$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft File: 21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft (raw, json) Hash identifier: DjQLxJ5V3acJU6WP6DBgEjSTbi74d2tbfy4xRy0XP1Y= Subject key identifier: B5:F5:21:E0:34:ED:02:DD:7C:9E:29:17:2F:EC:BA:86:26:8E:02:7E Authority key identifier: 43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 Certificate issuer: /CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Certificate serial: 010D0C9F4328584BC0B149C15A8E14C6FDB06F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft Manifest number: 010D0C9F43285849D82F82E2AB1B69D3282B5EBD Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Thu 06 Nov 2025 23:00:00 +0000 Files and hashes: 1: 21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl (hash: VnYtyHrPmJBGs620MJm2avHpOha4zkl6tgwQL9S3GTE=) 2: 268cad49-8fe0-3114-93b6-1669c6777057.roa (hash: sb1nQ035scQ2ZkiBhmKEQJ+HK6yaE0AhKH3wm10iY9E=) 3: 2eb97f2f-5704-3f2a-a6fc-34b5c3ecaafd.roa (hash: vgKMcbwc7xptmDE0NLcVG0XlwvsRw859dYL2EpCKoE8=) 4: 35c68db1-b27f-3428-b312-c03d86e4f9fd.roa (hash: j3IdCjH38RHGg1L7wqJOkXGixuWVLCEnXM9iX1/hKFs=) 5: d9d2edf2-a2b8-340a-871f-8915988ad447.roa (hash: /LL/mTy/nIufMFYmm3AxYNcuajsaXtsV7OcJOUw3nRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:49:c1:5a:8e:14:c6:fd:b0:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c580c1-a05d-4e28-a48d-9ea0ec5edcac Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 6 23:00:00 2025 GMT Subject: CN=0491fa3a-3033-42f5-a4be-0fa683787a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:61:77:5b:5e:cc:38:d7:ee:cb:ff:a3:69: 3c:0a:64:fd:02:c5:01:13:21:f8:6b:5e:cd:7b:43: 27:4d:60:a4:92:44:69:c5:43:6a:9b:a9:3c:33:0f: 60:42:5a:88:65:9d:fc:b9:a7:3a:ef:f4:79:1b:87: 0f:65:ce:78:13:1e:f8:ac:eb:d2:b9:85:82:82:e6: d8:f5:64:4f:d1:b0:34:2a:58:fa:8f:46:aa:28:51: 7e:80:59:c0:93:0d:f2:cb:bb:a3:fa:1f:dd:fa:eb: 4d:d9:db:3d:a0:8f:f3:79:c8:9e:5f:e8:43:9e:8a: 83:af:08:68:74:e5:0e:c9:21:ee:b9:57:52:95:ba: fe:fd:b9:9e:ea:f6:9d:2b:27:04:87:7c:d5:55:c8: 20:95:09:89:23:28:35:86:4b:19:b9:ba:dc:03:cb: e3:b1:ef:5b:98:17:a2:c2:98:a8:21:c4:16:f9:f7: 44:b6:47:37:e5:a2:01:97:84:21:0b:f0:ba:53:13: 89:4a:d4:dc:93:58:a0:06:55:c0:e4:95:76:7e:b9: b2:f1:2b:0b:cd:78:d1:2d:c2:92:1d:8f:31:fa:e8: 96:6e:90:84:70:a2:d2:dd:c6:df:43:f3:46:05:4b: 87:dc:d2:07:24:1a:ac:ca:3e:c8:43:9b:e8:05:26: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:21:E0:34:ED:02:DD:7C:9E:29:17:2F:EC:BA:86:26:8E:02:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.crl X509v3 Authority Key Identifier: keyid:43:4C:13:6E:49:56:C6:2F:BF:B3:24:6A:14:9A:43:69:93:9D:9B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21c580c1-a05d-4e28-a48d-9ea0ec5edcac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:cf:94:98:87:50:ff:63:07:d4:ef:aa:03:b3:4c:c1:89:f2: 64:b9:ae:d2:e2:97:a7:0d:76:fc:c4:f8:83:1f:46:ad:d7:cd: 4c:43:c3:98:ec:ed:6b:10:6a:03:9d:7e:a2:34:92:27:77:38: 9a:8b:23:d9:00:15:a0:0f:98:69:21:53:99:a0:09:01:a3:b0: 69:54:e3:67:70:0d:c0:f5:a6:a9:0b:d0:9d:a9:95:13:ee:65: c2:62:2c:05:82:cf:10:e6:02:8a:5d:28:a2:ef:4a:be:f0:bd: d8:a0:d9:f6:99:19:6f:7a:87:e8:c8:51:10:c9:20:aa:99:f5: 99:7c:ac:5d:f1:3f:e9:78:4c:7e:db:58:cf:06:7b:e0:78:52: b6:87:3d:de:2b:c3:67:ff:aa:68:9c:85:cf:b5:47:9f:b8:66: 5d:50:4c:1f:e5:b0:0a:99:be:c7:d0:27:4c:f7:57:c4:39:5c: 31:ec:70:08:13:bc:51:6d:dc:32:3e:64:f2:4a:2b:d5:4f:61: 35:6e:b8:f8:a7:f6:38:a3:74:6b:42:d2:cd:87:c7:b4:cf:05: 78:2f:03:15:c6:9a:a8:df:4b:25:a0:f0:4e:a3:b7:ed:90:2f: 3e:9f:50:73:98:4f:a7:2a:8c:dd:ed:06:e9:4f:21:86:b2:4c: 99:0e:74:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUnBWo4Uxv2wbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFjNTgwYzEtYTA1ZC00ZTI4LWE0OGQtOWVhMGVjNWVk Y2FjMB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNjIzMDAwMFowLzEtMCsGA1UEAxMk MDQ5MWZhM2EtMzAzMy00MmY1LWE0YmUtMGZhNjgzNzg3YTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Bhd1tezDjX7sv/o2k8CmT9AsUBEyH4a17N e0MnTWCkkkRpxUNqm6k8Mw9gQlqIZZ38uac67/R5G4cPZc54Ex74rOvSuYWCgubY 9WRP0bA0Klj6j0aqKFF+gFnAkw3yy7uj+h/d+utN2ds9oI/zecieX+hDnoqDrwho dOUOySHuuVdSlbr+/bme6vadKycEh3zVVcgglQmJIyg1hksZubrcA8vjse9bmBei wpioIcQW+fdEtkc35aIBl4QhC/C6UxOJStTck1igBlXA5JV2frmy8SsLzXjRLcKS HY8x+uiWbpCEcKLS3cbfQ/NGBUuH3NIHJBqsyj7IQ5voBSYaIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLX1IeA07QLdfJ4pFy/suoYmjgJ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1 ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEwZWM1ZWRjYWMvMjFjNTgwYzEtYTA1ZC00 ZTI4LWE0OGQtOWVhMGVjNWVkY2FjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFjNTgwYzEtYTA1ZC00ZTI4LWE0 OGQtOWVhMGVjNWVkY2FjLzIxYzU4MGMxLWEwNWQtNGUyOC1hNDhkLTllYTBlYzVl ZGNhYy5jcmwwHwYDVR0jBBgwFoAUQ0wTbklWxi+/syRqFJpDaZOdm+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWM1ODBjMS1hMDVkLTRlMjgtYTQ4ZC05ZWEw ZWM1ZWRjYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChz5SYh1D/YwfU76oDs0zB ifJkua7S4penDXb8xPiDH0at181MQ8OY7O1rEGoDnX6iNJIndziaiyPZABWgD5hp IVOZoAkBo7BpVONncA3A9aapC9CdqZUT7mXCYiwFgs8Q5gKKXSii70q+8L3YoNn2 mRlveofoyFEQySCqmfWZfKxd8T/peEx+21jPBnvgeFK2hz3eK8Nn/6ponIXPtUef uGZdUEwf5bAKmb7H0CdM91fEOVwx7HAIE7xRbdwyPmTySivVT2E1brj4p/Y4o3Rr QtLNh8e0zwV4LwMVxpqo30sloPBOo7ftkC8+n1BzmE+nKozd7QbpTyGGskyZDnQ/ -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:06 2025 by rpki-client