$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft File: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft (raw, json) Hash identifier: HjtJagUWFyNnlAWSzltMskgF5MNvVYtbhOWN7jFFnSU= Subject key identifier: DC:DB:1E:35:8A:8E:C6:47:B6:B9:E9:A0:25:95:A5:6F:34:EA:65:A8 Authority key identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Certificate issuer: /CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Certificate serial: 010D0C9F4328584B748067AA9B50EE0E660B7C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft Manifest number: 010D0C9F432858440CF6C89CD18533AD24A47727 Signing time: Wed 08 Oct 2025 16:00:08 +0000 Manifest this update: Wed 08 Oct 2025 16:00:08 +0000 Manifest next update: Fri 10 Oct 2025 16:00:00 +0000 Files and hashes: 1: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl (hash: pd/0DB4ALTrFAt8s9Xzq9oCH+mTtvNFezjYWHzbFl8Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:80:67:aa:9b:50:ee:0e:66:0b:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Validity Not Before: Oct 8 16:00:08 2025 GMT Not After : Oct 10 16:00:00 2025 GMT Subject: CN=b89b2049-83ed-41e7-bc61-b3ddc842839d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:87:6b:49:b7:20:d9:29:b6:9a:b3:de:ea: 3c:0b:97:eb:4c:7a:af:f9:6d:55:0a:5f:9d:db:53: 13:62:de:04:c1:41:7d:ed:cd:67:d8:73:60:93:02: 2a:bc:da:6b:8f:b2:54:86:92:40:9e:3b:1b:eb:3f: 71:83:e4:57:ba:84:47:93:da:5c:5a:b2:83:00:65: 6b:86:00:74:22:b9:3c:de:47:e4:96:5e:ce:78:d8: cd:08:67:2b:5d:b0:54:ea:74:2e:62:de:95:cd:56: 6e:8c:70:b7:f6:b4:59:6d:ec:f6:4d:bc:35:cc:06: 51:ba:02:5c:7c:9d:0e:46:7a:ba:41:e3:13:be:16: f9:98:f3:5f:cb:25:45:85:4c:1d:c7:d4:a8:8e:41: 9d:cf:6d:b9:71:d9:7b:43:e7:c4:70:a8:69:73:ce: 85:bf:2b:10:e8:7c:b6:11:e9:bc:3c:01:c8:5f:bb: 1b:5f:1d:ee:ba:3e:fd:d2:db:73:70:14:7d:12:41: 45:e4:3b:77:a5:c6:d0:6d:eb:d7:54:12:8d:a7:da: c9:bf:35:42:00:41:65:d5:1b:52:fb:94:95:c3:67: 43:72:c8:2c:27:24:11:ca:ac:4d:d7:cf:ed:16:0e: d2:5a:98:bd:93:fb:62:06:9b:d3:51:eb:17:55:b5: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:1E:35:8A:8E:C6:47:B6:B9:E9:A0:25:95:A5:6F:34:EA:65:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl X509v3 Authority Key Identifier: keyid:6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:57:6a:55:de:dc:ab:fa:67:66:28:3b:d6:b6:ae:35:2d:1b: 17:57:63:a6:49:ac:f4:11:bf:92:ca:1a:d6:4e:f5:71:ec:3f: be:5a:bf:54:13:b1:f3:fd:c7:7e:06:02:c8:48:ef:b9:88:50: 25:05:fc:a8:9f:db:10:dc:6f:9a:0b:a7:18:78:d4:41:c5:03: 73:7a:2f:a4:d3:39:d1:1b:16:ae:8d:b0:6a:4f:7a:f5:26:d0: cb:ff:e4:3b:1b:c3:df:a5:90:e3:6e:ae:8b:a8:86:76:da:0c: 88:54:85:5c:38:14:a1:42:c5:04:3b:d8:f5:ad:dd:63:19:3d: d6:31:b5:23:1d:fe:7c:0f:81:a6:e8:89:4f:4a:85:d0:7a:a2: 1e:2e:d2:b6:67:74:65:92:2c:c2:8d:14:b0:60:10:85:aa:c7: 2a:df:be:07:a9:a0:ba:7e:53:57:ee:ee:14:0f:84:56:06:be: f9:51:3d:69:73:43:5d:9a:9f:7b:17:ac:ea:b6:fe:93:50:8c: 70:65:1d:eb:b9:e6:70:94:0e:f6:37:6f:08:94:cc:93:92:3b: de:f5:51:3c:b3:39:45:49:fc:be:2d:af:ad:0d:37:63:8f:a7: 68:dc:ae:b6:83:3b:c4:a8:05:b1:5e:8b:5d:73:11:1e:da:ea: 6b:59:58:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEt0gGeqm1DuDmYLfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiZDBhN2QtNmQ4OS00MzhmLWJhOGEtOGNlMTYxZTk3 ZDM5MB4XDTI1MTAwODE2MDAwOFoXDTI1MTAxMDE2MDAwMFowLzEtMCsGA1UEAxMk Yjg5YjIwNDktODNlZC00MWU3LWJjNjEtYjNkZGM4NDI4MzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4uHa0m3INkptpqz3uo8C5frTHqv+W1VCl+d 21MTYt4EwUF97c1n2HNgkwIqvNprj7JUhpJAnjsb6z9xg+RXuoRHk9pcWrKDAGVr hgB0Irk83kfkll7OeNjNCGcrXbBU6nQuYt6VzVZujHC39rRZbez2Tbw1zAZRugJc fJ0ORnq6QeMTvhb5mPNfyyVFhUwdx9SojkGdz225cdl7Q+fEcKhpc86FvysQ6Hy2 Eem8PAHIX7sbXx3uuj790ttzcBR9EkFF5Dt3pcbQbevXVBKNp9rJvzVCAEFl1RtS +5SVw2dDcsgsJyQRyqxN18/tFg7SWpi9k/tiBpvTUesXVbUnzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNzbHjWKjsZHtrnpoCWVpW806mWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWJk MGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFlOTdkMzkvMjFiZDBhN2QtNmQ4OS00 MzhmLWJhOGEtOGNlMTYxZTk3ZDM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFiZDBhN2QtNmQ4OS00MzhmLWJh OGEtOGNlMTYxZTk3ZDM5LzIxYmQwYTdkLTZkODktNDM4Zi1iYThhLThjZTE2MWU5 N2QzOS5jcmwwHwYDVR0jBBgwFoAUb4X0x6sK7IGi1PdNFAWg9MFXeYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2Ux NjFlOTdkMzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvV2pV3tyr+mdmKDvWtq41 LRsXV2OmSaz0Eb+SyhrWTvVx7D++Wr9UE7Hz/cd+BgLISO+5iFAlBfyon9sQ3G+a C6cYeNRBxQNzei+k0znRGxaujbBqT3r1JtDL/+Q7G8PfpZDjbq6LqIZ22gyIVIVc OBShQsUEO9j1rd1jGT3WMbUjHf58D4Gm6IlPSoXQeqIeLtK2Z3RlkizCjRSwYBCF qscq374HqaC6flNX7u4UD4RWBr75UT1pc0Ndmp97F6zqtv6TUIxwZR3rueZwlA72 N28IlMyTkjve9VE8szlFSfy+La+tDTdjj6do3K62gzvEqAWxXotdcxEe2uprWVjD -----END CERTIFICATE-----Generated at Wed Oct 8 17:29:00 2025 by rpki-client