$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft File: 40e46360-7ddb-4bec-b73a-9620baea4da1.mft (raw, json) Hash identifier: +CFaVwTtdwmXplifwlkwchQYmTjlU0hkwzQeugdjbSU= Subject key identifier: 03:45:C8:73:50:22:08:FC:57:3F:A8:B9:D6:38:6E:FF:13:04:C7:6A Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F4328584A370EDE67B07186A325037F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft Manifest number: 010D0C9F4328584073A82E66D03332414A648494 Signing time: Mon 16 Jun 2025 23:00:07 +0000 Manifest this update: Mon 16 Jun 2025 23:00:07 +0000 Manifest next update: Wed 18 Jun 2025 23:00:00 +0000 Files and hashes: 1: 40e46360-7ddb-4bec-b73a-9620baea4da1.crl (hash: XlRF7znpONy0TKnDzUfD04OUvPqdORnVmrGB76Jg/g4=) 2: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (hash: um646Z9K9ZfgPv+PUKzFV43yynrQtmneJdNqm02x4U0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:0e:de:67:b0:71:86:a3:25:03:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: Jun 16 23:00:07 2025 GMT Not After : Jun 18 23:00:00 2025 GMT Subject: CN=d9cf7e8a-50ad-4fd3-ae2c-e0a4bc297ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:58:0e:4e:a0:b1:96:54:6d:2b:b3:6e:dd:cb: b6:8f:0e:38:c3:16:ca:e5:86:08:73:4b:e4:2f:dc: 10:4b:74:1c:d0:9b:9e:28:8a:03:b9:bc:47:dd:41: ec:58:59:77:ed:31:9a:17:c0:a9:95:d2:9d:b7:83: a8:8b:d5:1e:e2:7c:74:87:50:73:ca:58:5b:c8:86: 7e:b0:ca:78:93:e1:90:0b:c1:29:95:c1:e6:ad:d0: 0e:63:f7:aa:ff:3d:2a:54:2a:8a:a7:24:88:3c:54: 1e:57:01:29:d1:73:b2:b1:7e:ef:04:c9:a2:86:d5: c7:53:f1:72:93:85:c1:42:f5:4e:6f:60:63:01:e8: 70:63:84:9a:35:92:db:35:da:38:77:2b:95:c8:58: 12:2a:e0:08:5c:c7:ef:9f:f4:90:ff:a5:b9:71:a6: 4a:ca:f4:76:3c:f4:8a:d7:2f:e7:1e:ea:53:30:db: e0:5c:f3:8d:94:82:c3:c7:46:7a:bc:45:6b:c4:5f: 4f:57:70:3c:dd:a7:be:b0:4d:f3:2b:ef:1d:37:f4: 7b:52:1f:9d:24:34:bf:0b:75:ca:05:28:69:56:33: 5a:d8:4f:1f:97:f2:28:a5:e4:3d:87:83:8c:04:31: a5:43:87:27:6a:b5:30:fd:1c:33:67:c6:65:c3:aa: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:45:C8:73:50:22:08:FC:57:3F:A8:B9:D6:38:6E:FF:13:04:C7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f6:12:d3:25:42:e0:9a:90:97:e4:42:0e:a2:3b:b2:a0:3b: a7:ea:fb:1c:dc:eb:ff:87:1b:3e:1b:9d:ee:ee:7b:bf:f2:89: f7:06:3a:de:ae:5c:bd:20:16:2d:03:f3:c6:fb:6d:df:3c:cd: 30:2d:7e:2c:0e:4a:3b:0b:ac:31:e8:cb:81:de:d0:c4:8f:99: 43:47:9d:df:79:a2:09:fa:86:4f:be:f5:27:fc:d5:f9:5b:c8: b9:57:19:16:03:2c:eb:73:f6:a7:65:34:56:44:1e:e4:50:fa: 39:8c:4d:3c:8b:80:38:d7:4e:d9:28:2e:eb:61:29:83:12:1c: 74:11:5f:05:31:10:f6:76:c5:90:ce:c0:4d:1a:b0:b8:0e:7c: ce:69:8f:00:a5:ee:e8:ca:6a:d3:25:b8:79:ed:04:52:75:4a: cf:23:61:19:55:f4:d9:c0:77:a7:5f:87:81:b0:f3:2f:3a:a4: 22:f0:45:2c:e4:38:76:fd:6a:53:fe:29:74:0a:a6:32:5b:67: ab:2e:f0:9e:a7:a0:5c:f1:d8:6c:c2:76:ab:7f:5a:4b:92:38: 97:b4:bf:06:de:6f:67:11:1d:09:84:23:74:df:5c:5d:cc:bd: 8b:c9:52:f5:af:d0:04:54:c2:e2:f4:88:2d:e7:1d:c0:2d:bb: aa:0b:df:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo3Dt5nsHGGoyUDfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI1MDYxNjIzMDAwN1oXDTI1MDYxODIzMDAwMFowLzEtMCsGA1UEAxMk ZDljZjdlOGEtNTBhZC00ZmQzLWFlMmMtZTBhNGJjMjk3ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1gOTqCxllRtK7Nu3cu2jw44wxbK5YYIc0vk L9wQS3Qc0JueKIoDubxH3UHsWFl37TGaF8CpldKdt4Ooi9Ue4nx0h1BzylhbyIZ+ sMp4k+GQC8EplcHmrdAOY/eq/z0qVCqKpySIPFQeVwEp0XOysX7vBMmihtXHU/Fy k4XBQvVOb2BjAehwY4SaNZLbNdo4dyuVyFgSKuAIXMfvn/SQ/6W5caZKyvR2PPSK 1y/nHupTMNvgXPONlILDx0Z6vEVrxF9PV3A83ae+sE3zK+8dN/R7Uh+dJDS/C3XK BShpVjNa2E8fl/IopeQ9h4OMBDGlQ4cnarUw/RwzZ8Zlw6pUeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFANFyHNQIgj8Vz+oudY4bv8TBMdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvNDBlNDYzNjAtN2RkYi00 YmVjLWI3M2EtOTYyMGJhZWE0ZGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU9hLTJULgmpCX5EIOojuy oDun6vsc3Ov/hxs+G53u7nu/8on3Bjrerly9IBYtA/PG+23fPM0wLX4sDko7C6wx 6MuB3tDEj5lDR53feaIJ+oZPvvUn/NX5W8i5VxkWAyzrc/anZTRWRB7kUPo5jE08 i4A4107ZKC7rYSmDEhx0EV8FMRD2dsWQzsBNGrC4DnzOaY8Ape7oymrTJbh57QRS dUrPI2EZVfTZwHenX4eBsPMvOqQi8EUs5Dh2/WpT/il0CqYyW2erLvCep6Bc8dhs wnarf1pLkjiXtL8G3m9nER0JhCN031xdzL2LyVL1r9AEVMLi9Igt5x3ALbuqC99U -----END CERTIFICATE-----Generated at Tue Jun 17 17:53:35 2025 by rpki-client