$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: K6ygL5kebdDRcdpVUxUAduWsi7ieS7RwT5BQBwzzMYg= Subject key identifier: F8:A7:C0:EE:CF:19:1D:DE:56:59:DA:69:42:93:25:C8:E4:21:AF:03 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584A3C0F4F97956EE1DF08F83380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7B91 Signing time: Wed 18 Jun 2025 18:00:03 +0000 Manifest this update: Wed 18 Jun 2025 18:00:03 +0000 Manifest next update: Sat 21 Jun 2025 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: szpw8tM08nqRIqxLw4a6+/Yl3czYT2LXW7dpZeiIJuc=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: AeavAVbds6606+s6dVrePy4cbBurR8n3lxeDtP6nQ/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:4f:97:95:6e:e1:df:08:f8:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Jun 18 18:00:03 2025 GMT Not After : Jun 21 18:00:00 2025 GMT Subject: CN=c6b69a57-e075-4973-878d-6df6ea43e7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:6b:a0:29:b4:c2:9b:21:7e:bf:71:7d:49: cb:80:4e:04:a4:d2:ad:25:d7:ff:c9:4f:11:b0:a9: 21:62:4f:e4:f8:dc:98:91:4b:d9:ad:3b:b5:ea:e1: 16:0a:4b:15:7e:81:c6:78:4d:43:f0:78:26:42:b2: e7:54:c7:17:32:19:9f:d6:92:1c:c3:d8:7d:00:a9: d4:65:b5:74:93:db:15:af:33:be:20:a4:50:3b:a8: ba:c8:5a:13:b9:3b:b5:2f:8c:fd:37:f8:8d:a5:a7: e2:aa:f4:e0:fc:50:c2:2f:01:59:95:97:73:dc:94: f9:82:fe:c6:c1:0b:5f:ee:67:4c:c8:2c:6d:89:ef: 9d:95:cd:35:7d:55:79:b9:61:c7:ad:73:e9:ce:10: 48:0c:96:b7:01:18:09:d2:0e:b7:a0:15:7d:76:65: 0e:c2:2c:1e:fa:0e:1f:dc:02:34:f4:7e:fe:27:4c: 76:d3:63:82:76:c0:f3:6c:a8:a8:12:7a:e6:f2:0a: 72:db:42:97:d0:95:b0:1e:af:15:95:40:2d:79:c8: 05:9b:ba:f4:35:3f:47:c9:d2:f8:98:c7:eb:51:4d: bd:64:67:d8:79:8f:70:3b:10:c7:4c:37:71:20:31: e3:64:34:ba:91:d6:a4:49:21:f7:1a:52:f5:a9:2e: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A7:C0:EE:CF:19:1D:DE:56:59:DA:69:42:93:25:C8:E4:21:AF:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:40:09:9e:1b:e5:12:25:d0:fa:df:0a:1a:31:4f:25:79:b9: 2a:fd:bb:d3:30:1a:fc:62:ea:0a:66:a8:df:f7:74:7a:6a:78: 5a:6e:ce:a0:a7:03:ae:44:f8:7b:7c:6c:4e:76:fb:1d:f8:5d: 39:43:ca:3a:4e:45:95:65:73:62:34:84:4a:f3:b8:54:37:ab: 6a:99:c9:06:51:07:a5:cc:8a:03:82:dd:8e:cc:35:6b:bc:29: 22:a1:6f:c5:81:2a:83:59:7a:3f:9f:5c:75:ca:70:f4:7d:1a: 1f:7e:9a:71:e0:8d:5e:ce:b8:8f:0a:35:e7:5c:c4:5a:88:e9: 18:0f:68:6d:3b:e6:08:b7:f3:d1:1c:bf:7c:ff:2b:9b:9c:5d: 6d:3f:d9:05:c6:d9:66:ea:0f:1c:b8:56:b3:be:b4:02:28:59: c0:9c:16:27:dd:7c:38:df:73:5b:be:83:a2:27:2c:4b:28:f4: a4:64:f6:af:a5:2e:0a:87:f6:cd:cc:47:fd:01:a1:8b:44:3b: fa:31:cb:c5:19:5c:db:31:b4:0e:90:52:28:39:77:bf:d5:0a: fb:d7:2a:0a:12:b3:2d:d3:f3:84:c7:d3:16:9f:45:e2:54:4d: ec:b0:9b:68:e3:ea:6d:d9:ab:44:74:1a:04:ad:36:b4:0a:01: 99:6a:10:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo8D0+XlW7h3wj4M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI1MDYxODE4MDAwM1oXDTI1MDYyMTE4MDAwMFowLzEtMCsGA1UEAxMk YzZiNjlhNTctZTA3NS00OTczLTg3OGQtNmRmNmVhNDNlN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5VroCm0wpshfr9xfUnLgE4EpNKtJdf/yU8R sKkhYk/k+NyYkUvZrTu16uEWCksVfoHGeE1D8HgmQrLnVMcXMhmf1pIcw9h9AKnU ZbV0k9sVrzO+IKRQO6i6yFoTuTu1L4z9N/iNpafiqvTg/FDCLwFZlZdz3JT5gv7G wQtf7mdMyCxtie+dlc01fVV5uWHHrXPpzhBIDJa3ARgJ0g63oBV9dmUOwiwe+g4f 3AI09H7+J0x202OCdsDzbKioEnrm8gpy20KX0JWwHq8VlUAtecgFm7r0NT9HydL4 mMfrUU29ZGfYeY9wOxDHTDdxIDHjZDS6kdakSSH3GlL1qS74HwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPinwO7PGR3eVlnaaUKTJcjkIa8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxQAmeG+USJdD63woaMU8l ebkq/bvTMBr8YuoKZqjf93R6anhabs6gpwOuRPh7fGxOdvsd+F05Q8o6TkWVZXNi NIRK87hUN6tqmckGUQelzIoDgt2OzDVrvCkioW/FgSqDWXo/n1x1ynD0fRoffppx 4I1ezriPCjXnXMRaiOkYD2htO+YIt/PRHL98/yubnF1tP9kFxtlm6g8cuFazvrQC KFnAnBYn3Xw433NbvoOiJyxLKPSkZPavpS4Kh/bNzEf9AaGLRDv6McvFGVzbMbQO kFIoOXe/1Qr71yoKErMt0/OEx9MWn0XiVE3ssJto4+pt2atEdBoErTa0CgGZahCR -----END CERTIFICATE-----Generated at Thu Jun 19 09:18:40 2025 by rpki-client