$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: LtCkFUV9LAxyTL86LwHs3PfGLMhMalXoCzDt+HvxBqQ= Subject key identifier: 66:1C:66:1F:68:7A:6E:0D:20:ED:44:38:56:16:E5:67:2D:5E:26:9C Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584B36F7884982E3B405CA19E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF6D5 Signing time: Tue 16 Sep 2025 15:00:03 +0000 Manifest this update: Tue 16 Sep 2025 15:00:03 +0000 Manifest next update: Thu 18 Sep 2025 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: RoSM5gfQ/PAPH8aDKjNQugFi+fJBFHgiazpe8725OVw=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: 5LEYqOtIMFKhsegGISIgoukgf3mRSp7kPpb+mQ9oqJs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:f7:88:49:82:e3:b4:05:ca:19:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Sep 16 15:00:03 2025 GMT Not After : Sep 18 15:00:00 2025 GMT Subject: CN=86c7b965-be0f-467e-b878-af9a5eb2a618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:de:86:46:9e:ec:47:21:d7:9b:8d:2f:6d: a4:77:82:a8:f4:18:d8:f2:5d:b7:58:9f:66:03:a5: e2:d5:a1:c5:11:6e:77:c2:1e:34:ee:63:10:d7:f0: 85:b6:e4:b3:e6:a4:e7:67:16:ae:db:72:5e:58:b7: 1c:9a:9a:ab:cc:04:3a:f1:e8:dd:8d:67:17:38:37: 98:b9:51:c4:65:86:f8:8f:f0:43:6c:ff:66:a3:f4: 9d:8e:e4:59:d0:c3:d6:88:72:18:7e:19:ff:66:ba: 27:32:28:19:ba:29:c9:af:68:a6:c7:d0:a7:d9:0d: 51:5c:38:25:0e:03:db:e4:d6:53:60:70:05:0a:aa: 36:e5:ed:dc:37:10:53:05:9b:d5:45:2b:3b:14:14: cc:f8:e1:78:1b:a0:ce:b5:77:62:19:de:b6:cb:00: 57:9c:2d:c4:bd:60:0a:d1:ba:b4:5e:81:a2:17:bb: 1d:46:2c:6b:63:b2:ca:2d:35:1b:fe:e6:70:25:c8: 10:72:bd:47:2f:f4:ca:6d:99:56:a0:7d:a0:c3:57: 7f:5d:14:19:59:00:f8:dc:44:b5:65:c6:f1:7c:be: 14:6a:08:70:8d:8c:81:a0:97:59:1b:17:c8:72:94: fa:4d:11:26:30:d5:be:2d:f8:c3:3f:9a:74:9f:4b: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:66:1F:68:7A:6E:0D:20:ED:44:38:56:16:E5:67:2D:5E:26:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:32:c2:49:86:c9:39:12:03:7c:c5:2b:01:68:8a:14:8a:ad: 2c:23:fa:31:af:de:34:fb:52:9c:55:cb:f5:4c:8e:16:a6:22: 03:de:c3:d0:1b:ff:3c:d4:41:81:37:ec:10:d3:cf:23:f3:33: 93:7d:af:03:f6:a4:f6:7f:60:02:b6:19:c6:b4:05:e4:5f:ee: 0d:f8:d5:aa:8b:2c:dd:ef:04:a0:85:71:e0:9e:bd:3a:64:9b: 88:f8:09:d2:46:e2:0f:40:a7:f9:42:ce:8f:a9:ed:ed:8d:c9: c2:df:8a:3e:e0:3f:1f:4d:a3:d8:67:b2:15:b4:a2:32:ca:84: b2:29:8b:39:69:d3:06:1e:44:e2:46:6f:a6:a7:b0:84:e4:d3: 04:82:7a:23:61:8a:7d:a0:b2:de:f3:1e:10:b6:a1:8a:c7:ff: 48:29:e6:82:73:00:01:e7:52:12:44:37:77:ce:2d:15:ec:19: 78:29:ac:33:5b:12:9d:3b:17:e5:8c:e8:a8:b7:79:bd:88:6c: 4f:43:2e:5c:60:1e:91:fd:0a:3f:a3:0e:3e:2a:4e:a3:02:f4: f1:e6:51:ef:44:0b:c3:ac:a1:87:a7:51:70:6b:8f:9d:6b:e1: a1:fe:a3:40:84:a3:1c:28:24:34:0c:de:74:0f:3f:1b:93:66: 77:31:dd:bd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs294hJguO0BcoZ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI1MDkxNjE1MDAwM1oXDTI1MDkxODE1MDAwMFowLzEtMCsGA1UEAxMk ODZjN2I5NjUtYmUwZi00NjdlLWI4NzgtYWY5YTVlYjJhNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHzehkae7Ech15uNL22kd4Ko9BjY8l23WJ9m A6Xi1aHFEW53wh407mMQ1/CFtuSz5qTnZxau23JeWLccmpqrzAQ68ejdjWcXODeY uVHEZYb4j/BDbP9mo/SdjuRZ0MPWiHIYfhn/ZronMigZuinJr2imx9Cn2Q1RXDgl DgPb5NZTYHAFCqo25e3cNxBTBZvVRSs7FBTM+OF4G6DOtXdiGd62ywBXnC3EvWAK 0bq0XoGiF7sdRixrY7LKLTUb/uZwJcgQcr1HL/TKbZlWoH2gw1d/XRQZWQD43ES1 ZcbxfL4UaghwjYyBoJdZGxfIcpT6TREmMNW+LfjDP5p0n0s3sQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGYcZh9oem4NIO1EOFYW5WctXiacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzMsJJhsk5EgN8xSsBaIoU iq0sI/oxr940+1KcVcv1TI4WpiID3sPQG/881EGBN+wQ088j8zOTfa8D9qT2f2AC thnGtAXkX+4N+NWqiyzd7wSghXHgnr06ZJuI+AnSRuIPQKf5Qs6Pqe3tjcnC34o+ 4D8fTaPYZ7IVtKIyyoSyKYs5adMGHkTiRm+mp7CE5NMEgnojYYp9oLLe8x4QtqGK x/9IKeaCcwAB51ISRDd3zi0V7Bl4KawzWxKdOxfljOiot3m9iGxPQy5cYB6R/Qo/ ow4+Kk6jAvTx5lHvRAvDrKGHp1Fwa4+da+Gh/qNAhKMcKCQ0DN50Dz8bk2Z3Md29 -----END CERTIFICATE-----Generated at Tue Sep 16 22:54:54 2025 by rpki-client