$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: DueQlQM/GHciXLge8V3icNoRGm6Lo6KUHaSy9ALijlg= Subject key identifier: 75:D9:6F:C4:03:C1:39:6E:59:4E:F0:2C:4F:C3:15:0A:45:26:42:65 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584B95E2CC3AC01408C72965EBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF6F8 Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Wed 22 Oct 2025 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: yGFzasWcwjxAI140gjkdPFthaM/+rVrJMMJjH0GpIB8=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: 5LEYqOtIMFKhsegGISIgoukgf3mRSp7kPpb+mQ9oqJs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:cc:3a:c0:14:08:c7:29:65:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 22 15:00:00 2025 GMT Subject: CN=b47218b5-c028-4ec7-bbc8-6de5032bb50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:c3:8a:b2:3a:72:2e:88:1f:7c:c2:f4:eb: b4:ca:1f:84:84:bd:a0:df:e6:f1:65:75:9f:fe:21: 78:e7:ee:76:04:32:87:ef:ff:1a:03:90:d9:e1:17: ae:1d:87:5d:1b:a3:87:d4:68:a5:b7:c1:5e:23:16: b3:dd:06:af:29:b7:82:ed:ab:47:2b:45:9f:9e:84: 4c:38:78:b0:e4:ee:ba:ea:92:bd:02:c9:6f:18:b8: 0e:a7:a1:89:00:ec:fb:e2:87:07:46:e2:40:65:d3: f4:44:0c:0d:57:9a:ff:f0:49:90:e6:b7:f3:f0:f8: de:5a:df:e8:f6:ed:5b:a6:e7:e6:54:d9:d0:57:79: b8:71:8d:df:ae:3b:99:67:3d:29:e5:b0:d2:46:82: 53:10:7a:bb:c4:e6:5d:7b:88:9a:c4:88:98:3a:10: dd:53:91:b5:72:8a:f1:28:ca:5d:97:42:4d:ac:d2: c2:fa:96:26:02:40:37:96:33:f2:49:de:f1:02:86: 77:46:9f:48:9b:7a:88:39:3a:52:e9:9f:33:ea:38: d1:f3:f5:aa:39:0a:fd:9b:a0:8a:a1:e1:65:c0:3f: ec:80:21:d4:63:c2:81:98:bb:fe:3d:9a:79:5a:f2: 16:28:7b:bd:bd:33:03:1e:c3:ca:d5:f2:ce:f5:f2: bc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D9:6F:C4:03:C1:39:6E:59:4E:F0:2C:4F:C3:15:0A:45:26:42:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a5:09:2a:97:29:6f:4e:4b:89:03:04:60:eb:93:4d:6b:c2: 7e:95:36:12:3c:fc:b4:19:71:fe:3a:72:fb:8d:be:bb:80:70: 4e:41:ba:c4:31:c7:9f:b7:43:3b:ef:fc:87:6d:56:c0:88:a9: 95:1e:6f:f3:72:e3:a7:b7:3f:61:28:bf:09:9a:e7:0b:35:34: 64:e0:3e:3d:6b:42:01:7d:98:01:e7:d4:2b:5b:c3:fc:23:d5: 25:0b:7d:5b:a6:6d:d7:ee:43:1f:93:10:5f:32:76:fb:2b:64: 5d:7c:90:a1:a8:79:4a:a1:fc:8f:9f:0a:b0:e4:b1:17:ce:d1: b8:8c:f5:08:86:fe:70:ce:e8:bb:04:a7:1e:41:39:5b:50:a0: fa:de:dc:b0:e8:59:da:a1:90:b6:b0:d3:02:f5:93:7e:19:a6: d2:95:9d:9e:0e:19:07:c0:db:11:a4:ea:e4:e2:0a:1d:fe:09: c6:a8:a4:a9:38:be:fd:70:d7:79:79:98:e2:60:e3:d0:9c:bb: d3:fa:09:d7:98:2e:cc:71:1c:ac:3b:24:c0:94:6a:fc:4d:17: 3d:c4:bf:9b:9f:e1:2b:a9:34:cc:69:7c:6f:ac:ac:f4:90:7b: f9:a9:de:3c:af:79:32:7e:46:71:3e:b1:00:15:67:74:1b:fa: 30:b1:e9:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4sw6wBQIxyll68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMjE1MDAwMFowLzEtMCsGA1UEAxMk YjQ3MjE4YjUtYzAyOC00ZWM3LWJiYzgtNmRlNTAzMmJiNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApovDirI6ci6IH3zC9Ou0yh+EhL2g3+bxZXWf /iF45+52BDKH7/8aA5DZ4ReuHYddG6OH1Gilt8FeIxaz3QavKbeC7atHK0WfnoRM OHiw5O666pK9AslvGLgOp6GJAOz74ocHRuJAZdP0RAwNV5r/8EmQ5rfz8PjeWt/o 9u1bpufmVNnQV3m4cY3frjuZZz0p5bDSRoJTEHq7xOZde4iaxIiYOhDdU5G1corx KMpdl0JNrNLC+pYmAkA3ljPySd7xAoZ3Rp9Im3qIOTpS6Z8z6jjR8/WqOQr9m6CK oeFlwD/sgCHUY8KBmLv+PZp5WvIWKHu9vTMDHsPK1fLO9fK86wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHXZb8QDwTluWU7wLE/DFQpFJkJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkpQkqlylvTkuJAwRg65NN a8J+lTYSPPy0GXH+OnL7jb67gHBOQbrEMceft0M77/yHbVbAiKmVHm/zcuOntz9h KL8JmucLNTRk4D49a0IBfZgB59QrW8P8I9UlC31bpm3X7kMfkxBfMnb7K2RdfJCh qHlKofyPnwqw5LEXztG4jPUIhv5wzui7BKceQTlbUKD63tyw6FnaoZC2sNMC9ZN+ GabSlZ2eDhkHwNsRpOrk4god/gnGqKSpOL79cNd5eZjiYOPQnLvT+gnXmC7McRys OyTAlGr8TRc9xL+bn+ErqTTMaXxvrKz0kHv5qd48r3kyfkZxPrEAFWd0G/owsekk -----END CERTIFICATE-----Generated at Tue Oct 21 15:49:51 2025 by rpki-client