$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft File: 40e46360-7ddb-4bec-b73a-9620baea4da1.mft (raw, json) Hash identifier: Wost03AH1xiPMfPqeKATrSdua+/dPLoYlJMBCBYKt28= Subject key identifier: 74:6B:DB:98:12:23:11:E3:A2:26:96:A8:A4:BB:12:BD:80:D4:9D:AF Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F4328584BC0B14904AE8B8DE39EA2B220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft Manifest number: 010D0C9F4328584073A82E66D03332414A648524 Signing time: Tue 04 Nov 2025 23:00:03 +0000 Manifest this update: Tue 04 Nov 2025 23:00:03 +0000 Manifest next update: Fri 07 Nov 2025 23:00:00 +0000 Files and hashes: 1: 40e46360-7ddb-4bec-b73a-9620baea4da1.crl (hash: vWfa9F5gzlmpgG9b+kUuiAvN/8llWnYJ8Rm/VHRDApo=) 2: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (hash: Z/3npSqC86UxWa24QMF2p9k/reE6qclM+klIFE4xJSQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:b1:49:04:ae:8b:8d:e3:9e:a2:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: Nov 4 23:00:03 2025 GMT Not After : Nov 7 23:00:00 2025 GMT Subject: CN=3e4ddcf4-eb80-41b6-82bd-e7126ede367b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:2c:bf:9f:d2:a8:a6:1e:67:db:2b:95:53: 2d:0f:ff:58:51:9d:00:40:75:64:18:cf:64:99:6a: 41:2d:bc:be:55:cb:d6:4b:da:48:fd:e5:00:9e:38: 1d:f9:b7:fa:00:b1:f8:74:50:b7:d8:f6:ca:11:59: 7a:58:06:37:12:84:c2:b6:30:66:9f:9d:7f:5d:64: a1:7d:37:d8:2f:07:17:1f:06:f5:15:90:40:64:c8: 9b:c4:b9:77:87:15:78:56:e3:5a:ba:19:09:cf:09: a8:12:79:5f:f7:53:9f:cc:e6:0e:0f:62:83:ec:ea: 8a:d7:09:51:92:c0:d6:d2:91:0d:0c:9f:d5:fb:47: 3a:e5:9f:00:9b:d0:4d:74:85:b2:18:b5:fa:d7:d2: 9b:d6:57:90:62:00:d8:47:96:df:54:44:55:56:2c: ad:24:6d:16:8c:c3:8c:5e:f9:03:73:b9:8e:08:a8: c0:8b:d2:25:b4:7b:5e:9c:ae:05:9b:05:47:44:d4: 81:a0:bd:77:9a:41:1f:52:de:d7:b8:ba:07:8a:5c: 6c:d9:82:7b:2f:b8:b7:ec:b8:8d:ea:ee:08:45:e8: ee:a9:c2:b2:57:a9:93:ae:d7:b8:63:9b:ac:81:0b: 58:5b:86:7b:1e:f2:d5:7b:b1:27:50:1b:7a:af:19: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6B:DB:98:12:23:11:E3:A2:26:96:A8:A4:BB:12:BD:80:D4:9D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:22:81:12:61:b8:b8:93:bb:76:38:0b:8c:59:d2:fc:99:7d: 3d:ff:8c:a8:3d:bf:bf:b4:83:2f:a9:6e:a4:a6:93:b9:b6:b1: d0:cc:49:81:c5:06:ce:72:4a:e8:bb:6c:81:87:f9:4d:a0:c2: af:b7:05:10:c2:e9:42:00:7a:16:a3:2e:e1:9d:d1:d8:81:bb: 4b:8f:fc:fd:f6:94:12:76:0c:0e:ec:82:4f:cb:bb:c9:e2:6e: d1:90:5f:1a:12:27:de:8d:d1:9d:de:fd:55:e8:23:38:17:2f: f8:8f:c2:40:a7:2c:c2:f4:86:bc:84:12:67:1d:c0:ca:2d:29: 8b:d6:e2:62:f0:30:66:2e:f8:2e:7b:e3:43:90:8b:ec:9d:1b: 75:95:0e:e3:d9:98:f9:32:c2:87:cb:c7:33:7d:cb:1a:65:7e: 03:c2:b4:5f:47:f0:39:c1:4f:08:16:ad:7d:03:eb:de:54:80: 00:1e:af:87:36:02:63:16:c7:19:6a:4a:cb:fb:81:85:99:05: f4:7d:eb:0c:13:c5:a6:ac:c4:dd:a5:f5:03:45:95:5a:45:7f: 9f:8c:8e:ca:9b:f7:fd:ee:f7:b0:0b:ea:3b:b9:54:f2:06:9e: 1f:68:04:ed:25:3d:d3:8a:40:ee:ad:44:bd:28:ce:45:66:ee: c5:45:79:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAsUkErouN456isiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI1MTEwNDIzMDAwM1oXDTI1MTEwNzIzMDAwMFowLzEtMCsGA1UEAxMk M2U0ZGRjZjQtZWI4MC00MWI2LTgyYmQtZTcxMjZlZGUzNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWYsv5/SqKYeZ9srlVMtD/9YUZ0AQHVkGM9k mWpBLby+VcvWS9pI/eUAnjgd+bf6ALH4dFC32PbKEVl6WAY3EoTCtjBmn51/XWSh fTfYLwcXHwb1FZBAZMibxLl3hxV4VuNauhkJzwmoEnlf91OfzOYOD2KD7OqK1wlR ksDW0pENDJ/V+0c65Z8Am9BNdIWyGLX619Kb1leQYgDYR5bfVERVViytJG0WjMOM XvkDc7mOCKjAi9IltHtenK4FmwVHRNSBoL13mkEfUt7XuLoHilxs2YJ7L7i37LiN 6u4IRejuqcKyV6mTrte4Y5usgQtYW4Z7HvLVe7EnUBt6rxlICQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHRr25gSIxHjoiaWqKS7Er2A1J2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvNDBlNDYzNjAtN2RkYi00 YmVjLWI3M2EtOTYyMGJhZWE0ZGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNIoESYbi4k7t2OAuMWdL8 mX09/4yoPb+/tIMvqW6kppO5trHQzEmBxQbOckrou2yBh/lNoMKvtwUQwulCAHoW oy7hndHYgbtLj/z99pQSdgwO7IJPy7vJ4m7RkF8aEifejdGd3v1V6CM4Fy/4j8JA pyzC9Ia8hBJnHcDKLSmL1uJi8DBmLvgue+NDkIvsnRt1lQ7j2Zj5MsKHy8czfcsa ZX4DwrRfR/A5wU8IFq19A+veVIAAHq+HNgJjFscZakrL+4GFmQX0fesME8WmrMTd pfUDRZVaRX+fjI7Km/f97vewC+o7uVTyBp4faATtJT3TikDurUS9KM5FZu7FRXmP -----END CERTIFICATE-----Generated at Wed Nov 5 09:20:43 2025 by rpki-client