$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft File: 40392fe9-312c-47a6-8066-48fda2f4c80b.mft (raw, json) Hash identifier: jLlnD6PCcqKAXk8//gMRzMb0n9Kla5JxQk4fJR219UI= Subject key identifier: F4:11:F7:12:4B:D9:F3:FF:AE:8C:91:8A:FE:20:55:75:4B:B7:47:53 Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 Certificate issuer: /CN=40392fe9-312c-47a6-8066-48fda2f4c80b Certificate serial: 010D0C9F4328584BBF2E28E37F060D6DA02E55A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft Manifest number: 010D0C9F4328584073A84E58EA4BACB47C0E2A8E Signing time: Tue 04 Nov 2025 10:00:03 +0000 Manifest this update: Tue 04 Nov 2025 10:00:03 +0000 Manifest next update: Thu 06 Nov 2025 10:00:00 +0000 Files and hashes: 1: 40392fe9-312c-47a6-8066-48fda2f4c80b.crl (hash: Tq5HbHGYfLv0GMTkGqOy2OeAJpfRIqcFUTl/ubN45pw=) 2: b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (hash: 8dOPj4Wp/qgXA3DU3BqA9zTKdE74MFn0DcUFwJaKg5U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:2e:28:e3:7f:06:0d:6d:a0:2e:55:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b Validity Not Before: Nov 4 10:00:03 2025 GMT Not After : Nov 6 10:00:00 2025 GMT Subject: CN=027396b3-5016-4e5a-af89-cc5d9e75e51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:38:b0:41:35:6a:a3:62:04:5d:b6:2e:1d: f5:db:78:d6:0e:f2:66:40:b4:67:f6:e0:eb:dd:fa: dd:2a:5e:73:d7:85:86:3e:1a:6e:46:21:56:25:c3: b2:f5:a3:53:11:e3:bc:5b:e0:f6:3e:95:96:dc:58: 05:fb:6b:8b:6a:d3:ec:38:4d:9c:40:50:d4:b9:83: 5b:c6:88:fa:0a:8f:2e:60:88:90:fb:58:48:aa:0e: 0f:4d:bc:e7:b9:4e:73:18:9f:ec:a1:0b:f3:35:b0: 06:00:a0:09:9c:2d:c0:fd:1c:f2:cc:83:3d:a3:69: 10:ff:42:8c:68:6f:9a:12:4a:de:54:6f:de:7a:21: b1:d0:e0:fa:f8:01:d2:69:64:13:2a:48:4d:be:c3: a3:3d:62:6c:81:33:2d:ae:b8:c4:05:d7:9b:31:a7: 9f:5a:95:b6:80:e0:46:1a:54:91:58:4d:a6:82:1a: b4:47:27:b1:4f:4e:c9:fd:8d:92:f0:c3:3f:d2:5a: 08:96:f4:a0:72:76:a2:21:79:6d:14:57:2d:bc:4f: 05:31:6b:bf:d1:9e:a8:65:c2:3f:ff:8d:56:85:52: fc:0e:08:c4:ea:24:23:c3:2c:8b:2d:16:5d:87:ec: 9a:c0:d5:8f:0e:6b:a7:e3:fc:a2:55:05:f0:2f:04: e3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:11:F7:12:4B:D9:F3:FF:AE:8C:91:8A:FE:20:55:75:4B:B7:47:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl X509v3 Authority Key Identifier: keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:e0:12:07:62:bd:20:78:3e:91:27:59:4c:cc:3e:75:28:26: 7d:bf:0f:be:5f:99:68:01:da:b8:fd:62:03:1b:43:e5:17:8c: 87:2a:8d:2e:5a:37:fb:1c:0e:68:66:52:bb:71:9d:ce:b7:91: 91:bc:70:28:ff:35:f8:a3:31:86:06:7e:86:0a:c1:24:7c:d2: 4e:8c:af:72:b6:5e:9d:2e:24:82:5e:8a:82:8c:4e:01:38:17: 40:f3:a7:8c:f2:65:18:d9:e6:d6:54:a0:96:69:ba:41:1c:29: 69:ee:56:ee:b7:03:4c:63:9a:45:7e:f6:0e:d2:70:3d:55:67: 61:fa:0b:fc:f0:3e:3e:72:09:f8:90:5e:8e:a4:af:42:0e:26: 23:b2:08:90:2f:1e:ca:c3:f3:17:08:34:d3:d5:6c:ce:97:58: 1f:5f:af:44:3c:d6:b8:4a:42:d1:6b:3f:86:cd:0d:f5:c0:cc: 3f:11:74:76:11:57:b9:01:39:7d:aa:c3:10:cb:8b:c0:95:3b: 49:e1:0d:ff:7c:86:ee:9e:34:69:4e:b1:1e:f2:9c:95:78:77: 53:01:de:12:b6:a0:a0:51:ab:7b:8e:75:9b:6f:84:7b:2e:9a: 38:4d:66:98:f7:6d:b5:59:c8:5b:0d:9b:4a:a7:ee:1d:3f:34: 8a:54:a2:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/LijjfwYNbaAuVaQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzOTJmZTktMzEyYy00N2E2LTgwNjYtNDhmZGEyZjRj ODBiMB4XDTI1MTEwNDEwMDAwM1oXDTI1MTEwNjEwMDAwMFowLzEtMCsGA1UEAxMk MDI3Mzk2YjMtNTAxNi00ZTVhLWFmODktY2M1ZDllNzVlNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsew4sEE1aqNiBF22Lh3123jWDvJmQLRn9uDr 3frdKl5z14WGPhpuRiFWJcOy9aNTEeO8W+D2PpWW3FgF+2uLatPsOE2cQFDUuYNb xoj6Co8uYIiQ+1hIqg4PTbznuU5zGJ/soQvzNbAGAKAJnC3A/RzyzIM9o2kQ/0KM aG+aEkreVG/eeiGx0OD6+AHSaWQTKkhNvsOjPWJsgTMtrrjEBdebMaefWpW2gOBG GlSRWE2mghq0RyexT07J/Y2S8MM/0loIlvSgcnaiIXltFFctvE8FMWu/0Z6oZcI/ /41WhVL8DgjE6iQjwyyLLRZdh+yawNWPDmun4/yiVQXwLwTjFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPQR9xJL2fP/royRiv4gVXVLt0dTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5 MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZkYTJmNGM4MGIvNDAzOTJmZTktMzEyYy00 N2E2LTgwNjYtNDhmZGEyZjRjODBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAzOTJmZTktMzEyYy00N2E2LTgw NjYtNDhmZGEyZjRjODBiLzQwMzkyZmU5LTMxMmMtNDdhNi04MDY2LTQ4ZmRhMmY0 YzgwYi5jcmwwHwYDVR0jBBgwFoAU2h72atkxtsYeskDAgp5dBkW4L6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZk YTJmNGM4MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJ4BIHYr0geD6RJ1lMzD51 KCZ9vw++X5loAdq4/WIDG0PlF4yHKo0uWjf7HA5oZlK7cZ3Ot5GRvHAo/zX4ozGG Bn6GCsEkfNJOjK9ytl6dLiSCXoqCjE4BOBdA86eM8mUY2ebWVKCWabpBHClp7lbu twNMY5pFfvYO0nA9VWdh+gv88D4+cgn4kF6OpK9CDiYjsgiQLx7Kw/MXCDTT1WzO l1gfX69EPNa4SkLRaz+GzQ31wMw/EXR2EVe5ATl9qsMQy4vAlTtJ4Q3/fIbunjRp TrEe8pyVeHdTAd4StqCgUat7jnWbb4R7Lpo4TWaY9221WchbDZtKp+4dPzSKVKIz -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:57 2025 by rpki-client