$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft File: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft (raw, json) Hash identifier: VmI8PG9vCtlFEb2JV5IwyQYIQCKIJwSxg1+e0NvgG04= Subject key identifier: E8:E2:31:F0:2B:A7:99:8B:3E:AC:AD:F5:BF:A2:10:24:52:23:E4:E6 Authority key identifier: 6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C Certificate issuer: /CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Certificate serial: 010D0C9F4328584BBFE0D554AA2804564CEBAC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft Manifest number: 010D0C9F432858440CF6C89CD18533AD24A47742 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Fri 07 Nov 2025 16:00:00 +0000 Files and hashes: 1: 21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl (hash: hte3r87q1BRM+2JQ8d6UaRNXjNnmD11zd/Ed9ECgxMo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:d5:54:aa:28:04:56:4c:eb:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bd0a7d-6d89-438f-ba8a-8ce161e97d39 Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 7 16:00:00 2025 GMT Subject: CN=4840f1a1-40b0-46f3-985b-67ffbbd9ff66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:71:ea:b7:c0:6a:54:9c:bd:95:49:57:fa: 96:47:49:61:d6:54:13:f7:b0:fb:83:85:45:b8:da: 83:ab:08:db:e3:9d:da:37:20:d5:a7:90:dc:b2:9a: 29:dd:47:02:e4:92:f8:94:53:bf:49:82:6a:28:e5: 10:00:05:6a:43:28:8f:3a:d7:53:db:6e:9c:2d:5b: fc:81:53:0a:7e:3f:52:98:94:1d:10:b6:80:8e:02: 74:18:39:40:1c:7b:b5:4e:b6:d9:ee:c6:e1:92:77: b0:0d:76:b1:f5:5b:44:f2:23:90:59:da:13:23:81: 29:09:9a:91:8b:50:bc:08:c6:e8:e1:bd:b8:a2:9a: cc:51:2e:af:dc:c5:f6:01:27:ce:cf:b0:e2:f1:45: 81:69:b0:23:66:0c:f2:34:db:d0:cc:14:aa:ea:3b: 80:82:72:c2:6e:7a:c9:4b:62:34:be:24:1e:36:7e: a9:64:f5:b9:a7:1a:6c:10:37:b5:83:1b:ab:65:28: 75:19:05:75:c8:ee:8e:c7:b2:e5:61:37:75:f9:08: 14:e4:fb:b5:ad:0c:f6:b9:f1:48:ba:91:3a:e1:df: cd:55:c0:42:e3:f9:39:a2:49:58:2e:15:cd:09:1f: a6:0a:2a:13:55:94:15:6e:a2:bb:57:36:cb:d5:4f: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E2:31:F0:2B:A7:99:8B:3E:AC:AD:F5:BF:A2:10:24:52:23:E4:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.crl X509v3 Authority Key Identifier: keyid:6F:85:F4:C7:AB:0A:EC:81:A2:D4:F7:4D:14:05:A0:F4:C1:57:79:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21bd0a7d-6d89-438f-ba8a-8ce161e97d39.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b0:6c:75:ac:49:cb:cc:1c:a6:de:90:81:37:61:81:b0:3c: ae:8a:68:c6:ab:f7:ac:80:7a:8d:24:47:ba:3c:36:0e:dd:cd: c1:22:e8:d3:7e:e4:ec:dc:e7:9f:00:90:d7:88:79:4c:9b:23: 74:76:a3:fe:ed:90:33:0f:36:c6:a0:d5:ef:9b:07:76:43:de: 0d:11:ca:e5:26:07:65:27:fe:da:3f:c5:18:18:5c:87:6d:af: 9f:92:e8:12:a1:99:82:f7:c6:94:b7:d7:eb:e6:ff:82:c2:ac: f7:d9:c9:38:b9:ae:e5:b2:04:36:64:42:b8:cb:f1:4a:f7:35: 84:30:b4:1f:9a:3f:07:49:20:c9:45:58:02:ea:cf:27:42:29: f8:44:f9:1e:e8:57:73:14:73:42:8f:5f:db:c5:21:07:72:7a: 8b:ae:0b:e5:73:2b:95:38:63:d2:40:11:be:a2:9d:a5:a8:b3: a3:a6:fa:b5:b7:2b:49:f5:f4:88:34:ee:93:d7:de:78:5c:50: 56:63:34:39:e6:63:1f:5e:21:c2:93:55:f9:8b:85:c2:7f:92: e5:68:f5:74:51:77:34:b1:36:6e:7e:77:d4:9a:50:1c:8c:b8: ec:6a:a5:ea:6e:ea:55:80:ea:ca:7b:0b:47:56:82:08:50:4b: 14:f8:1c:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4NVUqigEVkzrrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiZDBhN2QtNmQ4OS00MzhmLWJhOGEtOGNlMTYxZTk3 ZDM5MB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNzE2MDAwMFowLzEtMCsGA1UEAxMk NDg0MGYxYTEtNDBiMC00NmYzLTk4NWItNjdmZmJiZDlmZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW9x6rfAalScvZVJV/qWR0lh1lQT97D7g4VF uNqDqwjb453aNyDVp5Dcspop3UcC5JL4lFO/SYJqKOUQAAVqQyiPOtdT226cLVv8 gVMKfj9SmJQdELaAjgJ0GDlAHHu1TrbZ7sbhknewDXax9VtE8iOQWdoTI4EpCZqR i1C8CMbo4b24oprMUS6v3MX2ASfOz7Di8UWBabAjZgzyNNvQzBSq6juAgnLCbnrJ S2I0viQeNn6pZPW5pxpsEDe1gxurZSh1GQV1yO6Ox7LlYTd1+QgU5Pu1rQz2ufFI upE64d/NVcBC4/k5oklYLhXNCR+mCioTVZQVbqK7VzbL1U9T4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOjiMfArp5mLPqyt9b+iECRSI+TmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWJk MGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2UxNjFlOTdkMzkvMjFiZDBhN2QtNmQ4OS00 MzhmLWJhOGEtOGNlMTYxZTk3ZDM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFiZDBhN2QtNmQ4OS00MzhmLWJh OGEtOGNlMTYxZTk3ZDM5LzIxYmQwYTdkLTZkODktNDM4Zi1iYThhLThjZTE2MWU5 N2QzOS5jcmwwHwYDVR0jBBgwFoAUb4X0x6sK7IGi1PdNFAWg9MFXeYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWJkMGE3ZC02ZDg5LTQzOGYtYmE4YS04Y2Ux NjFlOTdkMzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZsGx1rEnLzBym3pCBN2GB sDyuimjGq/esgHqNJEe6PDYO3c3BIujTfuTs3OefAJDXiHlMmyN0dqP+7ZAzDzbG oNXvmwd2Q94NEcrlJgdlJ/7aP8UYGFyHba+fkugSoZmC98aUt9fr5v+Cwqz32ck4 ua7lsgQ2ZEK4y/FK9zWEMLQfmj8HSSDJRVgC6s8nQin4RPke6FdzFHNCj1/bxSEH cnqLrgvlcyuVOGPSQBG+op2lqLOjpvq1tytJ9fSINO6T1954XFBWYzQ55mMfXiHC k1X5i4XCf5LlaPV0UXc0sTZufnfUmlAcjLjsaqXqbupVgOrKewtHVoIIUEsU+BxE -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:44 2025 by rpki-client