$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft File: 40a485a4-e936-4174-8999-571e03203823.mft (raw, json) Hash identifier: rrU1Xs/KQHBaOdluaWodFpC8pR9vR4Row4+U9vVkpbA= Subject key identifier: D1:99:07:D0:4F:07:98:BA:64:29:66:E8:6B:58:D0:E7:D9:E5:3C:58 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584BC057FDAB8A18250829443960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft Manifest number: 010D0C9F4328584073A825D34C38BD0BF0568AA4 Signing time: Tue 04 Nov 2025 20:00:08 +0000 Manifest this update: Tue 04 Nov 2025 20:00:08 +0000 Manifest next update: Fri 07 Nov 2025 20:00:00 +0000 Files and hashes: 1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: 52FRMKzBWUFzhMjtE1+5Jph0naVnNTbMec73zOufACs=) 2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: jT9jm03u1xvgufAECEgIzZmUBObCf0+hQAfT+kH2PBU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:57:fd:ab:8a:18:25:08:29:44:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Nov 4 20:00:08 2025 GMT Not After : Nov 7 20:00:00 2025 GMT Subject: CN=a9075dd9-7900-40e1-9e32-95e1eb20b3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:0f:46:97:40:dd:29:1c:50:f4:b5:4f:d3: c4:0a:92:94:ad:1c:f5:e7:d2:f0:ba:d8:f0:27:b2: 93:92:0c:52:aa:2b:80:cb:7a:6d:8e:54:16:aa:cd: aa:c1:66:3a:2e:72:4a:59:da:ae:8e:4c:05:f7:a5: 24:df:81:4b:cc:85:ab:92:57:0f:ae:1e:44:e2:e6: 59:d1:39:8e:72:3a:a4:83:51:ea:a4:83:4e:73:dc: d7:d1:9e:a1:64:99:4e:ef:92:ba:20:f6:0b:f9:0d: 82:59:56:0e:1c:6d:ee:2e:1f:9a:a5:41:28:e3:b8: 97:c5:c5:9f:00:70:17:87:e5:27:61:a2:e8:32:6c: 98:d8:52:be:e3:00:77:ec:ab:18:11:17:47:08:7c: 92:ee:81:b7:b9:ab:a8:41:57:9f:ef:3f:d5:b0:49: c7:7f:a3:b6:27:b3:8f:c2:07:a3:6c:85:13:af:06: 17:98:05:4b:86:0b:8b:71:eb:8a:40:d0:f9:b2:c8: 38:23:48:59:ba:6d:10:cb:84:87:ff:8e:55:45:22: 8e:c2:d4:94:a4:8a:68:2b:94:d5:51:0f:b6:f1:8b: ec:66:c4:d7:a8:7a:f9:62:b2:99:71:d6:5f:4e:ea: af:29:9a:cd:1b:f2:c6:66:15:b7:4d:b7:bf:f6:2b: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:99:07:D0:4F:07:98:BA:64:29:66:E8:6B:58:D0:E7:D9:E5:3C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5f:c1:43:d6:ce:b7:8d:b8:a9:02:88:73:6b:60:18:d5:97: d5:5c:48:ad:cf:f6:e4:06:7b:8d:0f:40:06:37:1a:ce:bd:ac: a1:65:d3:33:4e:a9:10:60:9a:38:07:77:7c:c0:56:3f:a7:75: a2:86:7c:16:4c:08:60:69:97:67:f4:f1:b9:39:a0:f9:e6:34: 64:e7:1b:51:64:52:ae:5c:b6:2e:d6:e8:6d:c4:49:30:be:a0: fb:08:17:35:02:b8:c6:ba:e8:17:23:dc:48:4e:c2:02:16:ca: 1f:f6:8e:b9:21:8b:b2:bf:1d:bb:3d:c9:92:f0:91:6a:a3:d1: 87:1a:5c:3e:ba:32:fe:88:45:c0:d9:2e:b6:2a:7f:e5:d9:fa: 15:d4:8a:f7:34:20:74:6e:30:35:33:d6:00:9f:51:f2:09:56: 78:24:02:1a:93:93:49:2c:2c:9d:92:65:f4:1b:41:6b:fe:67: b8:e0:c4:e0:12:72:b6:d7:0b:4e:e5:92:06:4a:d4:c9:00:dc: dc:86:da:e8:57:b2:2c:77:c7:c3:2b:a8:5e:29:f6:f6:fb:59: 1e:0b:c0:e4:d0:fc:3c:b5:80:bc:82:7e:09:e7:79:10:01:09: 9e:f0:14:75:4b:e6:23:20:7d:ef:d2:4c:11:bc:e5:69:77:c8: 46:12:e8:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/2rihglCClEOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNzIwMDAwMFowLzEtMCsGA1UEAxMk YTkwNzVkZDktNzkwMC00MGUxLTllMzItOTVlMWViMjBiM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg4PRpdA3SkcUPS1T9PECpKUrRz159Lwutjw J7KTkgxSqiuAy3ptjlQWqs2qwWY6LnJKWdqujkwF96Uk34FLzIWrklcPrh5E4uZZ 0TmOcjqkg1HqpINOc9zX0Z6hZJlO75K6IPYL+Q2CWVYOHG3uLh+apUEo47iXxcWf AHAXh+UnYaLoMmyY2FK+4wB37KsYERdHCHyS7oG3uauoQVef7z/VsEnHf6O2J7OP wgejbIUTrwYXmAVLhguLceuKQND5ssg4I0hZum0Qy4SH/45VRSKOwtSUpIpoK5TV UQ+28YvsZsTXqHr5YrKZcdZfTuqvKZrNG/LGZhW3Tbe/9isriQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNGZB9BPB5i6ZClm6GtY0OfZ5TxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvNDBhNDg1YTQtZTkzNi00 MTc0LTg5OTktNTcxZTAzMjAzODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzX8FD1s63jbipAohza2AY 1ZfVXEitz/bkBnuND0AGNxrOvayhZdMzTqkQYJo4B3d8wFY/p3WihnwWTAhgaZdn 9PG5OaD55jRk5xtRZFKuXLYu1uhtxEkwvqD7CBc1ArjGuugXI9xITsICFsof9o65 IYuyvx27PcmS8JFqo9GHGlw+ujL+iEXA2S62Kn/l2foV1Ir3NCB0bjA1M9YAn1Hy CVZ4JAIak5NJLCydkmX0G0Fr/me44MTgEnK21wtO5ZIGStTJANzchtroV7Isd8fD K6heKfb2+1keC8Dk0Pw8tYC8gn4J53kQAQme8BR1S+YjIH3v0kwRvOVpd8hGEuhb -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:16 2025 by rpki-client