$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: trJ82Yik/kvDrrqpaZIuPtSv83EXpoyeZ4XIAbsNtJo= Subject key identifier: F9:D4:85:F0:54:4B:90:F7:AA:3D:29:1D:6E:74:A8:A8:90:AC:CC:67 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F43285849D7531F4EEA22191B75D1D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E262 Signing time: Tue 13 May 2025 16:00:03 +0000 Manifest this update: Tue 13 May 2025 16:00:03 +0000 Manifest next update: Fri 16 May 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: asiguUT7PL1IBHzvNurNVHqZbvGidm9aF1Q4P7UGlJA=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: DlhNIxPS6D8ZrNGATknNby6Eb6zHOa69dcOgeiT8t7o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:53:1f:4e:ea:22:19:1b:75:d1:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: May 13 16:00:03 2025 GMT Not After : May 16 16:00:00 2025 GMT Subject: CN=03773102-8cd5-4058-b4f8-3db7ff67fcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:c0:2c:77:fc:81:00:79:e5:c7:52:7a:e3: d6:c8:44:d0:09:ed:bf:4b:28:04:bf:6f:5d:2f:3e: ec:f4:38:61:c4:9a:78:0e:ce:62:56:d8:dc:39:bf: 97:b7:02:26:45:5d:e1:07:05:97:7c:55:7e:9e:cb: 0f:03:c5:39:6f:aa:bc:fc:0e:d6:27:88:cb:21:f6: 8e:63:f9:99:4a:7b:9e:8d:ae:d0:f3:10:2f:b9:7e: 78:61:11:4d:0d:0d:43:16:64:a9:e5:13:4c:c7:3e: 28:aa:1e:d2:a2:a1:bf:fd:9e:5c:dc:5b:b1:71:c6: cc:90:51:55:57:2f:1b:38:ce:9f:89:fa:9b:d8:95: fa:68:69:ec:fa:ff:c0:9e:19:88:0d:61:d8:c0:60: 8b:64:61:86:78:53:52:2a:0d:d2:f0:1f:ef:b0:7a: dd:fa:4a:65:89:35:57:82:bd:26:6e:54:36:dc:95: b5:46:e1:93:c1:4c:55:bd:c7:71:b1:89:d3:28:da: 12:64:37:be:05:05:aa:d3:3a:f4:ae:24:e2:b1:e5: fd:94:43:8c:92:e9:d8:5d:88:c4:0b:56:ed:5c:30: 8a:ff:28:97:44:ba:f5:d0:d2:4d:47:82:7b:42:03: 05:97:62:04:23:d6:c7:b1:a8:ff:aa:9a:78:df:8a: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D4:85:F0:54:4B:90:F7:AA:3D:29:1D:6E:74:A8:A8:90:AC:CC:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b9:fc:65:19:13:e4:22:f8:d2:45:ab:62:d9:ae:14:8d:e1: 89:66:56:5a:3d:20:01:2e:d2:95:20:cc:b6:6e:db:67:b6:f9: ec:30:04:8c:1d:14:e1:a8:38:72:ad:a3:b8:64:e2:36:cd:ef: 7b:61:0e:d2:60:fd:7d:51:b4:af:2d:24:24:73:21:c4:4e:bb: 39:56:80:15:fe:f8:5e:fb:11:20:6e:68:1c:bc:15:f4:05:1a: 1c:3c:a4:dd:63:e7:d9:89:20:8d:cd:2d:84:66:b8:45:20:6c: 88:84:3f:b3:bd:e1:be:93:96:12:8a:9c:fa:a4:08:45:ca:be: 8b:d2:7b:07:55:be:5a:2b:58:a6:7e:ab:57:bf:94:e9:90:df: 33:7d:71:eb:fa:7d:99:84:32:44:aa:0b:75:5d:a3:3f:0d:dd: 00:24:4c:10:36:09:01:0b:51:ab:eb:a6:75:a2:0c:17:b1:41: 44:20:4c:a6:fa:e7:06:fe:69:8f:5d:52:25:a1:90:08:2e:51: 23:f3:a5:05:62:a2:ff:6f:2a:d8:71:69:56:f0:ad:a2:a0:af: 86:03:d5:39:f0:8c:d6:05:68:09:10:9c:46:96:45:f9:67:53: f4:1c:31:55:29:ee:65:44:7d:26:5c:98:b3:02:47:d7:49:41: 73:61:7b:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnXUx9O6iIZG3XR1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MDUxMzE2MDAwM1oXDTI1MDUxNjE2MDAwMFowLzEtMCsGA1UEAxMk MDM3NzMxMDItOGNkNS00MDU4LWI0ZjgtM2RiN2ZmNjdmY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcrALHf8gQB55cdSeuPWyETQCe2/SygEv29d Lz7s9DhhxJp4Ds5iVtjcOb+XtwImRV3hBwWXfFV+nssPA8U5b6q8/A7WJ4jLIfaO Y/mZSnueja7Q8xAvuX54YRFNDQ1DFmSp5RNMxz4oqh7SoqG//Z5c3FuxccbMkFFV Vy8bOM6fifqb2JX6aGns+v/AnhmIDWHYwGCLZGGGeFNSKg3S8B/vsHrd+kpliTVX gr0mblQ23JW1RuGTwUxVvcdxsYnTKNoSZDe+BQWq0zr0riTiseX9lEOMkunYXYjE C1btXDCK/yiXRLr10NJNR4J7QgMFl2IEI9bHsaj/qpp434q9hQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPnUhfBUS5D3qj0pHW50qKiQrMxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYufxlGRPkIvjSRati2a4U jeGJZlZaPSABLtKVIMy2bttntvnsMASMHRThqDhyraO4ZOI2ze97YQ7SYP19UbSv LSQkcyHETrs5VoAV/vhe+xEgbmgcvBX0BRocPKTdY+fZiSCNzS2EZrhFIGyIhD+z veG+k5YSipz6pAhFyr6L0nsHVb5aK1imfqtXv5TpkN8zfXHr+n2ZhDJEqgt1XaM/ Dd0AJEwQNgkBC1Gr66Z1ogwXsUFEIEym+ucG/mmPXVIloZAILlEj86UFYqL/byrY cWlW8K2ioK+GA9U58IzWBWgJEJxGlkX5Z1P0HDFVKe5lRH0mXJizAkfXSUFzYXva -----END CERTIFICATE-----Generated at Wed May 14 00:00:06 2025 by rpki-client