$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: TLzBCagQyxAoY3VN5G8CZAhUaEnklf6HC2LGhtRQXnY= Subject key identifier: D0:CE:D6:2A:B6:E3:6A:39:DD:9A:8F:03:D6:B6:68:61:30:6C:6D:8B Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584BA98B625C631A9C5D66D94B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E30D Signing time: Mon 27 Oct 2025 16:00:03 +0000 Manifest this update: Mon 27 Oct 2025 16:00:03 +0000 Manifest next update: Wed 29 Oct 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: HTCF4hLtr+z+X03XJxKYgCndJ5gmZiXSkMVAvZJ6gzU=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: tH8Aq3vUqxPcclhinu2XTWRrAzRemO9TIJip69L2xRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:8b:62:5c:63:1a:9c:5d:66:d9:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Oct 27 16:00:03 2025 GMT Not After : Oct 29 16:00:00 2025 GMT Subject: CN=f735ddeb-9791-485b-a1fa-6fe4a5c5b72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2e:1a:ba:c7:91:c2:8b:16:60:56:70:90:03: 6e:0e:45:5e:e6:34:96:dd:3e:9d:ab:fe:9a:af:62: 7b:2d:a1:83:25:0a:69:a4:d4:52:fa:6e:ff:37:97: 04:b1:79:30:93:e3:58:75:c1:e1:b4:d0:81:55:1c: 09:64:4a:ac:7e:d7:1e:42:7b:ee:81:60:ed:36:e7: e0:96:b3:78:2b:4e:5d:cc:24:52:f4:ae:31:40:e8: 6c:bd:54:97:04:20:bf:4c:2a:68:0f:91:fa:8f:b7: c7:c6:ec:3d:48:fa:ef:64:7c:f4:68:57:eb:69:99: 4e:e3:6d:53:3f:55:22:db:ea:3d:4e:6c:48:e9:5c: 4a:49:61:df:cb:34:82:af:34:8b:de:9d:2e:7b:6a: e9:70:9c:1f:28:56:ad:85:d2:67:ae:e9:93:62:89: 29:ab:1e:e7:d1:95:e3:41:64:3f:e5:a1:03:59:9f: 57:50:ca:49:b6:5f:7f:97:fd:c7:03:ae:5c:3f:4c: ee:39:b8:ef:44:08:b2:6b:fe:7d:14:39:d8:94:ca: bc:cf:75:0b:c8:28:32:1a:7e:d2:a4:87:f0:95:32: 5d:11:dc:b0:1c:db:41:29:d9:c7:84:5b:30:90:4e: 3d:4f:c6:73:3c:f2:7d:13:01:a4:db:2b:e2:5e:05: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CE:D6:2A:B6:E3:6A:39:DD:9A:8F:03:D6:B6:68:61:30:6C:6D:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b9:e6:53:0d:84:6d:05:82:1a:00:27:e7:e6:03:96:cc:05: be:79:5f:3d:ad:4b:0a:8c:11:0b:4a:46:f3:fc:58:a0:c8:21: 75:db:a3:cd:5c:a9:3e:c4:bc:6c:03:ff:86:e9:4f:be:ae:33: 23:06:5f:31:36:74:d6:f6:d6:55:9c:b5:81:7b:64:74:97:e2: 46:73:af:07:28:91:c5:dd:5b:cb:51:c1:15:c3:e2:fc:b1:5d: af:13:2f:e0:ec:b5:62:f9:1f:c6:be:c0:de:96:fb:b3:74:bd: e0:ea:f8:21:9a:97:f6:e9:d5:6e:81:68:c1:d6:94:c1:0d:d9: 66:da:48:ef:1d:bc:64:cd:71:48:e2:74:ea:ef:08:07:49:b7: ed:8b:57:14:4a:c3:79:29:13:ea:3f:45:0c:79:d3:9d:ed:7c: b5:8f:dd:11:60:ff:f9:55:45:48:1f:68:38:60:8b:66:45:7d: 56:ae:ed:c4:ed:c7:01:ef:04:00:61:36:c1:69:28:8d:52:46: 77:9f:24:da:b2:90:12:22:91:8a:8b:fd:b7:74:d1:fe:49:98: c2:02:45:4b:0f:1f:8f:b1:bb:dc:3e:44:a9:ac:a1:07:f1:01: 8f:33:b7:a9:aa:09:b2:2b:b0:a8:39:9c:97:bc:5f:16:f8:23: 04:e5:1a:50 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupi2JcYxqcXWbZSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MTAyNzE2MDAwM1oXDTI1MTAyOTE2MDAwMFowLzEtMCsGA1UEAxMk ZjczNWRkZWItOTc5MS00ODViLWExZmEtNmZlNGE1YzViNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC4auseRwosWYFZwkANuDkVe5jSW3T6dq/6a r2J7LaGDJQpppNRS+m7/N5cEsXkwk+NYdcHhtNCBVRwJZEqsftceQnvugWDtNufg lrN4K05dzCRS9K4xQOhsvVSXBCC/TCpoD5H6j7fHxuw9SPrvZHz0aFfraZlO421T P1Ui2+o9TmxI6VxKSWHfyzSCrzSL3p0ue2rpcJwfKFathdJnrumTYokpqx7n0ZXj QWQ/5aEDWZ9XUMpJtl9/l/3HA65cP0zuObjvRAiya/59FDnYlMq8z3ULyCgyGn7S pIfwlTJdEdywHNtBKdnHhFswkE49T8ZzPPJ9EwGk2yviXgUe2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNDO1iq242o53ZqPA9a2aGEwbG2LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAueZTDYRtBYIaACfn5gOW zAW+eV89rUsKjBELSkbz/FigyCF126PNXKk+xLxsA/+G6U++rjMjBl8xNnTW9tZV nLWBe2R0l+JGc68HKJHF3VvLUcEVw+L8sV2vEy/g7LVi+R/GvsDelvuzdL3g6vgh mpf26dVugWjB1pTBDdlm2kjvHbxkzXFI4nTq7wgHSbfti1cUSsN5KRPqP0UMedOd 7Xy1j90RYP/5VUVIH2g4YItmRX1Wru3E7ccB7wQAYTbBaSiNUkZ3nyTaspASIpGK i/23dNH+SZjCAkVLDx+PsbvcPkSprKEH8QGPM7epqgmyK7CoOZyXvF8W+CME5RpQ -----END CERTIFICATE-----Generated at Tue Oct 28 03:08:03 2025 by rpki-client