$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft File: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft (raw, json) Hash identifier: Ny+Ia+C+tQBBG40R9GgthvKiXAfCRtQJx75GSuB3mJs= Subject key identifier: 6F:8F:C6:67:5F:63:EA:B1:5E:6E:58:32:F7:2F:21:1C:60:1B:4A:9E Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F4328584AF45082AE029B3FAFCB7BEB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft Manifest number: 010D0C9F432858438A0A161212CB83FF1869C5A9 Signing time: Sat 23 Aug 2025 18:00:08 +0000 Manifest this update: Sat 23 Aug 2025 18:00:08 +0000 Manifest next update: Tue 26 Aug 2025 18:00:00 +0000 Files and hashes: 1: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl (hash: rl+SD3lGEmCVaBCmLgTxi0lKITjGovJouhXj4PYO6OU=) 2: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (hash: GQsXCetoiPUIyEN285XdrTseNxbqh2OGN0+tJv7WOXs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:50:82:ae:02:9b:3f:af:cb:7b:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: Aug 23 18:00:08 2025 GMT Not After : Aug 26 18:00:00 2025 GMT Subject: CN=99dfc00e-fb97-478f-9abf-0676e49a10f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4c:ef:53:f9:19:d9:dd:92:15:74:58:76:01: 59:03:50:05:c7:c6:69:87:c9:c5:f5:8e:07:eb:88: ff:19:9a:25:cd:95:34:67:39:54:65:ef:a7:8c:c0: e3:ad:d8:9b:a3:61:fd:dd:13:4b:87:85:3d:96:b0: 38:45:bd:96:f7:d9:37:68:8a:be:76:be:75:ca:2f: 06:ca:b2:ec:ce:e1:e5:f0:7a:28:53:60:fa:1a:f9: fa:fa:0b:a0:3c:79:21:68:df:62:9b:e3:0f:1c:9e: 86:26:a3:02:cb:58:a5:4a:1a:eb:62:77:86:6b:84: 27:e8:e2:d3:fb:de:0d:3b:63:e6:6d:b1:c2:ff:79: 4c:92:d0:51:e2:a0:d5:30:af:23:31:83:ac:4b:f7: b8:5c:2e:d3:e8:05:5b:34:b4:14:4d:1a:13:44:ae: d1:d9:45:bb:5c:96:0e:34:d1:81:92:55:d1:60:d6: f2:74:52:bb:9b:af:bb:70:eb:57:49:5f:45:6e:4b: f8:0c:61:34:1b:9c:9b:68:54:ff:ec:f0:cb:da:72: 90:8d:dd:3a:dd:8e:7c:f6:f7:02:db:3f:4b:24:fd: ae:f1:55:c0:31:f7:7a:f4:1a:3c:b9:d4:a8:c5:9f: 3e:07:ec:4c:6f:54:73:b7:c7:92:56:06:43:56:0f: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8F:C6:67:5F:63:EA:B1:5E:6E:58:32:F7:2F:21:1C:60:1B:4A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8a:cf:41:7d:09:9a:c5:2a:6f:87:69:a2:cd:f7:3b:11:ef: 67:89:89:0c:db:72:d3:3f:ec:ca:2d:9c:95:00:c0:20:57:22: 38:5f:fe:42:d6:44:3d:97:22:07:3c:1c:aa:8c:e3:cb:8f:c9: 40:17:22:fa:ab:c7:59:7d:9b:e5:b8:b5:dd:59:fe:c4:38:0d: cb:36:d1:3c:52:3a:5e:2e:9e:0a:f9:63:7a:d5:3b:62:16:f6: 53:c6:d7:70:e6:bc:bb:8f:97:a8:d8:a1:bc:57:75:af:90:84: 3d:42:48:1a:f6:66:81:18:46:67:2b:65:19:95:ac:23:eb:62: e3:76:83:76:69:7f:0c:b8:ec:d8:bd:90:25:cb:44:2d:b4:ca: 46:b1:6b:02:88:5d:b7:f3:2d:81:a0:67:81:87:5a:f2:9d:b3: d2:56:3a:e3:c7:79:ec:49:41:4e:c1:bf:c3:6a:2e:37:9d:e2: ee:d5:db:16:26:c9:af:79:9b:30:0e:2f:97:70:ac:62:33:53: 83:d8:a4:9c:e3:bd:d7:49:1f:e5:91:cc:9a:e4:74:6f:ce:ab: 2f:c5:dc:b8:bf:27:bc:3b:a5:c0:79:a8:c5:b1:eb:4a:21:04: 71:72:b9:b7:59:e6:31:a0:de:84:99:87:47:70:cf:48:59:09: b4:a4:d7:64 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0UIKuAps/r8t760AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI1MDgyMzE4MDAwOFoXDTI1MDgyNjE4MDAwMFowLzEtMCsGA1UEAxMk OTlkZmMwMGUtZmI5Ny00NzhmLTlhYmYtMDY3NmU0OWExMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0zvU/kZ2d2SFXRYdgFZA1AFx8Zph8nF9Y4H 64j/GZolzZU0ZzlUZe+njMDjrdibo2H93RNLh4U9lrA4Rb2W99k3aIq+dr51yi8G yrLszuHl8HooU2D6Gvn6+gugPHkhaN9im+MPHJ6GJqMCy1ilShrrYneGa4Qn6OLT +94NO2PmbbHC/3lMktBR4qDVMK8jMYOsS/e4XC7T6AVbNLQUTRoTRK7R2UW7XJYO NNGBklXRYNbydFK7m6+7cOtXSV9Fbkv4DGE0G5ybaFT/7PDL2nKQjd063Y589vcC 2z9LJP2u8VXAMfd69Bo8udSoxZ8+B+xMb1Rzt8eSVgZDVg+6ywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG+PxmdfY+qxXm5YMvcvIRxgG0qeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvMjFhMGUwMzYtZTRiYi00 YWJmLThlZGUtOGFkOWEyMTNmOTFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATis9BfQmaxSpvh2mizfc7 Ee9niYkM23LTP+zKLZyVAMAgVyI4X/5C1kQ9lyIHPByqjOPLj8lAFyL6q8dZfZvl uLXdWf7EOA3LNtE8UjpeLp4K+WN61TtiFvZTxtdw5ry7j5eo2KG8V3WvkIQ9Qkga 9maBGEZnK2UZlawj62LjdoN2aX8MuOzYvZAly0QttMpGsWsCiF238y2BoGeBh1ry nbPSVjrjx3nsSUFOwb/Dai43neLu1dsWJsmveZswDi+XcKxiM1OD2KSc473XSR/l kcya5HRvzqsvxdy4vye8O6XAeajFsetKIQRxcrm3WeYxoN6EmYdHcM9IWQm0pNdk -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:18 2025 by rpki-client