$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: SZ/a9B2a4HbqUw17oOum2biMIwRKuhJh3Z/c1EJD3fU= Subject key identifier: FF:03:A9:D4:9C:71:A8:62:16:01:CE:AB:74:EA:46:E3:9D:3C:1F:5D Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584ABC2172FC252594B0D919DB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF6A8 Signing time: Sun 03 Aug 2025 15:00:03 +0000 Manifest this update: Sun 03 Aug 2025 15:00:03 +0000 Manifest next update: Tue 05 Aug 2025 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: NnAzOlCE1brdlRJwGt0KJUkoHmniNYrOl3Vo0s6hTZ4=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: MY9CSV7GXKpIioDxZLyV76TeiBoUqJoKeV3aRNvN8hs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:21:72:fc:25:25:94:b0:d9:19:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Aug 3 15:00:03 2025 GMT Not After : Aug 5 15:00:00 2025 GMT Subject: CN=04beeb61-d4a4-4a06-9ef9-e1df5fe165e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:6f:ef:9f:da:b1:84:00:a0:c1:ef:22:dc: 1f:dc:d5:6d:87:0a:9d:81:bb:7e:61:bc:7b:21:2e: 60:97:76:3f:81:f9:88:4e:a7:ff:31:11:34:14:da: 34:91:97:16:75:9f:72:47:a3:6a:65:ea:63:05:36: 98:20:77:45:7f:db:0c:3a:6b:06:35:05:0d:32:7f: c8:38:06:8e:29:a1:22:99:d3:cd:a2:91:bd:12:a2: 1b:e2:21:35:1f:1f:f3:45:fd:74:e6:40:d4:70:c6: c0:29:96:9d:0c:b8:f0:79:f2:13:b5:ea:cb:67:ea: ff:1f:45:a3:4b:55:aa:dd:f7:0e:c9:fe:c0:8d:8a: 64:e1:2f:0c:60:54:a7:6d:76:5d:1e:51:05:c9:d7: 07:39:3f:3e:00:d3:96:42:5f:ad:40:89:91:a2:66: 9c:d5:b8:ce:ad:4c:8e:e2:8b:68:1b:62:5a:d8:ea: 36:80:0c:b8:94:b9:b5:2f:d2:00:88:cb:47:6d:2c: cc:48:f8:6c:15:30:67:fa:10:ae:76:58:ff:df:4c: bc:95:95:ae:0e:bc:ff:e7:ca:27:bf:71:3e:04:7f: ae:9c:96:f9:a7:45:bd:62:e3:b7:e0:e7:9f:c8:a6: e9:6c:d4:e2:82:db:0a:37:a3:11:78:6c:9d:d4:17: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:03:A9:D4:9C:71:A8:62:16:01:CE:AB:74:EA:46:E3:9D:3C:1F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c0:43:75:4d:bd:db:c5:56:72:05:b3:2d:4f:77:ea:02:83: aa:3e:85:cf:e2:95:21:60:e8:de:7f:be:b8:47:ef:cf:c6:e9: e3:6d:4a:c8:52:82:1e:ca:6f:af:aa:85:a0:84:61:72:40:90: a0:6a:2c:53:96:77:1e:3d:53:b8:5f:60:ab:d4:23:0d:d8:46: e9:58:a3:bd:d2:01:00:37:5b:81:1d:a5:a6:98:16:90:92:a6: a8:1d:b2:e7:8f:73:b8:9d:2a:af:3c:60:15:72:f5:88:f7:38: 8b:6f:5c:89:e8:e1:ae:54:ea:25:be:c3:3f:c3:3f:9e:af:15: 0a:67:9c:8a:77:20:07:5d:e4:c4:cb:7b:d8:7f:f0:63:c5:63: 61:d6:cd:9c:cd:d7:12:a2:9e:7a:70:b3:6f:ad:76:61:f8:ac: 92:b8:84:72:2f:70:e2:ab:40:70:da:b5:e7:39:96:67:60:47: f8:ed:f6:b5:cc:d1:ab:b2:24:bf:77:f7:79:81:21:4a:89:04: ad:2e:6a:78:f1:b4:d9:fa:75:a4:f1:26:b3:77:99:13:7f:bf: f5:2a:7e:9b:fe:09:81:be:cc:02:38:a4:96:ba:be:44:a1:f7: f1:46:3f:11:fe:49:0e:9c:b6:0c:74:ba:f4:1c:42:9f:6f:95: 6c:f9:e2:af -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8IXL8JSWUsNkZ2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI1MDgwMzE1MDAwM1oXDTI1MDgwNTE1MDAwMFowLzEtMCsGA1UEAxMk MDRiZWViNjEtZDRhNC00YTA2LTllZjktZTFkZjVmZTE2NWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwxv75/asYQAoMHvItwf3NVthwqdgbt+Ybx7 IS5gl3Y/gfmITqf/MRE0FNo0kZcWdZ9yR6NqZepjBTaYIHdFf9sMOmsGNQUNMn/I OAaOKaEimdPNopG9EqIb4iE1Hx/zRf105kDUcMbAKZadDLjwefITterLZ+r/H0Wj S1Wq3fcOyf7AjYpk4S8MYFSnbXZdHlEFydcHOT8+ANOWQl+tQImRomac1bjOrUyO 4otoG2Ja2Oo2gAy4lLm1L9IAiMtHbSzMSPhsFTBn+hCudlj/30y8lZWuDrz/58on v3E+BH+unJb5p0W9YuO34OefyKbpbNTigtsKN6MReGyd1BfinQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP8DqdSccahiFgHOq3TqRuOdPB9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAswEN1Tb3bxVZyBbMtT3fq AoOqPoXP4pUhYOjef764R+/PxunjbUrIUoIeym+vqoWghGFyQJCgaixTlncePVO4 X2Cr1CMN2EbpWKO90gEAN1uBHaWmmBaQkqaoHbLnj3O4nSqvPGAVcvWI9ziLb1yJ 6OGuVOolvsM/wz+erxUKZ5yKdyAHXeTEy3vYf/BjxWNh1s2czdcSop56cLNvrXZh +KySuIRyL3Diq0Bw2rXnOZZnYEf47fa1zNGrsiS/d/d5gSFKiQStLmp48bTZ+nWk 8Sazd5kTf7/1Kn6b/gmBvswCOKSWur5EoffxRj8R/kkOnLYMdLr0HEKfb5Vs+eKv -----END CERTIFICATE-----Generated at Mon Aug 4 14:14:57 2025 by rpki-client