$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft File: 529c456a-0a45-44a6-8d94-800e442e44a9.mft (raw, json) Hash identifier: vJn7hDSyp5ihLlycWrtYC1yf82+WHvBe/cW5IQtE8w4= Subject key identifier: 71:9D:01:E9:BF:78:8A:03:FF:58:DC:44:04:11:A3:52:A5:43:D6:5E Authority key identifier: 76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 Certificate issuer: /CN=529c456a-0a45-44a6-8d94-800e442e44a9 Certificate serial: 010D0C9F43285849CED54CBEE807EFB337768780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft Manifest number: 010D0C9F4328584659E265B2C6F1188D0BDC2F47 Signing time: Sat 10 May 2025 15:00:03 +0000 Manifest this update: Sat 10 May 2025 15:00:03 +0000 Manifest next update: Mon 12 May 2025 15:00:00 +0000 Files and hashes: 1: 529c456a-0a45-44a6-8d94-800e442e44a9.crl (hash: ajsFwx8Vl9Ywgo7wGI9rdYuNk8SGJAgE2yuUgFhW0Ic=) 2: 73f2506f-bf58-34a0-a0a8-51f114b130ce.roa (hash: OtvUHFhSNdNn8kgIbHUOoHtSIdyh2yF/H8m8zNgTkYI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:d5:4c:be:e8:07:ef:b3:37:76:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529c456a-0a45-44a6-8d94-800e442e44a9 Validity Not Before: May 10 15:00:03 2025 GMT Not After : May 12 15:00:00 2025 GMT Subject: CN=b3df2b81-1d4d-4731-95a0-ab111616a331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:f1:0c:f6:a2:b9:a3:9f:b3:8d:7f:60:b4: cb:b6:07:72:5a:55:45:b2:2c:70:fd:37:d8:1d:ec: 05:b0:46:89:5c:ce:92:a6:12:d2:6b:7c:a0:b5:8d: 63:c5:57:3d:42:ba:c5:a7:a9:d7:e9:16:e8:97:5b: e1:e2:43:63:9f:99:e1:17:e1:90:81:4f:1e:94:09: 4b:13:83:7b:5c:83:66:fa:44:db:80:39:d7:95:de: 67:54:3e:93:9d:d0:8a:b4:6f:0a:e6:9c:5a:a6:af: 68:1b:b0:c8:2d:15:06:0b:e2:91:38:a1:70:5f:47: b7:6b:08:23:67:bf:22:ea:b7:a0:ce:aa:55:24:c2: 79:fe:00:ae:5f:79:e2:d2:d1:ad:ae:dd:8a:ff:ef: 14:53:e8:c0:11:ec:2b:8b:f4:5f:bb:84:ce:90:5e: 88:50:de:78:13:48:19:fd:6c:43:c4:5c:8a:7e:e2: 4d:e8:db:e9:95:b6:ad:ef:e1:04:8e:9b:2a:35:14: 1c:f7:d1:be:33:7e:75:25:8a:42:2d:45:d0:8e:9f: 22:4c:8b:04:02:e3:c6:a1:1e:b2:80:8a:fb:91:9f: b6:51:1b:96:e8:62:94:e9:07:cf:dd:f9:9b:c3:34: a3:b9:ff:d9:03:c7:1d:13:b0:58:1c:14:55:63:4a: 55:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9D:01:E9:BF:78:8A:03:FF:58:DC:44:04:11:A3:52:A5:43:D6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl X509v3 Authority Key Identifier: keyid:76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:59:e1:2c:f4:af:d3:72:88:dc:a3:a7:94:6b:a3:d9:5a:de: 82:40:82:79:48:f8:b7:e5:44:e2:1f:ae:ca:6c:43:a2:b2:7d: bc:2e:c2:30:f5:e0:77:a2:2a:82:09:a0:2b:65:51:91:63:80: 84:48:ce:70:11:5c:31:50:a6:2b:b0:86:31:b3:51:e3:2d:ea: 1b:8f:a7:57:ad:f5:f6:76:f4:b9:80:03:5b:36:ba:fe:95:c7: cf:dc:87:a7:94:9a:77:b1:d8:c1:af:ab:aa:e3:8d:43:0b:bf: a6:a1:14:a3:1a:d0:6a:1a:a0:f5:7a:ad:73:c6:14:37:36:30: 70:25:f6:5b:bf:86:15:f4:27:1d:c5:00:82:7b:75:84:c4:79: 55:86:84:21:0b:ee:a5:8b:95:ba:a2:37:cb:da:84:a1:47:25: 92:0c:70:ae:d9:bb:1a:3b:cc:d2:5e:8c:ac:28:68:93:b3:37: 4e:f3:20:c8:aa:ce:c6:ef:31:1e:a3:f2:98:52:df:12:42:db: 93:06:d1:20:3d:92:f0:41:4a:06:d3:0d:18:21:f1:7d:e8:ca: 91:f8:9f:58:b6:1a:ee:e9:76:14:06:aa:c5:d2:e0:5b:f8:a6: 2f:b1:0b:96:aa:ee:31:59:07:56:9d:20:fe:78:ec:54:e8:4f: 0f:90:59:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnO1Uy+6Afvszd2h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI5YzQ1NmEtMGE0NS00NGE2LThkOTQtODAwZTQ0MmU0 NGE5MB4XDTI1MDUxMDE1MDAwM1oXDTI1MDUxMjE1MDAwMFowLzEtMCsGA1UEAxMk YjNkZjJiODEtMWQ0ZC00NzMxLTk1YTAtYWIxMTE2MTZhMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX7xDPaiuaOfs41/YLTLtgdyWlVFsixw/TfY HewFsEaJXM6SphLSa3ygtY1jxVc9QrrFp6nX6Rbol1vh4kNjn5nhF+GQgU8elAlL E4N7XINm+kTbgDnXld5nVD6TndCKtG8K5pxapq9oG7DILRUGC+KROKFwX0e3awgj Z78i6regzqpVJMJ5/gCuX3ni0tGtrt2K/+8UU+jAEewri/Rfu4TOkF6IUN54E0gZ /WxDxFyKfuJN6Nvplbat7+EEjpsqNRQc99G+M351JYpCLUXQjp8iTIsEAuPGoR6y gIr7kZ+2URuW6GKU6QfP3fmbwzSjuf/ZA8cdE7BYHBRVY0pVnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHGdAem/eIoD/1jcRAQRo1KlQ9ZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Mjlj NDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQyZTQ0YTkvNTI5YzQ1NmEtMGE0NS00 NGE2LThkOTQtODAwZTQ0MmU0NGE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTI5YzQ1NmEtMGE0NS00NGE2LThk OTQtODAwZTQ0MmU0NGE5LzUyOWM0NTZhLTBhNDUtNDRhNi04ZDk0LTgwMGU0NDJl NDRhOS5jcmwwHwYDVR0jBBgwFoAUdkyoaAug9g7c3MxmybTs5uGD8KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBl NDQyZTQ0YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZWeEs9K/Tcojco6eUa6PZ Wt6CQIJ5SPi35UTiH67KbEOisn28LsIw9eB3oiqCCaArZVGRY4CESM5wEVwxUKYr sIYxs1HjLeobj6dXrfX2dvS5gANbNrr+lcfP3IenlJp3sdjBr6uq441DC7+moRSj GtBqGqD1eq1zxhQ3NjBwJfZbv4YV9CcdxQCCe3WExHlVhoQhC+6li5W6ojfL2oSh RyWSDHCu2bsaO8zSXoysKGiTszdO8yDIqs7G7zEeo/KYUt8SQtuTBtEgPZLwQUoG 0w0YIfF96MqR+J9Ythru6XYUBqrF0uBb+KYvsQuWqu4xWQdWnSD+eOxU6E8PkFll -----END CERTIFICATE-----Generated at Sat May 10 21:58:58 2025 by rpki-client