c:f2:29:35:95:62:d7:bb: e2:39:04:6a:13:e5:df:ae:41:b0:04:cc:dd:5a:81: e9:57:fc:3a:ff:ed:28:dc:94:94:57:f3:36:ab:8b: 60:87:14:27:ea:2d:2a:9b:95:b2:9c:93:1d:68:19: ee:7e:f0:12:6e:1e:dc:7a:cd:d3:b7:57:a8:27:fa: 98:1f:c5:bd:cc:2a:82:5d:4d:1c:b4:59:fc:50:9f: c5:07:4c:ba:49:e8:a1:a8:b4:03:e1:8f:c9:ca:7c: 62:5f:18:87:b8:8b:67:99:d7:da:db:fa:7c:9e:65: aa:00:a1:a5:ae:a7:04:2d:56:3f:2b:8a:d2:b1:92: 81:c3:a6:92:12:30:6d:02:74:bd:22:9b:13:f3:b9: 59:1d:c7:0e:94:24:68:64:62:e8:e9:bf:25:7d:47: ff:e6:6b:90:96:64:52:b4:f0:00:a4:98:31:dd:32: a9:c6:cd:55:5d:62:45:51:c0:ef:2e:5b:01:e7:85: d5:aa:8e:38:ba:cc:77:f3:cb:af:f2:73:47:b2:dd: 73:f7:9d:5a:d9:d9:1f:02:0c:89:ff:0f:3b:01:b5: 45:1d:d6:e0:63:cc:f4:dc:e0:f6:1b:de:94:12:09: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:00:01:86:11:B4:E6:83:DC:5C:48:34:8A:9D:E4:98:E2:10:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:12:2a:01:1d:30:bb:12:c1:84:00:28:9a:44:c0:dd:6c:e1: 9e:c3:20:94:33:aa:23:77:a3:67:68:37:59:87:58:25:3e:91: c6:25:d0:8f:3e:4f:09:50:eb:9a:9f:63:2e:b5:23:c4:20:e7: 84:6e:80:c8:22:75:57:3b:05:2b:95:a2:3a:ab:e9:70:68:f7: 9a:8c:2a:2f:cf:96:60:26:43:8d:6b:76:3d:2e:09:b6:75:32: 69:ce:09:51:71:bf:db:4c:85:be:9d:ee:73:a0:55:1e:04:7a: 4a:0b:aa:61:da:91:2f:32:aa:c7:7c:92:bf:75:b8:97:d9:72: 2d:4e:63:2d:e4:2e:15:e3:91:7c:32:ce:e1:8a:19:0d:e9:9b: 49:bc:21:56:c5:ff:33:15:05:ea:74:1a:3c:51:1f:e7:be:7c: 8a:f8:a5:c7:e0:8f:f7:d7:6d:46:af:9e:91:cc:7a:75:b3:33: 4b:21:09:30:51:27:03:82:5c:68:5c:85:79:c5:bb:40:2e:dc: de:b3:1d:b4:29:50:fe:6e:a6:f8:85:11:4a:b6:64:ff:ef:f8: 6b:af:37:76:97:c3:4e:34:b6:d5:56:b2:b4:03:ea:4a:f1:f9: 70:56:ce:15:46:a5:40:2b:85:39:62:22:4c:84:43:4a:87:1f: 7b:73:29:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtyhyreR+dG8DMgQGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI1MTAwNzIzMDIwOFoXDTI1MTAxMDIyMDAwMFowLzEtMCsGA1UEAxMk ZWM2NDY5ZjUtMTM2Zi00ODcxLWJhNjItNmMxMGM4Yjk2NzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CM8NWYSnf0bk9jsEjGNehoG0K9FjPIpNZVi 17viOQRqE+XfrkGwBMzdWoHpV/w6/+0o3JSUV/M2q4tghxQn6i0qm5WynJMdaBnu fvASbh7ces3Tt1eoJ/qYH8W9zCqCXU0ctFn8UJ/FB0y6SeihqLQD4Y/JynxiXxiH uItnmdfa2/p8nmWqAKGlrqcELVY/K4rSsZKBw6aSEjBtAnS9IpsT87lZHccOlCRo ZGLo6b8lfUf/5muQlmRStPAApJgx3TKpxs1VXWJFUcDvLlsB54XVqo44usx388uv 8nNHst1z951a2dkfAgyJ/w87AbVFHdbgY8z03OD2G96UEglwCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOitAAGGEbTmg9xcSDSKneSY4hCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMjFhMjBhZDktYTg0OC00 ZDBkLWExMTktM2RmNWQ2ZGJjYjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPEioBHTC7EsGEACiaRMDd bOGewyCUM6ojd6NnaDdZh1glPpHGJdCPPk8JUOuan2MutSPEIOeEboDIInVXOwUr laI6q+lwaPeajCovz5ZgJkONa3Y9Lgm2dTJpzglRcb/bTIW+ne5zoFUeBHpKC6ph 2pEvMqrHfJK/dbiX2XItTmMt5C4V45F8Ms7hihkN6ZtJvCFWxf8zFQXqdBo8UR/n vnyK+KXH4I/3121Gr56RzHp1szNLIQkwUScDglxoXIV5xbtALtzesx20KVD+bqb4 hRFKtmT/7/hrrzd2l8NONLbVVrK0A+pK8flwVs4VRqVAK4U5YiJMhENKhx97cymW -----END CERTIFICATE-----Generated at Wed Oct 8 19:17:28 2025 by rpki-client