$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft File: 40392fe9-312c-47a6-8066-48fda2f4c80b.mft (raw, json) Hash identifier: UtWEhw75sjySLl9QzPCIQ1FT0PnywB7y5OsHlDs36ek= Subject key identifier: 04:3B:E9:4A:6A:23:12:D5:AF:AB:12:15:62:63:B8:56:CE:F6:7F:DC Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 Certificate issuer: /CN=40392fe9-312c-47a6-8066-48fda2f4c80b Certificate serial: 010D0C9F4328584BABA369BFD018C2282440EE28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft Manifest number: 010D0C9F4328584073A84E58EA4BACB47C0E2A87 Signing time: Tue 28 Oct 2025 10:00:09 +0000 Manifest this update: Tue 28 Oct 2025 10:00:09 +0000 Manifest next update: Fri 31 Oct 2025 10:00:00 +0000 Files and hashes: 1: 40392fe9-312c-47a6-8066-48fda2f4c80b.crl (hash: c70WnMVGNQf466TmZ/P6vX7xrKuD0XQWbpR3XN+W6qw=) 2: b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (hash: 8dOPj4Wp/qgXA3DU3BqA9zTKdE74MFn0DcUFwJaKg5U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:a3:69:bf:d0:18:c2:28:24:40:ee:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b Validity Not Before: Oct 28 10:00:09 2025 GMT Not After : Oct 31 10:00:00 2025 GMT Subject: CN=effa4cb8-662d-49b9-bc86-070c244a08b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:6e:a1:a9:3d:56:db:3e:d9:dc:1a:46:e4: d5:4a:bb:a1:06:60:16:c9:c9:30:f0:f1:f2:68:07: 48:40:d2:69:b1:5d:35:44:cf:03:67:ec:6c:4d:5c: e3:28:11:d1:78:6b:66:1a:68:a0:e9:de:f1:68:d2: 83:86:59:f2:cd:cf:f6:69:6d:6e:43:81:0f:9c:3c: f1:a2:a5:de:de:68:f1:5c:92:89:a1:4e:41:cd:13: c9:68:7a:6a:52:bf:07:e5:06:4b:cf:51:db:d1:cc: 56:bf:83:62:a0:7b:83:c6:26:12:f1:ed:48:50:aa: ad:16:b1:3a:c4:43:07:5b:58:c5:92:c4:81:e4:15: af:db:7e:83:e8:1f:66:87:30:a6:d6:84:47:91:26: 92:2f:1c:e7:b5:56:fd:5a:f6:1f:0d:90:64:87:4a: ab:57:4c:36:fa:c5:8e:58:17:87:5d:ce:8e:3b:be: 16:8b:04:57:88:d5:7a:10:4c:05:ca:b2:42:ee:83: 1b:f3:5c:36:f8:cb:3a:4a:b1:a0:51:9b:d0:c9:59: ee:7c:b6:4e:5a:d1:58:39:01:4d:c8:65:d9:8e:92: f1:c1:47:ab:95:a7:ff:4d:ca:a2:b4:01:1d:17:b4: 2c:79:f5:5b:01:61:b9:7d:b7:ef:b9:fa:11:29:20: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:E9:4A:6A:23:12:D5:AF:AB:12:15:62:63:B8:56:CE:F6:7F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl X509v3 Authority Key Identifier: keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b2:47:9a:da:b3:3d:01:fb:6a:24:92:68:b4:4b:62:97:30: f4:88:51:90:bc:ce:39:eb:14:2f:4b:1f:da:0b:60:54:87:8f: f1:32:97:d7:59:1b:cd:26:7c:9c:69:bd:1a:36:c6:ad:6f:b2: fa:f9:b2:41:8e:3e:bf:ab:24:bc:a0:7b:6e:ca:ba:38:03:c3: 30:84:4a:2c:0f:2c:f8:f5:78:79:c4:2b:22:12:8a:26:58:74: 4e:b5:a7:56:a9:4b:1d:3d:dd:16:91:22:3b:12:31:fb:74:c9: 76:db:0b:5c:70:cb:cf:e8:ab:b7:91:c8:92:5b:b4:b6:f8:23: 8a:a3:db:ec:1f:84:fb:3d:9d:3d:b8:7f:bc:bf:b9:01:d2:17: 8b:b4:7b:52:0f:78:22:27:aa:28:db:ab:0a:fc:11:a2:c3:ed: b8:57:50:04:ff:f7:fe:d6:e6:79:97:9c:ee:14:0b:eb:c4:3a: eb:db:aa:e8:49:07:48:b5:c1:21:7b:4a:ef:21:6c:30:79:b4: cf:4e:2d:9d:23:85:50:5c:e6:cf:a9:dd:9c:ec:f4:8d:7b:7a: 71:92:09:85:98:ef:41:be:f6:06:48:8c:37:8d:30:15:97:76: 29:0a:44:d2:84:ed:3e:78:02:4c:27:ac:d5:9e:84:67:90:a9: f6:53:32:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuro2m/0BjCKCRA7igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzOTJmZTktMzEyYy00N2E2LTgwNjYtNDhmZGEyZjRj ODBiMB4XDTI1MTAyODEwMDAwOVoXDTI1MTAzMTEwMDAwMFowLzEtMCsGA1UEAxMk ZWZmYTRjYjgtNjYyZC00OWI5LWJjODYtMDcwYzI0NGEwOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9luoak9Vts+2dwaRuTVSruhBmAWyckw8PHy aAdIQNJpsV01RM8DZ+xsTVzjKBHReGtmGmig6d7xaNKDhlnyzc/2aW1uQ4EPnDzx oqXe3mjxXJKJoU5BzRPJaHpqUr8H5QZLz1Hb0cxWv4NioHuDxiYS8e1IUKqtFrE6 xEMHW1jFksSB5BWv236D6B9mhzCm1oRHkSaSLxzntVb9WvYfDZBkh0qrV0w2+sWO WBeHXc6OO74WiwRXiNV6EEwFyrJC7oMb81w2+Ms6SrGgUZvQyVnufLZOWtFYOQFN yGXZjpLxwUerlaf/TcqitAEdF7QsefVbAWG5fbfvufoRKSBd8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAQ76UpqIxLVr6sSFWJjuFbO9n/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5 MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZkYTJmNGM4MGIvNDAzOTJmZTktMzEyYy00 N2E2LTgwNjYtNDhmZGEyZjRjODBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAzOTJmZTktMzEyYy00N2E2LTgw NjYtNDhmZGEyZjRjODBiLzQwMzkyZmU5LTMxMmMtNDdhNi04MDY2LTQ4ZmRhMmY0 YzgwYi5jcmwwHwYDVR0jBBgwFoAU2h72atkxtsYeskDAgp5dBkW4L6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZk YTJmNGM4MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtskea2rM9AftqJJJotEti lzD0iFGQvM456xQvSx/aC2BUh4/xMpfXWRvNJnycab0aNsatb7L6+bJBjj6/qyS8 oHtuyro4A8MwhEosDyz49Xh5xCsiEoomWHROtadWqUsdPd0WkSI7EjH7dMl22wtc cMvP6Ku3kciSW7S2+COKo9vsH4T7PZ09uH+8v7kB0heLtHtSD3giJ6oo26sK/BGi w+24V1AE//f+1uZ5l5zuFAvrxDrr26roSQdItcEhe0rvIWwwebTPTi2dI4VQXObP qd2c7PSNe3pxkgmFmO9BvvYGSIw3jTAVl3YpCkTShO0+eAJMJ6zVnoRnkKn2UzIw -----END CERTIFICATE-----Generated at Wed Oct 29 03:02:51 2025 by rpki-client