$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft File: 40a485a4-e936-4174-8999-571e03203823.mft (raw, json) Hash identifier: vWNay3AwIGaFz9t9IbfRYSGyGlckfUROdN9LmJO/oQE= Subject key identifier: 38:C0:D8:9F:6B:EC:8A:FE:06:59:5D:60:A8:DE:41:6E:30:0D:48:52 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584A63607BCC4269FE39EFA76500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft Manifest number: 010D0C9F4328584073A825D34C38BD0BF0568A25 Signing time: Wed 02 Jul 2025 20:00:08 +0000 Manifest this update: Wed 02 Jul 2025 20:00:08 +0000 Manifest next update: Fri 04 Jul 2025 20:00:00 +0000 Files and hashes: 1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: NqoK5PWNKodnPFYowAg21dwlpDcbzzNexNE1fb0eh7Y=) 2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: P2YNokF9sJ+b4/pzCsqlGuqvpoXJYUu/sMx1nveViuk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:60:7b:cc:42:69:fe:39:ef:a7:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Jul 2 20:00:08 2025 GMT Not After : Jul 4 20:00:00 2025 GMT Subject: CN=7c2c779f-6a4d-4ad3-8809-c646d2f13dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:ec:98:ad:2c:b3:e6:12:82:96:fe:ac:df: 7c:a1:a9:a4:99:05:2e:2f:fa:88:4e:90:bd:8c:d7: ca:b4:dc:18:e9:7e:b8:61:a1:f8:72:f8:9c:ff:9f: d3:1f:47:c1:20:99:e1:60:77:ce:71:87:38:b9:b2: 41:07:4e:49:ec:4b:e8:ba:bd:d9:0a:7c:6f:11:22: 35:b7:98:7c:aa:a7:dc:6f:71:7f:66:1d:0d:c5:b0: ef:f7:37:21:27:dc:db:73:b9:25:34:91:24:79:44: a5:4c:c3:8d:47:2e:0c:35:4e:a0:18:0f:75:c3:cc: da:17:b7:87:f9:63:dc:b4:20:5e:f1:fa:c3:f6:7a: 2e:46:3a:8c:8e:7a:dc:83:b5:bb:de:ca:69:7f:d0: 79:32:dc:00:4a:6d:89:16:a0:eb:0a:15:82:56:ff: ca:22:b2:f7:57:9d:7e:b1:81:3c:52:f3:b0:77:5a: c8:f7:70:a1:85:fc:2e:ec:98:b5:c3:f0:01:57:63: 61:ac:33:3e:d1:49:c5:d7:b1:e3:a7:95:d2:ee:1f: 5f:16:4b:6d:3b:84:a3:12:c9:0e:ee:a8:9f:d2:ea: 2f:d9:66:04:08:8b:71:ac:9f:3b:71:b1:8f:4a:c9: be:6d:50:12:23:72:a4:3d:4c:49:ed:a5:59:99:5c: 5d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:D8:9F:6B:EC:8A:FE:06:59:5D:60:A8:DE:41:6E:30:0D:48:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:52:4b:d6:c4:b1:64:37:1e:de:5d:6c:95:45:10:ce:58:7a: 06:2f:7a:90:43:07:89:41:e2:07:73:4f:66:d4:a8:c7:34:86: 4a:90:09:39:59:fb:40:ee:99:cd:39:12:c9:fe:f5:86:7c:c5: ba:b0:ac:c8:a3:4a:8d:eb:4d:ba:a2:3e:08:d5:de:e1:c7:d1: 56:61:ee:33:b6:2c:8c:28:d0:ab:b7:fa:1f:a2:16:be:60:26: a1:bb:fc:57:36:44:7e:53:43:a3:9b:62:11:8c:b4:62:94:ee: 46:a4:7c:3a:d1:80:7a:c0:14:03:8c:60:ef:a3:15:3a:8e:f6: 60:44:aa:2e:da:4c:b7:3b:ff:ca:6f:57:61:a3:d2:85:ae:b5: e7:53:cf:d3:c8:82:f8:65:42:c0:ef:4a:89:85:47:78:ca:a4: ae:96:7f:ce:28:44:3f:0e:92:14:45:ed:06:80:81:d4:ee:80: 25:35:81:5b:f1:8b:22:5c:a8:20:b7:7b:14:7c:5d:87:7a:f2: 7c:fc:fe:75:9a:4b:46:7f:a2:be:5d:67:3d:66:a9:e7:2d:f5: 67:26:d8:6d:d7:1e:c1:e4:2c:00:22:ae:35:66:56:d2:da:f7: e2:76:18:0d:be:47:8a:a0:56:7e:38:22:01:21:4b:e1:d6:b4: b0:51:d3:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjYHvMQmn+Oe+nZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MDcwMjIwMDAwOFoXDTI1MDcwNDIwMDAwMFowLzEtMCsGA1UEAxMk N2MyYzc3OWYtNmE0ZC00YWQzLTg4MDktYzY0NmQyZjEzZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhvsmK0ss+YSgpb+rN98oamkmQUuL/qITpC9 jNfKtNwY6X64YaH4cvic/5/TH0fBIJnhYHfOcYc4ubJBB05J7Evour3ZCnxvESI1 t5h8qqfcb3F/Zh0NxbDv9zchJ9zbc7klNJEkeUSlTMONRy4MNU6gGA91w8zaF7eH +WPctCBe8frD9nouRjqMjnrcg7W73sppf9B5MtwASm2JFqDrChWCVv/KIrL3V51+ sYE8UvOwd1rI93Chhfwu7Ji1w/ABV2NhrDM+0UnF17Hjp5XS7h9fFkttO4SjEskO 7qif0uov2WYECItxrJ87cbGPSsm+bVASI3KkPUxJ7aVZmVxdiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDjA2J9r7Ir+BlldYKjeQW4wDUhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvNDBhNDg1YTQtZTkzNi00 MTc0LTg5OTktNTcxZTAzMjAzODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBaUkvWxLFkNx7eXWyVRRDO WHoGL3qQQweJQeIHc09m1KjHNIZKkAk5WftA7pnNORLJ/vWGfMW6sKzIo0qN6026 oj4I1d7hx9FWYe4ztiyMKNCrt/ofoha+YCahu/xXNkR+U0Ojm2IRjLRilO5GpHw6 0YB6wBQDjGDvoxU6jvZgRKou2ky3O//Kb1dho9KFrrXnU8/TyIL4ZULA70qJhUd4 yqSuln/OKEQ/DpIURe0GgIHU7oAlNYFb8YsiXKggt3sUfF2HevJ8/P51mktGf6K+ XWc9ZqnnLfVnJtht1x7B5CwAIq41ZlbS2vfidhgNvkeKoFZ+OCIBIUvh1rSwUdO6 -----END CERTIFICATE-----Generated at Thu Jul 3 10:40:40 2025 by rpki-client