$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: dvc7cNyGXkkHMkjJJcyagmoNGcAvXouh2NisY5XKGY8= Subject key identifier: 26:36:2C:71:52:4C:65:EF:95:C1:E9:44:F4:5F:B4:1F:B4:44:93:44 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584BC01C6444D9D6D4F7D57EE180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7C1E Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Thu 06 Nov 2025 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: POTLT7Ds9fEcphmIch2A54ji4anMES0lqkzUfjQQ0MI=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: qHs6f+W2BpW1HUluaXSbZeFAKDUiIf20iNNqO4At4O4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:64:44:d9:d6:d4:f7:d5:7e:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 6 18:00:00 2025 GMT Subject: CN=57ecc8fa-a75f-4d5b-aaa7-0a2631997307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:82:c8:e6:91:a0:ba:f2:5e:79:ea:d9:0d: 4d:9d:60:32:c8:f7:c6:cb:d5:88:4b:de:fb:31:3d: 02:6e:66:5b:f8:64:ed:1f:e8:48:da:ec:7f:33:c2: cd:57:e0:d5:04:46:3a:43:7f:b1:78:16:33:bf:0f: 96:56:1f:44:6b:7e:42:cc:bd:6b:a3:b7:b4:87:b9: 34:f8:e6:66:aa:b7:e0:1d:ac:c4:a0:ee:76:ae:7d: 12:c5:0a:8b:c9:33:0c:95:c1:29:b0:7d:94:9c:b8: 89:94:28:19:06:ef:7a:33:47:80:79:05:e9:0d:c6: 80:92:e0:ac:7b:ed:ba:75:91:7b:e2:8d:11:e0:8d: 17:94:87:a7:39:80:97:6e:e3:6f:b4:4b:a6:80:54: 7c:98:8d:bb:7f:ff:c1:fe:aa:25:36:03:36:24:44: 16:f9:45:cd:98:0a:91:13:92:a3:4d:1e:ab:03:a7: a9:95:16:36:ef:ca:9d:0f:05:72:f1:61:4c:a2:57: 21:43:ac:8f:c4:c0:82:2d:82:31:7b:c2:12:42:84: 13:40:5f:75:8e:13:c3:a5:b0:57:b7:2a:fc:0d:51: 95:47:07:e0:4f:23:c3:16:e4:83:c6:ad:5b:e9:fa: f8:c0:a4:a0:e2:de:90:5b:fb:c9:55:a1:83:17:ce: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:36:2C:71:52:4C:65:EF:95:C1:E9:44:F4:5F:B4:1F:B4:44:93:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:cf:e1:8d:a1:5e:0b:92:d1:01:3f:c5:7c:8b:e0:7f:5c:41: 80:4f:22:d2:5f:5e:db:53:22:de:7c:a3:eb:9b:97:32:56:20: 49:fe:b2:f8:41:6e:33:be:48:46:53:91:13:8c:37:ba:3d:93: f9:ff:3e:5c:a2:2c:96:8a:d3:1c:1b:37:c3:bf:73:d9:37:9a: 8e:c6:a8:4e:ce:b4:6a:1d:12:62:63:e5:1c:83:30:da:89:ed: c9:27:43:0b:05:3e:44:f5:e5:c5:58:0e:8a:eb:50:5b:0e:39: 4d:67:ac:25:5d:42:e6:6e:71:2c:4b:f5:ec:06:53:a7:44:af: e4:17:ea:b9:13:4b:95:e1:65:da:f9:a0:79:12:f8:cb:e7:f9: 40:3f:cb:f3:62:82:e8:5c:58:d7:b0:da:f4:1e:41:02:d2:eb: 22:cb:04:73:88:3e:4c:ee:d9:12:1a:84:27:3c:90:72:12:7d: 23:7c:f9:9b:c6:5d:1e:04:c0:d1:70:12:cf:f4:ce:22:1b:30: 28:98:5f:00:ab:93:5c:76:38:c1:10:7b:56:28:87:82:a9:17: 95:de:63:11:83:66:00:ec:95:1e:78:c1:46:e1:1e:87:7f:61: 6d:cf:6d:de:87:e1:6b:92:db:bd:11:20:ea:48:21:c5:41:54: 4a:6b:d2:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGRE2dbU99V+4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNjE4MDAwMFowLzEtMCsGA1UEAxMk NTdlY2M4ZmEtYTc1Zi00ZDViLWFhYTctMGEyNjMxOTk3MzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfSCyOaRoLryXnnq2Q1NnWAyyPfGy9WIS977 MT0CbmZb+GTtH+hI2ux/M8LNV+DVBEY6Q3+xeBYzvw+WVh9Ea35CzL1ro7e0h7k0 +OZmqrfgHazEoO52rn0SxQqLyTMMlcEpsH2UnLiJlCgZBu96M0eAeQXpDcaAkuCs e+26dZF74o0R4I0XlIenOYCXbuNvtEumgFR8mI27f//B/qolNgM2JEQW+UXNmAqR E5KjTR6rA6eplRY278qdDwVy8WFMolchQ6yPxMCCLYIxe8ISQoQTQF91jhPDpbBX tyr8DVGVRwfgTyPDFuSDxq1b6fr4wKSg4t6QW/vJVaGDF87AAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCY2LHFSTGXvlcHpRPRftB+0RJNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnz+GNoV4LktEBP8V8i+B/ XEGATyLSX17bUyLefKPrm5cyViBJ/rL4QW4zvkhGU5ETjDe6PZP5/z5coiyWitMc GzfDv3PZN5qOxqhOzrRqHRJiY+UcgzDaie3JJ0MLBT5E9eXFWA6K61BbDjlNZ6wl XULmbnEsS/XsBlOnRK/kF+q5E0uV4WXa+aB5EvjL5/lAP8vzYoLoXFjXsNr0HkEC 0usiywRziD5M7tkSGoQnPJByEn0jfPmbxl0eBMDRcBLP9M4iGzAomF8Aq5NcdjjB EHtWKIeCqReV3mMRg2YA7JUeeMFG4R6Hf2Ftz23eh+Frktu9ESDqSCHFQVRKa9JV -----END CERTIFICATE-----Generated at Wed Nov 5 13:45:10 2025 by rpki-client