$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft File: 40a485a4-e936-4174-8999-571e03203823.mft (raw, json) Hash identifier: 2DfJKC4ve8z42Q6EWvKVTQ6UYoHyvt/OWHG6Sd8M/zM= Subject key identifier: 51:DE:3D:D8:BA:6C:3F:05:01:3E:C0:7D:1F:9E:ED:1C:04:AC:14:40 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584D49FA7190973C68C4B3536060 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft Manifest number: 010D0C9F4328584073A825D34C38BD0BF0568B35 Signing time: Wed 25 Mar 2026 20:00:09 +0000 Manifest this update: Wed 25 Mar 2026 20:00:09 +0000 Manifest next update: Fri 27 Mar 2026 20:00:00 +0000 Files and hashes: 1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: N53BCwdjvg2YlAdsfLayUvb8EgWhYq2N+cg7Efqj0/A=) 2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: mw5mjiNb6Q+iwBBscQMwFFkUaozHggvJPkuf78CWYQ4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:fa:71:90:97:3c:68:c4:b3:53:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Mar 25 20:00:09 2026 GMT Not After : Mar 27 20:00:00 2026 GMT Subject: CN=1488c169-96e6-477b-8b92-5f4d71f90fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:39:1a:fc:82:f2:b7:67:e4:56:0d:51:b0: 7f:a8:d3:a6:a2:ae:31:97:a2:21:2e:51:d0:9d:37: 73:6b:47:a1:4b:cd:64:12:d0:7f:6a:23:f7:83:6b: bb:47:0e:e3:eb:2d:42:e1:0c:20:34:35:c7:bd:a2: 9f:88:15:78:d2:6d:43:34:ce:92:d0:fa:80:c5:e6: fe:ac:9b:3c:91:1f:a0:b7:30:62:e1:ea:09:c6:da: f8:ea:9a:33:ab:11:30:3f:5e:59:a8:81:34:96:7b: bc:b6:a9:8c:d4:dd:f7:07:2f:07:65:33:50:41:f5: 49:a4:78:74:5b:9b:41:cd:24:08:58:08:59:43:9d: cd:20:7c:c8:27:ae:d1:e9:bf:3e:e6:03:2b:07:00: 93:6b:34:4f:55:f5:38:04:56:1a:09:4e:15:06:0a: b1:2b:7f:c7:8e:14:c8:26:b0:97:87:6e:f1:0a:84: 44:01:5d:df:e4:ac:4c:33:57:1f:e0:96:72:99:c7: 80:cd:34:4f:bf:1f:5f:5a:b7:d3:b4:5a:24:9b:e1: e8:e5:a0:f0:cf:90:8f:ff:02:ed:c5:61:7e:6d:5c: 88:23:88:85:00:2b:6f:f9:b2:80:5b:88:79:48:b9: c5:48:34:ce:e2:68:74:1b:70:fc:b6:ef:e6:3c:ef: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DE:3D:D8:BA:6C:3F:05:01:3E:C0:7D:1F:9E:ED:1C:04:AC:14:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ca:ec:75:5c:f3:e3:65:4e:df:fe:81:88:fd:12:ac:f8:58: 70:09:86:b6:66:a2:08:7b:87:a4:47:53:53:3f:54:4f:b2:a0: 15:9f:43:7c:6f:0d:ea:18:fc:84:c6:4a:74:ff:2c:e3:a8:64: 39:c0:65:be:ba:c5:0e:91:89:71:8e:30:4e:90:a6:3b:c6:fc: 21:61:a2:82:8d:f6:79:b6:13:90:d0:d4:8c:4f:7d:81:f1:1e: a3:18:54:30:33:50:e3:95:8d:56:3a:33:e1:1e:33:05:65:43: 1c:1f:5d:89:03:83:67:34:c8:8f:23:a1:82:4e:2b:a9:29:ef: 2e:0f:40:2a:91:11:67:80:36:1b:6e:f6:da:9a:39:4e:bb:fa: 80:4c:6d:c5:70:36:8e:8d:e7:70:5f:9c:67:a9:c8:7f:bf:89: 3a:b8:da:56:64:76:10:eb:77:28:39:9e:08:33:ce:07:38:82: 9c:04:62:02:e1:83:5b:65:ca:58:f1:59:44:fe:cf:7c:8a:2a: 3e:ff:77:cf:c9:53:fa:19:8f:8d:bb:8a:70:4c:1e:d6:49:a0: 3b:99:f5:a3:f9:90:a2:61:d4:42:07:2c:ac:57:2d:e7:55:75: 0d:ec:eb:be:17:6e:2b:f1:52:76:be:44:1f:50:33:05:03:70: 78:a8:fe:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1J+nGQlzxoxLNTYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI2MDMyNTIwMDAwOVoXDTI2MDMyNzIwMDAwMFowLzEtMCsGA1UEAxMk MTQ4OGMxNjktOTZlNi00NzdiLThiOTItNWY0ZDcxZjkwZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTY5GvyC8rdn5FYNUbB/qNOmoq4xl6IhLlHQ nTdza0ehS81kEtB/aiP3g2u7Rw7j6y1C4QwgNDXHvaKfiBV40m1DNM6S0PqAxeb+ rJs8kR+gtzBi4eoJxtr46pozqxEwP15ZqIE0lnu8tqmM1N33By8HZTNQQfVJpHh0 W5tBzSQIWAhZQ53NIHzIJ67R6b8+5gMrBwCTazRPVfU4BFYaCU4VBgqxK3/HjhTI JrCXh27xCoREAV3f5KxMM1cf4JZymceAzTRPvx9fWrfTtFokm+Ho5aDwz5CP/wLt xWF+bVyII4iFACtv+bKAW4h5SLnFSDTO4mh0G3D8tu/mPO/ymQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFHePdi6bD8FAT7AfR+e7RwErBRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvNDBhNDg1YTQtZTkzNi00 MTc0LTg5OTktNTcxZTAzMjAzODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEyux1XPPjZU7f/oGI/RKs +FhwCYa2ZqIIe4ekR1NTP1RPsqAVn0N8bw3qGPyExkp0/yzjqGQ5wGW+usUOkYlx jjBOkKY7xvwhYaKCjfZ5thOQ0NSMT32B8R6jGFQwM1DjlY1WOjPhHjMFZUMcH12J A4NnNMiPI6GCTiupKe8uD0AqkRFngDYbbvbamjlOu/qATG3FcDaOjedwX5xnqch/ v4k6uNpWZHYQ63coOZ4IM84HOIKcBGIC4YNbZcpY8VlE/s98iio+/3fPyVP6GY+N u4pwTB7WSaA7mfWj+ZCiYdRCByysVy3nVXUN7Ou+F24r8VJ2vkQfUDMFA3B4qP6C -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:43 2026 by rpki-client