$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft File: 21972f4a-b949-4223-9030-d9f0e37f8edd.mft (raw, json) Hash identifier: /4fLXmt27AUb4/Y9I5VgOxvvL8p9+AQRPGP0zS9t4os= Subject key identifier: 46:C7:9D:71:D0:2C:F5:87:0C:BC:B4:C0:08:2E:5F:8A:4C:D2:92:76 Authority key identifier: 98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 Certificate issuer: /CN=21972f4a-b949-4223-9030-d9f0e37f8edd Certificate serial: 010D0C9F4328584B93E89088A8BE71B7C2152A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft Manifest number: 010D0C9F4328584AAF164585E46E2B63713FC252 Signing time: Sun 19 Oct 2025 22:00:03 +0000 Manifest this update: Sun 19 Oct 2025 22:00:03 +0000 Manifest next update: Wed 22 Oct 2025 22:00:00 +0000 Files and hashes: 1: 21972f4a-b949-4223-9030-d9f0e37f8edd.crl (hash: JVpxN6DzOAKNAXKFcR26VHoSmOhsio9uQQcIl3GO/F0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:e8:90:88:a8:be:71:b7:c2:15:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21972f4a-b949-4223-9030-d9f0e37f8edd Validity Not Before: Oct 19 22:00:03 2025 GMT Not After : Oct 22 22:00:00 2025 GMT Subject: CN=714cd13a-53df-4cb1-93d6-a7a079592c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:ba:89:21:56:35:69:a1:c1:44:2c:5c:67: 5a:b1:d9:9d:9a:f4:00:68:9a:23:8c:6b:d8:35:be: 3a:5c:e9:a7:b5:90:73:20:a5:25:0a:17:3e:5f:21: 13:18:69:4c:6b:8d:79:bd:28:78:78:cc:31:c6:9c: 34:bf:b5:b4:e2:c9:c1:4d:34:1c:c7:58:2c:f5:2e: 28:2f:8e:e1:5d:f0:34:74:3c:d2:5e:4d:23:33:f4: bf:30:30:2c:c7:f2:8b:ad:03:6b:47:ce:e9:d0:a2: fc:e4:33:2c:bd:ac:84:94:b3:e6:40:19:4a:be:bd: 64:1b:85:ee:6f:5e:0a:1f:25:b4:a6:0f:86:1f:34: a3:d1:b7:12:21:82:9b:5e:ee:3a:e3:cb:9f:d2:51: 4d:a9:2c:84:6f:26:66:b0:7d:c7:3f:26:c1:3a:bb: 48:a7:d4:63:62:a2:d6:e0:c6:86:83:b1:e3:dd:0d: be:b2:a0:24:33:72:ce:cc:d2:71:81:da:11:e1:18: c8:5c:0b:c9:b1:33:30:00:de:73:c3:d4:b3:c6:bf: ac:69:33:cc:d9:2f:61:53:17:40:81:9e:b7:23:81: 92:f4:50:d1:c4:e4:b0:0c:fa:63:6a:d3:9b:f0:5d: 74:48:a7:c4:bb:59:56:33:4f:bd:63:06:e0:35:12: 58:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C7:9D:71:D0:2C:F5:87:0C:BC:B4:C0:08:2E:5F:8A:4C:D2:92:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd/21972f4a-b949-4223-9030-d9f0e37f8edd.crl X509v3 Authority Key Identifier: keyid:98:48:4D:94:8D:96:6F:4B:A2:CF:5C:6F:A7:83:1C:24:5B:9B:15:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21972f4a-b949-4223-9030-d9f0e37f8edd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f6:e4:5a:7d:f9:0f:f7:40:c3:79:4c:8d:23:dd:e1:2a:59: ff:23:a5:a2:82:ae:19:83:7d:06:77:b4:ec:a4:9b:b6:a0:68: 35:21:ca:22:8f:89:5d:43:40:9e:a7:58:02:08:a9:85:91:0f: d8:ef:a3:7c:ab:b4:aa:5e:ed:49:6d:e4:6c:ba:36:ac:17:1f: 59:c5:c0:da:25:3b:9d:19:61:cb:9c:e2:57:35:a2:1e:c9:9f: a7:83:3b:7e:26:b9:2d:3c:a2:21:5f:37:21:04:40:79:f0:c9: 55:9e:c1:ec:1b:0b:fc:75:75:05:1a:05:b7:c3:8d:37:f7:56: 1d:8d:53:04:47:24:36:59:a1:34:4e:7e:94:ff:e5:27:32:24: 3c:59:64:9d:b1:59:ff:96:c6:fd:12:65:87:6f:00:bb:9f:c8: 9f:fc:4e:75:1b:04:6c:f4:80:63:ca:13:bc:e3:28:80:e9:b7: 8e:c8:4a:b0:80:f1:7f:3a:71:54:b2:6d:70:5e:f0:91:0a:13: 49:a7:7f:25:11:90:30:29:e5:20:50:eb:dd:11:ec:ee:80:23: f1:a3:a0:5c:cb:98:9e:0d:eb:dd:4c:1c:8f:6e:77:d9:c1:e5: c1:4f:d9:f5:a3:fc:ed:ca:53:ba:b2:70:4a:b7:c3:97:cc:5a: 1a:45:b4:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuT6JCIqL5xt8IVKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NzJmNGEtYjk0OS00MjIzLTkwMzAtZDlmMGUzN2Y4 ZWRkMB4XDTI1MTAxOTIyMDAwM1oXDTI1MTAyMjIyMDAwMFowLzEtMCsGA1UEAxMk NzE0Y2QxM2EtNTNkZi00Y2IxLTkzZDYtYTdhMDc5NTkyYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw26iSFWNWmhwUQsXGdasdmdmvQAaJojjGvY Nb46XOmntZBzIKUlChc+XyETGGlMa415vSh4eMwxxpw0v7W04snBTTQcx1gs9S4o L47hXfA0dDzSXk0jM/S/MDAsx/KLrQNrR87p0KL85DMsvayElLPmQBlKvr1kG4Xu b14KHyW0pg+GHzSj0bcSIYKbXu4648uf0lFNqSyEbyZmsH3HPybBOrtIp9RjYqLW 4MaGg7Hj3Q2+sqAkM3LOzNJxgdoR4RjIXAvJsTMwAN5zw9Szxr+saTPM2S9hUxdA gZ63I4GS9FDRxOSwDPpjatOb8F10SKfEu1lWM0+9YwbgNRJYvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEbHnXHQLPWHDLy0wAguX4pM0pJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3 MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYwZTM3ZjhlZGQvMjE5NzJmNGEtYjk0OS00 MjIzLTkwMzAtZDlmMGUzN2Y4ZWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjE5NzJmNGEtYjk0OS00MjIzLTkw MzAtZDlmMGUzN2Y4ZWRkLzIxOTcyZjRhLWI5NDktNDIyMy05MDMwLWQ5ZjBlMzdm OGVkZC5jcmwwHwYDVR0jBBgwFoAUmEhNlI2Wb0uiz1xvp4McJFubFcUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMTk3MmY0YS1iOTQ5LTQyMjMtOTAzMC1kOWYw ZTM3ZjhlZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBI9uRaffkP90DDeUyNI93h Kln/I6Wigq4Zg30Gd7TspJu2oGg1Icoij4ldQ0Cep1gCCKmFkQ/Y76N8q7SqXu1J beRsujasFx9ZxcDaJTudGWHLnOJXNaIeyZ+ngzt+JrktPKIhXzchBEB58MlVnsHs Gwv8dXUFGgW3w40391YdjVMERyQ2WaE0Tn6U/+UnMiQ8WWSdsVn/lsb9EmWHbwC7 n8if/E51GwRs9IBjyhO84yiA6beOyEqwgPF/OnFUsm1wXvCRChNJp38lEZAwKeUg UOvdEezugCPxo6Bcy5ieDevdTByPbnfZweXBT9n1o/ztylO6snBKt8OXzFoaRbQg -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:45 2025 by rpki-client