$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft File: 40392fe9-312c-47a6-8066-48fda2f4c80b.mft (raw, json) Hash identifier: lQzoH1BulYwZ2gBkC6prIF8ADJzxNN0ckuulCFlLudw= Subject key identifier: 03:EE:AD:70:3C:CC:CA:65:B3:27:DA:A9:CE:C7:22:B3:09:79:8C:B6 Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 Certificate issuer: /CN=40392fe9-312c-47a6-8066-48fda2f4c80b Certificate serial: 010D0C9F4328584B25A28BF95FB9D7A27C5ECBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft Manifest number: 010D0C9F4328584073A84E58EA4BACB47C0E2A55 Signing time: Wed 10 Sep 2025 10:00:03 +0000 Manifest this update: Wed 10 Sep 2025 10:00:03 +0000 Manifest next update: Sat 13 Sep 2025 10:00:00 +0000 Files and hashes: 1: 40392fe9-312c-47a6-8066-48fda2f4c80b.crl (hash: ITbKf+TxytR7RrjI9WVtYQfgQqNU41yD1dOb5F3ZkCA=) 2: b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (hash: 8OHJK50m0VjghhoQKRUZSHGnurmyMGYumRfrRhz6zNE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:a2:8b:f9:5f:b9:d7:a2:7c:5e:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b Validity Not Before: Sep 10 10:00:03 2025 GMT Not After : Sep 13 10:00:00 2025 GMT Subject: CN=733a325d-fc1f-451d-a877-d45c63a5283e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:3e:80:24:00:01:73:f9:b8:f2:83:07:e0: 37:00:e0:62:82:ae:3c:bc:c0:9d:a8:44:4f:cc:21: e9:17:1a:04:91:9c:1e:ff:e5:e4:3b:f4:fb:e3:43: 7f:67:35:9c:64:92:ba:21:fb:db:f5:64:9b:22:0c: 31:45:84:84:82:a8:b3:d4:b8:eb:1f:5d:20:9f:88: f4:d6:a4:24:7e:c7:7f:45:c6:92:9c:32:2f:6c:3f: d2:33:3b:ea:59:dd:01:e2:e2:f7:78:c9:a7:15:0b: 05:03:fc:07:23:46:57:4f:42:0b:48:cb:b7:45:a0: c7:8f:85:66:82:55:be:64:e1:a7:ce:76:ef:d0:37: 54:83:46:81:e9:de:ad:82:dd:26:7e:24:73:d9:12: 84:14:c5:d9:05:91:37:19:12:a8:77:ce:3d:53:db: 47:a6:a3:00:8d:f3:fc:f6:e9:e1:15:57:d0:ae:25: a6:48:4f:a6:2a:a7:d3:70:60:d2:9e:ed:f1:6d:e8: 14:cf:8a:cd:76:7c:f4:c0:01:38:29:e5:1b:d7:a2: 7c:1d:a4:97:10:32:e8:32:13:9e:4b:e3:a1:c4:7d: ed:48:11:dd:38:b3:b5:31:60:31:47:8e:a8:5e:22: 6f:02:3f:a7:e3:e3:98:fe:a7:4d:fc:6f:20:34:39: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EE:AD:70:3C:CC:CA:65:B3:27:DA:A9:CE:C7:22:B3:09:79:8C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl X509v3 Authority Key Identifier: keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:01:8a:be:66:1b:36:78:48:3a:78:51:43:21:72:46:0b:b6: 31:67:08:19:24:b8:61:ad:65:d4:c0:4f:e2:c2:ea:af:02:02: 12:e2:70:2c:04:e1:64:56:a1:b3:e1:78:9e:cc:17:36:67:35: 6a:73:0d:15:ba:24:0e:6b:4e:38:63:da:dc:b3:2e:ad:0d:d6: 9a:21:b3:be:67:c5:27:8d:a7:6d:84:72:99:f9:92:4b:e3:3c: 98:f0:14:bd:ae:3a:6f:c4:ca:27:f7:fd:ae:b6:e6:a4:6f:da: 46:48:6c:53:ef:b9:44:c7:c0:e6:ec:e6:8c:61:91:85:df:fa: 23:f1:c6:07:a7:e2:b0:e9:77:f4:06:fd:cb:77:24:8b:8f:51: 2a:5f:1d:0d:65:64:c2:bf:27:f0:7d:73:2a:c1:11:50:46:19: 72:f1:f1:4a:50:62:89:08:9f:10:36:39:7f:06:2a:3b:03:42: 96:44:d4:41:c8:ef:e4:b9:5a:20:8b:3a:ae:d5:59:82:a6:8e: a5:f3:53:06:b6:c0:47:7a:29:db:fe:99:74:fb:26:49:a3:81: aa:48:18:44:45:29:75:32:4f:0d:1d:03:6e:1e:6c:25:ff:47: 09:24:b4:68:75:c0:6e:07:a1:61:65:68:51:e6:93:8b:0d:b6: 80:6b:6e:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsloov5X7nXonxey8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzOTJmZTktMzEyYy00N2E2LTgwNjYtNDhmZGEyZjRj ODBiMB4XDTI1MDkxMDEwMDAwM1oXDTI1MDkxMzEwMDAwMFowLzEtMCsGA1UEAxMk NzMzYTMyNWQtZmMxZi00NTFkLWE4NzctZDQ1YzYzYTUyODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT4+gCQAAXP5uPKDB+A3AOBigq48vMCdqERP zCHpFxoEkZwe/+XkO/T740N/ZzWcZJK6Ifvb9WSbIgwxRYSEgqiz1LjrH10gn4j0 1qQkfsd/RcaSnDIvbD/SMzvqWd0B4uL3eMmnFQsFA/wHI0ZXT0ILSMu3RaDHj4Vm glW+ZOGnznbv0DdUg0aB6d6tgt0mfiRz2RKEFMXZBZE3GRKod849U9tHpqMAjfP8 9unhFVfQriWmSE+mKqfTcGDSnu3xbegUz4rNdnz0wAE4KeUb16J8HaSXEDLoMhOe S+OhxH3tSBHdOLO1MWAxR46oXiJvAj+n4+OY/qdN/G8gNDn+zQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAPurXA8zMplsyfaqc7HIrMJeYy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5 MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZkYTJmNGM4MGIvNDAzOTJmZTktMzEyYy00 N2E2LTgwNjYtNDhmZGEyZjRjODBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAzOTJmZTktMzEyYy00N2E2LTgw NjYtNDhmZGEyZjRjODBiLzQwMzkyZmU5LTMxMmMtNDdhNi04MDY2LTQ4ZmRhMmY0 YzgwYi5jcmwwHwYDVR0jBBgwFoAU2h72atkxtsYeskDAgp5dBkW4L6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZk YTJmNGM4MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWAYq+Zhs2eEg6eFFDIXJG C7YxZwgZJLhhrWXUwE/iwuqvAgIS4nAsBOFkVqGz4XiezBc2ZzVqcw0VuiQOa044 Y9rcsy6tDdaaIbO+Z8UnjadthHKZ+ZJL4zyY8BS9rjpvxMon9/2utuakb9pGSGxT 77lEx8Dm7OaMYZGF3/oj8cYHp+Kw6Xf0Bv3LdySLj1EqXx0NZWTCvyfwfXMqwRFQ Rhly8fFKUGKJCJ8QNjl/Bio7A0KWRNRByO/kuVogizqu1VmCpo6l81MGtsBHeinb /pl0+yZJo4GqSBhERSl1Mk8NHQNuHmwl/0cJJLRodcBuB6FhZWhR5pOLDbaAa241 -----END CERTIFICATE-----Generated at Thu Sep 11 08:22:20 2025 by rpki-client