$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft File: 40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft (raw, json) Hash identifier: X8EoPMPPUjG0Eq4vMmdHMJY0aNxFpQiujeHhlJmjNpk= Subject key identifier: 51:0A:21:70:95:DC:3C:F4:A5:B2:F0:C2:B2:50:16:C7:AC:D5:94:AC Authority key identifier: 7F:D3:9B:6F:A3:A8:01:69:70:33:DE:39:D2:34:D9:F5:37:DC:D5:81 Certificate issuer: /CN=40f0d7cc-64f4-4c77-bfcb-4e33d93d8733 Certificate serial: 010D0C9F4328584D4A183AB8FFA4848906B38270 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft Manifest number: 010D0C9F432858459723378E39521A006D98A1BA Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.crl (hash: QWK/vdiYR2VGOrQ+NZ4hXZrlCkFLChTLBX+SaqUTBxM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:3a:b8:ff:a4:84:89:06:b3:82:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f0d7cc-64f4-4c77-bfcb-4e33d93d8733 Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=dbe878f1-67a3-414c-bf0d-00770086cf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:58:46:6d:94:2a:e6:7d:3b:e1:0b:11:65: 17:59:7f:d4:5e:e3:9e:24:49:2a:10:7e:4b:4d:de: 6f:8f:da:0e:b4:e8:d4:92:72:6b:63:83:c6:02:00: 32:7f:ee:bf:7d:b7:7f:a6:bc:9e:66:f4:d0:68:3b: 2f:21:12:30:68:63:4f:8a:56:f3:40:09:95:2f:2e: 40:aa:97:d8:27:63:85:32:c1:4a:9e:41:4f:23:fc: e5:05:28:cd:a1:7a:4f:6b:8f:17:ca:f8:c0:3d:fc: ff:80:6e:08:38:f9:ce:19:28:c7:07:d3:60:2e:8a: 5d:5a:3f:ae:31:0e:cc:6b:b1:05:4b:15:96:28:90: 1e:f7:4f:13:8c:8a:85:1f:a5:53:4f:1e:5a:82:f5: 8f:ec:ef:24:5a:c3:39:fe:f0:02:b1:3f:8d:82:00: fd:80:cf:5c:3f:74:69:23:bd:38:2e:a6:86:0f:e8: 59:06:cd:d0:c4:50:36:dd:bb:b8:44:9b:eb:f6:12: 3b:8d:bf:04:04:de:1c:e1:ca:f4:59:cc:48:25:1c: d7:e4:0c:96:d4:c6:0e:a5:80:b9:d2:96:b1:b9:59: 82:a5:e8:64:38:df:9a:55:81:f6:96:27:b3:f3:cb: 9e:8f:c6:73:09:58:d8:b2:4b:79:bc:e6:d8:1e:9c: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:21:70:95:DC:3C:F4:A5:B2:F0:C2:B2:50:16:C7:AC:D5:94:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.crl X509v3 Authority Key Identifier: keyid:7F:D3:9B:6F:A3:A8:01:69:70:33:DE:39:D2:34:D9:F5:37:DC:D5:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c4:f2:ed:1d:7e:2f:d9:e2:a9:d6:0c:37:c7:18:d7:ea:9e: a9:c7:06:7f:b7:bd:8d:84:bf:1d:e1:69:dd:25:46:f3:84:98: 01:26:30:5b:f1:bc:53:2b:97:65:18:17:01:a6:54:d6:05:5a: 25:c8:2f:bd:6d:55:8d:7e:7c:49:ee:eb:e3:5a:18:f9:93:9e: 1b:a7:4f:13:c6:82:68:79:98:00:f5:3c:28:8c:b5:17:33:e0: 32:52:58:1b:43:b1:ec:60:7a:2d:1b:fb:82:e4:11:64:90:b1: 09:55:8c:5a:04:71:fc:b6:9e:f8:d9:08:1e:80:36:94:0e:8d: 80:2c:8e:9e:3d:55:7c:7f:59:66:e4:90:e1:ec:a5:25:5f:05: 54:a8:b1:ca:8c:01:92:86:6b:0d:e5:cf:10:f9:ba:0f:7f:32: 12:02:4b:8a:8e:e9:37:51:0d:d7:62:6c:da:4c:bf:3a:82:59: 74:f1:e6:04:90:81:2e:fe:0b:be:52:d9:a6:19:2d:1f:a6:f3: ae:5b:43:5d:c3:52:7c:ec:cd:16:3f:67:d8:94:d1:1c:71:a8: 5b:f9:38:22:09:fc:6e:93:79:fa:6d:36:69:c9:69:87:a9:d6: 9c:ef:80:27:d1:e5:63:5a:e7:f3:b9:ce:b8:c6:b4:50:4b:c5: d7:f3:b3:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDq4/6SEiQazgnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmMGQ3Y2MtNjRmNC00Yzc3LWJmY2ItNGUzM2Q5M2Q4 NzMzMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk ZGJlODc4ZjEtNjdhMy00MTRjLWJmMGQtMDA3NzAwODZjZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0RYRm2UKuZ9O+ELEWUXWX/UXuOeJEkqEH5L Td5vj9oOtOjUknJrY4PGAgAyf+6/fbd/pryeZvTQaDsvIRIwaGNPilbzQAmVLy5A qpfYJ2OFMsFKnkFPI/zlBSjNoXpPa48XyvjAPfz/gG4IOPnOGSjHB9NgLopdWj+u MQ7Ma7EFSxWWKJAe908TjIqFH6VTTx5agvWP7O8kWsM5/vACsT+NggD9gM9cP3Rp I704LqaGD+hZBs3QxFA23bu4RJvr9hI7jb8EBN4c4cr0WcxIJRzX5AyW1MYOpYC5 0paxuVmCpehkON+aVYH2liez88uej8ZzCVjYskt5vObYHpz/2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFEKIXCV3Dz0pbLwwrJQFses1ZSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MGYw ZDdjYy02NGY0LTRjNzctYmZjYi00ZTMzZDkzZDg3MzMvNDBmMGQ3Y2MtNjRmNC00 Yzc3LWJmY2ItNGUzM2Q5M2Q4NzMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDBmMGQ3Y2MtNjRmNC00Yzc3LWJm Y2ItNGUzM2Q5M2Q4NzMzLzQwZjBkN2NjLTY0ZjQtNGM3Ny1iZmNiLTRlMzNkOTNk ODczMy5jcmwwHwYDVR0jBBgwFoAUf9Obb6OoAWlwM9450jTZ9Tfc1YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MGYwZDdjYy02NGY0LTRjNzctYmZjYi00ZTMz ZDkzZDg3MzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKxPLtHX4v2eKp1gw3xxjX 6p6pxwZ/t72NhL8d4WndJUbzhJgBJjBb8bxTK5dlGBcBplTWBVolyC+9bVWNfnxJ 7uvjWhj5k54bp08TxoJoeZgA9TwojLUXM+AyUlgbQ7HsYHotG/uC5BFkkLEJVYxa BHH8tp742QgegDaUDo2ALI6ePVV8f1lm5JDh7KUlXwVUqLHKjAGShmsN5c8Q+boP fzISAkuKjuk3UQ3XYmzaTL86gll08eYEkIEu/gu+UtmmGS0fpvOuW0Ndw1J87M0W P2fYlNEccahb+TgiCfxuk3n6bTZpyWmHqdac74An0eVjWufzuc64xrRQS8XX87Nh -----END CERTIFICATE-----Generated at Thu Mar 26 06:50:49 2026 by rpki-client