$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: g+x2BceEoqLnhO2JSaABsxuyrPO2Bsycc4iZZ0+22U8= Subject key identifier: E5:83:F2:09:2D:72:E1:5B:D4:43:AB:3D:51:C7:1B:E0:AC:17:84:58 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584B9335F06DC276379C65C60960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E305 Signing time: Sun 19 Oct 2025 16:00:08 +0000 Manifest this update: Sun 19 Oct 2025 16:00:08 +0000 Manifest next update: Tue 21 Oct 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: bUfeIN43Ust6o9tFG5giKjatDTHo34od8mJEWQg9MP4=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: tH8Aq3vUqxPcclhinu2XTWRrAzRemO9TIJip69L2xRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:35:f0:6d:c2:76:37:9c:65:c6:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Oct 19 16:00:08 2025 GMT Not After : Oct 21 16:00:00 2025 GMT Subject: CN=e3cb395d-0a59-4489-8169-2b197e370b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:b8:79:1c:65:85:e7:8d:15:de:0a:c1:03: c0:02:ff:ec:e8:71:c5:fb:cd:39:a9:e4:05:5d:65: 68:4e:f2:d3:cf:f2:76:96:fe:c3:88:d7:94:74:fd: c9:5f:87:a2:3d:90:76:d3:d9:5b:b1:19:95:e0:89: a6:79:68:3f:db:0b:d2:50:b7:21:62:20:45:95:3d: 9f:dd:60:7f:f6:0f:88:34:24:8a:ec:a9:b8:37:10: e5:07:66:86:2c:f3:e8:d2:64:39:1d:e2:32:c4:72: 33:cc:44:b0:b2:ac:0e:67:88:63:3a:43:2c:62:ce: e1:0b:6a:81:ae:ca:5d:83:fe:a3:a3:d3:3a:09:5f: b4:d1:f2:2e:76:0d:ca:5a:52:2c:f2:2f:d8:f6:20: ea:43:f2:ce:88:b5:53:61:e6:52:af:60:3c:ee:d0: 02:a4:97:7f:1c:ba:5d:e8:ca:a5:85:a7:fd:56:f9: 48:0c:bb:fa:a9:d5:c6:9f:df:67:42:bd:e1:ba:42: 59:74:cd:4b:13:4a:f1:ed:ef:7d:6b:03:61:a0:4e: 31:58:55:a6:2f:c8:6f:46:3e:be:8b:5d:4b:c2:56: 64:fe:3f:c6:91:4b:bf:e3:6c:c0:07:52:7f:4d:a0: 63:46:eb:3c:7c:2a:80:9b:ab:33:f4:c3:2d:ab:a8: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:83:F2:09:2D:72:E1:5B:D4:43:AB:3D:51:C7:1B:E0:AC:17:84:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8e:1e:eb:b5:91:37:0c:2e:15:0c:f4:38:41:b3:c5:2f:f8: 3a:2a:dd:08:bb:51:9d:15:e8:17:04:c5:4f:e9:0b:7c:74:fb: 65:85:e9:9a:ad:32:28:96:0b:96:d1:5c:0c:5a:fb:c4:3b:e4: 01:d9:27:26:2e:5e:80:49:7a:3d:1f:a2:f2:d6:31:05:1e:64: 96:c5:bf:88:16:0c:a4:2d:0c:8e:9a:b6:49:39:a8:ad:24:76: 46:ed:fb:a3:00:b8:cd:0e:6a:89:91:99:49:cc:17:2d:c2:3e: 32:e5:e2:26:10:62:ca:98:e0:d7:41:c0:5a:da:2f:d6:1b:87: ab:b6:aa:7b:28:bf:aa:26:db:10:ba:26:c7:88:75:43:d2:89: c7:a1:86:9f:36:5a:78:57:da:96:a2:d7:8c:01:39:e1:5a:af: 96:ae:e2:52:30:2c:81:b4:bd:77:e8:dd:8e:8d:43:77:6b:24: cc:db:f6:49:c2:47:70:9c:fb:79:12:f7:eb:8f:2a:e0:a0:1f: fd:bc:2b:c0:96:be:3d:d8:d0:b1:af:0e:86:60:42:c5:01:1c: da:62:e2:b9:79:7e:ce:9e:da:03:f7:22:e1:12:14:e7:f3:0d: c8:80:0b:b1:74:3c:f8:d0:f6:80:6d:ff:c3:ed:f6:5d:1d:20: bd:e7:eb:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTNfBtwnY3nGXGCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MTAxOTE2MDAwOFoXDTI1MTAyMTE2MDAwMFowLzEtMCsGA1UEAxMk ZTNjYjM5NWQtMGE1OS00NDg5LTgxNjktMmIxOTdlMzcwYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDe4eRxlheeNFd4KwQPAAv/s6HHF+805qeQF XWVoTvLTz/J2lv7DiNeUdP3JX4eiPZB209lbsRmV4ImmeWg/2wvSULchYiBFlT2f 3WB/9g+INCSK7Km4NxDlB2aGLPPo0mQ5HeIyxHIzzESwsqwOZ4hjOkMsYs7hC2qB rspdg/6jo9M6CV+00fIudg3KWlIs8i/Y9iDqQ/LOiLVTYeZSr2A87tACpJd/HLpd 6Mqlhaf9VvlIDLv6qdXGn99nQr3hukJZdM1LE0rx7e99awNhoE4xWFWmL8hvRj6+ i11LwlZk/j/GkUu/42zAB1J/TaBjRus8fCqAm6sz9MMtq6g6gwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOWD8gktcuFb1EOrPVHHG+CsF4RYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGjh7rtZE3DC4VDPQ4QbPF L/g6Kt0Iu1GdFegXBMVP6Qt8dPtlhemarTIolguW0VwMWvvEO+QB2ScmLl6ASXo9 H6Ly1jEFHmSWxb+IFgykLQyOmrZJOaitJHZG7fujALjNDmqJkZlJzBctwj4y5eIm EGLKmODXQcBa2i/WG4ertqp7KL+qJtsQuibHiHVD0onHoYafNlp4V9qWoteMATnh Wq+WruJSMCyBtL136N2OjUN3ayTM2/ZJwkdwnPt5EvfrjyrgoB/9vCvAlr492NCx rw6GYELFARzaYuK5eX7OntoD9yLhEhTn8w3IgAuxdDz40PaAbf/D7fZdHSC95+vh -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:09 2025 by rpki-client