$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.mft File: b40428c0-ba21-44c7-86bd-39d34a17e438.mft (raw, json) Hash identifier: CHH2KmZSGYm43G1yMZVkpIuwk5A7idaKh2r4i7NYZb8= Subject key identifier: 4E:52:9E:7C:AA:F7:E3:96:AA:D1:5D:9F:92:F7:EC:44:4A:27:F4:4D Authority key identifier: 62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE Certificate issuer: /CN=b40428c0-ba21-44c7-86bd-39d34a17e438 Certificate serial: 010D0C9F4328584AF756BBAACF9A76947F2FA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.mft Manifest number: 010D0C9F4328584657B9826BC927786256827032 Signing time: Sun 24 Aug 2025 20:00:08 +0000 Manifest this update: Sun 24 Aug 2025 20:00:08 +0000 Manifest next update: Wed 27 Aug 2025 20:00:00 +0000 Files and hashes: 1: 70c8300b-3f8c-3cac-af15-749f60c97054.roa (hash: G8q37uFKDylQjQTWDaYTd30ZMYiRzm2B52Lp1BmZ76Q=) 2: b40428c0-ba21-44c7-86bd-39d34a17e438.crl (hash: wiW3/qr0z0GaHLCZLRaKB7P+dxuYa2OnQ12bU7sQOBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:56:bb:aa:cf:9a:76:94:7f:2f:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b40428c0-ba21-44c7-86bd-39d34a17e438 Validity Not Before: Aug 24 20:00:08 2025 GMT Not After : Aug 27 20:00:00 2025 GMT Subject: CN=d58fb41f-9afc-42b5-ab72-c9ef87783d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:19:50:83:9b:b4:b1:78:ba:e5:3a:ce:f4: 31:bd:e3:96:95:91:8b:22:44:6e:ff:13:94:2a:98: 3a:17:37:64:0f:38:11:30:60:fd:05:4a:e5:9f:1a: 2a:29:bd:57:21:e2:be:38:c9:01:a8:b1:50:93:4b: ac:7f:f3:8b:5c:b7:25:40:2e:d9:ae:94:04:a8:a5: cc:d2:ca:6f:95:f4:fd:da:52:92:fb:0e:44:04:f8: d9:73:4f:9a:ea:83:2d:6a:b4:71:81:62:80:db:ff: 47:cf:9d:b3:84:ba:f6:f2:b5:52:96:43:51:5b:a4: ff:b6:cd:84:08:5b:73:c8:c0:f9:66:d9:7c:45:9f: 0f:65:5a:4d:61:7c:d2:d9:af:17:31:b9:3f:01:90: 45:70:fb:8b:51:0d:fd:32:46:19:3a:e6:ac:a9:60: a6:2f:bd:51:34:89:fe:12:26:c4:d8:a8:ae:ad:52: 6c:39:20:db:a9:30:01:6a:5b:ff:60:b7:d7:c1:62: df:c5:d6:6d:01:71:9a:3e:7d:56:0e:e5:9c:1e:ac: 4b:44:b3:b6:83:80:fa:9b:70:06:ce:75:3d:9f:98: 5a:dd:04:5e:e9:5a:1e:28:3e:b5:08:93:98:10:fa: 57:1b:fe:c0:ac:56:eb:45:1a:d8:87:79:b1:eb:d0: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:52:9E:7C:AA:F7:E3:96:AA:D1:5D:9F:92:F7:EC:44:4A:27:F4:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438/b40428c0-ba21-44c7-86bd-39d34a17e438.crl X509v3 Authority Key Identifier: keyid:62:28:B5:79:CA:95:4E:4B:2D:88:BA:5D:61:99:96:C9:26:A2:04:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b40428c0-ba21-44c7-86bd-39d34a17e438.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:7e:b4:6a:c6:78:85:33:55:00:ca:93:ef:31:16:bd:7b:41: 76:b1:ed:c5:6a:0b:90:33:9a:33:00:60:d7:f1:e8:0d:53:53: 72:e9:cf:66:b7:45:b4:b4:bf:ec:c9:da:5d:43:82:72:80:87: 05:8b:f4:53:ce:d7:34:33:bc:75:50:8c:bf:b2:3d:f2:ba:06: bc:68:66:a8:16:3b:b3:26:60:bf:f9:a5:2a:10:15:da:ce:55: 4c:42:3f:f9:3d:77:83:64:cf:56:35:bb:15:25:52:f1:10:01: 58:18:91:26:59:32:33:1f:be:bf:41:32:56:78:7b:61:6b:7a: 71:53:92:75:3e:6d:ed:ab:f8:d1:ee:66:b7:94:28:1a:88:de: a4:2d:82:c5:65:cf:d9:f7:c1:e1:5f:62:5b:91:40:5a:53:93: 10:40:0c:33:a5:ee:2f:6c:a9:58:09:78:f0:74:89:a6:50:70: 97:a7:42:46:6c:99:f0:b2:a8:50:16:3c:fc:d1:ff:58:86:db: 0a:f7:27:d3:47:84:9a:f5:9b:a1:bb:56:a9:3b:e6:d0:43:8a: 5c:e6:9f:a9:64:88:91:be:8c:96:19:69:fd:64:e0:2b:8f:34: 07:54:f8:9a:58:87:e7:9d:be:2a:df:0a:50:9b:7e:ca:83:2c: d3:59:5b:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr3Vruqz5p2lH8vqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQwNDI4YzAtYmEyMS00NGM3LTg2YmQtMzlkMzRhMTdl NDM4MB4XDTI1MDgyNDIwMDAwOFoXDTI1MDgyNzIwMDAwMFowLzEtMCsGA1UEAxMk ZDU4ZmI0MWYtOWFmYy00MmI1LWFiNzItYzllZjg3NzgzZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jEZUIObtLF4uuU6zvQxveOWlZGLIkRu/xOU Kpg6FzdkDzgRMGD9BUrlnxoqKb1XIeK+OMkBqLFQk0usf/OLXLclQC7ZrpQEqKXM 0spvlfT92lKS+w5EBPjZc0+a6oMtarRxgWKA2/9Hz52zhLr28rVSlkNRW6T/ts2E CFtzyMD5Ztl8RZ8PZVpNYXzS2a8XMbk/AZBFcPuLUQ39MkYZOuasqWCmL71RNIn+ EibE2KiurVJsOSDbqTABalv/YLfXwWLfxdZtAXGaPn1WDuWcHqxLRLO2g4D6m3AG znU9n5ha3QRe6VoeKD61CJOYEPpXG/7ArFbrRRrYh3mx69AJtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE5Snnyq9+OWqtFdn5L37ERKJ/RNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNDA0 MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQzNGExN2U0MzgvYjQwNDI4YzAtYmEyMS00 NGM3LTg2YmQtMzlkMzRhMTdlNDM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjQwNDI4YzAtYmEyMS00NGM3LTg2 YmQtMzlkMzRhMTdlNDM4L2I0MDQyOGMwLWJhMjEtNDRjNy04NmJkLTM5ZDM0YTE3 ZTQzOC5jcmwwHwYDVR0jBBgwFoAUYii1ecqVTkstiLpdYZmWySaiBK4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNDA0MjhjMC1iYTIxLTQ0YzctODZiZC0zOWQz NGExN2U0MzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDMfrRqxniFM1UAypPvMRa9 e0F2se3FaguQM5ozAGDX8egNU1Ny6c9mt0W0tL/sydpdQ4JygIcFi/RTztc0M7x1 UIy/sj3yuga8aGaoFjuzJmC/+aUqEBXazlVMQj/5PXeDZM9WNbsVJVLxEAFYGJEm WTIzH76/QTJWeHtha3pxU5J1Pm3tq/jR7ma3lCgaiN6kLYLFZc/Z98HhX2JbkUBa U5MQQAwzpe4vbKlYCXjwdImmUHCXp0JGbJnwsqhQFjz80f9YhtsK9yfTR4Sa9Zuh u1apO+bQQ4pc5p+pZIiRvoyWGWn9ZOArjzQHVPiaWIfnnb4q3wpQm37KgyzTWVvA -----END CERTIFICATE-----Generated at Mon Aug 25 03:28:49 2025 by rpki-client