$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft File: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft (raw, json) Hash identifier: UepodWh0ITg3bympC2QXFQ/O9ECbCcuPMbFMhsIZVOY= Subject key identifier: 93:BD:92:F4:BF:B9:7D:6A:24:D9:D0:5B:8A:5B:64:E5:A1:BF:94:8C Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F4328584BC01C668FEC8D33FACB947BA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft Manifest number: 010D0C9F432858438A0A161212CB83FF1869C5F4 Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl (hash: b2TDBOvlujqbzowtVks1SyQfd4AOw3rLAQp9l1Nenc0=) 2: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (hash: ALTxmglIje0nMID4b1gxZQHe/j8Z62CmQX+oIxQHBK0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:66:8f:ec:8d:33:fa:cb:94:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=ebd72e0a-aa50-48d5-af51-ab3894d09e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:be:66:98:e3:bb:37:da:c9:93:47:7e:fa: 11:9b:4e:c1:4b:41:48:5f:49:46:2a:48:82:42:42: e7:05:5e:eb:c1:85:53:d2:fc:0c:b7:2b:b5:56:ee: 11:6a:b5:cf:4a:16:8b:3c:ae:c3:83:78:78:30:8b: 98:09:e1:9e:27:66:fc:ba:19:61:45:f7:a8:3a:cc: 0f:0e:42:29:c3:22:35:b0:9d:c1:f0:72:ca:47:11: 84:68:cd:d5:85:99:fb:b8:b0:61:57:35:b4:d5:db: 23:11:a2:de:62:9d:dd:3c:6c:8e:60:0e:36:7b:0e: 7c:17:0a:86:c9:e7:e4:cd:bb:97:7d:56:71:0c:0f: 0b:5d:45:79:70:f5:af:71:fa:f0:21:d0:15:4b:4d: 79:29:fb:e9:82:86:d7:23:c6:94:e1:33:53:b3:6e: f2:ae:c7:5a:f5:86:51:68:5b:04:c2:0d:9f:e7:a5: 5b:c7:d0:bc:aa:7f:49:55:49:75:87:d6:61:73:d0: 60:ce:f4:9c:24:c0:f0:de:2c:19:8f:55:ff:25:29: a2:52:c1:5a:e4:c0:e9:44:c4:37:95:8a:7e:08:4a: 65:80:40:68:49:ff:22:ac:0b:2a:23:20:56:96:d0: 30:bc:d6:da:68:30:ec:8f:1a:5d:6c:44:8c:0d:d0: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BD:92:F4:BF:B9:7D:6A:24:D9:D0:5B:8A:5B:64:E5:A1:BF:94:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a1:24:8e:b2:7c:2b:fb:84:52:bd:ce:fa:3f:fb:a5:8c:95: 70:74:ef:77:ed:7e:62:3f:ae:6b:d9:99:99:52:1a:f5:ae:73: 90:30:42:44:01:ec:e6:8c:35:25:b5:ab:50:37:f0:4a:8d:1a: fa:19:e2:8d:ea:53:f0:34:78:25:4b:51:40:26:5f:55:9d:94: b6:91:56:70:ab:68:3c:11:c3:40:f0:74:9e:02:35:a0:9b:db: 65:fc:7b:64:c6:92:28:fa:b8:0a:f3:9e:9a:02:84:c5:d5:9a: b5:ca:6b:89:72:ce:53:c1:71:c2:ba:f6:e0:f0:a3:3b:76:61: be:ec:31:ac:c1:6d:72:0b:49:e5:65:3e:bd:e4:4c:b9:25:43: 62:8d:cc:72:42:b3:a2:86:7a:31:29:2f:15:b6:82:db:f6:25: bb:f5:1b:0b:04:64:73:d4:20:d8:4c:72:64:c0:ab:a4:96:ee: 9f:1c:53:4a:15:98:34:32:ec:1b:9e:99:62:d0:c7:86:24:3e: d3:ce:98:a4:f9:87:62:a1:5e:a9:5c:fb:70:1a:96:c3:be:ce: 85:e0:9c:41:f8:f4:37:2a:45:93:a8:ad:01:9d:c6:bc:d8:a3: 7e:b8:a3:9e:1a:c3:71:a8:a1:16:6c:75:a6:0a:5e:0a:84:83: 47:f2:52:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGaP7I0z+suUe6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk ZWJkNzJlMGEtYWE1MC00OGQ1LWFmNTEtYWIzODk0ZDA5ZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3y+ZpjjuzfayZNHfvoRm07BS0FIX0lGKkiC QkLnBV7rwYVT0vwMtyu1Vu4RarXPShaLPK7Dg3h4MIuYCeGeJ2b8uhlhRfeoOswP DkIpwyI1sJ3B8HLKRxGEaM3VhZn7uLBhVzW01dsjEaLeYp3dPGyOYA42ew58FwqG yefkzbuXfVZxDA8LXUV5cPWvcfrwIdAVS015KfvpgobXI8aU4TNTs27yrsda9YZR aFsEwg2f56Vbx9C8qn9JVUl1h9Zhc9BgzvScJMDw3iwZj1X/JSmiUsFa5MDpRMQ3 lYp+CEplgEBoSf8irAsqIyBWltAwvNbaaDDsjxpdbESMDdBqcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJO9kvS/uX1qJNnQW4pbZOWhv5SMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvMjFhMGUwMzYtZTRiYi00 YWJmLThlZGUtOGFkOWEyMTNmOTFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqoSSOsnwr+4RSvc76P/ul jJVwdO937X5iP65r2ZmZUhr1rnOQMEJEAezmjDUltatQN/BKjRr6GeKN6lPwNHgl S1FAJl9VnZS2kVZwq2g8EcNA8HSeAjWgm9tl/HtkxpIo+rgK856aAoTF1Zq1ymuJ cs5TwXHCuvbg8KM7dmG+7DGswW1yC0nlZT695Ey5JUNijcxyQrOihnoxKS8VtoLb 9iW79RsLBGRz1CDYTHJkwKuklu6fHFNKFZg0Muwbnpli0MeGJD7Tzpik+YdioV6p XPtwGpbDvs6F4JxB+PQ3KkWTqK0Bnca82KN+uKOeGsNxqKEWbHWmCl4KhINH8lJO -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:32 2025 by rpki-client