$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft File: 21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft (raw, json) Hash identifier: 22HMNBI6MwEz6LLj+7K3czAcHL5UYAmozItS9pFyb1o= Subject key identifier: 78:3A:B7:36:A9:D9:C5:F7:CB:8E:FA:7D:D2:A0:D8:1E:BD:0B:F3:4B Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584BAD2687AEDF44A9EECAF65D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft Manifest number: 010D0C9F43285849D82F82E2AB1B69D3282B5EB4 Signing time: Tue 28 Oct 2025 23:00:08 +0000 Manifest this update: Tue 28 Oct 2025 23:00:08 +0000 Manifest next update: Fri 31 Oct 2025 23:00:00 +0000 Files and hashes: 1: 21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl (hash: DWZhd6+SDZpAgwq/Ep2u6TKJjPD/zcG7f0vIbhOp7RA=) 2: 268cad49-8fe0-3114-93b6-1669c6777057.roa (hash: sb1nQ035scQ2ZkiBhmKEQJ+HK6yaE0AhKH3wm10iY9E=) 3: 2eb97f2f-5704-3f2a-a6fc-34b5c3ecaafd.roa (hash: vgKMcbwc7xptmDE0NLcVG0XlwvsRw859dYL2EpCKoE8=) 4: 35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (hash: j3IdCjH38RHGg1L7wqJOkXGixuWVLCEnXM9iX1/hKFs=) 5: d9d2edf2-a2b8-340a-871f-8915988ad447.roa (hash: /LL/mTy/nIufMFYmm3AxYNcuajsaXtsV7OcJOUw3nRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:26:87:ae:df:44:a9:ee:ca:f6:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Oct 28 23:00:08 2025 GMT Not After : Oct 31 23:00:00 2025 GMT Subject: CN=6d2a0ad5-4c42-4ea9-a4d6-090c72819c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:ca:8b:18:bf:2d:10:ad:02:fd:00:fc:13: 55:77:95:db:ca:8b:70:bd:18:fd:5e:80:5a:04:27: 64:67:a7:df:27:78:1f:78:d2:58:c3:05:e9:7a:25: 16:a9:dc:86:18:6b:15:31:89:d3:3d:39:0c:f9:75: 42:da:c4:37:50:01:e2:aa:44:48:95:1b:cb:09:47: b5:4b:7c:bb:a8:71:53:e1:57:32:9e:af:33:16:e0: 05:53:69:f2:5f:30:5b:ed:61:16:96:8b:8b:e9:01: f6:eb:7c:a2:b8:24:41:df:dc:1c:67:4f:d8:06:a8: 89:0b:ae:79:a0:98:6e:e4:d0:49:62:46:3d:31:35: 8f:a5:5b:df:23:62:05:cd:36:17:d6:13:33:92:c4: 84:27:9a:e9:5e:1a:20:9a:89:58:0a:9b:d9:39:58: a2:e4:cd:3d:fd:61:87:c5:25:6a:68:bb:a1:c5:7c: 65:a2:a5:33:88:82:14:6a:54:0c:26:b3:ee:94:dc: 48:39:32:37:7f:fe:e8:3a:0c:a2:da:09:49:9e:ea: e5:7e:7b:9f:bd:98:ff:de:80:78:ea:fe:d6:4e:6f: a6:df:53:99:bf:94:0b:16:fb:61:8e:47:49:e5:cb: f4:ff:b9:6a:e5:14:af:bd:9c:76:d1:12:a1:08:3b: da:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3A:B7:36:A9:D9:C5:F7:CB:8E:FA:7D:D2:A0:D8:1E:BD:0B:F3:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:e9:19:04:b8:6f:8a:b8:af:34:fe:e7:82:c2:75:4c:02:0d: 95:ca:36:3e:9f:6b:78:4c:d6:83:21:dd:da:f1:db:8f:44:ea: ba:f9:64:19:b2:e0:c8:b0:0c:fe:58:76:92:a6:5e:74:ba:c0: ab:f8:fe:a7:48:3b:6e:27:29:06:00:51:c5:6d:d8:d9:72:e1: 13:b3:8b:43:38:da:5d:07:08:92:4c:96:c3:6f:54:21:38:86: 56:49:d1:71:61:84:20:0b:20:04:09:ed:97:99:94:73:98:9c: d4:13:fa:6d:e5:45:34:2c:ea:bd:f7:7b:64:c1:d5:ee:5b:71: 2e:70:a0:b1:95:da:a8:d5:72:93:32:c0:ab:93:99:d7:64:44: 87:c1:28:41:17:23:78:0d:8c:6d:20:41:38:00:5c:01:b3:5c: e7:54:8a:36:8b:a3:a5:af:10:f9:00:ac:f8:1b:74:59:6b:ef: dc:44:81:2c:41:68:81:05:b7:99:2c:b2:5f:fc:f2:af:b9:25: 49:9a:99:ff:1a:55:43:67:57:f7:81:c2:7c:e7:d0:be:38:ba: 76:15:05:01:8d:0e:ad:a4:cf:ae:3c:5a:57:40:78:25:88:7b: 56:83:35:fd:6d:1f:14:46:44:ea:ef:56:16:4b:51:30:59:02: 6d:fe:23:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEutJoeu30Sp7sr2XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI1MTAyODIzMDAwOFoXDTI1MTAzMTIzMDAwMFowLzEtMCsGA1UEAxMk NmQyYTBhZDUtNGM0Mi00ZWE5LWE0ZDYtMDkwYzcyODE5YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDPKixi/LRCtAv0A/BNVd5XbyotwvRj9XoBa BCdkZ6ffJ3gfeNJYwwXpeiUWqdyGGGsVMYnTPTkM+XVC2sQ3UAHiqkRIlRvLCUe1 S3y7qHFT4Vcynq8zFuAFU2nyXzBb7WEWlouL6QH263yiuCRB39wcZ0/YBqiJC655 oJhu5NBJYkY9MTWPpVvfI2IFzTYX1hMzksSEJ5rpXhogmolYCpvZOVii5M09/WGH xSVqaLuhxXxloqUziIIUalQMJrPulNxIOTI3f/7oOgyi2glJnurlfnufvZj/3oB4 6v7WTm+m31OZv5QLFvthjkdJ5cv0/7lq5RSvvZx20RKhCDvaXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHg6tzap2cX3y476fdKg2B69C/NLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMjFjNTgwYzEtYTA1ZC00 ZTI4LWE0OGQtOWVhMGVjNWVkY2FjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDe6RkEuG+KuK80/ueCwnVM Ag2VyjY+n2t4TNaDId3a8duPROq6+WQZsuDIsAz+WHaSpl50usCr+P6nSDtuJykG AFHFbdjZcuETs4tDONpdBwiSTJbDb1QhOIZWSdFxYYQgCyAECe2XmZRzmJzUE/pt 5UU0LOq993tkwdXuW3EucKCxldqo1XKTMsCrk5nXZESHwShBFyN4DYxtIEE4AFwB s1znVIo2i6OlrxD5AKz4G3RZa+/cRIEsQWiBBbeZLLJf/PKvuSVJmpn/GlVDZ1f3 gcJ859C+OLp2FQUBjQ6tpM+uPFpXQHgliHtWgzX9bR8URkTq71YWS1EwWQJt/iMX -----END CERTIFICATE-----Generated at Wed Oct 29 13:19:40 2025 by rpki-client