$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft File: 40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft (raw, json) Hash identifier: u48V4tR0l8eHZpycE0v9JijgsNKmRtXAE0OYT+SiWb8= Subject key identifier: 74:53:97:74:31:79:F4:7F:31:67:7B:83:46:60:BB:06:BC:F0:CE:B9 Authority key identifier: 13:6C:DA:17:76:DF:B9:A7:C5:75:3A:D1:52:08:E7:F7:8D:5C:35:F8 Certificate issuer: /CN=40c6f749-6a2d-4ad9-9012-1656d0adbd53 Certificate serial: 010D0C9F4328584AE8CC6E75D1D701E891CEA580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft Manifest number: 010D0C9F4328584ADADDE88E3CD776290D500A06 Signing time: Tue 19 Aug 2025 15:00:08 +0000 Manifest this update: Tue 19 Aug 2025 15:00:08 +0000 Manifest next update: Thu 21 Aug 2025 15:00:00 +0000 Files and hashes: 1: 40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl (hash: +0GVfd553kNm0LBybOS4HIJDARzWflDPU8OjogUKjFQ=) 2: 629ce3ee-3c33-3b85-90ba-b0774574ca2d.roa (hash: EmpPi9daKnBsrfDwjCkbot+snGaGNnAIfRhTLG+BRw8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:cc:6e:75:d1:d7:01:e8:91:ce:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40c6f749-6a2d-4ad9-9012-1656d0adbd53 Validity Not Before: Aug 19 15:00:08 2025 GMT Not After : Aug 21 15:00:00 2025 GMT Subject: CN=5f0f3a07-2b15-4f50-acc5-ed69e5cd4d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:6f:f9:b8:94:c4:b4:5d:a0:22:1b:58:19: ea:9f:cb:06:84:c2:43:13:33:64:73:ed:dd:f6:c8: 4a:66:e5:3c:71:73:a2:88:b9:09:18:6b:4b:f6:a3: 38:9b:89:61:8f:e4:b4:b6:3f:32:96:74:45:3e:92: b6:26:ad:aa:1b:e7:30:cd:87:16:20:df:08:55:e3: 54:b0:73:bb:23:29:f5:97:f7:d1:c5:1c:d4:9e:cb: b9:ed:fa:32:ba:4d:04:d2:26:cf:d6:f6:47:7b:3f: 25:06:f4:07:c8:e8:44:c3:65:3b:47:a9:3a:92:46: 98:3c:9b:90:d5:ad:47:ca:bf:fa:18:56:15:87:e3: 9e:c4:4f:46:1b:50:da:76:9c:c2:df:68:2a:1f:38: 16:49:c4:7e:a2:b8:67:7a:4b:3d:de:c6:f2:f8:d1: ea:b0:cc:e2:5b:21:5d:f8:f3:eb:57:93:c3:c8:0d: 15:58:39:29:17:e1:0b:6c:e2:14:f2:30:7b:45:15: 13:10:ab:6f:cd:6a:08:8b:1a:7c:9b:9f:f4:51:2f: 6d:a1:e8:6b:54:a2:dd:2b:b8:13:70:67:fa:04:1e: 89:73:af:d9:ce:6c:c6:46:fc:10:33:78:de:00:3b: 72:45:90:51:f3:76:71:28:5c:3c:8c:05:3d:0a:9d: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:97:74:31:79:F4:7F:31:67:7B:83:46:60:BB:06:BC:F0:CE:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl X509v3 Authority Key Identifier: keyid:13:6C:DA:17:76:DF:B9:A7:C5:75:3A:D1:52:08:E7:F7:8D:5C:35:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:16:9a:a7:52:85:93:22:e1:bf:d9:b8:70:ae:fe:c6:46:7d: 28:8e:fa:59:93:e8:c4:6b:71:4f:a5:cc:4b:f8:c8:d3:98:4e: e1:35:42:01:cd:c6:09:19:ca:b1:26:9f:a4:ac:3a:e8:da:9d: 3e:a6:26:e3:65:65:01:54:44:9a:4c:ea:b1:3c:2a:6f:d2:8d: e6:57:7e:10:43:b8:0f:49:9a:2e:e7:f6:77:a0:3a:68:80:03: 95:c5:3e:fe:2e:1e:27:75:12:0e:73:8d:34:60:31:25:de:4d: 74:03:8b:8b:8a:b6:7c:5d:7b:86:7f:78:99:ad:f1:d4:24:34: 3e:43:3b:e4:8e:72:da:de:c1:26:df:26:64:8b:c3:8e:f0:b1: db:23:11:39:09:1c:ed:64:3e:cd:68:a1:6d:7b:a5:70:d7:0f: fd:86:f1:4a:df:1e:4a:88:7c:4f:e2:20:07:48:72:99:56:45: 7e:e6:df:85:63:12:ab:3c:b3:b8:4b:fc:2e:ec:43:77:59:c0: 82:86:a0:89:0d:d2:23:6d:d6:5b:d2:a8:f4:26:b2:d8:e3:a5: cd:02:3e:af:51:ce:b5:c2:d2:a8:7c:ce:2f:e7:01:01:25:7f: de:d9:a0:ed:5a:f9:e9:5b:cd:8c:06:ff:95:e6:a8:a0:27:89: f6:34:d7:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErozG510dcB6JHOpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBjNmY3NDktNmEyZC00YWQ5LTkwMTItMTY1NmQwYWRi ZDUzMB4XDTI1MDgxOTE1MDAwOFoXDTI1MDgyMTE1MDAwMFowLzEtMCsGA1UEAxMk NWYwZjNhMDctMmIxNS00ZjUwLWFjYzUtZWQ2OWU1Y2Q0ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuihv+biUxLRdoCIbWBnqn8sGhMJDEzNkc+3d 9shKZuU8cXOiiLkJGGtL9qM4m4lhj+S0tj8ylnRFPpK2Jq2qG+cwzYcWIN8IVeNU sHO7Iyn1l/fRxRzUnsu57foyuk0E0ibP1vZHez8lBvQHyOhEw2U7R6k6kkaYPJuQ 1a1Hyr/6GFYVh+OexE9GG1DadpzC32gqHzgWScR+orhneks93sby+NHqsMziWyFd +PPrV5PDyA0VWDkpF+ELbOIU8jB7RRUTEKtvzWoIixp8m5/0US9toehrVKLdK7gT cGf6BB6Jc6/ZzmzGRvwQM3jeADtyRZBR83ZxKFw8jAU9Cp2soQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHRTl3QxefR/MWd7g0Zguwa88M65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MGM2 Zjc0OS02YTJkLTRhZDktOTAxMi0xNjU2ZDBhZGJkNTMvNDBjNmY3NDktNmEyZC00 YWQ5LTkwMTItMTY1NmQwYWRiZDUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDBjNmY3NDktNmEyZC00YWQ5LTkw MTItMTY1NmQwYWRiZDUzLzQwYzZmNzQ5LTZhMmQtNGFkOS05MDEyLTE2NTZkMGFk YmQ1My5jcmwwHwYDVR0jBBgwFoAUE2zaF3bfuafFdTrRUgjn941cNfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MGM2Zjc0OS02YTJkLTRhZDktOTAxMi0xNjU2 ZDBhZGJkNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJFpqnUoWTIuG/2bhwrv7G Rn0ojvpZk+jEa3FPpcxL+MjTmE7hNUIBzcYJGcqxJp+krDro2p0+pibjZWUBVESa TOqxPCpv0o3mV34QQ7gPSZou5/Z3oDpogAOVxT7+Lh4ndRIOc400YDEl3k10A4uL irZ8XXuGf3iZrfHUJDQ+QzvkjnLa3sEm3yZki8OO8LHbIxE5CRztZD7NaKFte6Vw 1w/9hvFK3x5KiHxP4iAHSHKZVkV+5t+FYxKrPLO4S/wu7EN3WcCChqCJDdIjbdZb 0qj0JrLY46XNAj6vUc61wtKofM4v5wEBJX/e2aDtWvnpW82MBv+V5qigJ4n2NNdA -----END CERTIFICATE-----Generated at Wed Aug 20 00:45:59 2025 by rpki-client