$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft File: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft (raw, json) Hash identifier: k7CB2q/2KZuS1TOLrW0vyAZ3aFReCYUB+J8vVjOWz6c= Subject key identifier: DC:D8:2B:0B:45:E3:3A:76:E3:6F:6F:BE:70:F4:2F:21:E7:A9:8C:15 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584BC09381A88D35F2F0C3CDEF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft Manifest number: 010D0C9F4328584B728422C8F4B1EE7ECA7B0A9D Signing time: Tue 04 Nov 2025 22:00:03 +0000 Manifest this update: Tue 04 Nov 2025 22:00:03 +0000 Manifest next update: Fri 07 Nov 2025 22:00:00 +0000 Files and hashes: 1: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (hash: 0q+0xLacODrOIfHkXqHz9nra1FOYoK/t4WZdGuM3XkU=) 2: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl (hash: Q7MY8eZ8P557OEuDQOBg96Wwtt5TDhkdnZ6PsGJ3PgM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:93:81:a8:8d:35:f2:f0:c3:cd:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Nov 4 22:00:03 2025 GMT Not After : Nov 7 22:00:00 2025 GMT Subject: CN=64cc0826-0ac2-4f74-a4e6-d0298267c04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:52:4f:16:bb:c5:09:b2:d5:18:7c:ca:42: bf:8d:de:13:af:39:df:ff:af:47:0e:69:a7:1c:47: 65:01:aa:32:8a:9e:d3:8f:b6:ac:85:6e:cb:68:93: 11:d1:71:ea:8f:33:10:70:1b:3d:42:b2:33:60:fa: 4b:e3:88:d0:a5:e7:4d:9c:51:d6:ce:84:1b:42:c9: f0:7f:51:44:57:69:3f:cc:d4:f9:c9:f6:4d:2f:b1: 68:8c:b5:1a:b1:ed:0e:74:ac:f4:43:2b:f3:5c:15: 31:04:1a:80:0f:23:73:3b:41:99:de:04:6e:63:f0: a1:78:4e:0a:63:34:7b:60:83:19:f2:a4:f5:00:d8: ee:86:18:99:83:42:87:f2:73:78:50:bf:5c:ab:d9: f9:71:bf:1d:83:38:bb:c7:de:f7:e5:c7:f9:42:dc: 2b:c5:93:96:20:c0:42:96:a2:1c:8b:60:79:15:e0: ae:e0:2a:ec:14:77:d0:5a:89:e3:a5:52:03:ac:21: 59:20:03:d0:e0:fd:d6:43:1e:10:0a:d1:86:16:4c: 46:c8:4d:22:46:bd:ff:a1:c5:75:32:32:95:e0:05: e2:4b:c7:79:5f:6c:ec:99:56:20:59:55:ff:6a:6f: e2:2e:7c:92:27:c3:12:59:7c:1e:9f:42:51:97:80: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D8:2B:0B:45:E3:3A:76:E3:6F:6F:BE:70:F4:2F:21:E7:A9:8C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e2:9b:fa:d0:98:b1:e2:1f:39:f6:55:76:89:29:63:d6:06: e0:ef:93:32:29:b5:65:99:8b:37:39:98:e7:83:d0:eb:40:d9: 5a:48:2b:44:17:c8:f6:cf:f9:18:3e:63:38:a1:3b:09:85:a4: 34:ba:c7:de:b0:9c:38:6b:d9:d0:b7:5d:a9:98:73:3d:9a:b0: 07:80:5d:cb:ba:af:91:52:9b:d4:fc:1c:ff:13:42:dd:d7:13: 96:71:81:b3:db:b0:af:1c:ba:5f:1c:6e:ea:4f:94:bc:c3:2c: 2a:86:f0:5c:63:c9:a4:9d:22:47:b7:61:83:1e:48:d7:d4:2a: c6:aa:18:de:c1:67:78:d4:10:fd:05:04:fe:63:9f:58:94:08: 48:00:fe:fd:be:70:29:d0:b9:73:73:35:a2:cf:b3:a0:d4:b5: af:86:e8:3e:3c:21:e0:48:09:ba:f8:6d:54:9b:e3:4b:01:d8: 15:3a:d2:19:92:34:8e:16:dc:47:28:7c:5d:c7:73:48:25:be: e3:c5:de:d2:49:8b:8e:b7:3b:b9:97:ff:af:3c:1d:63:1b:7f: ed:ef:9d:84:05:84:a5:67:cb:d6:ce:a8:05:8f:09:b0:a7:4f: 02:90:c4:60:29:91:5e:65:c7:79:85:6b:94:6d:e6:2b:c4:cb: 0d:11:7b:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAk4GojTXy8MPN74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI1MTEwNDIyMDAwM1oXDTI1MTEwNzIyMDAwMFowLzEtMCsGA1UEAxMk NjRjYzA4MjYtMGFjMi00Zjc0LWE0ZTYtZDAyOTgyNjdjMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQtSTxa7xQmy1Rh8ykK/jd4Trznf/69HDmmn HEdlAaoyip7Tj7ashW7LaJMR0XHqjzMQcBs9QrIzYPpL44jQpedNnFHWzoQbQsnw f1FEV2k/zNT5yfZNL7FojLUase0OdKz0QyvzXBUxBBqADyNzO0GZ3gRuY/CheE4K YzR7YIMZ8qT1ANjuhhiZg0KH8nN4UL9cq9n5cb8dgzi7x9735cf5QtwrxZOWIMBC lqIci2B5FeCu4CrsFHfQWonjpVIDrCFZIAPQ4P3WQx4QCtGGFkxGyE0iRr3/ocV1 MjKV4AXiS8d5X2zsmVYgWVX/am/iLnySJ8MSWXwen0JRl4A2LQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNzYKwtF4zp2429vvnD0LyHnqYwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMjFhMjBhZDktYTg0OC00 ZDBkLWExMTktM2RmNWQ2ZGJjYjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR4pv60Jix4h859lV2iSlj 1gbg75MyKbVlmYs3OZjng9DrQNlaSCtEF8j2z/kYPmM4oTsJhaQ0usfesJw4a9nQ t12pmHM9mrAHgF3Luq+RUpvU/Bz/E0Ld1xOWcYGz27CvHLpfHG7qT5S8wywqhvBc Y8mknSJHt2GDHkjX1CrGqhjewWd41BD9BQT+Y59YlAhIAP79vnAp0LlzczWiz7Og 1LWvhug+PCHgSAm6+G1Um+NLAdgVOtIZkjSOFtxHKHxdx3NIJb7jxd7SSYuOtzu5 l/+vPB1jG3/t752EBYSlZ8vWzqgFjwmwp08CkMRgKZFeZcd5hWuUbeYrxMsNEXum -----END CERTIFICATE-----Generated at Wed Nov 5 08:12:41 2025 by rpki-client