$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft File: d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft (raw, json) Hash identifier: YGoKg0VoYWwC4yFjx3ytkjVdj+v5IsLPkto53guyBfs= Subject key identifier: 68:35:B7:0A:65:D0:58:12:6B:E3:24:3F:AB:6D:2B:2F:94:C2:08:8B Authority key identifier: 4E:09:EB:87:86:7F:A2:A1:AB:9D:04:B6:AA:4D:C3:94:3F:81:71:3A Certificate issuer: /CN=d21fd4e3-ef8e-4280-aa21-7a5abc068db7 Certificate serial: 010D0C9F4328584B3D5D5D5103A32EE1AACB5060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft Manifest number: 010D0C9F43285842627DDA735B0D2F63D6DF522C Signing time: Thu 18 Sep 2025 22:00:03 +0000 Manifest this update: Thu 18 Sep 2025 22:00:03 +0000 Manifest next update: Sun 21 Sep 2025 22:00:00 +0000 Files and hashes: 1: d21fd4e3-ef8e-4280-aa21-7a5abc068db7.crl (hash: mL3EASU2lsMO+cDBL3SYWJEjTOzbn51SEiyz0irGcXE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:5d:5d:51:03:a3:2e:e1:aa:cb:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21fd4e3-ef8e-4280-aa21-7a5abc068db7 Validity Not Before: Sep 18 22:00:03 2025 GMT Not After : Sep 21 22:00:00 2025 GMT Subject: CN=17ef003e-e146-4b41-8a81-3780b33050fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f3:41:1d:9a:8d:c9:bf:db:6c:1f:c1:01:8d: 26:16:c6:74:f7:50:ba:02:33:89:67:b1:5c:d3:b0: 99:27:e0:75:f4:7b:dc:5f:a4:4c:26:aa:f9:e5:11: f7:f7:d1:04:99:38:6c:aa:8d:a6:74:d3:19:f5:b1: d1:b8:b9:3a:14:bd:cf:b7:db:4a:cf:4b:af:22:91: a6:70:6e:41:8f:8c:64:bd:a3:09:40:af:14:84:4b: ab:87:5d:dd:28:d0:81:ca:f0:ba:3e:fe:a2:3d:07: 10:1f:23:b4:1c:db:67:a6:26:d4:0b:db:2d:b3:f3: fd:e5:d5:31:d6:2a:03:dc:43:34:45:df:da:2f:ed: c7:2a:f7:e5:01:37:51:f2:ec:70:e7:02:1f:88:ac: 45:92:a0:6c:26:fd:f7:28:8d:c8:61:c6:e1:99:eb: 97:fb:5f:a9:17:7b:70:2e:65:57:2d:31:6a:c2:a8: 6b:65:67:2d:60:9d:5c:1c:e6:76:36:46:1b:c2:2d: be:81:14:2d:7e:ad:14:cc:fa:6d:90:9e:0b:b6:38: 73:12:dc:e5:79:79:8b:d9:2a:18:95:39:1f:cd:c9: 1f:51:5c:42:86:c2:a8:ac:01:83:8a:67:ce:4a:4d: 76:95:99:e6:2c:8f:db:6e:84:ad:5b:13:56:9d:70: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:35:B7:0A:65:D0:58:12:6B:E3:24:3F:AB:6D:2B:2F:94:C2:08:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.crl X509v3 Authority Key Identifier: keyid:4E:09:EB:87:86:7F:A2:A1:AB:9D:04:B6:AA:4D:C3:94:3F:81:71:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21fd4e3-ef8e-4280-aa21-7a5abc068db7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:be:65:15:ca:1f:5b:a0:ec:d4:5c:4c:0c:0a:7c:9d:0e:af: 54:12:95:f0:50:88:06:8b:5b:9f:3a:b4:4c:51:9c:d1:43:fb: 11:ed:9e:c3:39:30:95:2c:21:d6:27:3b:a3:f8:69:7b:3c:ef: ef:d4:4a:b3:0e:67:ac:1a:7b:b8:03:5e:47:4e:3a:e3:ee:f9: 03:00:e7:80:d1:dd:3f:e0:d4:a4:17:86:cc:22:38:a1:33:15: 33:1e:71:9c:6e:3c:e6:cb:45:19:bd:7a:1d:92:67:63:df:a8: b8:3e:78:25:f2:32:83:76:60:c8:24:ed:37:19:5f:6d:f6:e9: 2a:5d:8f:20:8f:8b:d7:47:b4:fd:20:62:b2:2e:c2:b8:6e:09: 4b:5c:f6:be:42:ca:21:45:8a:af:65:ee:47:91:3f:fc:4b:06: e5:e4:c6:30:33:5e:4e:a3:a2:d4:4d:e2:aa:2b:d3:b2:1a:cc: 48:6b:22:c1:a2:fc:0e:7f:55:8f:3e:ca:7c:4f:2f:f5:ec:7a: 30:81:eb:d5:f9:13:5c:f2:94:e5:a7:61:0a:0f:d8:aa:20:f5: 7e:df:11:b2:c2:e7:c7:47:f7:b3:2e:c2:63:8c:f9:29:09:ae: 0a:ed:24:cb:71:61:c8:be:40:26:a7:75:06:19:8c:aa:ed:0b: 52:34:e9:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs9XV1RA6Mu4arLUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxZmQ0ZTMtZWY4ZS00MjgwLWFhMjEtN2E1YWJjMDY4 ZGI3MB4XDTI1MDkxODIyMDAwM1oXDTI1MDkyMTIyMDAwMFowLzEtMCsGA1UEAxMk MTdlZjAwM2UtZTE0Ni00YjQxLThhODEtMzc4MGIzMzA1MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfNBHZqNyb/bbB/BAY0mFsZ091C6AjOJZ7Fc 07CZJ+B19HvcX6RMJqr55RH399EEmThsqo2mdNMZ9bHRuLk6FL3Pt9tKz0uvIpGm cG5Bj4xkvaMJQK8UhEurh13dKNCByvC6Pv6iPQcQHyO0HNtnpibUC9sts/P95dUx 1ioD3EM0Rd/aL+3HKvflATdR8uxw5wIfiKxFkqBsJv33KI3IYcbhmeuX+1+pF3tw LmVXLTFqwqhrZWctYJ1cHOZ2NkYbwi2+gRQtfq0UzPptkJ4LtjhzEtzleXmL2SoY lTkfzckfUVxChsKorAGDimfOSk12lZnmLI/bboStWxNWnXCU1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGg1twpl0FgSa+MkP6ttKy+UwgiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMjFm ZDRlMy1lZjhlLTQyODAtYWEyMS03YTVhYmMwNjhkYjcvZDIxZmQ0ZTMtZWY4ZS00 MjgwLWFhMjEtN2E1YWJjMDY4ZGI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDIxZmQ0ZTMtZWY4ZS00MjgwLWFh MjEtN2E1YWJjMDY4ZGI3L2QyMWZkNGUzLWVmOGUtNDI4MC1hYTIxLTdhNWFiYzA2 OGRiNy5jcmwwHwYDVR0jBBgwFoAUTgnrh4Z/oqGrnQS2qk3DlD+BcTowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMjFmZDRlMy1lZjhlLTQyODAtYWEyMS03YTVh YmMwNjhkYjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSvmUVyh9boOzUXEwMCnyd Dq9UEpXwUIgGi1ufOrRMUZzRQ/sR7Z7DOTCVLCHWJzuj+Gl7PO/v1EqzDmesGnu4 A15HTjrj7vkDAOeA0d0/4NSkF4bMIjihMxUzHnGcbjzmy0UZvXodkmdj36i4Pngl 8jKDdmDIJO03GV9t9ukqXY8gj4vXR7T9IGKyLsK4bglLXPa+QsohRYqvZe5HkT/8 Swbl5MYwM15Oo6LUTeKqK9OyGsxIayLBovwOf1WPPsp8Ty/17HowgevV+RNc8pTl p2EKD9iqIPV+3xGywufHR/ezLsJjjPkpCa4K7STLcWHIvkAmp3UGGYyq7QtSNOmi -----END CERTIFICATE-----Generated at Fri Sep 19 19:39:52 2025 by rpki-client