$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft File: 40a485a4-e936-4174-8999-571e03203823.mft (raw, json) Hash identifier: qXpxwwu7yugNUEBN4YcuVCKfor88bplLl3tAW8jHs08= Subject key identifier: B8:D7:DA:34:F9:18:D8:79:0C:48:B2:B2:AF:33:51:E6:A2:E6:BA:07 Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F4328584B93AD048CAA9C82B2EFC5D968 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft Manifest number: 010D0C9F4328584073A825D34C38BD0BF0568A94 Signing time: Sun 19 Oct 2025 20:00:03 +0000 Manifest this update: Sun 19 Oct 2025 20:00:03 +0000 Manifest next update: Wed 22 Oct 2025 20:00:00 +0000 Files and hashes: 1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: 52FRMKzBWUFzhMjtE1+5Jph0naVnNTbMec73zOufACs=) 2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: koAYPZ2UHfd9m7d+QU8alE5JexmLsM8xO/ELFeQm50Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:ad:04:8c:aa:9c:82:b2:ef:c5:d9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: Oct 19 20:00:03 2025 GMT Not After : Oct 22 20:00:00 2025 GMT Subject: CN=c8b1d3d0-52cf-48cb-8524-82cdf745a98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:12:c6:f6:d0:a8:ba:b9:dc:d4:d9:ee:86: 25:c0:8e:ec:6f:cb:b0:c2:5a:d3:a2:22:e1:e7:71: 71:e8:fb:82:f3:1f:0d:40:b8:48:a9:61:0f:d7:b8: 1e:e7:fb:04:9a:ce:2f:c2:b5:83:8c:25:d1:b0:21: fb:ba:3d:d0:83:a8:83:37:6e:2a:ea:2d:6c:83:ac: 7c:d1:cf:75:bd:60:28:9a:09:05:d0:82:3e:32:90: c3:b1:81:60:08:51:5c:d1:5b:82:91:be:79:e4:c7: c3:81:12:3d:9b:46:4b:84:73:71:51:da:4f:a6:39: 71:16:ed:bd:92:ca:54:27:0a:3f:15:72:7c:44:f1: b9:c3:e7:48:01:6a:6b:bc:65:78:28:eb:f1:2c:04: a5:ae:0b:be:73:84:74:04:02:2e:8c:4a:ac:8c:c5: 1e:db:fc:88:56:d5:22:ca:52:24:5e:e9:d7:b7:33: 3c:85:1a:2a:c8:79:bb:0d:60:0e:d9:ea:8d:71:46: 9d:24:cd:51:96:46:8b:6e:f2:47:26:9a:46:37:fa: b3:e4:8e:5f:bc:68:fb:b3:20:b8:e9:a4:59:7a:af: 37:58:39:29:e7:74:d5:42:bf:ec:f1:ce:7f:7e:97: 4b:c3:78:10:bc:74:d0:18:26:c1:df:ea:d0:12:7e: 43:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D7:DA:34:F9:18:D8:79:0C:48:B2:B2:AF:33:51:E6:A2:E6:BA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:53:80:7f:17:cf:db:ca:60:39:c3:24:78:3d:1b:e5:30:58: c9:62:dc:0e:7d:ef:18:7a:5a:d4:1a:5a:89:52:92:bc:d6:84: da:a9:e7:24:0d:ca:22:da:6c:71:22:01:e9:8f:7d:ad:db:23: 74:f3:7a:66:02:84:03:39:be:b0:4b:44:10:f0:c6:9e:71:cf: 03:31:cd:ce:eb:8e:57:f0:76:4e:c4:3a:11:9b:bf:6e:02:55: a8:08:1f:1f:84:0d:b5:e6:64:35:b3:6a:e7:35:ce:47:8d:78: cb:5c:11:0d:c6:a7:a6:16:56:cd:d4:a8:3d:a6:5d:0b:95:b7: 3a:3b:b0:be:43:6c:3b:9f:93:50:c1:0e:f1:d4:99:94:b4:a4: ad:02:ef:da:0f:8e:4c:17:a9:37:05:2a:fa:bf:8e:88:ff:37: 2a:d5:22:9a:05:24:8d:81:b3:10:9a:12:85:8c:46:e5:5f:9f: a8:c2:cb:a8:08:07:c2:95:6f:f3:c6:77:5d:9d:6a:12:41:6c: 07:07:28:42:cc:53:f8:53:9b:cb:36:ba:da:ca:a2:76:3c:a6: 61:e8:f7:9d:ac:fb:cf:12:08:fd:93:bd:37:5a:58:5d:6a:bd: 2f:32:df:2b:60:70:f7:dc:94:db:92:b2:59:18:1d:71:ba:d0: 7b:3a:a4:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTrQSMqpyCsu/F2WgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MTAxOTIwMDAwM1oXDTI1MTAyMjIwMDAwMFowLzEtMCsGA1UEAxMk YzhiMWQzZDAtNTJjZi00OGNiLTg1MjQtODJjZGY3NDVhOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBQSxvbQqLq53NTZ7oYlwI7sb8uwwlrToiLh 53Fx6PuC8x8NQLhIqWEP17ge5/sEms4vwrWDjCXRsCH7uj3Qg6iDN24q6i1sg6x8 0c91vWAomgkF0II+MpDDsYFgCFFc0VuCkb555MfDgRI9m0ZLhHNxUdpPpjlxFu29 kspUJwo/FXJ8RPG5w+dIAWprvGV4KOvxLASlrgu+c4R0BAIujEqsjMUe2/yIVtUi ylIkXunXtzM8hRoqyHm7DWAO2eqNcUadJM1RlkaLbvJHJppGN/qz5I5fvGj7syC4 6aRZeq83WDkp53TVQr/s8c5/fpdLw3gQvHTQGCbB3+rQEn5D7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLjX2jT5GNh5DEiysq8zUeai5roHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvNDBhNDg1YTQtZTkzNi00 MTc0LTg5OTktNTcxZTAzMjAzODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAU4B/F8/bymA5wyR4PRvl MFjJYtwOfe8YelrUGlqJUpK81oTaqeckDcoi2mxxIgHpj32t2yN083pmAoQDOb6w S0QQ8Maecc8DMc3O645X8HZOxDoRm79uAlWoCB8fhA215mQ1s2rnNc5HjXjLXBEN xqemFlbN1Kg9pl0Llbc6O7C+Q2w7n5NQwQ7x1JmUtKStAu/aD45MF6k3BSr6v46I /zcq1SKaBSSNgbMQmhKFjEblX5+owsuoCAfClW/zxnddnWoSQWwHByhCzFP4U5vL NrrayqJ2PKZh6PedrPvPEgj9k703Wlhdar0vMt8rYHD33JTbkrJZGB1xutB7OqRB -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:17 2025 by rpki-client