$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft File: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft (raw, json) Hash identifier: KGGlMTEIU1jzBAgxHGenRMP9QP8Xow6KlFgFv/bVPAc= Subject key identifier: C3:7B:38:98:B8:C5:C1:87:6E:B3:BC:4E:43:2C:E8:D0:E8:63:51:64 Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F4328584A5D8F87E618B9F2BF8E4E5100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft Manifest number: 010D0C9F432858438A0A161212CB83FF1869C571 Signing time: Mon 30 Jun 2025 18:00:03 +0000 Manifest this update: Mon 30 Jun 2025 18:00:03 +0000 Manifest next update: Thu 03 Jul 2025 18:00:00 +0000 Files and hashes: 1: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl (hash: 7HaS4760dcQ9iIO1IAh3bSxqQ5GL/ECho6RYG2p1JQ8=) 2: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (hash: wPo/EDBh6EpH2laUiIW+ygw4D25LhwzStO/+YBQyTz8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:8f:87:e6:18:b9:f2:bf:8e:4e:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: Jun 30 18:00:03 2025 GMT Not After : Jul 3 18:00:00 2025 GMT Subject: CN=2aca6fbb-a8a1-44f0-841a-d9d0f4727ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:d5:d5:65:d1:6c:25:18:7a:0b:2e:fb:32: fb:cc:fe:83:76:bb:78:d8:19:d9:5d:f1:98:eb:07: ba:97:0a:83:d0:89:32:38:03:5f:e5:0b:b1:d8:c9: e3:cb:67:bd:a8:6b:4f:6f:b8:85:27:84:6f:d9:3a: 13:1a:d2:fb:29:8b:dc:a6:11:44:45:f5:7f:dd:85: 0b:2b:b9:63:1d:30:89:5b:0a:ce:8d:ed:70:f5:4b: 2e:c3:70:d0:93:00:da:4f:08:36:1c:55:f1:ff:88: 73:4a:8c:bc:6f:bf:96:d5:59:73:2f:35:91:19:c3: 17:35:53:b0:a0:94:0c:f5:b7:c1:b7:ec:58:d6:08: 91:5c:ac:f3:fa:36:95:43:20:b3:9e:cc:ae:5c:43: 3f:b8:66:6a:9a:6e:18:a6:c8:e6:f3:bb:5a:bc:84: c5:1a:70:fc:0f:6d:ba:80:25:82:e5:60:d4:e8:b6: 81:cc:be:03:2a:22:3d:e7:90:10:93:a0:f1:1f:e8: dd:da:20:47:c9:d5:0a:95:51:cf:b3:4a:66:86:a5: 24:7b:94:09:f4:3a:b4:39:f5:ef:f2:63:f7:d1:a9: c0:57:56:57:d4:ad:56:9e:84:fb:4e:cb:54:eb:e6: 83:04:73:37:38:18:aa:e9:9a:04:cf:61:e3:a4:9e: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7B:38:98:B8:C5:C1:87:6E:B3:BC:4E:43:2C:E8:D0:E8:63:51:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4e:75:60:2f:b8:5c:df:64:de:01:52:77:fc:36:c6:c6:99: 80:3f:68:ea:c7:c2:00:a1:4e:7f:07:c5:02:2f:07:e8:98:94: 63:b6:2e:4e:ca:15:2b:a1:88:46:33:c5:46:d0:39:60:16:a7: 29:f6:3a:3a:c7:00:e9:4a:dd:36:f4:f1:0a:e8:96:f7:61:ed: 3e:87:07:a4:d3:54:22:4d:18:b5:1b:ba:29:db:0d:56:c3:1d: e4:2c:fe:17:51:1f:a5:de:ae:82:79:2a:1f:af:a2:fb:15:a3: 60:df:0b:2c:11:76:c9:54:bc:6b:78:78:4c:52:99:e0:19:bf: c6:6b:a9:b9:21:f7:88:ce:f7:59:81:06:76:c4:c2:0b:c5:7a: b8:87:98:86:16:4f:28:ff:8f:d1:89:5f:19:d6:c7:a9:f5:f3: 72:38:45:b2:37:8c:8d:89:71:00:6b:0b:f9:c9:7c:88:66:f5: 21:74:7c:b4:7f:4d:3b:1d:23:ac:cb:c1:b8:ac:a2:69:c1:ce: 36:5b:71:30:c5:e5:97:ea:6b:0a:88:68:bd:c5:53:47:26:af: af:95:ed:04:04:3d:09:d3:66:0b:01:77:c7:af:4e:56:9c:22: 89:a3:3b:0d:56:08:8d:91:1d:1d:7c:f8:20:07:05:a5:0e:50: 8f:79:82:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdj4fmGLnyv45OUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI1MDYzMDE4MDAwM1oXDTI1MDcwMzE4MDAwMFowLzEtMCsGA1UEAxMk MmFjYTZmYmItYThhMS00NGYwLTg0MWEtZDlkMGY0NzI3Y2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxvV1WXRbCUYegsu+zL7zP6Ddrt42BnZXfGY 6we6lwqD0IkyOANf5Qux2Mnjy2e9qGtPb7iFJ4Rv2ToTGtL7KYvcphFERfV/3YUL K7ljHTCJWwrOje1w9Usuw3DQkwDaTwg2HFXx/4hzSoy8b7+W1VlzLzWRGcMXNVOw oJQM9bfBt+xY1giRXKzz+jaVQyCznsyuXEM/uGZqmm4Ypsjm87tavITFGnD8D226 gCWC5WDU6LaBzL4DKiI955AQk6DxH+jd2iBHydUKlVHPs0pmhqUke5QJ9Dq0OfXv 8mP30anAV1ZX1K1WnoT7TstU6+aDBHM3OBiq6ZoEz2HjpJ4ZMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMN7OJi4xcGHbrO8TkMs6NDoY1FkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvMjFhMGUwMzYtZTRiYi00 YWJmLThlZGUtOGFkOWEyMTNmOTFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBTnVgL7hc32TeAVJ3/DbG xpmAP2jqx8IAoU5/B8UCLwfomJRjti5OyhUroYhGM8VG0DlgFqcp9jo6xwDpSt02 9PEK6Jb3Ye0+hwek01QiTRi1G7op2w1Wwx3kLP4XUR+l3q6CeSofr6L7FaNg3wss EXbJVLxreHhMUpngGb/Ga6m5IfeIzvdZgQZ2xMILxXq4h5iGFk8o/4/RiV8Z1sep 9fNyOEWyN4yNiXEAawv5yXyIZvUhdHy0f007HSOsy8G4rKJpwc42W3EwxeWX6msK iGi9xVNHJq+vle0EBD0J02YLAXfHr05WnCKJozsNVgiNkR0dfPggBwWlDlCPeYIW -----END CERTIFICATE-----Generated at Tue Jul 1 16:53:34 2025 by rpki-client