$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft File: 52356d5e-3580-4025-a264-1c6d347bc052.mft (raw, json) Hash identifier: kZI+0BUHLB85uxVqy6XqJt5zWCg9bfNMzF1CLZn+1TY= Subject key identifier: 45:06:0D:45:8D:F3:89:38:4C:F0:2F:49:49:48:57:8E:24:CB:A2:98 Authority key identifier: 8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59 Certificate issuer: /CN=52356d5e-3580-4025-a264-1c6d347bc052 Certificate serial: 010D0C9F4328584A3C68B0E901CD270B77949D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft Manifest number: 010D0C9F432858493E6E4989CAB9855165C929DE Signing time: Wed 18 Jun 2025 21:00:07 +0000 Manifest this update: Wed 18 Jun 2025 21:00:07 +0000 Manifest next update: Fri 20 Jun 2025 21:00:00 +0000 Files and hashes: 1: 52356d5e-3580-4025-a264-1c6d347bc052.crl (hash: CU0m5sLPUw4A1etkT0fgJ1uRj/gKnmFums35F6SzoEo=) 2: 79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa (hash: uZTn1zhitA0pfJaYbfrt6ULxWdjGcRvCu+TmkkZMayM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:68:b0:e9:01:cd:27:0b:77:94:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52356d5e-3580-4025-a264-1c6d347bc052 Validity Not Before: Jun 18 21:00:07 2025 GMT Not After : Jun 20 21:00:00 2025 GMT Subject: CN=96228b3d-0293-4f30-9ec8-af49e1929a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:44:e8:96:4d:a2:ef:50:24:e0:e5:35:cd:2f: bb:ab:77:1a:f0:05:75:60:f2:c9:f7:6b:82:38:d9: b2:50:50:00:10:59:9a:3d:90:ac:d1:57:dd:66:7b: 5b:bf:83:d3:eb:78:05:9f:38:32:96:79:36:e3:a0: 91:22:2d:80:90:52:10:ec:c1:24:6c:00:de:64:24: f0:d7:60:94:cc:af:bc:1d:65:1d:57:59:d0:8b:74: 89:54:da:a4:c8:44:94:b0:55:c7:72:fd:d1:6b:24: 42:32:cd:3a:71:b3:29:98:b6:fa:55:79:6f:f8:98: 7c:16:14:0d:34:60:f4:15:a0:63:68:0e:df:c7:21: 35:44:58:67:16:07:d3:f0:21:29:05:71:28:87:6e: 8c:14:2c:61:07:d5:dc:fa:80:bc:8f:f2:e8:a5:3f: bf:1f:8f:98:95:e4:0e:fb:d2:1e:8d:55:43:84:a5: 9c:04:bd:26:6c:2c:85:d6:d2:bd:c9:01:3e:87:93: ea:76:23:21:5c:38:15:f2:16:b0:45:e4:a5:e7:3d: b1:ee:c7:9a:7f:d5:d4:71:6b:70:c3:7d:17:58:c3: c5:c3:bc:61:2e:5a:1a:2f:f5:9c:98:6c:3c:9b:da: 39:0e:ed:92:99:44:4f:3e:8a:84:81:b0:fe:5e:6a: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:06:0D:45:8D:F3:89:38:4C:F0:2F:49:49:48:57:8E:24:CB:A2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl X509v3 Authority Key Identifier: keyid:8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:48:60:3f:76:da:54:df:d5:b9:c7:13:e9:4b:a2:41:55:2f: 5a:ab:77:4c:6e:f6:52:32:a9:91:5e:f0:0a:ab:c2:02:9b:69: cb:68:85:55:0e:71:4e:a1:f7:b9:16:17:cc:9d:90:71:fe:95: b3:f4:e7:52:ed:38:50:82:c7:4f:ce:8a:dc:c5:03:9a:b0:60: 76:8d:9e:8f:c8:c0:22:dd:04:f9:a7:84:e8:89:b8:6a:37:32: ea:9b:9c:c6:10:43:c5:22:6f:41:ec:2b:17:4f:56:0d:c3:64: 7a:76:33:a8:bb:ad:8e:13:8e:6b:8f:07:f9:48:4f:0e:ba:58: d5:5f:bc:0b:f4:bc:83:77:31:56:ca:8d:6e:6e:d0:89:8e:99: 25:d0:e8:ee:eb:22:83:bd:ed:0c:f2:53:b6:92:3e:c6:15:01: 20:93:8c:9b:05:3e:c6:44:c8:76:4d:62:d0:b5:2c:4b:bb:64: 18:9b:f9:6c:49:f9:28:52:a4:00:8e:c9:2b:57:c2:6f:36:71: 79:03:d2:cb:95:1a:ba:2f:c8:99:66:28:1d:1e:8e:b6:90:86: 63:5a:24:99:aa:44:03:ca:36:10:22:29:81:06:ef:22:ff:97: b1:97:c1:2f:3e:6b:5f:25:75:99:df:3e:25:eb:fd:51:02:da: f5:2c:1a:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo8aLDpAc0nC3eUnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIzNTZkNWUtMzU4MC00MDI1LWEyNjQtMWM2ZDM0N2Jj MDUyMB4XDTI1MDYxODIxMDAwN1oXDTI1MDYyMDIxMDAwMFowLzEtMCsGA1UEAxMk OTYyMjhiM2QtMDI5My00ZjMwLTllYzgtYWY0OWUxOTI5YTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgETolk2i71Ak4OU1zS+7q3ca8AV1YPLJ92uC ONmyUFAAEFmaPZCs0VfdZntbv4PT63gFnzgylnk246CRIi2AkFIQ7MEkbADeZCTw 12CUzK+8HWUdV1nQi3SJVNqkyESUsFXHcv3RayRCMs06cbMpmLb6VXlv+Jh8FhQN NGD0FaBjaA7fxyE1RFhnFgfT8CEpBXEoh26MFCxhB9Xc+oC8j/LopT+/H4+YleQO +9IejVVDhKWcBL0mbCyF1tK9yQE+h5PqdiMhXDgV8hawReSl5z2x7seaf9XUcWtw w30XWMPFw7xhLloaL/WcmGw8m9o5Du2SmURPPoqEgbD+XmqwpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEUGDUWN84k4TPAvSUlIV44ky6KYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MjM1 NmQ1ZS0zNTgwLTQwMjUtYTI2NC0xYzZkMzQ3YmMwNTIvNTIzNTZkNWUtMzU4MC00 MDI1LWEyNjQtMWM2ZDM0N2JjMDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTIzNTZkNWUtMzU4MC00MDI1LWEy NjQtMWM2ZDM0N2JjMDUyLzUyMzU2ZDVlLTM1ODAtNDAyNS1hMjY0LTFjNmQzNDdi YzA1Mi5jcmwwHwYDVR0jBBgwFoAUjkbM0qkiy8s3aFegFRY32/4vc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MjM1NmQ1ZS0zNTgwLTQwMjUtYTI2NC0xYzZk MzQ3YmMwNTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgSGA/dtpU39W5xxPpS6JB VS9aq3dMbvZSMqmRXvAKq8ICm2nLaIVVDnFOofe5FhfMnZBx/pWz9OdS7ThQgsdP zorcxQOasGB2jZ6PyMAi3QT5p4ToibhqNzLqm5zGEEPFIm9B7CsXT1YNw2R6djOo u62OE45rjwf5SE8OuljVX7wL9LyDdzFWyo1ubtCJjpkl0Oju6yKDve0M8lO2kj7G FQEgk4ybBT7GRMh2TWLQtSxLu2QYm/lsSfkoUqQAjskrV8JvNnF5A9LLlRq6L8iZ ZigdHo62kIZjWiSZqkQDyjYQIimBBu8i/5exl8EvPmtfJXWZ3z4l6/1RAtr1LBpu -----END CERTIFICATE-----Generated at Thu Jun 19 20:59:00 2025 by rpki-client