$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: 9KDsfozmocUgFzULjvcp5I0MHBgmWtnAmnX+sE8+HOM= Subject key identifier: 5C:71:81:59:2C:01:70:9A:FC:15:F6:71:6E:E4:31:40:8B:23:83:DC Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584BBFE0DA37D8C4EB85DF057200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E315 Signing time: Tue 04 Nov 2025 16:00:04 +0000 Manifest this update: Tue 04 Nov 2025 16:00:04 +0000 Manifest next update: Thu 06 Nov 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: PE2E0ZjVwrk5F6luKOF2Ub6ciLPph5lF/+QgF569vYU=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: tH8Aq3vUqxPcclhinu2XTWRrAzRemO9TIJip69L2xRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:e0:da:37:d8:c4:eb:85:df:05:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Nov 4 16:00:04 2025 GMT Not After : Nov 6 16:00:00 2025 GMT Subject: CN=6ec62a85-2662-4bca-9a4f-23ed526d2f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:56:33:1b:bb:36:50:90:6b:f5:76:6a:24: 97:6e:ec:2d:60:dd:69:8e:63:92:1d:04:e5:fc:06: 2e:9d:10:62:da:a9:7b:20:47:5b:b9:45:ec:64:5a: 69:c7:50:8d:1a:5d:9b:59:c6:7b:af:3c:3a:8d:93: 96:98:35:88:d1:c8:57:22:8d:19:f8:6c:50:13:fe: 29:d8:58:6b:ba:a6:4c:32:86:c1:de:47:b4:3f:a8: df:cb:9e:02:93:ff:29:40:b4:28:37:a7:28:2c:90: 55:7c:fb:1d:75:e0:0f:8b:be:32:8f:6c:48:62:02: 19:ce:58:09:c9:25:cc:09:1f:54:6c:57:7a:5f:3d: 2a:83:03:0e:07:c5:11:4c:06:5a:ce:8b:3d:92:49: 4a:b7:fc:c1:d5:a0:b0:da:3d:d5:ad:3a:c7:95:f9: 67:59:b9:ed:62:67:dd:2d:21:60:7f:5c:64:19:9c: 30:11:15:45:51:83:b9:4d:77:95:8c:0e:72:98:38: f1:f7:77:9f:c8:fe:74:b2:42:32:98:4a:96:0e:fc: 8c:11:59:ec:70:2e:fc:8f:b0:97:5a:b9:1b:e7:89: 1c:33:34:10:91:fb:27:ed:28:d3:ea:62:c9:dc:4d: 28:ba:78:04:f4:b9:e3:77:1c:ad:a1:fb:7f:ac:8d: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:71:81:59:2C:01:70:9A:FC:15:F6:71:6E:E4:31:40:8B:23:83:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:cd:21:dc:aa:96:e2:e9:06:7e:f9:1d:2c:96:8b:c2:7f:74: d2:9c:74:f6:ff:1e:f2:1f:2a:ed:12:08:e7:86:39:a7:82:8b: 36:37:8a:e6:1d:f3:2d:f4:74:c9:a1:f2:16:84:9b:ee:08:08: dd:fb:58:f6:e1:f0:f3:99:a6:ab:10:ec:e2:c4:b4:a7:5d:83: 82:1e:8b:65:11:49:b6:a6:18:32:6b:7e:b0:88:da:9e:03:a0: e8:80:f7:0e:87:db:f1:b7:1c:75:5e:f2:e9:15:9e:a7:a4:f6: 0b:0c:93:e5:74:11:4d:71:56:f9:e3:c8:6a:af:3e:31:2a:2b: 47:77:f0:2e:ac:fa:41:a2:b9:c2:05:15:27:e8:58:ae:8a:0f: 28:fc:cf:34:9e:a5:6c:db:45:b3:01:dd:52:3f:bd:e6:7c:23: 71:62:28:d8:90:18:96:53:72:c6:a9:29:ef:ba:8e:24:04:8a: aa:5a:0d:26:83:13:3b:7c:f2:b8:e4:43:1e:fa:15:2f:a7:28: 8f:d0:a2:d9:46:d2:68:a3:e4:dc:e7:61:eb:00:4d:89:57:be: 98:eb:f4:13:bd:f5:9f:61:bf:3d:7e:6c:ba:1c:f5:81:c3:ea: 6f:f8:02:31:0e:7f:29:a2:e7:2a:60:24:23:be:7b:a0:2a:72: 95:ab:85:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/4No32MTrhd8FcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MTEwNDE2MDAwNFoXDTI1MTEwNjE2MDAwMFowLzEtMCsGA1UEAxMk NmVjNjJhODUtMjY2Mi00YmNhLTlhNGYtMjNlZDUyNmQyZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApktWMxu7NlCQa/V2aiSXbuwtYN1pjmOSHQTl /AYunRBi2ql7IEdbuUXsZFppx1CNGl2bWcZ7rzw6jZOWmDWI0chXIo0Z+GxQE/4p 2FhruqZMMobB3ke0P6jfy54Ck/8pQLQoN6coLJBVfPsddeAPi74yj2xIYgIZzlgJ ySXMCR9UbFd6Xz0qgwMOB8URTAZazos9kklKt/zB1aCw2j3VrTrHlflnWbntYmfd LSFgf1xkGZwwERVFUYO5TXeVjA5ymDjx93efyP50skIymEqWDvyMEVnscC78j7CX Wrkb54kcMzQQkfsn7SjT6mLJ3E0oungE9Lnjdxytoft/rI1ZewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFxxgVksAXCa/BX2cW7kMUCLI4PcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZzSHcqpbi6QZ++R0slovC f3TSnHT2/x7yHyrtEgjnhjmngos2N4rmHfMt9HTJofIWhJvuCAjd+1j24fDzmaar EOzixLSnXYOCHotlEUm2phgya36wiNqeA6DogPcOh9vxtxx1XvLpFZ6npPYLDJPl dBFNcVb548hqrz4xKitHd/AurPpBornCBRUn6Fiuig8o/M80nqVs20WzAd1SP73m fCNxYijYkBiWU3LGqSnvuo4kBIqqWg0mgxM7fPK45EMe+hUvpyiP0KLZRtJoo+Tc 52HrAE2JV76Y6/QTvfWfYb89fmy6HPWBw+pv+AIxDn8poucqYCQjvnugKnKVq4Wt -----END CERTIFICATE-----Generated at Wed Nov 5 13:22:49 2025 by rpki-client