$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft File: 40392fe9-312c-47a6-8066-48fda2f4c80b.mft (raw, json) Hash identifier: D5ee0h+/giLD9XbrPVcjiVhFrXz9hmjKcxhm6GBNkYQ= Subject key identifier: 2A:FD:62:9B:C1:66:10:97:46:C0:3E:9C:E0:A8:11:B0:88:28:68:EE Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 Certificate issuer: /CN=40392fe9-312c-47a6-8066-48fda2f4c80b Certificate serial: 010D0C9F4328584AC121E9540CED6B6D9271D5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft Manifest number: 010D0C9F4328584073A84E58EA4BACB47C0E2A31 Signing time: Tue 05 Aug 2025 10:00:03 +0000 Manifest this update: Tue 05 Aug 2025 10:00:03 +0000 Manifest next update: Fri 08 Aug 2025 10:00:00 +0000 Files and hashes: 1: 40392fe9-312c-47a6-8066-48fda2f4c80b.crl (hash: OgLntA3j8Rx48oHaTnGV6wjkf/5coj8A5wndPxQ2WpU=) 2: b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (hash: 8OHJK50m0VjghhoQKRUZSHGnurmyMGYumRfrRhz6zNE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:21:e9:54:0c:ed:6b:6d:92:71:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b Validity Not Before: Aug 5 10:00:03 2025 GMT Not After : Aug 8 10:00:00 2025 GMT Subject: CN=754d5b34-92b1-48ad-80ef-1401b4539c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:39:d2:2f:6b:a0:3e:fe:88:94:19:a1:49:c2: bb:1e:f3:3a:b4:5a:c4:80:dc:8b:b3:76:7a:c6:d4: 69:08:30:d8:49:2d:28:ec:d1:dc:66:4c:c3:d6:97: f6:77:58:9f:37:16:4e:5a:ef:09:64:02:ef:e3:13: a3:44:16:4a:0f:ee:8b:99:3c:20:e4:d6:8d:94:46: d8:c6:ac:1e:3c:3a:1b:b0:be:a0:a4:2a:47:91:ab: 95:a2:64:1f:c1:f2:5b:c5:1d:9c:be:85:2f:f0:0f: 23:c5:0e:56:a3:76:ab:46:6f:0d:1f:4a:b2:65:a6: 72:13:3e:99:fb:54:f5:8a:4f:44:00:83:da:74:1c: 01:8a:c6:ba:c1:6f:f7:b2:8e:ca:3f:62:1f:2f:a8: dd:b6:a9:2c:6c:c1:0e:53:15:06:fc:12:c1:3a:da: 86:eb:94:f7:2a:56:b0:65:06:bb:7f:a0:ab:1f:59: ec:de:a6:ab:8d:a5:66:44:60:eb:5d:7b:c5:7b:95: c8:32:fb:9d:89:bd:15:e1:33:03:f3:36:75:c9:c4: 7a:96:ba:82:76:bb:20:ff:3a:93:46:19:12:ed:37: 38:ae:86:6c:fe:93:36:25:7e:79:a3:d5:16:04:12: bb:b5:fb:60:ed:6f:9a:76:d2:ea:e6:6b:bc:ff:18: ed:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FD:62:9B:C1:66:10:97:46:C0:3E:9C:E0:A8:11:B0:88:28:68:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl X509v3 Authority Key Identifier: keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d5:ef:ad:b1:d2:c2:f0:5d:e0:59:aa:da:77:b8:2a:a4:39: 6f:58:56:df:72:30:99:65:e3:ad:8a:ad:45:a4:3d:69:2e:a8: f8:8d:1f:ad:aa:4a:26:b2:14:1b:20:06:e0:63:b2:fd:d1:81: a2:7f:9b:f6:4c:11:4e:ee:88:de:12:26:1f:b4:17:17:74:89: 70:60:3c:c1:7b:2f:12:99:f0:b2:b0:37:17:61:e6:15:ce:9e: 0c:9f:40:34:4e:84:18:1f:24:3c:64:81:74:ec:c4:ef:63:c3: 56:de:c0:79:30:d6:1a:ed:7e:ed:e2:19:0a:f1:05:ea:eb:5a: e5:89:f7:18:2e:44:dc:ed:e7:2b:a5:6a:76:4f:34:2f:88:a8: a0:0a:97:75:82:ad:8d:34:1f:87:04:6b:36:b1:93:60:d9:5f: 5c:ff:ed:c4:80:e0:3e:2b:31:11:07:d8:b9:fa:79:28:a0:b5: 90:7f:63:ba:fd:30:ac:16:1c:87:c0:c6:95:a5:5b:1b:0d:2e: 52:79:81:c3:79:4b:e7:99:d9:66:1b:1e:85:3b:0c:3e:d2:d4: e1:d8:0c:1a:15:da:52:ac:ce:5f:36:ee:df:29:f1:40:c1:80: 22:b3:36:d9:6a:40:b7:ca:1c:05:6d:61:72:43:6b:75:f9:c9: 9d:c7:87:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErBIelUDO1rbZJx1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzOTJmZTktMzEyYy00N2E2LTgwNjYtNDhmZGEyZjRj ODBiMB4XDTI1MDgwNTEwMDAwM1oXDTI1MDgwODEwMDAwMFowLzEtMCsGA1UEAxMk NzU0ZDViMzQtOTJiMS00OGFkLTgwZWYtMTQwMWI0NTM5YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTnSL2ugPv6IlBmhScK7HvM6tFrEgNyLs3Z6 xtRpCDDYSS0o7NHcZkzD1pf2d1ifNxZOWu8JZALv4xOjRBZKD+6LmTwg5NaNlEbY xqwePDobsL6gpCpHkauVomQfwfJbxR2cvoUv8A8jxQ5Wo3arRm8NH0qyZaZyEz6Z +1T1ik9EAIPadBwBisa6wW/3so7KP2IfL6jdtqksbMEOUxUG/BLBOtqG65T3Klaw ZQa7f6CrH1ns3qarjaVmRGDrXXvFe5XIMvudib0V4TMD8zZ1ycR6lrqCdrsg/zqT RhkS7Tc4roZs/pM2JX55o9UWBBK7tftg7W+adtLq5mu8/xjtMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCr9YpvBZhCXRsA+nOCoEbCIKGjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5 MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZkYTJmNGM4MGIvNDAzOTJmZTktMzEyYy00 N2E2LTgwNjYtNDhmZGEyZjRjODBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAzOTJmZTktMzEyYy00N2E2LTgw NjYtNDhmZGEyZjRjODBiLzQwMzkyZmU5LTMxMmMtNDdhNi04MDY2LTQ4ZmRhMmY0 YzgwYi5jcmwwHwYDVR0jBBgwFoAU2h72atkxtsYeskDAgp5dBkW4L6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZk YTJmNGM4MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCT1e+tsdLC8F3gWarad7gq pDlvWFbfcjCZZeOtiq1FpD1pLqj4jR+tqkomshQbIAbgY7L90YGif5v2TBFO7oje EiYftBcXdIlwYDzBey8SmfCysDcXYeYVzp4Mn0A0ToQYHyQ8ZIF07MTvY8NW3sB5 MNYa7X7t4hkK8QXq61rlifcYLkTc7ecrpWp2TzQviKigCpd1gq2NNB+HBGs2sZNg 2V9c/+3EgOA+KzERB9i5+nkooLWQf2O6/TCsFhyHwMaVpVsbDS5SeYHDeUvnmdlm Gx6FOww+0tTh2AwaFdpSrM5fNu7fKfFAwYAiszbZakC3yhwFbWFyQ2t1+cmdx4dt -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:33 2025 by rpki-client