$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft File: 40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft (raw, json) Hash identifier: ulNNv9zyjPwGIpf6DbD9/VG+NKl0TRKx8mRfivcSsBA= Subject key identifier: FD:25:00:88:0D:01:B7:DC:4A:B8:2C:C6:72:A1:B7:7C:AB:59:37:D2 Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62 Certificate issuer: /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d Certificate serial: 010D0C9F4328584AC121E7E2E99D50D9B01AB200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft Manifest number: 010D0C9F4328584073A84C848F4D8A77C20738DC Signing time: Tue 05 Aug 2025 10:00:03 +0000 Manifest this update: Tue 05 Aug 2025 10:00:03 +0000 Manifest next update: Fri 08 Aug 2025 10:00:00 +0000 Files and hashes: 1: 334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa (hash: dFBa1xBEsctEzOP5IN6ggL6fJYWo9TYP7hQwfpxv3yo=) 2: 40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl (hash: 6BMKfIkZX1iGD8VqJ9ED+u3dxZnOrjz+rPc4w4fGZSE=) 3: 5bcda128-65ee-3f94-9d49-1472c8093380.roa (hash: 9i/2QaJ9Zg7xm8R3D95AvjMup4ZHFLooehDiwfJKi+w=) 4: 76a518c4-ae63-39c1-b643-eda9f57b2ff6.roa (hash: 6XyvW+7OvHKW/F9X6Whr0giAcoZl1R/+0Fgs0N+6x2Y=) 5: 7cca8c9b-95b3-3789-93a9-141f27073aeb.roa (hash: APCyQCuWB+Jgf2BTQ4qngjgEdc+YHR3p8olmO/85x/Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:21:e7:e2:e9:9d:50:d9:b0:1a:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d Validity Not Before: Aug 5 10:00:03 2025 GMT Not After : Aug 8 10:00:00 2025 GMT Subject: CN=ae5e3b83-3ff5-4585-a4a7-7c3f2b13136b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:08:bf:77:a3:42:a1:88:b1:ff:43:06:60: ce:0a:ff:39:9c:1e:54:24:09:8b:06:fa:6b:e4:fa: d1:c6:8c:52:d2:71:88:5c:66:7b:d6:8d:20:3e:35: 91:64:4c:c2:ae:a3:39:99:da:b1:b0:65:39:26:e2: 78:25:1e:ed:1b:eb:4a:0f:88:40:78:a5:79:fb:8d: 3b:02:2f:32:52:9f:8e:42:ed:25:a1:ff:6d:e6:7e: e2:05:78:24:94:dc:c0:c7:78:14:bf:73:89:64:f1: 17:2e:f9:0e:e1:39:58:79:48:ff:21:97:ba:e1:c6: 31:35:05:7f:36:1c:b1:49:15:28:4b:0f:71:e5:70: 0c:f0:27:bf:20:35:a8:27:f4:a3:17:52:75:71:8c: f9:93:da:57:ba:ca:fa:c5:1d:64:e3:bd:2f:3b:3d: 34:76:91:90:4c:b6:ec:97:50:31:37:ff:63:73:1f: ba:05:64:25:39:67:64:23:05:9e:dd:5f:d0:4a:38: cf:9b:23:1b:33:5b:31:e8:95:1f:6a:cb:af:f2:62: 69:0b:c8:78:77:6a:dc:c9:36:1d:85:1b:02:ba:b5: a5:65:6d:2d:e6:4d:2a:18:3a:04:b7:a2:9d:ee:34: 00:8b:ca:0a:e4:cf:91:c3:37:23:67:44:e2:50:ec: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:25:00:88:0D:01:B7:DC:4A:B8:2C:C6:72:A1:B7:7C:AB:59:37:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl X509v3 Authority Key Identifier: keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ea:a0:54:99:23:7a:4e:ac:62:71:77:32:bb:53:53:d3:c5: d2:f0:f6:b7:57:74:43:94:0a:28:d6:b0:39:15:1c:e1:44:f4: 3a:01:0f:a5:db:ae:50:ef:3c:67:2d:31:d8:8f:a1:2f:62:77: b2:f2:26:f6:ec:8c:7a:c8:e8:2c:dc:e8:d2:08:56:c9:78:44: a0:14:48:87:52:82:b4:19:99:8e:6e:91:bf:eb:84:b1:b0:49: 2d:e2:e1:b2:15:08:f4:58:5c:07:88:18:23:e2:51:92:d2:b5: 84:50:5c:a2:04:c0:28:8b:72:a4:62:79:f3:22:f7:3d:e2:8f: 6d:47:5f:18:34:57:07:14:c5:6f:7f:01:ad:cc:fd:62:f9:32: d5:dc:74:50:56:23:5c:21:b6:1c:7e:25:0d:c6:92:02:f5:99: 3e:2f:6f:96:7b:00:21:af:f7:11:3e:d6:3f:1b:4b:cd:a1:f6: 17:87:c4:e7:20:37:97:1d:09:57:80:64:b8:53:02:ff:97:ed: d6:e4:55:37:99:15:e5:76:7e:02:8d:d6:83:e1:1c:c3:40:df: 61:bb:bf:bf:6b:09:14:39:67:5e:09:c4:93:10:ff:77:54:49: b1:76:84:c8:3a:fb:18:8b:2b:dd:eb:94:6f:81:b7:38:e2:f2: a5:a4:87:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErBIefi6Z1Q2bAasgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMzliMmEtY2RlZi00NDQ1LWFjZTgtYmIzOWQ0M2Nk YTVkMB4XDTI1MDgwNTEwMDAwM1oXDTI1MDgwODEwMDAwMFowLzEtMCsGA1UEAxMk YWU1ZTNiODMtM2ZmNS00NTg1LWE0YTctN2MzZjJiMTMxMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv4Iv3ejQqGIsf9DBmDOCv85nB5UJAmLBvpr 5PrRxoxS0nGIXGZ71o0gPjWRZEzCrqM5mdqxsGU5JuJ4JR7tG+tKD4hAeKV5+407 Ai8yUp+OQu0lof9t5n7iBXgklNzAx3gUv3OJZPEXLvkO4TlYeUj/IZe64cYxNQV/ NhyxSRUoSw9x5XAM8Ce/IDWoJ/SjF1J1cYz5k9pXusr6xR1k470vOz00dpGQTLbs l1AxN/9jcx+6BWQlOWdkIwWe3V/QSjjPmyMbM1sx6JUfasuv8mJpC8h4d2rcyTYd hRsCurWlZW0t5k0qGDoEt6Kd7jQAi8oK5M+RwzcjZ0TiUOybZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP0lAIgNAbfcSrgsxnKht3yrWTfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MGIz OWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5ZDQzY2RhNWQvNDBiMzliMmEtY2RlZi00 NDQ1LWFjZTgtYmIzOWQ0M2NkYTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDBiMzliMmEtY2RlZi00NDQ1LWFj ZTgtYmIzOWQ0M2NkYTVkLzQwYjM5YjJhLWNkZWYtNDQ0NS1hY2U4LWJiMzlkNDNj ZGE1ZC5jcmwwHwYDVR0jBBgwFoAU2oJ1e2t4uHbXRsrYgXq/mgsWW2IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MGIzOWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5 ZDQzY2RhNWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD6qBUmSN6TqxicXcyu1NT 08XS8Pa3V3RDlAoo1rA5FRzhRPQ6AQ+l265Q7zxnLTHYj6EvYney8ib27Ix6yOgs 3OjSCFbJeESgFEiHUoK0GZmObpG/64SxsEkt4uGyFQj0WFwHiBgj4lGS0rWEUFyi BMAoi3KkYnnzIvc94o9tR18YNFcHFMVvfwGtzP1i+TLV3HRQViNcIbYcfiUNxpIC 9Zk+L2+WewAhr/cRPtY/G0vNofYXh8TnIDeXHQlXgGS4UwL/l+3W5FU3mRXldn4C jdaD4RzDQN9hu7+/awkUOWdeCcSTEP93VEmxdoTIOvsYiyvd65Rvgbc44vKlpIcU -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:48 2025 by rpki-client