$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: xbro94gHd8Z22DR/TJlhVZkQAbQt9FQOFxCBzPVsGnc= Subject key identifier: 7C:29:D1:CF:C6:E8:21:63:A3:93:45:5A:2B:5A:C6:C8:38:E0:BB:8A Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584BA9C6FEDA0EA560BEC428FD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7C16 Signing time: Mon 27 Oct 2025 18:00:11 +0000 Manifest this update: Mon 27 Oct 2025 18:00:11 +0000 Manifest next update: Wed 29 Oct 2025 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: pkbowoj/wqRW1fT3W8zX4jO2KtthkQOPy/IN3VMTJjo=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: qHs6f+W2BpW1HUluaXSbZeFAKDUiIf20iNNqO4At4O4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:c6:fe:da:0e:a5:60:be:c4:28:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Oct 27 18:00:11 2025 GMT Not After : Oct 29 18:00:00 2025 GMT Subject: CN=7996ac2f-7954-4ef0-99e0-a70ffbc06a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:3f:ea:d0:fa:c2:62:67:1e:5c:f4:07:7e: 6c:c3:82:8a:90:7d:c0:4b:3d:3a:00:68:b1:bd:c5: 80:49:19:e8:75:94:11:59:6e:c7:25:7e:27:5b:bc: 0d:0d:9b:bf:87:18:38:85:a4:62:a5:e5:42:55:57: 7a:aa:7b:bb:80:20:3b:72:4a:fe:72:69:8d:56:b7: 12:ad:c6:78:80:6a:cd:62:9d:59:fe:f8:9f:ef:73: d5:ba:fb:9b:f0:9c:eb:81:6b:ef:cc:71:36:8a:e5: c8:da:71:b2:ad:9b:35:37:65:ad:98:ce:de:f0:ae: 88:3b:83:d8:79:8f:62:89:ac:ff:01:e2:1f:d7:12: dd:a3:cf:49:99:19:65:76:9c:1a:3b:cd:e4:fc:e8: 2c:6f:4f:5d:dd:28:98:a1:f5:e5:87:39:69:9b:b2: 6a:d7:27:6f:7c:94:83:09:13:01:ab:6b:de:59:dc: 24:a8:2e:53:39:6b:e7:d5:d1:42:da:c2:28:a1:79: 59:be:61:c7:3f:83:17:e0:d1:f2:05:ff:9b:30:b6: be:b4:c3:86:08:53:67:36:ce:43:5b:13:58:a2:c9: 4f:01:7f:a1:0d:14:ff:5a:a8:15:48:94:c5:4e:66: 4c:68:b0:7d:a2:ca:f2:f4:07:5c:e2:bf:89:27:05: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:29:D1:CF:C6:E8:21:63:A3:93:45:5A:2B:5A:C6:C8:38:E0:BB:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:19:93:36:76:ea:46:10:f9:fe:97:ae:4c:cd:f9:1b:8f:ed: 96:9f:3e:3b:76:d5:72:66:01:74:9a:5d:66:72:e8:80:a9:f0: 83:48:f3:aa:76:a8:75:3d:cc:f4:10:43:d8:15:8d:47:40:b8: 41:f3:5a:8f:b6:79:d0:eb:d1:89:6c:19:d2:c8:5d:09:57:eb: 05:bd:f3:85:76:59:89:c1:b6:34:3e:3c:73:52:58:40:f8:e3: 33:65:12:ec:2d:b4:64:67:67:19:7f:54:89:4f:59:93:f6:b9: 63:2f:f6:32:d1:88:1e:ef:c1:d2:84:51:1b:9d:b2:00:62:59: 29:85:d9:eb:01:5e:f3:b8:aa:9a:94:ac:86:d7:10:aa:3b:96: 6d:5b:a2:a2:90:4c:9b:74:8e:0f:7b:11:2c:1d:da:05:e3:05: f7:3c:95:52:09:2a:4b:b9:fb:60:83:b2:38:5b:63:f9:53:17: 93:56:03:4b:cc:84:e3:13:f5:4b:79:1a:64:cc:70:38:f3:f2: 13:56:d5:95:ad:53:40:96:64:34:4a:fd:8d:9b:58:4d:7e:50: d3:88:1c:45:ad:5e:e8:2b:01:e3:d3:1b:ad:6c:59:54:a2:dd: 2e:ef:10:7b:78:17:28:2b:2d:1d:d1:4f:42:a7:b7:c4:9b:e4: a8:78:4c:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEupxv7aDqVgvsQo/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI1MTAyNzE4MDAxMVoXDTI1MTAyOTE4MDAwMFowLzEtMCsGA1UEAxMk Nzk5NmFjMmYtNzk1NC00ZWYwLTk5ZTAtYTcwZmZiYzA2YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvE/6tD6wmJnHlz0B35sw4KKkH3ASz06AGix vcWASRnodZQRWW7HJX4nW7wNDZu/hxg4haRipeVCVVd6qnu7gCA7ckr+cmmNVrcS rcZ4gGrNYp1Z/vif73PVuvub8JzrgWvvzHE2iuXI2nGyrZs1N2WtmM7e8K6IO4PY eY9iiaz/AeIf1xLdo89JmRlldpwaO83k/Ogsb09d3SiYofXlhzlpm7Jq1ydvfJSD CRMBq2veWdwkqC5TOWvn1dFC2sIooXlZvmHHP4MX4NHyBf+bMLa+tMOGCFNnNs5D WxNYoslPAX+hDRT/WqgVSJTFTmZMaLB9osry9Adc4r+JJwXUcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHwp0c/G6CFjo5NFWitaxsg44LuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIGZM2dupGEPn+l65Mzfkb j+2Wnz47dtVyZgF0ml1mcuiAqfCDSPOqdqh1Pcz0EEPYFY1HQLhB81qPtnnQ69GJ bBnSyF0JV+sFvfOFdlmJwbY0PjxzUlhA+OMzZRLsLbRkZ2cZf1SJT1mT9rljL/Yy 0Yge78HShFEbnbIAYlkphdnrAV7zuKqalKyG1xCqO5ZtW6KikEybdI4PexEsHdoF 4wX3PJVSCSpLuftgg7I4W2P5UxeTVgNLzITjE/VLeRpkzHA48/ITVtWVrVNAlmQ0 Sv2Nm1hNflDTiBxFrV7oKwHj0xutbFlUot0u7xB7eBcoKy0d0U9Cp7fEm+SoeEyR -----END CERTIFICATE-----Generated at Tue Oct 28 03:12:24 2025 by rpki-client