$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft File: 529c456a-0a45-44a6-8d94-800e442e44a9.mft (raw, json) Hash identifier: E8BFfCQ/QLWW38Av/96X10797cp7SXVocUpsm+sVmp8= Subject key identifier: 17:F0:41:1A:EC:16:F3:95:7E:08:90:F5:D6:17:FD:48:8D:44:EA:9F Authority key identifier: 76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 Certificate issuer: /CN=529c456a-0a45-44a6-8d94-800e442e44a9 Certificate serial: 010D0C9F4328584BC28DCECBF43A8E8310DCF480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft Manifest number: 010D0C9F4328584659E265B2C6F1188D0BDC3000 Signing time: Wed 05 Nov 2025 15:00:08 +0000 Manifest this update: Wed 05 Nov 2025 15:00:08 +0000 Manifest next update: Sat 08 Nov 2025 15:00:00 +0000 Files and hashes: 1: 529c456a-0a45-44a6-8d94-800e442e44a9.crl (hash: T06sTwSgTr3UcHPvau+p/d6jDQW5caUJxMddUJacGHM=) 2: 73f2506f-bf58-34a0-a0a8-51f114b130ce.roa (hash: Y59/oEw1XlmCfnf3zpk4CXlcOrmyqtRioUi+IzQn17c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:8d:ce:cb:f4:3a:8e:83:10:dc:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529c456a-0a45-44a6-8d94-800e442e44a9 Validity Not Before: Nov 5 15:00:08 2025 GMT Not After : Nov 8 15:00:00 2025 GMT Subject: CN=ed5a8190-6cde-42c7-b098-ad0b08586b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:28:92:a6:08:02:5b:44:ef:33:34:a9:e0:bb: 9f:f8:2e:4d:6b:60:3e:8f:6f:87:48:9e:82:a9:98: 4e:4c:4a:9d:08:a4:f9:34:eb:a0:b0:6a:c1:33:f3: 87:0d:71:17:51:20:57:fd:af:bb:76:74:21:9b:9f: 79:b9:6e:76:4f:42:60:21:21:80:6d:07:ce:08:15: b8:b9:31:40:48:9c:98:45:c3:a7:c5:f3:9e:2e:9e: de:0b:ca:6e:9e:ec:07:0e:e2:02:11:1a:45:9a:4a: 9f:23:53:38:bb:9a:01:30:51:be:cc:dc:16:24:73: 2c:9c:86:5b:5f:ab:df:45:af:02:42:69:73:e8:16: e0:71:a6:e2:18:fb:67:57:f7:13:b1:a1:5e:d1:7f: cd:37:3b:d1:58:ae:fd:d2:cd:0c:10:15:64:6a:39: 37:da:d5:84:3b:bb:d1:29:cb:91:59:16:00:55:a6: 5d:8a:84:4f:46:61:05:2f:f8:9a:7e:3e:99:7d:2f: be:76:ac:b8:40:f9:cc:61:a1:32:eb:72:48:ad:d9: 02:98:58:be:41:1f:df:b9:d9:e4:66:a5:4d:c0:cc: ea:7a:ca:3c:90:b3:57:1f:22:3a:00:38:7c:31:ab: 68:05:c0:88:82:1c:62:74:2d:38:c3:e9:93:da:bb: 26:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F0:41:1A:EC:16:F3:95:7E:08:90:F5:D6:17:FD:48:8D:44:EA:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl X509v3 Authority Key Identifier: keyid:76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:45:f8:2a:28:6e:17:9d:0f:6c:e4:0b:f2:68:b0:3f:81:21: 1d:b6:0c:d0:d9:2d:38:0a:ac:22:e1:0c:f7:b3:05:e0:19:72: 1f:23:60:23:ac:da:38:66:f3:52:0b:b2:02:af:66:0f:38:39: 4a:5d:37:76:d5:59:1d:60:d4:0a:90:ab:5a:de:bb:df:6a:dc: 98:13:bd:92:d7:9b:f7:09:b3:88:43:18:fa:de:77:69:3e:d7: c7:19:fb:f1:9e:af:80:b7:21:4d:41:b0:a3:bb:45:e1:34:51: dd:ff:56:93:f8:c8:0e:5d:7d:aa:59:40:85:39:6d:d1:37:17: 14:b3:ff:10:40:6e:f3:dc:47:1a:b6:8f:92:42:ad:b9:30:1d: 0d:2d:17:25:d7:29:44:43:b3:7e:ff:bd:0e:f6:b2:c2:f3:09: 53:d7:ca:65:e6:bb:e1:c0:72:61:41:ff:0b:5b:86:17:f7:45: 13:ec:66:ee:2c:bf:d4:23:cc:00:8f:f0:c2:5e:49:93:03:14: ae:bb:ad:6c:2c:1c:68:82:54:ed:fd:53:53:a8:a9:34:4d:bf: d3:72:9a:c9:fb:15:2f:cf:b7:93:1d:8f:d6:f1:f1:92:84:e5: 33:73:10:88:02:8f:ba:46:42:4d:2b:85:55:20:a0:2e:79:c4: 09:5e:c4:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvCjc7L9DqOgxDc9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI5YzQ1NmEtMGE0NS00NGE2LThkOTQtODAwZTQ0MmU0 NGE5MB4XDTI1MTEwNTE1MDAwOFoXDTI1MTEwODE1MDAwMFowLzEtMCsGA1UEAxMk ZWQ1YTgxOTAtNmNkZS00MmM3LWIwOTgtYWQwYjA4NTg2YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiiSpggCW0TvMzSp4Luf+C5Na2A+j2+HSJ6C qZhOTEqdCKT5NOugsGrBM/OHDXEXUSBX/a+7dnQhm595uW52T0JgISGAbQfOCBW4 uTFASJyYRcOnxfOeLp7eC8punuwHDuICERpFmkqfI1M4u5oBMFG+zNwWJHMsnIZb X6vfRa8CQmlz6BbgcabiGPtnV/cTsaFe0X/NNzvRWK790s0MEBVkajk32tWEO7vR KcuRWRYAVaZdioRPRmEFL/iafj6ZfS++dqy4QPnMYaEy63JIrdkCmFi+QR/fudnk ZqVNwMzqeso8kLNXHyI6ADh8MatoBcCIghxidC04w+mT2rsmLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBfwQRrsFvOVfgiQ9dYX/UiNROqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Mjlj NDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQyZTQ0YTkvNTI5YzQ1NmEtMGE0NS00 NGE2LThkOTQtODAwZTQ0MmU0NGE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTI5YzQ1NmEtMGE0NS00NGE2LThk OTQtODAwZTQ0MmU0NGE5LzUyOWM0NTZhLTBhNDUtNDRhNi04ZDk0LTgwMGU0NDJl NDRhOS5jcmwwHwYDVR0jBBgwFoAUdkyoaAug9g7c3MxmybTs5uGD8KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBl NDQyZTQ0YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYRfgqKG4XnQ9s5AvyaLA/ gSEdtgzQ2S04Cqwi4Qz3swXgGXIfI2AjrNo4ZvNSC7ICr2YPODlKXTd21VkdYNQK kKta3rvfatyYE72S15v3CbOIQxj63ndpPtfHGfvxnq+AtyFNQbCju0XhNFHd/1aT +MgOXX2qWUCFOW3RNxcUs/8QQG7z3Ecato+SQq25MB0NLRcl1ylEQ7N+/70O9rLC 8wlT18pl5rvhwHJhQf8LW4YX90UT7GbuLL/UI8wAj/DCXkmTAxSuu61sLBxoglTt /VNTqKk0Tb/TcprJ+xUvz7eTHY/W8fGShOUzcxCIAo+6RkJNK4VVIKAuecQJXsQU -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:02 2025 by rpki-client