$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft File: 529c456a-0a45-44a6-8d94-800e442e44a9.mft (raw, json) Hash identifier: fh/gl74kHzbb21En0oI+EzGFtprWWnBgSx7YnvGFVPs= Subject key identifier: 12:C1:B4:FC:B5:AD:5F:A2:41:3C:E8:62:02:DC:1D:33:83:60:29:73 Authority key identifier: 76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 Certificate issuer: /CN=529c456a-0a45-44a6-8d94-800e442e44a9 Certificate serial: 010D0C9F4328584A7656555B056AC7F4A325EC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft Manifest number: 010D0C9F4328584659E265B2C6F1188D0BDC2F85 Signing time: Wed 09 Jul 2025 15:00:03 +0000 Manifest this update: Wed 09 Jul 2025 15:00:03 +0000 Manifest next update: Fri 11 Jul 2025 15:00:00 +0000 Files and hashes: 1: 529c456a-0a45-44a6-8d94-800e442e44a9.crl (hash: qvJgKoUyAvYqcsuhRndXWtI7sFK5KWiB5KwsLs96Ta0=) 2: 73f2506f-bf58-34a0-a0a8-51f114b130ce.roa (hash: zUuRbIdxAq0TwglNbYvhCMc+JfL780oMCCWin3r1pHA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:56:55:5b:05:6a:c7:f4:a3:25:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529c456a-0a45-44a6-8d94-800e442e44a9 Validity Not Before: Jul 9 15:00:03 2025 GMT Not After : Jul 11 15:00:00 2025 GMT Subject: CN=0f47fa9b-5145-4a5b-9120-a07510c0de1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:2e:7c:e3:0c:03:a3:aa:83:ab:9f:1f:bc: 64:1d:ff:b1:97:57:85:a2:b6:cc:b5:2e:a1:47:9f: 8f:d3:67:47:32:24:ce:cb:94:b5:3a:35:19:16:db: b4:55:26:85:8f:6e:98:f5:77:a3:13:f1:3f:a3:6e: fa:96:26:7c:d2:4c:f7:73:b6:60:ea:e1:6b:09:3d: c7:46:9e:5c:d4:90:54:d4:84:6b:b6:70:79:86:73: 20:90:33:ee:b7:4e:24:36:cb:08:0a:d7:fb:13:85: a6:de:32:f2:de:6b:d5:ae:8a:55:2c:ce:7f:3d:63: a0:f5:0f:d4:d9:ad:1e:29:68:33:7e:a6:d7:1c:62: d1:53:1d:62:f4:8c:d9:0e:bd:fb:f7:b7:1a:c3:c4: 57:29:87:2a:a1:d9:95:fa:0a:ba:d3:7d:79:12:cc: 56:72:bd:dc:a2:71:d8:06:57:44:c0:92:30:6e:5d: 8e:ae:c1:bd:4f:84:3c:fd:85:b6:c9:55:63:51:8f: 3d:60:e6:f7:ef:d3:cb:76:78:4f:e2:93:6a:1c:ef: 9f:83:d0:b1:2f:aa:f7:a3:76:5c:08:72:0f:54:ab: 21:d1:32:83:de:07:85:aa:ed:e3:47:8c:18:00:ac: b0:e1:a6:14:c0:c9:3a:69:4d:e1:35:1f:0e:57:44: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C1:B4:FC:B5:AD:5F:A2:41:3C:E8:62:02:DC:1D:33:83:60:29:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl X509v3 Authority Key Identifier: keyid:76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:62:57:cf:71:4b:e7:29:32:fb:d8:12:6e:bd:fa:5a:3f:a0: 3b:58:5a:63:e8:7c:ca:f3:16:2d:76:d0:71:e7:c9:f4:d7:f7: 60:9f:e4:d8:c8:9e:b9:1a:1c:f7:f8:c0:8f:14:9a:36:fb:f3: 6e:12:53:b9:d0:18:7d:55:5e:b8:88:0c:80:42:a9:3f:e3:06: 95:c7:ec:ab:14:49:b4:37:c3:f2:45:20:30:2f:a9:4c:c9:ec: 64:46:75:0e:cf:cc:48:75:77:a4:d4:d0:bb:07:c8:89:1e:f9: 2b:aa:82:f9:74:ed:90:2f:4c:da:bd:21:ac:82:64:55:3e:78: 37:4d:e7:93:3b:7e:22:3f:67:5e:5c:c4:32:4a:23:26:5d:98: 50:8e:ee:bb:cf:88:11:e0:3e:32:2e:0c:d8:c3:06:04:60:5d: d5:0d:24:1b:07:f0:dc:8b:ad:ef:48:54:f0:7f:71:5e:80:cf: fc:bd:2a:e2:00:0d:7a:38:02:e9:94:01:88:77:40:31:55:ff: ac:11:da:6a:94:80:6d:c3:92:89:e7:e6:46:6e:c7:5f:3c:a7: ed:d3:17:7d:ef:49:37:cc:a5:47:11:74:73:8a:16:48:6a:f5: 65:e8:ae:05:88:63:0a:59:04:2b:ba:93:6e:e8:96:71:2c:cd: d9:90:e9:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2VlVbBWrH9KMl7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI5YzQ1NmEtMGE0NS00NGE2LThkOTQtODAwZTQ0MmU0 NGE5MB4XDTI1MDcwOTE1MDAwM1oXDTI1MDcxMTE1MDAwMFowLzEtMCsGA1UEAxMk MGY0N2ZhOWItNTE0NS00YTViLTkxMjAtYTA3NTEwYzBkZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcUufOMMA6Oqg6ufH7xkHf+xl1eForbMtS6h R5+P02dHMiTOy5S1OjUZFtu0VSaFj26Y9XejE/E/o276liZ80kz3c7Zg6uFrCT3H Rp5c1JBU1IRrtnB5hnMgkDPut04kNssICtf7E4Wm3jLy3mvVropVLM5/PWOg9Q/U 2a0eKWgzfqbXHGLRUx1i9IzZDr3797caw8RXKYcqodmV+gq60315EsxWcr3conHY BldEwJIwbl2OrsG9T4Q8/YW2yVVjUY89YOb379PLdnhP4pNqHO+fg9CxL6r3o3Zc CHIPVKsh0TKD3geFqu3jR4wYAKyw4aYUwMk6aU3hNR8OV0T0oQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBLBtPy1rV+iQTzoYgLcHTODYClzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Mjlj NDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQyZTQ0YTkvNTI5YzQ1NmEtMGE0NS00 NGE2LThkOTQtODAwZTQ0MmU0NGE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTI5YzQ1NmEtMGE0NS00NGE2LThk OTQtODAwZTQ0MmU0NGE5LzUyOWM0NTZhLTBhNDUtNDRhNi04ZDk0LTgwMGU0NDJl NDRhOS5jcmwwHwYDVR0jBBgwFoAUdkyoaAug9g7c3MxmybTs5uGD8KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBl NDQyZTQ0YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuYlfPcUvnKTL72BJuvfpa P6A7WFpj6HzK8xYtdtBx58n01/dgn+TYyJ65Ghz3+MCPFJo2+/NuElO50Bh9VV64 iAyAQqk/4waVx+yrFEm0N8PyRSAwL6lMyexkRnUOz8xIdXek1NC7B8iJHvkrqoL5 dO2QL0zavSGsgmRVPng3TeeTO34iP2deXMQySiMmXZhQju67z4gR4D4yLgzYwwYE YF3VDSQbB/Dci63vSFTwf3FegM/8vSriAA16OALplAGId0AxVf+sEdpqlIBtw5KJ 5+ZGbsdfPKft0xd970k3zKVHEXRzihZIavVl6K4FiGMKWQQrupNu6JZxLM3ZkOkK -----END CERTIFICATE-----Generated at Wed Jul 9 21:31:30 2025 by rpki-client