$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft File: 40e46360-7ddb-4bec-b73a-9620baea4da1.mft (raw, json) Hash identifier: k+oBf1bTtgTxcg1iCcldfvuZJ8lvLKlvvjmDp72vktg= Subject key identifier: 7D:59:9A:33:02:F6:78:58:CD:A5:DC:BB:B9:22:05:99:06:94:20:61 Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F43285849D28E3C6E3065C2B7D713DCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft Manifest number: 010D0C9F4328584073A82E66D03332414A64846E Signing time: Sun 11 May 2025 23:00:07 +0000 Manifest this update: Sun 11 May 2025 23:00:07 +0000 Manifest next update: Tue 13 May 2025 23:00:00 +0000 Files and hashes: 1: 40e46360-7ddb-4bec-b73a-9620baea4da1.crl (hash: fOiB+yBcMUIVplZ+c6tVAaBmW8dI6v+HQj6TY29n+hU=) 2: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (hash: cXJhsqEJdDIsdBf1QslyhsZVXQKdfanxnmRvB/76cUQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:8e:3c:6e:30:65:c2:b7:d7:13:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: May 11 23:00:07 2025 GMT Not After : May 13 23:00:00 2025 GMT Subject: CN=e66c122c-e843-4b40-a3a1-c5db18b27c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:9d:19:bb:86:2a:aa:d4:07:0b:6e:2d:27: b4:10:e3:85:17:2b:2e:17:29:21:4e:01:5b:12:43: 07:66:83:a7:75:f4:7b:ef:4f:d9:2a:2d:3d:2d:9c: 72:69:ad:5d:be:83:24:aa:36:17:20:4d:15:89:52: 6d:6c:bc:9d:5c:25:64:05:8c:5b:67:56:e7:9b:91: 35:90:8e:a2:45:98:3b:bb:24:48:36:cc:cf:96:11: 5d:c5:29:e4:4d:29:08:3e:37:17:51:00:1b:50:65: ec:61:0f:4a:8f:40:f9:44:16:ff:3d:8c:d7:5e:d0: 2b:b7:9c:fa:e1:49:ee:f2:0b:d6:ee:b7:47:34:6c: 63:17:45:81:1e:94:ac:c3:84:8f:55:27:30:49:12: 80:c4:9a:da:d1:49:23:a3:5d:03:91:a4:44:77:51: a4:90:86:4a:12:b7:65:b6:c6:86:1a:a3:da:66:ad: 3e:cc:67:68:4c:78:04:f6:7c:6d:4c:17:9d:f9:0f: 1a:f7:6c:4d:2a:7f:f8:d5:14:18:71:41:87:49:57: 6c:a9:3b:8a:bc:31:1f:f5:58:53:d8:41:a2:f7:6f: 20:d6:02:8d:ee:fb:0e:c7:86:8e:a2:da:f2:40:53: b1:6c:3f:f5:54:bf:05:6c:0e:54:f2:c2:c1:9f:1d: 49:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:59:9A:33:02:F6:78:58:CD:A5:DC:BB:B9:22:05:99:06:94:20:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2a:ea:8a:7c:b6:59:0b:b5:45:ec:10:49:07:cc:43:b6:fe: 7d:80:42:ad:fe:57:f8:1c:84:80:b5:9a:aa:f1:69:1d:0d:52: b9:52:9d:4e:e1:92:4d:01:6f:20:4c:cc:cb:6d:1e:bd:b9:a0: 9b:17:f1:f0:b8:2f:9d:12:1b:54:b6:b9:cd:d0:c2:09:9d:d0: e3:16:1f:44:66:52:c0:d0:35:ec:28:9d:44:97:c9:9e:f8:f0: e1:1f:d0:d6:48:08:01:4b:c7:c4:66:09:26:f8:b7:4e:c7:5c: c6:17:9a:55:99:24:9a:d7:16:ba:54:2b:ab:a4:46:d4:d6:02: f5:36:d7:7c:ef:22:3f:f3:98:f7:82:78:05:66:08:b8:4d:fe: d0:27:9a:56:85:ce:36:67:d8:79:1e:ab:66:b0:eb:32:f1:2e: 82:1e:6f:1a:2d:3c:32:cd:79:6e:35:3c:63:21:6c:eb:07:c0: 5a:2c:2e:f3:7b:0a:38:e2:96:3b:6a:71:a6:41:04:f3:8d:99: a2:f6:09:c8:64:48:1f:df:87:61:2b:56:63:f3:d7:6e:13:23: 91:51:25:d8:45:c9:98:00:0b:fc:52:3c:7b:c6:1e:ed:3d:9d: 40:a9:12:f7:bf:27:fa:c1:fd:ef:0d:37:1d:21:cb:84:45:38: 29:c9:ea:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnSjjxuMGXCt9cT3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI1MDUxMTIzMDAwN1oXDTI1MDUxMzIzMDAwMFowLzEtMCsGA1UEAxMk ZTY2YzEyMmMtZTg0My00YjQwLWEzYTEtYzVkYjE4YjI3Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5KdGbuGKqrUBwtuLSe0EOOFFysuFykhTgFb EkMHZoOndfR770/ZKi09LZxyaa1dvoMkqjYXIE0ViVJtbLydXCVkBYxbZ1bnm5E1 kI6iRZg7uyRINszPlhFdxSnkTSkIPjcXUQAbUGXsYQ9Kj0D5RBb/PYzXXtArt5z6 4Unu8gvW7rdHNGxjF0WBHpSsw4SPVScwSRKAxJra0Ukjo10DkaREd1GkkIZKErdl tsaGGqPaZq0+zGdoTHgE9nxtTBed+Q8a92xNKn/41RQYcUGHSVdsqTuKvDEf9VhT 2EGi928g1gKN7vsOx4aOotryQFOxbD/1VL8FbA5U8sLBnx1J2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH1ZmjMC9nhYzaXcu7kiBZkGlCBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvNDBlNDYzNjAtN2RkYi00 YmVjLWI3M2EtOTYyMGJhZWE0ZGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/KuqKfLZZC7VF7BBJB8xD tv59gEKt/lf4HISAtZqq8WkdDVK5Up1O4ZJNAW8gTMzLbR69uaCbF/HwuC+dEhtU trnN0MIJndDjFh9EZlLA0DXsKJ1El8me+PDhH9DWSAgBS8fEZgkm+LdOx1zGF5pV mSSa1xa6VCurpEbU1gL1Ntd87yI/85j3gngFZgi4Tf7QJ5pWhc42Z9h5HqtmsOsy 8S6CHm8aLTwyzXluNTxjIWzrB8BaLC7zewo44pY7anGmQQTzjZmi9gnIZEgf34dh K1Zj89duEyORUSXYRcmYAAv8Ujx7xh7tPZ1AqRL3vyf6wf3vDTcdIcuERTgpyeoS -----END CERTIFICATE-----Generated at Mon May 12 05:32:29 2025 by rpki-client