$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft File: 40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft (raw, json) Hash identifier: 3lKk5SF9h3THCOav0Hg7umSqnssjoucYQuisalejMt4= Subject key identifier: 9C:B9:44:A6:80:3F:94:DF:AB:1C:63:4C:96:36:80:6E:6D:B9:E5:B9 Authority key identifier: FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 Certificate issuer: /CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Certificate serial: 010D0C9F4328584A5F89CD074B84229561390200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft Manifest number: 010D0C9F43285848CAD860E77DE6FC79CA1AD217 Signing time: Tue 01 Jul 2025 11:00:08 +0000 Manifest this update: Tue 01 Jul 2025 11:00:08 +0000 Manifest next update: Thu 03 Jul 2025 11:00:00 +0000 Files and hashes: 1: 40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl (hash: fokhTC7trSMDLLURxzDh/vAMZpLy6urD5IUby9ioyZY=) 2: bd4c0156-1e13-3368-a399-5dcfc75f4825.roa (hash: OSR/frnPR/QFH6CP3pjuaZpSB459uuwgF5Th6tGxrhc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:89:cd:07:4b:84:22:95:61:39:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d7b3ea-8cf6-44c4-b681-7b6272e688f6 Validity Not Before: Jul 1 11:00:08 2025 GMT Not After : Jul 3 11:00:00 2025 GMT Subject: CN=633f7a4b-4078-411a-bb63-d20b38495134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:85:a8:7a:80:c4:90:9b:3b:37:c2:c9:89: ce:02:05:2e:c0:ec:1a:fd:bf:e5:22:aa:cf:10:d8: a7:60:36:38:12:36:d6:22:0d:99:5b:6a:e0:eb:0e: e0:c8:f6:4e:2f:42:8a:05:7b:94:95:83:06:55:84: 1e:81:a4:31:a8:6d:75:02:e3:32:ab:55:15:dd:d6: 7c:c4:26:65:48:f3:b0:02:a2:6b:1b:fc:26:43:3e: c5:01:ae:f4:03:3b:66:31:56:0d:37:16:30:1e:43: a6:8a:d8:ed:23:4f:40:51:0c:37:a4:20:61:ba:44: f2:d1:05:a8:ee:f8:16:09:10:ff:63:8f:85:43:3a: e3:57:83:32:12:37:69:29:ac:99:ec:c4:cc:81:e3: 7b:45:b9:2f:af:06:65:43:9c:85:7c:1e:5f:40:22: 28:b9:bb:21:2d:56:bb:a8:c0:50:28:ee:01:3e:4c: ca:19:9c:1e:c8:4a:ec:d8:54:1c:19:80:c0:29:e2: a8:ac:dd:6b:cc:b9:58:94:a5:d2:70:a1:a4:aa:ad: 45:6c:99:f9:8b:53:86:bd:0e:d7:4b:98:5e:77:da: 51:ed:1e:b2:e1:94:2b:a1:18:27:4c:ff:d2:83:1a: 5a:8f:64:bb:84:41:ce:ee:56:3a:7f:f0:2a:5b:53: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B9:44:A6:80:3F:94:DF:AB:1C:63:4C:96:36:80:6E:6D:B9:E5:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.crl X509v3 Authority Key Identifier: keyid:FD:2C:6C:4D:10:C9:EC:50:61:C1:EB:5D:84:52:24:3B:62:7B:2E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d7b3ea-8cf6-44c4-b681-7b6272e688f6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a8:ef:f8:d9:c7:00:e4:68:19:f8:6f:7a:fd:ee:d1:cd:c7: 44:e0:41:cd:f0:c8:78:e0:53:bb:60:a0:0e:67:ac:ac:7d:ba: 8a:99:14:33:9e:92:38:b0:03:78:0f:71:9e:99:d1:01:fc:0c: a4:6b:f6:e4:5a:eb:b8:19:02:3e:6e:ea:85:8f:27:ef:f1:a5: c1:be:c3:c7:81:5f:7e:6b:08:cf:7f:e5:da:64:34:91:30:09: d2:33:69:35:f8:13:1d:de:85:93:45:52:c0:ad:23:b5:28:bd: f7:38:43:5d:2b:ac:b8:91:43:bc:b4:74:37:ae:84:f2:3c:71: 19:a9:86:37:fb:d7:0e:2b:e3:8e:11:16:cc:7f:d5:9a:6b:e0: 8d:11:62:88:e3:8d:77:04:4b:ba:1a:16:05:3a:df:37:3f:79: 66:e2:8a:fa:0f:e2:ab:03:3a:3b:1b:2f:d0:a5:4b:da:ab:19: 37:1c:3f:3e:5f:df:b8:05:78:d7:64:71:8b:24:9d:37:66:3b: 6a:95:1f:07:f4:9e:ca:4e:b2:96:30:57:ee:05:56:a2:e5:9c: 1e:14:1d:42:f2:bc:b7:38:5a:c7:73:38:15:f5:35:be:ba:2d: 8c:0b:39:dc:c8:04:98:07:c7:ef:c0:6d:f1:5d:e4:8b:fa:6c: 0d:44:0b:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfic0HS4QilWE5AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkN2IzZWEtOGNmNi00NGM0LWI2ODEtN2I2MjcyZTY4 OGY2MB4XDTI1MDcwMTExMDAwOFoXDTI1MDcwMzExMDAwMFowLzEtMCsGA1UEAxMk NjMzZjdhNGItNDA3OC00MTFhLWJiNjMtZDIwYjM4NDk1MTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhiFqHqAxJCbOzfCyYnOAgUuwOwa/b/lIqrP ENinYDY4EjbWIg2ZW2rg6w7gyPZOL0KKBXuUlYMGVYQegaQxqG11AuMyq1UV3dZ8 xCZlSPOwAqJrG/wmQz7FAa70AztmMVYNNxYwHkOmitjtI09AUQw3pCBhukTy0QWo 7vgWCRD/Y4+FQzrjV4MyEjdpKayZ7MTMgeN7RbkvrwZlQ5yFfB5fQCIoubshLVa7 qMBQKO4BPkzKGZweyErs2FQcGYDAKeKorN1rzLlYlKXScKGkqq1FbJn5i1OGvQ7X S5hed9pR7R6y4ZQroRgnTP/Sgxpaj2S7hEHO7lY6f/AqW1NJKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJy5RKaAP5TfqxxjTJY2gG5tueW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3 YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYyNzJlNjg4ZjYvNDBkN2IzZWEtOGNmNi00 NGM0LWI2ODEtN2I2MjcyZTY4OGY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkN2IzZWEtOGNmNi00NGM0LWI2 ODEtN2I2MjcyZTY4OGY2LzQwZDdiM2VhLThjZjYtNDRjNC1iNjgxLTdiNjI3MmU2 ODhmNi5jcmwwHwYDVR0jBBgwFoAU/SxsTRDJ7FBhwetdhFIkO2J7LkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQ3YjNlYS04Y2Y2LTQ0YzQtYjY4MS03YjYy NzJlNjg4ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJqO/42ccA5GgZ+G96/e7R zcdE4EHN8Mh44FO7YKAOZ6ysfbqKmRQznpI4sAN4D3GemdEB/Ayka/bkWuu4GQI+ buqFjyfv8aXBvsPHgV9+awjPf+XaZDSRMAnSM2k1+BMd3oWTRVLArSO1KL33OENd K6y4kUO8tHQ3roTyPHEZqYY3+9cOK+OOERbMf9Waa+CNEWKI4413BEu6GhYFOt83 P3lm4or6D+KrAzo7Gy/QpUvaqxk3HD8+X9+4BXjXZHGLJJ03ZjtqlR8H9J7KTrKW MFfuBVai5ZweFB1C8ry3OFrHczgV9TW+ui2MCzncyASYB8fvwG3xXeSL+mwNRAs1 -----END CERTIFICATE-----Generated at Wed Jul 2 11:29:38 2025 by rpki-client