$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft File: 21428d3a-0040-4c60-9202-cd68b2fd51de.mft (raw, json) Hash identifier: EJeUO7YbF4ZkuuI8U8khKw3YPsA7bzI7bljFi6h/ox8= Subject key identifier: 2C:41:1B:9C:90:C5:FF:39:43:8A:14:A8:33:91:B1:08:DD:A1:F0:25 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584BC075C84E5F0D0329B6B4FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft Manifest number: 010D0C9F43285849095C568CC434510E45245980 Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Thu 06 Nov 2025 21:00:00 +0000 Files and hashes: 1: 21428d3a-0040-4c60-9202-cd68b2fd51de.crl (hash: XDQvmo7BJFwU+usOT5VVYGnXFIp0g+GHki9TLNbZbVM=) 2: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (hash: B/fXTfeSP5nz69mBHCwEAufkZo7mpP3WJm5k2llEAb0=) 3: d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa (hash: h6mq6cZpHjkpdt87yB3WzDormW30hScxXCrXxzVhipM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c8:4e:5f:0d:03:29:b6:b4:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 6 21:00:00 2025 GMT Subject: CN=c5f244f1-065b-493a-9313-3ac838d6a946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:b5:cf:46:9a:e2:af:21:21:f9:15:32:16: 16:fb:d3:a5:a1:5f:b6:3e:79:81:7a:c1:db:f8:dc: 05:72:f4:0b:32:ba:5b:d4:09:c5:9d:ec:6f:6d:c2: e8:aa:67:d5:a1:89:66:f5:5e:fe:be:3f:88:a5:c7: 38:f4:b3:61:d4:17:c4:19:56:ab:a0:09:e8:da:9d: f9:25:10:e3:e7:47:80:77:af:2d:ef:ab:87:24:0a: 23:75:02:44:25:27:6c:14:9f:54:0c:cb:01:d5:3f: ed:1e:e2:be:9a:2e:f5:22:21:b1:fd:2d:9c:1d:21: 87:c9:72:9b:62:ca:65:ae:c2:f7:3a:89:7b:f0:d5: 02:be:8e:b2:02:78:e6:5c:47:b6:2f:0a:f5:5d:a8: a0:8d:93:e4:95:45:73:1e:11:94:6a:eb:16:85:2e: 42:59:c4:bc:9a:06:5b:a2:69:05:d2:5e:36:44:73: 70:74:56:2a:4f:70:5c:89:f0:58:51:71:a1:01:fc: 5c:bb:09:c4:f4:d4:4b:11:4f:01:a0:9a:d5:64:d8: 1e:75:1a:af:eb:61:b6:ee:0e:03:84:b1:6d:03:9d: e3:2c:a7:df:22:36:8d:d9:58:fa:71:ad:6d:a0:2b: d0:4c:18:ac:09:74:df:33:94:d5:39:97:43:79:41: de:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:41:1B:9C:90:C5:FF:39:43:8A:14:A8:33:91:B1:08:DD:A1:F0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:25:8f:54:93:92:a4:5f:40:8c:d9:04:97:9c:b9:52:ce:14: c7:07:a9:70:37:25:93:4b:6b:58:9c:3e:24:19:cd:e4:89:c1: 20:b4:12:6c:39:b8:49:df:12:7e:89:f9:32:78:a5:ee:4f:74: e6:ab:23:9e:48:08:df:e6:5f:5b:95:7c:24:fd:c9:99:80:c9: e9:3d:ca:64:87:52:32:8d:28:f8:a0:94:ea:1b:e6:93:20:b6: 7e:f8:a2:5d:e3:33:a2:ad:48:bc:c5:b4:e0:67:6f:ef:0b:37: 15:2c:da:5a:8f:80:cb:ac:54:b1:ee:8d:34:b2:fb:24:3f:b5: e5:c4:a7:73:6f:c9:b6:a1:c8:01:c5:6b:b8:c1:db:bb:ac:35: b3:ef:27:1f:49:40:d2:43:09:00:90:96:c0:0d:ff:92:2d:d9: a9:3a:89:91:08:55:37:17:66:5b:8c:5a:d6:ab:54:b5:86:fd: 72:18:fd:f6:0d:b6:d9:7e:42:10:46:fa:2d:d8:e0:2e:b4:90: 7e:f9:5e:82:fb:d9:0c:aa:12:18:f4:34:65:d0:8e:79:42:d8: a2:b5:b6:11:f6:b4:d9:e1:48:0b:d4:23:30:1f:05:cd:62:36: 95:f1:d8:32:f3:81:71:84:f9:ee:6d:75:0d:e8:42:68:a7:e1: c7:e0:b8:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdchOXw0DKba0/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNjIxMDAwMFowLzEtMCsGA1UEAxMk YzVmMjQ0ZjEtMDY1Yi00OTNhLTkzMTMtM2FjODM4ZDZhOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU21z0aa4q8hIfkVMhYW+9OloV+2PnmBesHb +NwFcvQLMrpb1AnFnexvbcLoqmfVoYlm9V7+vj+Ipcc49LNh1BfEGVaroAno2p35 JRDj50eAd68t76uHJAojdQJEJSdsFJ9UDMsB1T/tHuK+mi71IiGx/S2cHSGHyXKb YsplrsL3Ool78NUCvo6yAnjmXEe2Lwr1XaigjZPklUVzHhGUausWhS5CWcS8mgZb omkF0l42RHNwdFYqT3BcifBYUXGhAfxcuwnE9NRLEU8BoJrVZNgedRqv62G27g4D hLFtA53jLKffIjaN2Vj6ca1toCvQTBisCXTfM5TVOZdDeUHepQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCxBG5yQxf85Q4oUqDORsQjdofAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjE0MjhkM2EtMDA0MC00 YzYwLTkyMDItY2Q2OGIyZmQ1MWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHJY9Uk5KkX0CM2QSXnLlS zhTHB6lwNyWTS2tYnD4kGc3kicEgtBJsObhJ3xJ+ifkyeKXuT3TmqyOeSAjf5l9b lXwk/cmZgMnpPcpkh1IyjSj4oJTqG+aTILZ++KJd4zOirUi8xbTgZ2/vCzcVLNpa j4DLrFSx7o00svskP7XlxKdzb8m2ocgBxWu4wdu7rDWz7ycfSUDSQwkAkJbADf+S LdmpOomRCFU3F2ZbjFrWq1S1hv1yGP32DbbZfkIQRvot2OAutJB++V6C+9kMqhIY 9DRl0I55QtiitbYR9rTZ4UgL1CMwHwXNYjaV8dgy84FxhPnubXUN6EJop+HH4LhD -----END CERTIFICATE-----Generated at Wed Nov 5 14:55:09 2025 by rpki-client