$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft File: 40a485a4-e936-4174-8999-571e03203823.mft (raw, json) Hash identifier: uzFTb9+hdcvJFivYj41yTD3BzdAmxNpPiqOmA85SsnY= Subject key identifier: F8:8A:25:CA:12:57:8B:9D:4E:5D:DB:EF:4C:AA:AE:2A:B5:63:1C:F2 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584AE961542914E7F45E176AB040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft Manifest number: 010D0C9F4328584073A825D34C38BD0BF0568A55 Signing time: Tue 19 Aug 2025 20:00:08 +0000 Manifest this update: Tue 19 Aug 2025 20:00:08 +0000 Manifest next update: Thu 21 Aug 2025 20:00:00 +0000 Files and hashes: 1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: NqoK5PWNKodnPFYowAg21dwlpDcbzzNexNE1fb0eh7Y=) 2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: XIBf2WZ9VVb+wgIExSjgj0i1P06/1ixXxrwxTeoOfq4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:61:54:29:14:e7:f4:5e:17:6a:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Aug 19 20:00:08 2025 GMT Not After : Aug 21 20:00:00 2025 GMT Subject: CN=93bccc3f-7c22-4894-9da6-81d3eeb58b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:df:00:4d:e0:ca:95:bd:be:75:fc:d9:b8:fa: 19:a3:0c:e6:a3:eb:ce:fc:24:06:a2:30:e6:51:a4: 7c:73:cd:a5:33:65:f9:29:95:13:d3:f1:61:b8:f9: d6:98:26:4d:40:d8:0a:23:83:2f:ca:30:4c:90:8a: 05:0b:f7:1c:6e:1b:78:bf:0c:b7:11:ea:f1:61:4c: 49:c1:fc:29:1e:d1:c6:12:51:6d:96:b1:07:f3:3d: 21:67:90:b7:50:e7:89:8e:17:67:03:6a:2b:e1:49: b5:f3:8e:6a:8c:f5:ed:69:75:b0:98:2d:45:1f:85: 16:62:a8:af:95:e4:e6:60:42:f2:59:34:5c:4b:1d: 01:ea:b5:52:70:ba:19:e5:02:d7:91:8c:cc:0b:98: 43:e7:c6:da:10:73:86:c5:6d:88:8b:2b:e2:2a:f9: d6:02:0e:d0:e9:8f:d9:9d:f4:9f:b5:50:b9:8d:07: c3:ef:f6:ee:ce:9f:f5:a4:cb:4c:57:82:27:ef:bf: 7d:a4:e8:e7:86:42:f1:1d:c7:e9:b5:9f:15:e4:8a: 42:6f:41:c7:8a:f0:72:52:32:69:e8:e1:e5:25:90: 8c:a4:5f:b0:a7:50:27:64:66:69:50:b0:44:e0:d1: 29:b9:4f:33:ab:99:a9:62:33:69:43:e2:83:2c:12: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8A:25:CA:12:57:8B:9D:4E:5D:DB:EF:4C:AA:AE:2A:B5:63:1C:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:47:2e:c0:fd:e4:1c:43:20:07:00:c7:f8:fb:83:30:b1:a2: 93:ad:40:50:23:0e:e1:0e:dc:0b:58:cd:bc:7e:42:01:4e:0c: 46:41:97:98:30:c0:a3:87:e5:e2:ae:94:29:91:6a:91:c8:46: f9:cb:4a:2e:e8:de:9d:ce:1b:50:a9:1c:d3:ff:2a:20:b3:d9: ca:65:12:8e:8a:2f:57:fb:e0:34:f8:6f:31:0a:a8:dc:d9:39: ea:32:99:f1:16:f2:66:58:3f:28:9f:c9:db:66:65:ba:88:ec: 63:d7:40:24:66:47:75:ce:5d:25:3f:45:69:ac:d2:26:21:a8: ba:bf:10:8f:97:24:ea:72:91:e3:79:63:62:d8:7b:b7:48:53: 2f:ad:08:44:54:1b:e7:21:44:7f:e8:20:42:43:48:b0:0f:60: 95:51:c5:7a:ef:a3:a3:ba:61:04:b6:8d:b7:57:a6:08:83:aa: 69:cc:93:79:84:eb:c5:47:5c:b9:92:10:d7:2b:0c:ce:ea:8c: 98:fd:32:ba:44:7e:7c:a7:9f:c2:9f:cf:86:71:e5:69:c3:f8: ae:61:20:33:e9:6f:7b:0a:88:81:85:1e:d4:a0:c6:a1:87:c0: a2:65:c8:c2:cf:65:b4:51:42:09:2a:7e:52:46:6f:58:23:f5: ab:47:6a:4d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpYVQpFOf0XhdqsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MDgxOTIwMDAwOFoXDTI1MDgyMTIwMDAwMFowLzEtMCsGA1UEAxMk OTNiY2NjM2YtN2MyMi00ODk0LTlkYTYtODFkM2VlYjU4YjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk98ATeDKlb2+dfzZuPoZowzmo+vO/CQGojDm UaR8c82lM2X5KZUT0/FhuPnWmCZNQNgKI4MvyjBMkIoFC/ccbht4vwy3EerxYUxJ wfwpHtHGElFtlrEH8z0hZ5C3UOeJjhdnA2or4Um1845qjPXtaXWwmC1FH4UWYqiv leTmYELyWTRcSx0B6rVScLoZ5QLXkYzMC5hD58baEHOGxW2IiyviKvnWAg7Q6Y/Z nfSftVC5jQfD7/buzp/1pMtMV4In7799pOjnhkLxHcfptZ8V5IpCb0HHivByUjJp 6OHlJZCMpF+wp1AnZGZpULBE4NEpuU8zq5mpYjNpQ+KDLBIMFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPiKJcoSV4udTl3b70yqriq1YxzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvNDBhNDg1YTQtZTkzNi00 MTc0LTg5OTktNTcxZTAzMjAzODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyRy7A/eQcQyAHAMf4+4Mw saKTrUBQIw7hDtwLWM28fkIBTgxGQZeYMMCjh+XirpQpkWqRyEb5y0ou6N6dzhtQ qRzT/yogs9nKZRKOii9X++A0+G8xCqjc2TnqMpnxFvJmWD8on8nbZmW6iOxj10Ak Zkd1zl0lP0VprNImIai6vxCPlyTqcpHjeWNi2Hu3SFMvrQhEVBvnIUR/6CBCQ0iw D2CVUcV676OjumEEto23V6YIg6ppzJN5hOvFR1y5khDXKwzO6oyY/TK6RH58p5/C n8+GceVpw/iuYSAz6W97CoiBhR7UoMahh8CiZcjCz2W0UUIJKn5SRm9YI/WrR2pN -----END CERTIFICATE-----Generated at Wed Aug 20 19:41:45 2025 by rpki-client