$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft File: 21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft (raw, json) Hash identifier: QGWPhnAJOHHQJYETmEnzkBBOf6enzMYwJkYBxJ/iJu0= Subject key identifier: 38:6F:5D:0C:81:A7:5F:9D:36:95:43:07:42:06:E2:AE:EF:EC:E3:72 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F4328584A76742B0DBB399319813173C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft Manifest number: 010D0C9F43285843D25F5A1DE52D2063BC2ACBF7 Signing time: Wed 09 Jul 2025 16:00:08 +0000 Manifest this update: Wed 09 Jul 2025 16:00:08 +0000 Manifest next update: Fri 11 Jul 2025 16:00:00 +0000 Files and hashes: 1: 21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl (hash: eJiK/ezXYdQWookwGdD0UqEMOrG8V5cRRkIwxEtrQW8=) 2: 245081f2-effd-35ab-aee8-d10c19f48000.roa (hash: v8kWgQDH4fmsIwgUPw/pPJWkF1Ww0ex0qSB58f73LVk=) 3: 757c630c-1704-3fb8-b8aa-a6f536633ed2.roa (hash: xtp/0nMRXzrmdX9RsKpRsh/p9H9wi1RQs9Ejm4yNq4o=) 4: 81a2323d-f9d4-3b36-9d0b-0baf160211f4.roa (hash: +IDg2PeJKwBEf4zGd0ayfhFRotpBrGilY1qXTIny7bQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:74:2b:0d:bb:39:93:19:81:31:73:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Jul 9 16:00:08 2025 GMT Not After : Jul 11 16:00:00 2025 GMT Subject: CN=e724cb40-7ec7-4bb5-aeeb-d7128f3ac5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:7b:7c:10:af:01:27:8c:ec:ff:1e:40:79: 08:02:1a:04:48:02:df:e5:ae:fc:d3:c1:fc:c0:88: 43:b7:72:8f:a7:86:69:01:28:35:20:c4:bc:0f:5a: fc:10:69:27:b1:30:c9:8a:65:cd:38:9f:fa:16:40: 25:82:bf:f4:e6:d4:21:f0:57:9b:c1:9b:c2:42:f3: f4:e3:1e:1e:c7:df:ed:34:65:82:01:b8:1f:6a:c2: 36:7d:be:77:f1:c8:81:96:4d:3a:0b:00:27:b7:22: 48:b0:73:67:39:ad:f2:4d:a1:2a:36:35:b0:65:e3: e8:1b:3d:fe:05:db:d5:c9:1a:26:1d:bb:fd:20:6e: eb:1f:3b:98:17:7c:1e:f9:55:5c:4e:b3:6a:e0:26: bc:14:11:51:17:f0:00:bf:9d:60:8d:95:c7:52:eb: 84:50:8a:6c:98:99:cb:71:ff:0b:d5:7e:7c:3f:7f: ba:a1:e8:93:fc:dd:33:25:82:83:71:04:19:e5:f4: e1:fa:4a:7c:ae:bc:fb:2c:e8:9c:4b:1f:8b:02:4d: a9:4b:2f:62:cb:81:0d:c2:a7:63:7f:43:fc:ec:ed: 3f:d5:c5:33:a3:ce:bf:54:bc:ec:e3:ad:55:2c:48: 17:75:10:91:34:02:03:3f:8e:98:a4:7b:d0:19:12: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6F:5D:0C:81:A7:5F:9D:36:95:43:07:42:06:E2:AE:EF:EC:E3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:42:bf:b6:e4:b3:0c:68:9c:a3:fa:03:e2:41:29:5a:0d:fe: bb:02:04:fe:17:d8:76:a6:33:72:02:92:c3:1a:f1:2a:b7:3e: e5:2d:f9:a9:5b:02:a5:ed:f8:9d:e6:f0:34:02:a8:71:90:ae: 1a:8b:14:1b:06:47:76:a6:fe:14:27:8e:d3:7d:24:01:ba:a6: 53:1c:1e:09:24:77:08:91:ce:a2:15:d0:27:3b:14:64:7c:be: 6b:2a:38:f6:e8:2d:19:38:d6:23:08:b4:67:b6:50:39:5d:40: cb:37:b7:d3:a6:69:d8:70:0b:91:6a:2d:d4:16:00:e7:b3:2a: 68:9f:be:1f:a8:07:d8:c0:cf:0a:97:e8:45:6a:39:9e:23:bd: 89:10:b1:a8:b0:44:76:10:c3:34:0a:69:83:6f:76:20:99:48: c7:5b:a0:a7:d6:f3:29:00:5b:f5:29:53:bf:21:8e:bb:ab:5b: c1:b1:48:f2:a4:5d:5c:01:4c:80:e7:f6:f6:de:4d:c6:06:7c: b7:3b:79:41:29:de:5e:96:59:a4:0d:25:12:c5:21:bd:ef:a9: 2b:27:8e:32:ff:63:50:12:a1:c0:94:09:34:e4:23:06:c5:2d: 64:d1:35:f9:8e:15:3b:78:bb:7f:61:af:b6:ba:77:17:75:b7: 42:8f:6a:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2dCsNuzmTGYExc8YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI1MDcwOTE2MDAwOFoXDTI1MDcxMTE2MDAwMFowLzEtMCsGA1UEAxMk ZTcyNGNiNDAtN2VjNy00YmI1LWFlZWItZDcxMjhmM2FjNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN97fBCvASeM7P8eQHkIAhoESALf5a7808H8 wIhDt3KPp4ZpASg1IMS8D1r8EGknsTDJimXNOJ/6FkAlgr/05tQh8FebwZvCQvP0 4x4ex9/tNGWCAbgfasI2fb538ciBlk06CwAntyJIsHNnOa3yTaEqNjWwZePoGz3+ BdvVyRomHbv9IG7rHzuYF3we+VVcTrNq4Ca8FBFRF/AAv51gjZXHUuuEUIpsmJnL cf8L1X58P3+6oeiT/N0zJYKDcQQZ5fTh+kp8rrz7LOicSx+LAk2pSy9iy4ENwqdj f0P87O0/1cUzo86/VLzs461VLEgXdRCRNAIDP46YpHvQGRK+2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDhvXQyBp1+dNpVDB0IG4q7v7ONyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvMjFlMDczMGQtNjVkMC00 YTdjLTk3MTctYWRmNDAxZDNlNWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCvQr+25LMMaJyj+gPiQSla Df67AgT+F9h2pjNyApLDGvEqtz7lLfmpWwKl7fid5vA0AqhxkK4aixQbBkd2pv4U J47TfSQBuqZTHB4JJHcIkc6iFdAnOxRkfL5rKjj26C0ZONYjCLRntlA5XUDLN7fT pmnYcAuRai3UFgDnsypon74fqAfYwM8Kl+hFajmeI72JELGosER2EMM0CmmDb3Yg mUjHW6Cn1vMpAFv1KVO/IY67q1vBsUjypF1cAUyA5/b23k3GBny3O3lBKd5ellmk DSUSxSG976krJ44y/2NQEqHAlAk05CMGxS1k0TX5jhU7eLt/Ya+2uncXdbdCj2qw -----END CERTIFICATE-----Generated at Wed Jul 9 19:45:01 2025 by rpki-client