$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft File: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft (raw, json) Hash identifier: TCCZGmaZtv9shQY+je2LHUqhJnWe/UJiMubSwpUSJ+c= Subject key identifier: 31:E7:46:59:A7:DF:23:1B:32:63:21:11:77:29:D8:E7:EC:DC:8D:D9 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584B96B34DCE7747FFC9AEC01680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft Manifest number: 010D0C9F4328584B728422C8F4B1EE7ECA7B0A8E Signing time: Mon 20 Oct 2025 22:00:09 +0000 Manifest this update: Mon 20 Oct 2025 22:00:09 +0000 Manifest next update: Wed 22 Oct 2025 22:00:00 +0000 Files and hashes: 1: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (hash: 0q+0xLacODrOIfHkXqHz9nra1FOYoK/t4WZdGuM3XkU=) 2: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl (hash: W4N8ZlXCzrC1mVdxKRsH5bYh8J1Iyn6SpHrvetEUfVE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:b3:4d:ce:77:47:ff:c9:ae:c0:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Oct 20 22:00:09 2025 GMT Not After : Oct 22 22:00:00 2025 GMT Subject: CN=ce5c3a0b-3e1a-438d-8237-3a670591422d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:21:b3:fc:3f:f7:c7:53:82:8c:11:98:ad:87: 89:ca:e1:b1:36:b7:9c:b5:f6:35:6b:6a:28:82:54: ab:c9:78:b7:f7:43:d3:c3:53:c9:40:b4:bb:8e:64: c1:dc:98:0c:16:5d:0e:ed:d2:99:20:da:d5:17:3f: ff:4f:ec:95:92:4f:4d:b6:78:57:af:b8:54:4d:2e: 5e:c4:dd:7e:01:0e:c7:5f:26:44:b3:58:42:f0:ec: f9:28:01:39:24:9a:7b:27:17:42:ac:89:93:46:1e: 05:e5:1d:65:bd:9f:59:02:87:1a:99:67:f9:e7:a0: b2:45:e3:04:2f:bf:b8:2a:ca:d1:66:bb:7b:5c:4a: dc:32:ab:6c:1b:0b:4f:09:dc:a3:b7:ff:62:0d:1b: ad:52:58:72:fe:05:b6:14:c8:6d:83:b4:ff:49:a0: d1:cc:70:af:f9:97:0b:97:85:35:bc:7b:ea:fa:f1: ee:e1:21:0a:bc:80:76:95:04:7a:4b:1b:71:02:91: 9e:67:48:eb:c7:f5:7b:f2:ee:44:7c:c7:bb:c1:75: f4:e6:e8:2f:31:71:10:42:f7:a3:c5:c2:bb:60:02: d4:9b:be:dd:0e:90:8b:1d:f7:27:97:dc:4d:96:dd: 3e:1c:99:95:be:0d:fc:46:57:eb:c6:3a:3e:4d:4d: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E7:46:59:A7:DF:23:1B:32:63:21:11:77:29:D8:E7:EC:DC:8D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:08:9a:56:e6:84:dd:33:f8:c0:36:46:e0:ca:61:6d:77:fb: 63:df:17:ef:7e:96:8f:b6:cd:e3:73:21:81:64:82:b5:c7:21: 80:a1:4f:b6:47:d4:64:eb:9b:e2:30:30:32:1b:45:34:ca:59: 72:2a:f1:15:68:82:aa:aa:46:ac:86:78:db:27:3b:e9:34:9c: 06:5f:04:74:dc:47:93:29:eb:f7:b0:92:c4:b3:4f:09:7d:df: 03:1a:54:15:bc:6e:fd:3f:11:87:5e:8b:64:e0:0e:09:dc:cd: 7a:46:cf:27:cf:b4:3d:5f:4f:cc:e1:d2:35:17:1f:19:11:0b: df:39:89:9d:2b:9e:9d:a3:12:c4:00:22:f2:a0:75:e7:f2:a6: 9a:39:3d:e2:29:34:2d:8c:16:62:9b:7e:11:ab:ec:9a:8e:b3: 24:3e:8b:b2:b3:9f:50:46:6e:9d:2f:55:6f:24:6d:52:79:c7: ff:a7:c8:02:45:37:0e:9d:5a:3c:8c:aa:c9:1e:84:46:4e:a1: 9c:6d:d6:28:2d:0a:40:12:f9:d4:37:f2:cd:bb:9e:26:54:31: bd:31:39:64:c5:7e:18:41:b0:85:9d:82:cf:9c:a1:45:8d:93: 5d:0f:4e:93:34:83:7b:ea:fe:69:55:38:ab:3a:60:71:d3:6e: ad:d0:12:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWs03Od0f/ya7AFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI1MTAyMDIyMDAwOVoXDTI1MTAyMjIyMDAwMFowLzEtMCsGA1UEAxMk Y2U1YzNhMGItM2UxYS00MzhkLTgyMzctM2E2NzA1OTE0MjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiGz/D/3x1OCjBGYrYeJyuGxNrectfY1a2oo glSryXi390PTw1PJQLS7jmTB3JgMFl0O7dKZINrVFz//T+yVkk9NtnhXr7hUTS5e xN1+AQ7HXyZEs1hC8Oz5KAE5JJp7JxdCrImTRh4F5R1lvZ9ZAocamWf556CyReME L7+4KsrRZrt7XErcMqtsGwtPCdyjt/9iDRutUlhy/gW2FMhtg7T/SaDRzHCv+ZcL l4U1vHvq+vHu4SEKvIB2lQR6SxtxApGeZ0jrx/V78u5EfMe7wXX05ugvMXEQQvej xcK7YALUm77dDpCLHfcnl9xNlt0+HJmVvg38Rlfrxjo+TU182wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDHnRlmn3yMbMmMhEXcp2Ofs3I3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMjFhMjBhZDktYTg0OC00 ZDBkLWExMTktM2RmNWQ2ZGJjYjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqCJpW5oTdM/jANkbgymFt d/tj3xfvfpaPts3jcyGBZIK1xyGAoU+2R9Rk65viMDAyG0U0yllyKvEVaIKqqkas hnjbJzvpNJwGXwR03EeTKev3sJLEs08Jfd8DGlQVvG79PxGHXotk4A4J3M16Rs8n z7Q9X0/M4dI1Fx8ZEQvfOYmdK56doxLEACLyoHXn8qaaOT3iKTQtjBZim34Rq+ya jrMkPouys59QRm6dL1VvJG1Secf/p8gCRTcOnVo8jKrJHoRGTqGcbdYoLQpAEvnU N/LNu54mVDG9MTlkxX4YQbCFnYLPnKFFjZNdD06TNIN76v5pVTirOmBx026t0BI7 -----END CERTIFICATE-----Generated at Tue Oct 21 04:25:01 2025 by rpki-client