$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft File: 40392fe9-312c-47a6-8066-48fda2f4c80b.mft (raw, json) Hash identifier: W91HOWSmu9C4auFTpXfTFeKjTxMrhswimN7dtGAvSgw= Subject key identifier: 35:6D:49:E2:B4:4D:3A:FB:42:D0:7D:63:FA:33:74:2C:B2:67:65:C2 Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 Certificate issuer: /CN=40392fe9-312c-47a6-8066-48fda2f4c80b Certificate serial: 010D0C9F4328584AA5371C1AB52C5C7E4B5ACB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft Manifest number: 010D0C9F4328584073A84E58EA4BACB47C0E2A27 Signing time: Sat 26 Jul 2025 10:00:08 +0000 Manifest this update: Sat 26 Jul 2025 10:00:08 +0000 Manifest next update: Tue 29 Jul 2025 10:00:00 +0000 Files and hashes: 1: 40392fe9-312c-47a6-8066-48fda2f4c80b.crl (hash: maADigaeSDc7ygev6EBDRRKnjWgZPqGbuyY2unc1sAI=) 2: b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (hash: 8OHJK50m0VjghhoQKRUZSHGnurmyMGYumRfrRhz6zNE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:37:1c:1a:b5:2c:5c:7e:4b:5a:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b Validity Not Before: Jul 26 10:00:08 2025 GMT Not After : Jul 29 10:00:00 2025 GMT Subject: CN=5644dafc-f913-491c-bae3-bcffb9200a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:46:a5:c5:69:09:9a:7d:c1:71:09:03:49: 89:4c:01:88:a0:a7:ec:89:e1:d0:8d:f0:b6:ad:7c: d6:b9:73:61:45:8b:b5:e5:06:cd:b3:28:b4:e1:e1: 0e:8d:5d:67:19:cf:67:33:db:36:87:ba:6d:18:c0: c8:6c:94:7d:34:3f:bc:a8:d7:53:5c:94:a0:37:9c: 8a:1a:e3:b5:f9:4e:a8:24:8a:f3:10:87:65:c1:f2: ce:9c:79:24:58:07:29:89:9b:f0:19:26:3c:b1:e1: 63:92:fa:f0:fd:76:6f:17:ef:3d:94:93:e4:7e:19: 0a:51:ec:0e:07:79:cf:35:ff:b0:5f:86:b0:46:8f: 4c:58:55:6e:01:29:15:aa:e7:24:00:83:31:45:98: aa:d5:62:2d:38:03:5f:d2:6d:f2:d2:a3:48:f4:ef: 2c:53:8b:7b:f6:ce:94:4b:06:5d:dc:c9:60:2a:2b: da:62:e3:03:e9:09:b8:91:8e:5f:0f:cb:54:75:f2: 1b:f8:43:a3:c6:0f:3e:d7:68:ee:cd:5d:ec:2c:ff: 5a:c1:ed:fd:03:03:8b:95:16:54:44:b7:09:f5:5b: f5:4b:90:94:b9:a0:fb:87:e8:f7:42:cf:32:cc:09: b0:0c:ae:a3:fd:6b:b9:82:0d:1b:f0:d3:bf:76:8c: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:49:E2:B4:4D:3A:FB:42:D0:7D:63:FA:33:74:2C:B2:67:65:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl X509v3 Authority Key Identifier: keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:22:89:a7:0c:63:0b:31:b2:81:87:d5:27:45:16:1e:d0:b5: 6c:40:d0:b9:cf:a4:73:31:1c:87:3c:84:45:bb:b3:65:fa:9b: e8:c2:21:09:5b:3e:d9:f8:68:28:cb:b6:d4:f3:10:c5:bf:fe: cf:9b:13:3f:6d:8f:6c:94:82:fb:2d:9c:14:00:87:99:a5:8c: d1:bf:a4:50:bd:22:4c:b8:1b:f2:6e:0e:c2:26:27:06:50:49: aa:e5:e8:e1:5e:b0:90:6d:30:40:77:86:3f:59:05:60:0e:f1: 00:ed:7f:5d:45:43:af:b5:f0:dc:23:c4:25:73:b5:94:03:36: e8:9b:c3:80:8d:62:52:05:fb:f0:ae:b8:d8:4a:48:0d:ed:41: b2:f8:db:91:e5:ca:7a:64:0c:c0:01:ab:29:0a:1c:f0:08:c5: 13:e9:c3:27:32:76:7f:2c:13:60:d7:0a:7d:30:88:87:49:03: 73:90:2e:fc:62:a0:3b:e5:7c:af:a3:78:37:19:b4:5f:71:ac: 77:4b:36:47:82:36:34:08:d7:87:2f:32:e1:80:b8:b5:be:e2: db:bd:20:58:36:c2:d7:5b:74:d7:76:ab:2f:4c:7f:10:b8:a6: 96:0b:be:bc:dd:99:3f:f8:26:d9:ee:81:05:1e:93:5b:b6:34: bc:07:14:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqlNxwatSxcfktay4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzOTJmZTktMzEyYy00N2E2LTgwNjYtNDhmZGEyZjRj ODBiMB4XDTI1MDcyNjEwMDAwOFoXDTI1MDcyOTEwMDAwMFowLzEtMCsGA1UEAxMk NTY0NGRhZmMtZjkxMy00OTFjLWJhZTMtYmNmZmI5MjAwYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxZGpcVpCZp9wXEJA0mJTAGIoKfsieHQjfC2 rXzWuXNhRYu15QbNsyi04eEOjV1nGc9nM9s2h7ptGMDIbJR9ND+8qNdTXJSgN5yK GuO1+U6oJIrzEIdlwfLOnHkkWAcpiZvwGSY8seFjkvrw/XZvF+89lJPkfhkKUewO B3nPNf+wX4awRo9MWFVuASkVquckAIMxRZiq1WItOANf0m3y0qNI9O8sU4t79s6U SwZd3MlgKivaYuMD6Qm4kY5fD8tUdfIb+EOjxg8+12juzV3sLP9awe39AwOLlRZU RLcJ9Vv1S5CUuaD7h+j3Qs8yzAmwDK6j/Wu5gg0b8NO/dowXzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDVtSeK0TTr7QtB9Y/ozdCyyZ2XCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5 MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZkYTJmNGM4MGIvNDAzOTJmZTktMzEyYy00 N2E2LTgwNjYtNDhmZGEyZjRjODBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAzOTJmZTktMzEyYy00N2E2LTgw NjYtNDhmZGEyZjRjODBiLzQwMzkyZmU5LTMxMmMtNDdhNi04MDY2LTQ4ZmRhMmY0 YzgwYi5jcmwwHwYDVR0jBBgwFoAU2h72atkxtsYeskDAgp5dBkW4L6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZk YTJmNGM4MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDgIomnDGMLMbKBh9UnRRYe 0LVsQNC5z6RzMRyHPIRFu7Nl+pvowiEJWz7Z+Ggoy7bU8xDFv/7PmxM/bY9slIL7 LZwUAIeZpYzRv6RQvSJMuBvybg7CJicGUEmq5ejhXrCQbTBAd4Y/WQVgDvEA7X9d RUOvtfDcI8Qlc7WUAzbom8OAjWJSBfvwrrjYSkgN7UGy+NuR5cp6ZAzAAaspChzw CMUT6cMnMnZ/LBNg1wp9MIiHSQNzkC78YqA75Xyvo3g3GbRfcax3SzZHgjY0CNeH LzLhgLi1vuLbvSBYNsLXW3TXdqsvTH8QuKaWC7683Zk/+CbZ7oEFHpNbtjS8BxSy -----END CERTIFICATE-----Generated at Sun Jul 27 10:31:08 2025 by rpki-client