$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft File: 21428d3a-0040-4c60-9202-cd68b2fd51de.mft (raw, json) Hash identifier: /2qb25zfL3vr4o3B5X2mLmy0XSTThwQtyqCn8YYetNg= Subject key identifier: AD:D9:AC:7E:C5:BF:95:E1:AA:BC:F0:7F:63:48:12:93:1B:58:42:7D Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584AFA3F2B2A92A90A22170AAF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft Manifest number: 010D0C9F43285849095C568CC434510E45245938 Signing time: Mon 25 Aug 2025 21:00:03 +0000 Manifest this update: Mon 25 Aug 2025 21:00:03 +0000 Manifest next update: Thu 28 Aug 2025 21:00:00 +0000 Files and hashes: 1: 21428d3a-0040-4c60-9202-cd68b2fd51de.crl (hash: 2aEF2nWDpbDeS1hxpRBH5rnptr2Pd06oTfZ11hsUcpc=) 2: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (hash: XssPpgcvrsAyEjkCkHpoHDcu38u4rceCQCVhzZRuMsc=) 3: d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa (hash: 5Rlq6bBLTaGtbDPU7RgbMQA0kvnNDfMNO3ErpfuHOo8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:3f:2b:2a:92:a9:0a:22:17:0a:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Aug 25 21:00:03 2025 GMT Not After : Aug 28 21:00:00 2025 GMT Subject: CN=76ed7bc0-7eb3-4f27-81ad-00bef5b7355a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:fc:ac:85:74:63:80:ea:f7:c3:b4:00:a0: d6:09:89:0e:21:87:8b:59:13:57:f0:2c:d8:bc:e1: 4e:c4:3f:8b:cf:1c:74:5c:75:30:96:f5:5d:46:7c: c3:16:28:3d:dc:ab:ce:02:39:64:a6:a9:35:ea:5f: 43:56:01:8c:9a:02:b9:aa:51:95:27:a3:be:ac:fe: 18:bc:8c:25:ad:6d:ce:b7:eb:6d:51:1a:fe:52:85: 22:f5:d6:c7:3a:21:f4:1d:ec:5e:db:fa:51:13:52: 63:bc:d0:fc:23:32:db:0f:9f:d3:e2:cf:0b:3c:7c: 52:ca:64:7c:16:e6:8a:76:27:bc:6e:1a:8b:6f:4d: dc:2b:82:4a:0f:4e:24:4f:e7:e7:d7:db:1b:31:cc: 02:16:3f:69:a1:a6:eb:4f:74:c4:4b:f6:74:59:53: 30:41:8d:73:77:b7:c2:b3:79:a2:a1:f2:2a:81:6b: 88:0f:99:68:23:ad:81:7e:5d:f4:1f:b3:be:45:7b: b4:30:a1:d8:d8:82:dc:48:8c:f5:c1:83:1a:f5:d3: 24:2d:00:f0:b6:24:e1:03:46:ac:fb:fc:fa:db:29: 74:51:c0:21:54:dc:c1:93:2b:73:c4:d1:30:75:75: 76:6c:8f:a4:4c:9c:a2:13:c6:b2:25:15:69:28:d9: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D9:AC:7E:C5:BF:95:E1:AA:BC:F0:7F:63:48:12:93:1B:58:42:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:bf:0b:4d:c7:71:1b:8e:1a:09:8b:64:30:29:0d:22:e3:b8: 50:42:85:fa:e4:e0:33:83:9d:49:bb:cb:ac:99:a9:29:f1:d2: 11:14:fc:28:7d:9a:b0:44:73:d4:58:ee:56:4b:11:f8:de:d3: f2:1a:62:60:2d:9a:b1:ef:2d:96:e4:2d:41:22:e4:60:1a:f9: 7a:ea:54:b6:18:61:1e:69:d2:60:c5:d6:d4:f3:76:d7:9a:c8: 44:85:48:18:93:97:91:a1:0c:66:4b:e6:1d:04:2d:35:bb:42: 4d:21:44:99:86:f5:0b:8b:f9:4b:84:ad:9e:49:2a:ad:09:35: 3f:a0:f2:6a:29:a6:4d:8f:dc:ea:fd:ba:fe:9c:9e:e8:ef:49: e4:9a:a6:b3:00:ad:fa:ea:19:86:c1:70:bf:f4:42:73:2e:2b: 82:8e:52:ed:10:e2:e7:bc:e1:35:09:54:11:10:b6:a6:ad:d5: 17:15:56:61:42:d2:31:66:81:55:85:b5:dc:6b:00:35:e3:1d: fa:e8:7a:5e:c0:b9:89:56:04:eb:c7:c2:a8:5c:04:5d:2d:8f: 8c:3b:33:e3:4e:91:ed:22:ac:ae:04:59:60:a8:f9:cd:f9:77: 54:bb:75:97:1e:15:fc:5f:18:26:08:b3:87:3c:b8:86:a6:cd: b2:b0:a0:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr6PysqkqkKIhcKr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MDgyNTIxMDAwM1oXDTI1MDgyODIxMDAwMFowLzEtMCsGA1UEAxMk NzZlZDdiYzAtN2ViMy00ZjI3LTgxYWQtMDBiZWY1YjczNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7z8rIV0Y4Dq98O0AKDWCYkOIYeLWRNX8CzY vOFOxD+Lzxx0XHUwlvVdRnzDFig93KvOAjlkpqk16l9DVgGMmgK5qlGVJ6O+rP4Y vIwlrW3Ot+ttURr+UoUi9dbHOiH0Hexe2/pRE1JjvND8IzLbD5/T4s8LPHxSymR8 FuaKdie8bhqLb03cK4JKD04kT+fn19sbMcwCFj9poabrT3TES/Z0WVMwQY1zd7fC s3miofIqgWuID5loI62Bfl30H7O+RXu0MKHY2ILcSIz1wYMa9dMkLQDwtiThA0as +/z62yl0UcAhVNzBkytzxNEwdXV2bI+kTJyiE8ayJRVpKNmYpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK3ZrH7Fv5Xhqrzwf2NIEpMbWEJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjE0MjhkM2EtMDA0MC00 YzYwLTkyMDItY2Q2OGIyZmQ1MWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0vwtNx3EbjhoJi2QwKQ0i 47hQQoX65OAzg51Ju8usmakp8dIRFPwofZqwRHPUWO5WSxH43tPyGmJgLZqx7y2W 5C1BIuRgGvl66lS2GGEeadJgxdbU83bXmshEhUgYk5eRoQxmS+YdBC01u0JNIUSZ hvULi/lLhK2eSSqtCTU/oPJqKaZNj9zq/br+nJ7o70nkmqazAK366hmGwXC/9EJz LiuCjlLtEOLnvOE1CVQRELamrdUXFVZhQtIxZoFVhbXcawA14x366HpewLmJVgTr x8KoXARdLY+MOzPjTpHtIqyuBFlgqPnN+XdUu3WXHhX8XxgmCLOHPLiGps2ysKCa -----END CERTIFICATE-----Generated at Tue Aug 26 07:06:31 2025 by rpki-client