$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: a1/KAu3gpMlNk/QGlcdKG0aTvTc68rJvCasJyEN8Pxo= Subject key identifier: 79:36:3B:C0:BC:98:EB:1E:07:C8:D1:C5:37:C5:31:F4:B1:05:7F:72 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584AF414F11EBB1A96EE0B0F4400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E2CA Signing time: Sat 23 Aug 2025 16:00:08 +0000 Manifest this update: Sat 23 Aug 2025 16:00:08 +0000 Manifest next update: Tue 26 Aug 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: mvoD05F/oixEF/HTAYpWwHEjSCFrjozPqZP5u3abJHA=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: wecdvfG9XIDtkXRg4f3V3ELKWwthX4QdIpcpi2DuCFQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:14:f1:1e:bb:1a:96:ee:0b:0f:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Aug 23 16:00:08 2025 GMT Not After : Aug 26 16:00:00 2025 GMT Subject: CN=7c7ffe72-0195-4c43-864c-27e67a6ca50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:f0:06:20:7d:e1:88:f3:00:5c:a7:b3:bf: 68:b2:a7:5b:02:b9:2b:8d:10:40:d3:35:6e:61:77: 69:ec:c6:8e:0d:9d:e6:32:9c:8e:c3:2f:e6:1b:21: 14:4e:05:d5:14:b4:56:ca:70:a9:ec:f8:74:30:68: 48:38:f9:77:84:8b:a5:7c:72:f3:d4:34:2b:c3:55: 4b:ab:d7:2a:01:b4:8a:ef:32:71:52:8c:c0:4d:f9: 88:50:46:42:a0:9f:77:2d:0e:5a:52:04:5d:45:04: a2:c4:7b:80:b4:27:ba:20:da:52:5e:ec:8d:0a:c3: 5f:b7:22:dc:1e:eb:3f:84:78:ab:da:0e:94:ee:07: 41:39:3a:54:79:cf:3c:7e:79:d7:04:79:59:be:42: 56:da:ad:e5:1b:28:8b:21:2d:6d:b5:27:47:c8:cc: 17:26:a1:b6:ba:48:c2:18:da:77:17:6c:c6:62:a1: 7f:e0:17:47:ca:e6:04:08:f7:78:1f:4c:20:02:38: 34:66:cf:11:8b:62:d2:3b:ee:22:66:df:08:c5:64: 7b:2d:b8:12:a4:d0:9d:a2:3b:b4:06:e0:87:3a:1c: c7:a0:db:ae:f8:b3:2f:29:5d:b5:14:78:80:fa:89: 34:f0:79:26:de:bf:dd:d2:21:26:92:ba:5d:a0:1a: 17:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:36:3B:C0:BC:98:EB:1E:07:C8:D1:C5:37:C5:31:F4:B1:05:7F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6c:e2:31:f0:f3:0e:69:56:e7:b4:8d:ed:f3:65:59:3d:d8: 31:8e:2e:51:c3:9b:1c:6e:31:00:2b:e6:76:b2:65:06:b7:41: fb:40:52:d8:20:6e:fd:45:98:1f:8e:12:e1:41:26:1e:7f:28: f5:a3:6e:4f:37:6b:e8:c4:c5:d8:de:57:ee:65:c3:93:6c:31: 9a:61:e4:55:99:f6:35:d8:ac:c6:67:43:2d:a1:cd:6c:d5:c0: 07:fd:76:dd:91:ae:53:e8:b2:16:51:cf:4e:06:26:ef:42:16: d0:0e:e8:1a:31:70:e5:ec:b6:92:19:8c:44:fd:4a:e9:45:66: b9:d8:96:1f:d5:86:54:9e:ee:88:fe:11:04:25:fe:2e:7e:69: 51:a9:4c:54:7c:e6:2f:b3:77:e6:78:c6:62:ad:9d:10:ef:af: 87:d6:31:24:c9:d6:34:8f:e7:5d:23:3e:3f:71:9b:f2:e8:b3: 82:f9:a2:e4:3b:e6:49:9a:dd:b1:a0:a0:fa:b7:9f:ef:5a:53: 29:8a:6d:2b:48:62:e6:02:bd:78:bd:05:e6:6b:3a:e2:83:90: 03:50:14:a5:01:d2:b4:23:8a:2e:d5:39:08:40:a7:1a:e3:2d: e1:42:e9:27:26:2b:e2:6d:11:7e:82:1a:90:43:d1:69:c4:fd: c2:f7:e5:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0FPEeuxqW7gsPRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MDgyMzE2MDAwOFoXDTI1MDgyNjE2MDAwMFowLzEtMCsGA1UEAxMk N2M3ZmZlNzItMDE5NS00YzQzLTg2NGMtMjdlNjdhNmNhNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDXwBiB94YjzAFyns79osqdbArkrjRBA0zVu YXdp7MaODZ3mMpyOwy/mGyEUTgXVFLRWynCp7Ph0MGhIOPl3hIulfHLz1DQrw1VL q9cqAbSK7zJxUozATfmIUEZCoJ93LQ5aUgRdRQSixHuAtCe6INpSXuyNCsNftyLc Hus/hHir2g6U7gdBOTpUec88fnnXBHlZvkJW2q3lGyiLIS1ttSdHyMwXJqG2ukjC GNp3F2zGYqF/4BdHyuYECPd4H0wgAjg0Zs8Ri2LSO+4iZt8IxWR7LbgSpNCdoju0 BuCHOhzHoNuu+LMvKV21FHiA+ok08Hkm3r/d0iEmkrpdoBoXWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHk2O8C8mOseB8jRxTfFMfSxBX9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBabOIx8PMOaVbntI3t82VZ Pdgxji5Rw5scbjEAK+Z2smUGt0H7QFLYIG79RZgfjhLhQSYefyj1o25PN2voxMXY 3lfuZcOTbDGaYeRVmfY12KzGZ0Mtoc1s1cAH/Xbdka5T6LIWUc9OBibvQhbQDuga MXDl7LaSGYxE/UrpRWa52JYf1YZUnu6I/hEEJf4ufmlRqUxUfOYvs3fmeMZirZ0Q 76+H1jEkydY0j+ddIz4/cZvy6LOC+aLkO+ZJmt2xoKD6t5/vWlMpim0rSGLmAr14 vQXmazrig5ADUBSlAdK0I4ou1TkIQKca4y3hQuknJivibRF+ghqQQ9FpxP3C9+VA -----END CERTIFICATE-----Generated at Sun Aug 24 04:00:30 2025 by rpki-client