$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft File: 40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft (raw, json) Hash identifier: QKf5Zf0qmzhjo/ggzjgix3yB3Zt+DutRip/9AtzKuhI= Subject key identifier: 2A:85:47:BE:68:69:75:71:0B:7A:19:93:4A:47:1C:D4:8E:C4:A3:19 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584AF862BFAB5EBDD6A91142A440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft Manifest number: 010D0C9F4328584073A83E277B757F6097E08E29 Signing time: Mon 25 Aug 2025 05:00:08 +0000 Manifest this update: Mon 25 Aug 2025 05:00:08 +0000 Manifest next update: Thu 28 Aug 2025 05:00:00 +0000 Files and hashes: 1: 2c733a41-1d85-3fff-a8e9-5ef96865182f.roa (hash: 5vByv1DtcBuDF9IK9sZnHsj0FsGvITi4XrUDsyR+3sY=) 2: 2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa (hash: +yIyCbNT1RLAchu4DUwFJ10WAEsrlbOFln4r8pJAFe0=) 3: 40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl (hash: 2uNBzLBzElxSfs76CAX6IyqI8vq8Zeikc2W8g25gMXQ=) 4: 549312e1-41dd-30a1-8037-c87eabd4988f.roa (hash: pmcAb+EQ0h+dGsckSmigv6ux+8CGOPyAVptw2PnA1bU=) 5: ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (hash: xRCtrCROoDjY4+i30MBrfSsyz/iOBP14OoF8W/aEaAE=) 6: e4c840a6-7c44-37cd-8d84-325c36434df5.roa (hash: /oeKDDwaIs736jikjoXZp/xC3HvGi/MQ88ro1SBGZe0=) 7: ea556a40-a873-3ed9-aa90-580d0a9fa927.roa (hash: Y5Tv86mLdMJ773SpOXN9UDeIsXOLQUc0kbx7uftp92s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:62:bf:ab:5e:bd:d6:a9:11:42:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Aug 25 05:00:08 2025 GMT Not After : Aug 28 05:00:00 2025 GMT Subject: CN=a63cd999-bc44-45b5-b7ae-4c50b971f50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:8a:51:fd:77:5a:ed:01:34:95:76:59:82: 22:11:50:3e:75:66:fe:0e:66:4f:51:8d:a8:43:f1: 9d:45:f5:31:36:11:d0:4e:d8:12:87:75:67:f2:f7: 45:10:ea:66:7f:58:01:e0:e6:77:a0:22:ee:1f:f7: 1c:2f:5b:6d:00:54:c0:6a:1d:93:07:49:3c:1c:5d: cf:2a:37:23:3a:60:61:c9:a4:53:56:3d:9d:6f:2e: 06:3a:b2:5f:d4:0e:ef:14:0e:48:b3:69:95:6e:46: 61:c7:b0:61:2c:ac:9c:6c:40:ad:6c:fc:7a:4c:51: e7:d0:4c:9d:23:f6:72:8d:55:4c:9f:1e:29:d1:78: fb:e7:18:c6:5a:0b:0a:f2:26:eb:17:21:02:19:f8: bb:fe:a8:24:7f:a2:33:3b:ae:f7:e8:0c:b3:bc:e6: e8:b5:e0:b5:28:89:cf:25:d6:0e:71:98:b7:0b:27: b0:fe:eb:62:b3:ea:0f:2d:76:ae:fa:11:57:25:b0: 92:43:c6:ec:97:3c:11:b9:72:ef:53:db:ef:63:52: 7a:6c:d7:75:a2:f6:c7:98:d9:36:58:24:00:2d:47: 48:3c:5c:be:f4:ef:a4:52:58:a7:29:c2:6f:39:50: b9:16:80:5c:ea:59:a7:07:61:a3:99:3f:e0:bf:33: ac:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:85:47:BE:68:69:75:71:0B:7A:19:93:4A:47:1C:D4:8E:C4:A3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:e7:3d:cd:d7:81:a3:ca:24:a7:7f:f1:bd:e9:c3:31:9f:a2: 37:79:fd:6d:1c:49:a8:24:10:0a:7b:75:9e:c4:63:3e:1b:0d: af:78:3b:8d:2f:ca:eb:5c:d4:3d:01:63:2d:ea:82:e2:e1:4b: a5:53:dc:ed:81:14:56:51:a8:ad:c4:07:63:a4:29:7c:a5:ed: 3a:a7:6b:08:fa:84:6d:72:13:bd:6b:8d:e2:b9:ea:91:28:4c: 19:ab:26:48:78:98:14:e4:f0:55:7f:00:0d:1e:66:00:02:6d: 17:37:3b:a9:06:8f:1d:19:5d:72:3d:e6:5b:32:38:ec:a8:4f: 79:a6:c8:70:5a:54:31:8a:1a:58:a7:c2:61:a1:8b:82:bc:29: 87:60:01:9e:06:47:ae:b0:85:52:68:38:50:3c:ae:96:fa:d0: c5:48:f8:f7:47:2a:b2:67:d4:e6:9e:d4:b1:5a:87:6e:35:30: 52:6d:c3:6f:2a:aa:11:8a:bc:da:33:98:6d:a6:cd:40:f2:f1: bc:9a:5b:17:31:19:f2:e8:45:48:74:50:81:92:57:af:57:1f: bc:29:ce:c9:ea:78:ec:ff:c4:f1:66:a3:64:ae:2b:1c:e7:64: 92:0c:aa:8e:00:66:07:67:63:c7:20:cc:dd:08:9b:c0:c2:6b: 99:25:0a:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr4Yr+rXr3WqRFCpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI1MDgyNTA1MDAwOFoXDTI1MDgyODA1MDAwMFowLzEtMCsGA1UEAxMk YTYzY2Q5OTktYmM0NC00NWI1LWI3YWUtNGM1MGI5NzFmNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypSKUf13Wu0BNJV2WYIiEVA+dWb+DmZPUY2o Q/GdRfUxNhHQTtgSh3Vn8vdFEOpmf1gB4OZ3oCLuH/ccL1ttAFTAah2TB0k8HF3P KjcjOmBhyaRTVj2dby4GOrJf1A7vFA5Is2mVbkZhx7BhLKycbECtbPx6TFHn0Eyd I/ZyjVVMnx4p0Xj75xjGWgsK8ibrFyECGfi7/qgkf6IzO6736AyzvOboteC1KInP JdYOcZi3Cyew/utis+oPLXau+hFXJbCSQ8bslzwRuXLvU9vvY1J6bNd1ovbHmNk2 WCQALUdIPFy+9O+kUlinKcJvOVC5FoBc6lmnB2GjmT/gvzOsSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCqFR75oaXVxC3oZk0pHHNSOxKMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvNDBkMDMyMjUtYzViNi00 N2M0LTlmNGUtN2RlMWQxNmQ1NTRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBV5z3N14GjyiSnf/G96cMx n6I3ef1tHEmoJBAKe3WexGM+Gw2veDuNL8rrXNQ9AWMt6oLi4UulU9ztgRRWUait xAdjpCl8pe06p2sI+oRtchO9a43iueqRKEwZqyZIeJgU5PBVfwANHmYAAm0XNzup Bo8dGV1yPeZbMjjsqE95pshwWlQxihpYp8JhoYuCvCmHYAGeBkeusIVSaDhQPK6W +tDFSPj3RyqyZ9TmntSxWoduNTBSbcNvKqoRirzaM5htps1A8vG8mlsXMRny6EVI dFCBklevVx+8Kc7J6njs/8TxZqNkrisc52SSDKqOAGYHZ2PHIMzdCJvAwmuZJQrP -----END CERTIFICATE-----Generated at Mon Aug 25 15:25:25 2025 by rpki-client