$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: q3fLzf/iGdntyP2GtlOM+U3/YWobOZx9gtXt8Nr3LNA= Subject key identifier: 4C:74:9E:83:5E:4F:64:82:52:C2:9D:F9:4B:A5:92:AD:E0:F2:02:B7 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584ACD3AE1EC27D14E26319F1400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7BC5 Signing time: Sat 09 Aug 2025 18:00:03 +0000 Manifest this update: Sat 09 Aug 2025 18:00:03 +0000 Manifest next update: Tue 12 Aug 2025 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: Yq1QDil00V5SL8ARki8ZuhalJVICodzEUhwBC00Ph9c=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: AeavAVbds6606+s6dVrePy4cbBurR8n3lxeDtP6nQ/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:3a:e1:ec:27:d1:4e:26:31:9f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Aug 9 18:00:03 2025 GMT Not After : Aug 12 18:00:00 2025 GMT Subject: CN=d101582c-90d2-4ab6-9077-10183a152a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:ca:58:e2:84:f4:72:16:6c:c7:33:fb:08: a4:44:97:d3:f2:e1:8f:fc:b8:5f:ab:61:40:5a:56: e3:19:5b:9e:56:41:c0:c8:35:39:05:26:2c:fc:e3: 65:a0:40:82:e4:07:86:9a:82:3c:88:21:d0:01:8f: d9:6f:b2:c0:2f:36:e2:df:ce:2c:82:67:16:84:e1: 5b:2c:01:ff:2b:0d:33:21:52:96:80:94:ae:7d:10: 8d:30:9b:70:c7:36:d0:2d:2b:12:79:f2:22:c5:22: bf:41:db:f8:8b:5d:10:36:99:d0:e6:48:a4:f2:ec: 60:fb:ac:0d:fa:82:8e:48:96:fa:4d:d1:df:96:ba: 44:9d:ea:11:d3:5d:f6:8d:6c:dc:9c:1b:16:f0:8f: e1:23:d8:9b:02:6f:3d:c3:10:36:94:96:cc:9e:80: e0:28:30:12:a6:30:25:e6:94:c7:55:c1:47:c5:6f: 48:4d:33:08:86:0b:84:13:a8:93:73:ed:ac:ea:d8: f3:bf:cc:ca:02:a0:67:b0:97:42:02:77:ac:8c:28: a2:9a:09:24:77:d2:40:9b:61:8a:a3:d4:36:1d:10: 52:a3:c7:af:b2:e1:4a:29:56:0b:05:53:dd:97:bd: 53:ae:55:64:68:c9:34:44:88:be:1f:07:39:5f:d5: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:74:9E:83:5E:4F:64:82:52:C2:9D:F9:4B:A5:92:AD:E0:F2:02:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:72:92:bb:8d:42:45:d4:97:51:3b:bb:03:a2:86:1b:a6:66: b5:69:fc:42:86:93:93:90:b5:7b:27:03:e6:25:a6:e8:77:ea: 9f:f3:dc:d0:fc:b8:a8:e6:c7:26:67:35:81:82:e1:fd:08:f6: 40:a1:c8:ef:b9:8d:fd:d8:64:27:75:87:e6:ce:61:d1:a2:d3: 42:00:7b:d1:cb:a3:db:be:64:fd:2a:1c:97:56:49:70:b9:51: fc:e4:c7:b3:e2:bf:6c:44:ba:54:c9:ba:57:39:74:c3:20:41: cd:94:b1:a7:ba:3b:ef:31:90:7f:d0:14:f5:cb:42:b9:a4:95: c9:0f:dc:72:43:4b:77:99:e8:de:ee:ab:e2:b2:d7:bc:0c:4c: e5:38:d2:a3:ba:73:fd:d4:42:bf:0b:21:cb:ac:38:21:56:47: b4:67:7f:63:1e:d3:d9:48:55:ad:b5:df:57:14:4d:77:52:86: fd:cd:cd:73:84:b5:a2:12:88:08:7a:52:8f:bf:af:da:9f:2b: db:00:37:5b:99:25:87:ac:17:71:bc:69:bc:6d:d4:ee:2f:85: c1:85:1d:c9:83:d6:bb:76:e6:4c:83:ce:16:c9:86:38:7f:43: 54:fa:7f:a2:0d:e7:93:17:cf:ea:1a:82:0d:dc:52:f5:2f:9a: a9:85:4a:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErNOuHsJ9FOJjGfFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI1MDgwOTE4MDAwM1oXDTI1MDgxMjE4MDAwMFowLzEtMCsGA1UEAxMk ZDEwMTU4MmMtOTBkMi00YWI2LTkwNzctMTAxODNhMTUyYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYfKWOKE9HIWbMcz+wikRJfT8uGP/Lhfq2FA WlbjGVueVkHAyDU5BSYs/ONloECC5AeGmoI8iCHQAY/Zb7LALzbi384sgmcWhOFb LAH/Kw0zIVKWgJSufRCNMJtwxzbQLSsSefIixSK/Qdv4i10QNpnQ5kik8uxg+6wN +oKOSJb6TdHflrpEneoR0132jWzcnBsW8I/hI9ibAm89wxA2lJbMnoDgKDASpjAl 5pTHVcFHxW9ITTMIhguEE6iTc+2s6tjzv8zKAqBnsJdCAnesjCiimgkkd9JAm2GK o9Q2HRBSo8evsuFKKVYLBVPdl71TrlVkaMk0RIi+Hwc5X9XMcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEx0noNeT2SCUsKd+Uulkq3g8gK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArcpK7jUJF1JdRO7sDooYb pma1afxChpOTkLV7JwPmJabod+qf89zQ/Lio5scmZzWBguH9CPZAocjvuY392GQn dYfmzmHRotNCAHvRy6PbvmT9KhyXVklwuVH85Mez4r9sRLpUybpXOXTDIEHNlLGn ujvvMZB/0BT1y0K5pJXJD9xyQ0t3meje7qviste8DEzlONKjunP91EK/CyHLrDgh Vke0Z39jHtPZSFWttd9XFE13Uob9zc1zhLWiEogIelKPv6/anyvbADdbmSWHrBdx vGm8bdTuL4XBhR3Jg9a7duZMg84WyYY4f0NU+n+iDeeTF8/qGoIN3FL1L5qphUqy -----END CERTIFICATE-----Generated at Sat Aug 9 20:43:00 2025 by rpki-client