$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: T7Julnd0FtiH7xt1hZHz9wwjPmZ7WuQ7Geg7SCE9PbY= Subject key identifier: 5A:39:C4:A9:CF:3D:C3:AA:6E:11:2F:7C:50:8C:09:38:62:D7:92:6B Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584A6DF6533F814CADFA577A6400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF68C Signing time: Sun 06 Jul 2025 15:00:08 +0000 Manifest this update: Sun 06 Jul 2025 15:00:08 +0000 Manifest next update: Tue 08 Jul 2025 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: kDNs6NKCHyMnBZ2lEDVZAVzfJrCo3CGBN55Qq7C76BQ=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: MY9CSV7GXKpIioDxZLyV76TeiBoUqJoKeV3aRNvN8hs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:f6:53:3f:81:4c:ad:fa:57:7a:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Jul 6 15:00:08 2025 GMT Not After : Jul 8 15:00:00 2025 GMT Subject: CN=20c4c84d-74eb-4ad9-992f-bd867d344051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:8d:c1:ca:5c:ab:fb:c8:38:e7:26:43:42: d7:a9:60:f0:00:20:e4:5d:54:36:96:07:3e:3f:06: 2e:0d:48:6b:c4:d6:93:63:37:38:f9:b1:7a:ae:69: 6c:bd:0d:8d:ae:6f:9f:77:c5:b0:dc:93:db:a2:d2: ca:89:57:91:07:81:ea:84:5b:00:1b:65:16:65:f8: 78:50:24:ef:e1:45:e3:af:f3:40:aa:2a:7b:2b:4b: b0:77:27:4a:c4:9c:d0:92:38:e0:ee:ff:ff:83:96: c0:54:61:e2:51:61:16:75:9a:1e:6c:30:cf:68:7d: 24:7b:cb:50:09:1a:2d:2b:a1:73:9c:b9:cb:59:0a: 36:06:63:81:23:55:fa:78:49:23:a3:da:02:73:71: ce:03:b0:97:40:08:d7:a7:5b:b7:a9:a7:e7:41:96: a0:f5:ef:4e:c5:ed:f9:1c:59:da:54:e2:76:57:81: 68:fb:41:5a:8c:90:94:b2:aa:9e:36:6f:40:66:d8: f4:79:34:e9:d3:dc:c6:be:30:18:1b:36:7c:33:7d: 67:ad:0a:3e:e6:4c:49:98:62:7d:93:b0:d3:9a:c5: b7:53:8a:97:76:55:76:82:63:8b:ea:cf:14:87:5b: ca:ce:22:a4:33:2c:b7:73:b8:d9:1a:d2:3b:1f:b4: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:C4:A9:CF:3D:C3:AA:6E:11:2F:7C:50:8C:09:38:62:D7:92:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c2:fc:b3:db:0f:32:16:1d:65:f2:0b:10:5c:8c:f9:b5:9b: 24:7f:7a:a8:a3:50:41:ca:dc:19:a7:74:93:c4:96:2a:85:15: 72:3e:df:d9:b5:00:63:49:16:de:f1:4d:c5:19:52:47:01:7c: a2:f0:be:46:b7:0f:bd:bc:12:02:88:e2:c0:bb:48:aa:48:c2: 75:da:a7:a5:36:e4:de:64:08:ff:76:bc:76:ec:6b:cb:39:39: da:7b:8b:aa:c8:c5:e4:66:00:81:a5:00:f8:70:6c:5a:82:f9: 41:da:cb:fc:54:be:28:3f:e3:55:d7:20:cc:46:c8:cb:7f:5a: 49:0d:77:13:dc:ae:65:aa:45:1e:b2:55:e1:ac:7d:28:5e:87: 28:35:75:b0:4b:82:24:8a:7d:f6:27:16:92:07:eb:d9:f7:0b: 7f:3f:e3:35:b2:96:16:d9:43:1e:1c:f8:32:33:7c:75:41:df: 00:20:0c:aa:40:7e:26:4e:98:7f:71:73:0d:be:3d:fe:34:4c: 13:87:49:b4:b7:a9:7e:f6:4b:53:78:cb:3e:c6:df:b2:ae:f2: 4d:84:0e:4a:cc:1d:62:94:48:31:a0:4f:d8:8c:de:e4:9e:22: 97:c7:a6:1f:5c:44:29:e8:1f:9b:af:0e:64:95:a6:ed:ae:4e: eb:04:24:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpt9lM/gUyt+ld6ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI1MDcwNjE1MDAwOFoXDTI1MDcwODE1MDAwMFowLzEtMCsGA1UEAxMk MjBjNGM4NGQtNzRlYi00YWQ5LTk5MmYtYmQ4NjdkMzQ0MDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCSNwcpcq/vIOOcmQ0LXqWDwACDkXVQ2lgc+ PwYuDUhrxNaTYzc4+bF6rmlsvQ2Nrm+fd8Ww3JPbotLKiVeRB4HqhFsAG2UWZfh4 UCTv4UXjr/NAqip7K0uwdydKxJzQkjjg7v//g5bAVGHiUWEWdZoebDDPaH0ke8tQ CRotK6FznLnLWQo2BmOBI1X6eEkjo9oCc3HOA7CXQAjXp1u3qafnQZag9e9Oxe35 HFnaVOJ2V4Fo+0FajJCUsqqeNm9AZtj0eTTp09zGvjAYGzZ8M31nrQo+5kxJmGJ9 k7DTmsW3U4qXdlV2gmOL6s8Uh1vKziKkMyy3c7jZGtI7H7QiEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFo5xKnPPcOqbhEvfFCMCThi15JrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpwvyz2w8yFh1l8gsQXIz5 tZskf3qoo1BBytwZp3STxJYqhRVyPt/ZtQBjSRbe8U3FGVJHAXyi8L5Gtw+9vBIC iOLAu0iqSMJ12qelNuTeZAj/drx27GvLOTnae4uqyMXkZgCBpQD4cGxagvlB2sv8 VL4oP+NV1yDMRsjLf1pJDXcT3K5lqkUeslXhrH0oXocoNXWwS4Ikin32JxaSB+vZ 9wt/P+M1spYW2UMeHPgyM3x1Qd8AIAyqQH4mTph/cXMNvj3+NEwTh0m0t6l+9ktT eMs+xt+yrvJNhA5KzB1ilEgxoE/YjN7kniKXx6YfXEQp6B+brw5klabtrk7rBCSo -----END CERTIFICATE-----Generated at Mon Jul 7 00:43:35 2025 by rpki-client