$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: sqCkjUntGSSybvoVCIubYRGrwOQUPpeWao69VZ25mu8= Subject key identifier: 5D:79:BF:7E:91:88:BA:1C:D8:6A:70:37:41:EC:2F:82:09:14:B3:E5 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584A39091DADF2D144A8DEDC9240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E286 Signing time: Tue 17 Jun 2025 16:00:07 +0000 Manifest this update: Tue 17 Jun 2025 16:00:07 +0000 Manifest next update: Thu 19 Jun 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: H3CBUj2BYKoNM5+EavQpWfgzn4k6rT4U+d/uBcMP7nk=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: wecdvfG9XIDtkXRg4f3V3ELKWwthX4QdIpcpi2DuCFQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:09:1d:ad:f2:d1:44:a8:de:dc:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Jun 17 16:00:07 2025 GMT Not After : Jun 19 16:00:00 2025 GMT Subject: CN=0175fbdf-d2ec-4a80-a720-99bf5419275b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e9:33:c5:cb:5b:8f:c0:9d:d2:e7:3d:47:81: 1e:91:ef:fd:92:95:8a:4a:83:86:01:c1:7e:6d:00: 30:93:9b:3f:b9:ce:37:0c:e1:ef:85:5d:64:0a:a9: a8:ae:a3:3d:9f:84:cd:35:0a:d7:0f:44:12:9f:92: a4:4a:3f:ec:ca:a2:2b:98:16:df:11:3e:b1:4c:43: d1:2c:3d:ec:4c:05:06:7d:82:54:fe:32:22:11:25: 27:5e:b9:b9:b7:28:3c:f3:9c:0c:2e:f8:2d:b5:63: c9:43:99:df:97:9a:3b:89:89:37:5c:ab:3e:3b:85: e5:c7:ff:e8:09:d5:3c:f7:25:11:1b:a6:b9:ca:c4: 27:be:2b:6e:73:79:dc:b7:fd:4b:02:84:2a:a2:43: b3:33:65:9c:0e:42:22:46:3a:6f:00:a1:72:ec:82: 7c:40:a0:a8:11:37:94:f1:7a:a5:ac:e0:d5:5b:41: 26:19:e5:9f:de:2d:e3:9a:a0:a2:5e:2e:3e:89:7c: 59:00:02:89:b6:f7:33:de:88:6a:c4:ec:77:77:3e: 40:c3:8b:96:09:6c:9c:b9:d8:88:2f:18:f3:ce:68: 9e:cb:0c:bc:ef:87:93:c9:40:7d:8a:61:89:7a:56: ce:9a:16:bf:71:04:a4:6f:7d:53:1d:00:b4:7a:31: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:79:BF:7E:91:88:BA:1C:D8:6A:70:37:41:EC:2F:82:09:14:B3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:51:1a:34:01:56:77:94:e3:89:b4:a5:60:5d:27:38:d3:87: b0:7e:d0:a0:ad:d0:a0:c0:95:3e:93:40:e7:80:5f:e1:57:50: 59:89:fa:c7:93:b7:7d:82:0b:e6:c8:fc:5f:ed:1e:9b:31:d2: 90:87:cc:2c:f8:d4:7a:6e:28:e0:d5:78:85:29:6a:0e:7d:9a: a4:54:b9:c4:b3:d7:24:19:86:54:db:a0:fc:99:7f:f1:2e:f5: ae:d4:48:dd:e7:ec:56:6a:b1:bd:7a:53:e0:bd:21:7e:a1:41: a5:c6:83:eb:aa:76:5a:db:3a:19:42:d6:6f:6e:b0:b3:f0:3d: 30:5b:60:c4:37:c5:af:32:33:47:03:d0:dd:4e:5c:f8:5c:8b: 0f:b2:50:aa:a1:63:91:89:69:10:42:f9:13:97:e5:2d:27:06: ef:4e:31:42:6c:22:fb:b9:de:45:af:e5:64:fd:09:cc:c4:71: 67:4f:1d:b2:71:23:9c:63:42:21:de:4d:cf:be:35:e0:f6:76: c4:c0:6e:f3:0f:a8:b2:ac:8c:01:42:7b:e2:df:cf:5d:45:f5: 3a:29:49:36:0e:16:a8:76:ea:4a:3b:d1:20:b6:fa:b4:61:0a: a8:33:67:0b:2a:8e:79:68:3a:3e:41:98:3c:61:9b:ab:33:f4: 40:da:75:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo5CR2t8tFEqN7ckkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MDYxNzE2MDAwN1oXDTI1MDYxOTE2MDAwMFowLzEtMCsGA1UEAxMk MDE3NWZiZGYtZDJlYy00YTgwLWE3MjAtOTliZjU0MTkyNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Okzxctbj8Cd0uc9R4Eeke/9kpWKSoOGAcF+ bQAwk5s/uc43DOHvhV1kCqmorqM9n4TNNQrXD0QSn5KkSj/syqIrmBbfET6xTEPR LD3sTAUGfYJU/jIiESUnXrm5tyg885wMLvgttWPJQ5nfl5o7iYk3XKs+O4Xlx//o CdU89yURG6a5ysQnvituc3nct/1LAoQqokOzM2WcDkIiRjpvAKFy7IJ8QKCoETeU 8XqlrODVW0EmGeWf3i3jmqCiXi4+iXxZAAKJtvcz3ohqxOx3dz5Aw4uWCWycudiI Lxjzzmieywy874eTyUB9imGJelbOmha/cQSkb31THQC0ejHdSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF15v36RiLoc2GpwN0HsL4IJFLPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlURo0AVZ3lOOJtKVgXSc4 04ewftCgrdCgwJU+k0DngF/hV1BZifrHk7d9ggvmyPxf7R6bMdKQh8ws+NR6bijg 1XiFKWoOfZqkVLnEs9ckGYZU26D8mX/xLvWu1Ejd5+xWarG9elPgvSF+oUGlxoPr qnZa2zoZQtZvbrCz8D0wW2DEN8WvMjNHA9DdTlz4XIsPslCqoWORiWkQQvkTl+Ut JwbvTjFCbCL7ud5Fr+Vk/QnMxHFnTx2ycSOcY0Ih3k3PvjXg9nbEwG7zD6iyrIwB Qnvi389dRfU6KUk2DhaodupKO9Egtvq0YQqoM2cLKo55aDo+QZg8YZurM/RA2nUJ -----END CERTIFICATE-----Generated at Wed Jun 18 15:43:30 2025 by rpki-client