$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: Lu56B09p+pK24L2e8/DnHYqEvqw8HZnh0SMV5NEDFqw= Subject key identifier: AF:29:E0:C4:AE:F5:ED:C2:96:FE:85:9B:0B:BA:7D:CA:59:54:2B:F4 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584A62E9576382390968D25B0080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E296 Signing time: Wed 02 Jul 2025 16:00:03 +0000 Manifest this update: Wed 02 Jul 2025 16:00:03 +0000 Manifest next update: Sat 05 Jul 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: +8kjw/hxS6SzJaXaAPm9ipTzr1VxzmGDhG3Wzq5rmKU=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: wecdvfG9XIDtkXRg4f3V3ELKWwthX4QdIpcpi2DuCFQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:e9:57:63:82:39:09:68:d2:5b:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Jul 2 16:00:03 2025 GMT Not After : Jul 5 16:00:00 2025 GMT Subject: CN=34a33386-8591-41ed-8aba-c98046f45377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:15:7b:05:89:22:20:d2:ec:d4:f0:af:92:8a: 49:3a:69:80:f9:be:13:68:5b:9a:5b:c4:15:87:34: cd:45:c0:fa:61:6b:88:98:33:2e:3a:44:1e:34:14: 05:b2:f3:7b:57:67:60:ed:ec:aa:bd:4a:4f:3d:18: 96:cd:c1:01:a5:0b:29:2f:d6:47:0f:85:cd:38:a2: 0c:98:bb:44:85:3c:c1:91:bf:ef:03:e0:46:30:56: 26:f5:31:b5:0d:d6:ab:1d:59:90:e1:50:28:3e:0c: f9:0a:fe:ca:d9:88:f0:ae:a2:b0:ad:f5:98:17:05: 77:30:39:8f:2c:5c:52:90:be:9e:c0:2c:3f:4b:32: ca:31:0b:55:f3:8e:9a:a3:5a:78:fa:90:ef:f2:45: 8e:ad:b6:31:09:57:83:b6:f2:5f:e3:ee:23:2c:ba: 5d:ad:a5:dd:87:48:8d:7b:b7:c9:b9:70:7e:ad:85: 2b:86:69:89:05:be:bc:cb:53:6b:7c:99:cb:37:1b: 6b:91:ee:17:85:d3:1d:7c:57:05:fd:70:06:d7:8e: 00:3a:4d:c1:9e:09:a0:e7:52:b5:0c:44:7e:51:f2: 75:e3:6a:0e:7d:71:91:aa:b4:d2:40:4e:73:8e:47: ce:14:5d:9e:8b:fa:56:b8:2c:7b:57:f0:e1:c2:b4: f4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:E0:C4:AE:F5:ED:C2:96:FE:85:9B:0B:BA:7D:CA:59:54:2B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4c:d4:4f:9b:d4:2d:4b:8a:3f:98:8c:18:82:83:01:54:35: 58:ec:dd:b9:4f:20:ef:e6:cc:c1:33:8d:75:46:1d:c9:ae:71: ba:eb:5b:9c:e0:a7:59:86:9b:f0:4e:14:b5:a3:43:5f:44:cd: a5:d4:a6:6e:03:49:26:f3:8a:b9:97:b0:33:a0:71:5a:45:0f: 9c:e2:d6:18:5a:ab:70:88:99:45:a7:53:42:7d:9a:d8:c1:d0: 9e:d0:01:63:c5:d5:f9:0d:4b:53:14:02:e6:46:dc:c5:af:78: c9:f9:a7:5d:78:fd:dc:e6:80:ef:ca:0a:02:e0:f0:04:e2:8c: cd:4e:e9:5f:c5:02:e9:77:7f:f4:a4:3f:65:16:7f:d1:24:d1: 88:e4:f9:9b:5b:e9:13:fb:fc:03:d1:e4:0a:5c:09:ae:00:f5: 0d:ed:2d:a6:6e:ba:32:46:23:0d:72:ed:8b:df:e2:70:58:c0: 1b:1f:8c:6a:f8:2f:65:66:91:fa:a5:e5:70:ec:ad:d8:27:3d: 40:c8:1e:62:53:76:09:5e:5d:cb:12:53:db:73:33:04:cf:ac: 51:84:9d:7a:12:e1:1c:2b:a7:3b:07:12:f3:c3:a7:42:c6:6e: 1c:c0:0a:c4:7a:ef:92:17:12:47:4a:5a:db:0b:de:9c:33:86: ba:34:6a:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpi6VdjgjkJaNJbAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MDcwMjE2MDAwM1oXDTI1MDcwNTE2MDAwMFowLzEtMCsGA1UEAxMk MzRhMzMzODYtODU5MS00MWVkLThhYmEtYzk4MDQ2ZjQ1Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRV7BYkiINLs1PCvkopJOmmA+b4TaFuaW8QV hzTNRcD6YWuImDMuOkQeNBQFsvN7V2dg7eyqvUpPPRiWzcEBpQspL9ZHD4XNOKIM mLtEhTzBkb/vA+BGMFYm9TG1DdarHVmQ4VAoPgz5Cv7K2YjwrqKwrfWYFwV3MDmP LFxSkL6ewCw/SzLKMQtV846ao1p4+pDv8kWOrbYxCVeDtvJf4+4jLLpdraXdh0iN e7fJuXB+rYUrhmmJBb68y1NrfJnLNxtrke4XhdMdfFcF/XAG144AOk3Bngmg51K1 DER+UfJ142oOfXGRqrTSQE5zjkfOFF2ei/pWuCx7V/DhwrT0awIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK8p4MSu9e3Clv6Fmwu6fcpZVCv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWTNRPm9QtS4o/mIwYgoMB VDVY7N25TyDv5szBM411Rh3JrnG661uc4KdZhpvwThS1o0NfRM2l1KZuA0km84q5 l7AzoHFaRQ+c4tYYWqtwiJlFp1NCfZrYwdCe0AFjxdX5DUtTFALmRtzFr3jJ+add eP3c5oDvygoC4PAE4ozNTulfxQLpd3/0pD9lFn/RJNGI5PmbW+kT+/wD0eQKXAmu APUN7S2mbroyRiMNcu2L3+JwWMAbH4xq+C9lZpH6peVw7K3YJz1AyB5iU3YJXl3L ElPbczMEz6xRhJ16EuEcK6c7BxLzw6dCxm4cwArEeu+SFxJHSlrbC96cM4a6NGqD -----END CERTIFICATE-----Generated at Thu Jul 3 16:43:06 2025 by rpki-client