$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft File: 40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft (raw, json) Hash identifier: TBUXpraqQNJ/5buLaSrDMlBBKIYY4eIJOotpl9mnaUo= Subject key identifier: 42:7B:9C:0B:6A:3D:62:DB:EA:F1:A4:29:DE:B9:AE:AA:8E:A5:FC:02 Authority key identifier: 13:6C:DA:17:76:DF:B9:A7:C5:75:3A:D1:52:08:E7:F7:8D:5C:35:F8 Certificate issuer: /CN=40c6f749-6a2d-4ad9-9012-1656d0adbd53 Certificate serial: 010D0C9F4328584D066518B65226C31532F8E480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft Manifest number: 010D0C9F4328584ADADDE88E3CD776290D500ACD Signing time: Sun 01 Mar 2026 15:00:03 +0000 Manifest this update: Sun 01 Mar 2026 15:00:03 +0000 Manifest next update: Tue 03 Mar 2026 15:00:00 +0000 Files and hashes: 1: 40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl (hash: prNpD2sXb/T+5cSrVqy9GpuKMHs+GjbciyKG5SztRA4=) 2: 629ce3ee-3c33-3b85-90ba-b0774574ca2d.roa (hash: pzekMsI21K026IVnqNbs4Dt+DC+AQOCPeciExdWK2Ic=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:65:18:b6:52:26:c3:15:32:f8:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40c6f749-6a2d-4ad9-9012-1656d0adbd53 Validity Not Before: Mar 1 15:00:03 2026 GMT Not After : Mar 3 15:00:00 2026 GMT Subject: CN=dbcef4d7-e563-407e-9bf8-22b650cf7387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e7:d0:12:28:b4:66:ef:6e:b1:91:14:fe:5d: d3:d1:b4:0a:c9:73:51:63:4d:89:ce:c9:7b:dc:88: 5f:81:04:62:07:ab:4d:91:4a:ef:24:bc:f9:16:60: 8f:5f:18:2d:68:c0:95:9c:01:e1:4a:96:3c:ff:0d: 05:28:67:9f:4d:ed:6a:45:39:51:3a:e7:b6:be:06: c3:d5:c5:8f:7b:af:cf:20:b9:9e:e7:6c:29:ea:de: 0d:77:c4:87:4a:e6:85:f8:93:49:3c:83:fc:6a:b9: 29:de:95:6a:b1:97:e9:57:e0:c9:e7:c7:65:eb:e8: ff:6a:ba:eb:fb:4b:03:1b:db:fd:b4:67:b8:0f:81: ef:a7:95:3b:9b:3a:e3:40:77:b2:1c:23:59:30:0c: c9:ed:6f:b7:a0:4f:71:15:b1:c8:29:ba:d6:29:99: b3:2d:bd:f1:89:61:eb:93:41:85:b0:bb:41:05:c2: be:82:20:4a:a3:f5:2e:ee:e8:56:e2:53:35:08:d9: 6a:13:06:f8:6f:d9:71:66:a4:cb:81:b1:52:bc:26: fc:0e:48:ba:ed:fa:db:a4:26:c4:a4:c2:f7:47:6a: d0:f8:5a:2f:64:ff:f7:06:53:d9:7e:8f:06:21:46: 34:5d:10:29:41:12:80:65:a9:d1:5f:ef:56:87:99: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7B:9C:0B:6A:3D:62:DB:EA:F1:A4:29:DE:B9:AE:AA:8E:A5:FC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl X509v3 Authority Key Identifier: keyid:13:6C:DA:17:76:DF:B9:A7:C5:75:3A:D1:52:08:E7:F7:8D:5C:35:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d0:68:b4:96:8b:9f:a0:2a:13:77:17:97:8a:6c:56:7d:5a: 1b:d5:25:27:6d:98:7c:96:64:ea:93:52:05:e7:68:af:14:b8: 1a:a9:b2:a3:7f:23:28:c1:94:b3:24:f4:82:5f:d0:a0:36:54: 49:10:59:bc:36:47:58:c2:db:78:70:c1:44:72:38:dc:a3:9d: 9f:7b:bf:70:d9:52:9e:fd:55:b4:fc:28:6a:5d:58:0a:81:72: d5:60:02:d0:bf:e8:c8:a1:b5:ef:3d:f7:13:e9:9e:6c:ea:a7: 8d:07:2b:0b:57:65:d3:28:1a:7b:01:09:55:90:bb:78:cc:8d: c1:2b:fe:f5:69:4b:c8:6d:70:90:77:a3:8d:42:17:43:33:32: 65:a2:01:ac:34:09:16:5f:6b:3a:a8:50:a1:f4:23:59:26:17: bf:3b:94:96:a8:ce:73:bc:a1:e8:ea:e8:3e:80:17:51:31:28: ff:99:98:05:e9:c7:42:53:86:b6:7f:a1:8f:60:bb:41:cc:c7: 73:6b:41:d5:17:95:08:67:eb:ba:6f:1d:c0:e1:71:8b:28:ad: a7:5f:c0:f7:76:2f:3e:c4:dd:15:29:21:33:98:e6:d0:ba:c8: 2a:d7:32:92:81:6f:87:bd:91:b0:33:d5:21:f4:5d:5e:33:99: 64:4d:1e:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0GZRi2UibDFTL45IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBjNmY3NDktNmEyZC00YWQ5LTkwMTItMTY1NmQwYWRi ZDUzMB4XDTI2MDMwMTE1MDAwM1oXDTI2MDMwMzE1MDAwMFowLzEtMCsGA1UEAxMk ZGJjZWY0ZDctZTU2My00MDdlLTliZjgtMjJiNjUwY2Y3Mzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjefQEii0Zu9usZEU/l3T0bQKyXNRY02Jzsl7 3IhfgQRiB6tNkUrvJLz5FmCPXxgtaMCVnAHhSpY8/w0FKGefTe1qRTlROue2vgbD 1cWPe6/PILme52wp6t4Nd8SHSuaF+JNJPIP8arkp3pVqsZfpV+DJ58dl6+j/arrr +0sDG9v9tGe4D4Hvp5U7mzrjQHeyHCNZMAzJ7W+3oE9xFbHIKbrWKZmzLb3xiWHr k0GFsLtBBcK+giBKo/Uu7uhW4lM1CNlqEwb4b9lxZqTLgbFSvCb8Dki67frbpCbE pML3R2rQ+FovZP/3BlPZfo8GIUY0XRApQRKAZanRX+9Wh5ls/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEJ7nAtqPWLb6vGkKd65rqqOpfwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MGM2 Zjc0OS02YTJkLTRhZDktOTAxMi0xNjU2ZDBhZGJkNTMvNDBjNmY3NDktNmEyZC00 YWQ5LTkwMTItMTY1NmQwYWRiZDUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDBjNmY3NDktNmEyZC00YWQ5LTkw MTItMTY1NmQwYWRiZDUzLzQwYzZmNzQ5LTZhMmQtNGFkOS05MDEyLTE2NTZkMGFk YmQ1My5jcmwwHwYDVR0jBBgwFoAUE2zaF3bfuafFdTrRUgjn941cNfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MGM2Zjc0OS02YTJkLTRhZDktOTAxMi0xNjU2 ZDBhZGJkNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO0Gi0loufoCoTdxeXimxW fVob1SUnbZh8lmTqk1IF52ivFLgaqbKjfyMowZSzJPSCX9CgNlRJEFm8NkdYwtt4 cMFEcjjco52fe79w2VKe/VW0/ChqXVgKgXLVYALQv+jIobXvPfcT6Z5s6qeNBysL V2XTKBp7AQlVkLt4zI3BK/71aUvIbXCQd6ONQhdDMzJlogGsNAkWX2s6qFCh9CNZ Jhe/O5SWqM5zvKHo6ug+gBdRMSj/mZgF6cdCU4a2f6GPYLtBzMdza0HVF5UIZ+u6 bx3A4XGLKK2nX8D3di8+xN0VKSEzmObQusgq1zKSgW+HvZGwM9Uh9F1eM5lkTR4p -----END CERTIFICATE-----Generated at Sun Mar 1 23:17:32 2026 by rpki-client