$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft File: 40a485a4-e936-4174-8999-571e03203823.mft (raw, json) Hash identifier: 2m3/GisvC5gzH3P9AEdwslxqAnxyJTCooVM89weKtnw= Subject key identifier: 4A:8B:57:7F:95:04:45:26:83:CE:99:FC:B4:FA:4D:F3:96:58:8E:89 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584D06FA0719CFDF9702A01F3840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft Manifest number: 010D0C9F4328584073A825D34C38BD0BF0568B1D Signing time: Sun 01 Mar 2026 20:00:09 +0000 Manifest this update: Sun 01 Mar 2026 20:00:09 +0000 Manifest next update: Tue 03 Mar 2026 20:00:00 +0000 Files and hashes: 1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: N53BCwdjvg2YlAdsfLayUvb8EgWhYq2N+cg7Efqj0/A=) 2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: vTUABPq4WbWG2MkCEiRZgFizkphm0QrPTfg32nA6x9Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:fa:07:19:cf:df:97:02:a0:1f:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Mar 1 20:00:09 2026 GMT Not After : Mar 3 20:00:00 2026 GMT Subject: CN=73260d1a-3e5d-4fb5-be83-6eb0b9f6aa2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:63:55:74:d0:66:14:fb:a6:3e:be:d9:c3: 87:8e:e5:40:d1:80:ae:5e:ed:f4:69:26:3d:75:93: 97:f4:18:c4:46:a3:a0:91:65:9f:56:a3:be:1b:03: f8:8f:c7:e3:21:ef:5e:c6:68:f5:dd:35:a4:07:73: 58:5a:b2:6e:bd:89:e5:db:7f:9e:f8:61:ec:d1:b6: 9c:a8:d0:7b:8e:4a:c9:dc:e7:1b:ff:77:d4:34:ad: 0d:0f:b8:98:6e:d9:df:c0:64:1b:85:7d:1a:64:94: 0e:50:1b:6c:ac:b6:f2:d7:c1:c0:0b:52:ab:02:5d: 4f:e9:16:7f:ea:db:c2:43:8b:43:20:30:63:a2:fe: 26:81:f8:1a:61:91:a3:46:6b:4e:15:ff:fa:0b:9e: 7e:83:83:95:76:41:97:9d:67:fb:54:57:96:a4:92: 5f:9b:52:03:67:26:29:1a:5d:d9:f7:5e:a9:45:44: 2b:a2:6c:67:55:eb:e1:e5:c7:fe:a9:4c:3f:30:0d: 01:f1:bc:3d:8e:79:81:cb:db:62:a0:7e:2c:2a:e0: 91:7a:99:2d:be:ff:15:1d:cf:b8:b5:b8:b1:f8:cc: 6d:f5:0b:72:ba:16:bd:dd:c1:34:91:61:08:1e:50: 32:f2:fe:00:4a:7b:60:04:95:be:37:02:e6:11:8d: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8B:57:7F:95:04:45:26:83:CE:99:FC:B4:FA:4D:F3:96:58:8E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:02:58:91:a6:9f:2f:32:81:81:5e:b5:af:6e:4a:37:83:90: f1:8f:1d:89:44:1f:a6:11:73:5c:c3:aa:d0:85:47:7c:e1:84: ec:be:ff:d2:a9:0d:23:81:93:9d:1d:ca:9e:f4:3d:d0:a9:0e: 37:24:5c:cb:58:89:09:15:48:7b:f8:f8:cc:77:8e:c0:eb:c6: d8:cd:a1:72:34:60:b0:f2:c4:3c:30:d0:f1:88:3a:f9:b8:b2: f2:d3:7e:1b:08:9f:09:63:c3:da:5c:25:ef:c9:5f:97:9b:90: b3:68:16:c6:e2:89:70:ca:3c:63:b9:fe:b3:62:9b:42:a9:a5: de:38:41:db:e5:74:15:5c:d2:03:f3:fe:41:0e:db:3e:fb:4f: 10:de:e1:41:72:da:0c:da:d0:96:ea:da:82:40:82:96:21:be: b8:4f:5d:e7:f5:f6:b2:33:b3:bb:19:ef:56:0c:c4:af:48:07: 16:5e:2c:3e:7c:d4:b1:ac:62:a7:f0:57:a2:77:92:a3:f5:9f: 9a:3f:50:b5:74:94:c4:7f:66:8a:3d:37:a5:c8:ea:b2:de:5d: 30:c0:53:4d:f0:64:d5:01:05:b5:40:de:69:cf:93:36:3b:a0: 1e:24:01:ce:39:8f:01:19:c3:c7:b8:87:ec:6d:b9:a2:50:b1: 41:d1:17:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0G+gcZz9+XAqAfOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI2MDMwMTIwMDAwOVoXDTI2MDMwMzIwMDAwMFowLzEtMCsGA1UEAxMk NzMyNjBkMWEtM2U1ZC00ZmI1LWJlODMtNmViMGI5ZjZhYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvljVXTQZhT7pj6+2cOHjuVA0YCuXu30aSY9 dZOX9BjERqOgkWWfVqO+GwP4j8fjIe9exmj13TWkB3NYWrJuvYnl23+e+GHs0bac qNB7jkrJ3Ocb/3fUNK0ND7iYbtnfwGQbhX0aZJQOUBtsrLby18HAC1KrAl1P6RZ/ 6tvCQ4tDIDBjov4mgfgaYZGjRmtOFf/6C55+g4OVdkGXnWf7VFeWpJJfm1IDZyYp Gl3Z916pRUQromxnVevh5cf+qUw/MA0B8bw9jnmBy9tioH4sKuCRepktvv8VHc+4 tbix+Mxt9Qtyuha93cE0kWEIHlAy8v4ASntgBJW+NwLmEY3NZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEqLV3+VBEUmg86Z/LT6TfOWWI6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvNDBhNDg1YTQtZTkzNi00 MTc0LTg5OTktNTcxZTAzMjAzODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuAliRpp8vMoGBXrWvbko3 g5Dxjx2JRB+mEXNcw6rQhUd84YTsvv/SqQ0jgZOdHcqe9D3QqQ43JFzLWIkJFUh7 +PjMd47A68bYzaFyNGCw8sQ8MNDxiDr5uLLy034bCJ8JY8PaXCXvyV+Xm5CzaBbG 4olwyjxjuf6zYptCqaXeOEHb5XQVXNID8/5BDts++08Q3uFBctoM2tCW6tqCQIKW Ib64T13n9fayM7O7Ge9WDMSvSAcWXiw+fNSxrGKn8Feid5Kj9Z+aP1C1dJTEf2aK PTelyOqy3l0wwFNN8GTVAQW1QN5pz5M2O6AeJAHOOY8BGcPHuIfsbbmiULFB0Rfq -----END CERTIFICATE-----Generated at Mon Mar 2 16:49:44 2026 by rpki-client