$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft File: 40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft (raw, json) Hash identifier: KYCfh8Ya/ACSDMd6hsW3I60pfXYaZz0fC5R0mORiZNY= Subject key identifier: F5:67:8A:7C:E6:CA:67:92:45:D3:21:3B:1A:19:39:48:CD:CC:7C:C6 Authority key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Certificate issuer: /CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Certificate serial: 010D0C9F4328584D7003F79B4A369912DBC14D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft Manifest number: 010D0C9F43285848CAD860E77DE6FC79CA1AD337 Signing time: Wed 08 Apr 2026 11:00:03 +0000 Manifest this update: Wed 08 Apr 2026 11:00:03 +0000 Manifest next update: Sat 11 Apr 2026 11:00:00 +0000 Files and hashes: 1: 40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl (hash: uWJbGXT61KAzk5dOr34qYdkxPN3qOEf8GKOL46r9+5Y=) 2: bd4c0156-1e13-3368-a399-5dcfc75f4825.roa (hash: j8lL/CvT8PDygIN7Sq9B7eVtrtz3QMrOHrzEo7/RnXY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:03:f7:9b:4a:36:99:12:db:c1:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Validity Not Before: Apr 8 11:00:03 2026 GMT Not After : Apr 11 11:00:00 2026 GMT Subject: CN=d14a8a9a-bbd0-47a4-a87a-c5c4c30ceaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c5:da:2a:43:09:9a:bf:28:4a:df:bd:30:47: 61:95:3b:06:4d:3d:4a:fb:e5:04:8c:01:15:40:d2: b8:b5:c8:0d:cd:99:f6:c7:7d:4d:c2:4d:7b:60:55: bb:26:2d:c4:db:c8:ab:0f:b0:1e:5d:1c:e8:85:de: d4:6a:02:8f:f9:32:20:33:f2:53:49:bf:13:55:22: 7c:7f:7d:ee:81:de:6f:ba:a0:13:69:14:15:4b:3e: d6:43:03:6d:01:4f:c7:80:56:0d:5d:a8:96:06:92: e9:c0:60:e6:2d:dd:1d:57:5f:56:ce:2e:f0:85:62: f2:4b:5d:7f:d9:ff:97:51:fb:bf:b1:7f:47:c8:32: 59:4e:18:7c:9a:3b:1a:d6:5d:32:88:51:15:86:67: 78:0d:97:23:e2:85:52:bd:0f:6d:5c:62:01:fe:25: 78:ef:67:0f:85:74:64:ee:d1:b1:16:fc:e3:51:5e: 5f:d3:f6:fb:d7:08:ac:7a:d3:4c:2f:8b:f2:32:ab: 69:36:0b:ca:ce:34:43:77:2b:42:73:7c:61:ba:86: 51:8e:e8:b7:f5:c7:c1:1f:32:d7:71:c8:02:ba:4e: 99:f0:56:cb:21:46:6b:7b:55:fb:72:10:65:0f:13: c7:a5:19:e1:f7:ca:b7:d3:66:08:2b:49:c3:57:c7: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:8A:7C:E6:CA:67:92:45:D3:21:3B:1A:19:39:48:CD:CC:7C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl X509v3 Authority Key Identifier: keyid:FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e5:f3:16:da:17:8f:14:e4:11:2d:10:e4:c1:a6:07:4c:e5: bd:44:db:e7:fa:c8:3a:d1:65:c8:e4:ab:70:8e:c7:cf:6e:c4: 29:11:6b:21:ec:ac:48:10:4b:79:38:16:9c:e3:f7:84:56:32: 3c:90:8d:a9:33:9e:1f:ff:b6:e1:3f:81:69:19:b4:ed:07:2c: c6:55:a4:5e:b5:bf:44:b7:20:a9:b4:e2:f7:d8:05:7d:3a:87: c0:7e:8d:8f:d1:17:16:87:9e:6a:14:e7:95:33:d8:d8:72:8f: 37:1b:a3:51:99:27:4f:7f:dc:31:52:7a:db:bb:02:38:e5:72: 0c:b5:36:9d:75:c3:35:3b:ba:49:90:f0:f7:cc:38:08:33:9a: 98:61:d1:ff:f9:be:db:37:c6:26:fd:f3:3f:b4:9e:b3:12:e8: b8:ed:13:07:1f:d9:f8:af:97:8f:88:2a:7e:31:f3:0a:79:3e: 99:4c:ee:b5:9e:c1:f1:1b:68:bb:73:e9:9f:e2:a6:cd:72:16: 89:e7:67:b0:4c:c0:34:bc:d0:0a:9e:ae:7f:8c:c2:07:70:16: 18:68:77:0c:4a:bf:f7:5e:08:b2:7f:85:d7:3a:fb:fc:7c:fe: 95:40:6f:a7:54:b8:5b:3d:16:0e:ce:9d:5f:03:eb:8b:99:f4: 2c:61:87:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1wA/ebSjaZEtvBTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4 OGY2MB4XDTI2MDQwODExMDAwM1oXDTI2MDQxMTExMDAwMFowLzEtMCsGA1UEAxMk ZDE0YThhOWEtYmJkMC00N2E0LWE4N2EtYzVjNGMzMGNlYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMXaKkMJmr8oSt+9MEdhlTsGTT1K++UEjAEV QNK4tcgNzZn2x31Nwk17YFW7Ji3E28irD7AeXRzohd7UagKP+TIgM/JTSb8TVSJ8 f33ugd5vuqATaRQVSz7WQwNtAU/HgFYNXaiWBpLpwGDmLd0dV19Wzi7whWLyS11/ 2f+XUfu/sX9HyDJZThh8mjsa1l0yiFEVhmd4DZcj4oVSvQ9tXGIB/iV472cPhXRk 7tGxFvzjUV5f0/b71wisetNML4vyMqtpNgvKzjRDdytCc3xhuoZRjui39cfBHzLX ccgCuk6Z8FbLIUZre1X7chBlDxPHpRnh98q302YIK0nDV8cZcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPVninzmymeSRdMhOxoZOUjNzHzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3 YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvNDBkN2IzZWEtOGNmNi00 NGM0LWI2ODEtN2I2MjcyZTY4OGY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkN2IzZWEtOGNmNi00NGM0LWI2 ODEtN2I2MjcyZTY4OGY2LzQwZDdiM2VhLThjZjYtNDRjNC1iNjgxLTdiNjI3MmU2 ODhmNi5jcmwwHwYDVR0jBBgwFoAU/SxsTRDJ7FBhwetdhFIkO2J7LkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYy NzJlNjg4ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAp5fMW2hePFOQRLRDkwaYH TOW9RNvn+sg60WXI5KtwjsfPbsQpEWsh7KxIEEt5OBac4/eEVjI8kI2pM54f/7bh P4FpGbTtByzGVaRetb9EtyCptOL32AV9OofAfo2P0RcWh55qFOeVM9jYco83G6NR mSdPf9wxUnrbuwI45XIMtTaddcM1O7pJkPD3zDgIM5qYYdH/+b7bN8Ym/fM/tJ6z Eui47RMHH9n4r5ePiCp+MfMKeT6ZTO61nsHxG2i7c+mf4qbNchaJ52ewTMA0vNAK nq5/jMIHcBYYaHcMSr/3Xgiyf4XXOvv8fP6VQG+nVLhbPRYOzp1fA+uLmfQsYYeM -----END CERTIFICATE-----Generated at Wed Apr 8 13:31:25 2026 by rpki-client