$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: EhaAK0CEZ646p3S0s02ID/Hl5823W2QCwWXkKXL+4Og= Subject key identifier: D2:26:7A:62:39:2B:BB:79:56:C6:B7:4C:33:B8:7F:FE:98:92:47:69 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584BBFC31162E1BEDD09ADEC76A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF707 Signing time: Tue 04 Nov 2025 15:00:03 +0000 Manifest this update: Tue 04 Nov 2025 15:00:03 +0000 Manifest next update: Fri 07 Nov 2025 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: sSZm0zhLvC02zGXryH15RAslnYG0YLmc6yBhoCus3/M=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: 5LEYqOtIMFKhsegGISIgoukgf3mRSp7kPpb+mQ9oqJs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:c3:11:62:e1:be:dd:09:ad:ec:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Nov 4 15:00:03 2025 GMT Not After : Nov 7 15:00:00 2025 GMT Subject: CN=52554028-442e-4eee-aacd-8edf65810a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:c5:b0:fa:e7:0e:5a:09:b5:6c:4c:e5:48: 2e:6b:2a:0e:0f:68:6e:47:a5:7d:fe:8a:1f:2f:f7: a5:36:ea:22:9e:ee:30:14:c7:a1:28:25:65:50:96: 0c:e8:8b:53:b1:fc:68:81:50:7e:6b:39:9f:0f:19: a6:8d:c0:6f:86:7b:b5:96:a6:49:30:52:27:5a:29: dc:55:bc:36:74:59:1e:bf:64:af:be:cf:39:da:27: f1:51:0a:1c:29:7e:67:58:36:25:12:ae:95:de:2a: 3b:28:63:97:1f:9e:5d:d7:e2:58:d9:62:e0:a9:6a: 6c:3d:f3:95:16:8b:00:b0:f6:e8:2e:ee:98:a5:f5: 02:38:a7:04:a5:33:9c:e9:e3:b5:86:33:0f:79:80: 1a:74:f5:e9:7f:53:7f:1b:e7:1d:2b:f2:de:4a:3c: fc:0b:9e:ab:00:7d:43:d8:d1:c6:c8:69:20:a3:7e: d9:3f:f9:c2:2e:5f:b9:72:a0:c1:72:f0:64:33:73: de:63:c4:51:d8:e4:cd:d3:04:b2:a2:93:59:34:c5: 9f:02:ad:59:03:c9:6a:60:af:ce:ce:22:39:8e:88: 94:56:d4:ec:28:26:81:c8:be:74:6c:2b:d5:e4:91: c0:0c:86:37:9c:cd:33:26:c2:16:e1:86:0b:2c:5a: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:26:7A:62:39:2B:BB:79:56:C6:B7:4C:33:B8:7F:FE:98:92:47:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:0c:f6:46:84:11:54:d8:03:bd:3d:fb:a0:96:58:42:43:9a: 8b:9a:d7:e0:0d:df:6c:62:0d:ea:e2:68:bc:9f:94:a5:fe:48: e9:2d:86:bd:ed:9e:e7:14:45:bf:3a:1b:1e:b2:e8:69:64:08: dc:eb:b0:8e:70:9a:f3:61:48:5f:3f:57:72:51:b6:7c:09:6b: e0:e4:a0:96:75:da:47:76:17:81:04:f3:71:b0:83:8b:23:5a: 1b:b8:ab:09:c5:ac:8d:4f:b6:64:ff:78:89:a4:68:05:01:ee: b3:e8:95:22:f8:f3:77:45:3f:fb:c7:02:cc:ab:72:16:6d:52: d3:52:e3:8b:4c:48:10:fb:67:0c:f6:8f:cb:76:21:01:30:cd: 28:94:3c:93:9a:44:a8:ce:6b:ed:f0:3c:f7:43:20:bf:58:c8: 3b:74:ff:7f:1c:18:aa:3b:9f:05:be:81:d7:18:82:b4:63:c2: 87:22:54:d6:51:bd:ec:4b:50:4b:9f:28:39:73:ed:2f:51:de: b4:a4:0d:33:96:2d:5f:e3:fa:ed:53:6e:73:ea:87:f9:dc:76: 79:e3:a1:71:d4:7e:0d:5a:5f:cc:6d:2a:11:29:c6:72:a5:8d: 26:c5:d1:19:83:d8:ad:d9:99:67:81:d4:c9:7f:7a:68:36:a6: f4:64:18:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxFi4b7dCa3sdqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNzE1MDAwMFowLzEtMCsGA1UEAxMk NTI1NTQwMjgtNDQyZS00ZWVlLWFhY2QtOGVkZjY1ODEwYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEzFsPrnDloJtWxM5UguayoOD2huR6V9/oof L/elNuoinu4wFMehKCVlUJYM6ItTsfxogVB+azmfDxmmjcBvhnu1lqZJMFInWinc Vbw2dFkev2Svvs852ifxUQocKX5nWDYlEq6V3io7KGOXH55d1+JY2WLgqWpsPfOV FosAsPboLu6YpfUCOKcEpTOc6eO1hjMPeYAadPXpf1N/G+cdK/LeSjz8C56rAH1D 2NHGyGkgo37ZP/nCLl+5cqDBcvBkM3PeY8RR2OTN0wSyopNZNMWfAq1ZA8lqYK/O ziI5joiUVtTsKCaByL50bCvV5JHADIY3nM0zJsIW4YYLLFpnfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNImemI5K7t5Vsa3TDO4f/6YkkdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANDPZGhBFU2AO9PfugllhC Q5qLmtfgDd9sYg3q4mi8n5Sl/kjpLYa97Z7nFEW/OhsesuhpZAjc67COcJrzYUhf P1dyUbZ8CWvg5KCWddpHdheBBPNxsIOLI1obuKsJxayNT7Zk/3iJpGgFAe6z6JUi +PN3RT/7xwLMq3IWbVLTUuOLTEgQ+2cM9o/LdiEBMM0olDyTmkSozmvt8Dz3QyC/ WMg7dP9/HBiqO58FvoHXGIK0Y8KHIlTWUb3sS1BLnyg5c+0vUd60pA0zli1f4/rt U25z6of53HZ546Fx1H4NWl/MbSoRKcZypY0mxdEZg9it2ZlngdTJf3poNqb0ZBjj -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:02 2025 by rpki-client