$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft File: 40e46360-7ddb-4bec-b73a-9620baea4da1.mft (raw, json) Hash identifier: 7uQCFDoSFSrlwTD+BT8AcqHzm/6vVERxTQ1QDbh4g88= Subject key identifier: 6A:18:39:EB:8B:62:10:EF:B9:32:69:16:B0:7F:D7:A4:02:E6:9A:61 Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F4328584A60EF16C022474347585E3B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft Manifest number: 010D0C9F4328584073A82E66D03332414A6484A3 Signing time: Tue 01 Jul 2025 23:00:03 +0000 Manifest this update: Tue 01 Jul 2025 23:00:03 +0000 Manifest next update: Fri 04 Jul 2025 23:00:00 +0000 Files and hashes: 1: 40e46360-7ddb-4bec-b73a-9620baea4da1.crl (hash: uxInFT2QZvJVWaJTE68riwA15SFQ91h5vXc6uJaogrs=) 2: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (hash: um646Z9K9ZfgPv+PUKzFV43yynrQtmneJdNqm02x4U0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:ef:16:c0:22:47:43:47:58:5e:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: Jul 1 23:00:03 2025 GMT Not After : Jul 4 23:00:00 2025 GMT Subject: CN=8854547c-6e64-4655-81fa-551be2a5a890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:b3:a8:d4:fb:86:d6:6b:b3:6e:21:7c:f2: 20:7f:1d:84:4c:b4:ef:9d:0e:2a:3a:40:11:83:67: 59:dd:e7:60:21:5c:a9:f9:8a:63:53:c4:29:ec:c1: 1c:61:c3:d1:94:d2:f0:07:55:47:e9:b4:83:29:77: c4:a3:22:82:85:e6:41:c2:8e:b6:ba:e5:02:bb:9d: 32:d2:24:3b:ff:da:00:56:66:33:9a:3c:19:ad:d5: ef:ce:23:ae:d0:b1:09:8a:34:a7:48:6e:55:c7:fc: 8c:9a:a3:c9:00:24:6c:9b:e5:83:3b:45:e8:1f:fa: 34:dd:39:3b:61:09:6c:74:a8:9e:c7:77:8e:54:43: a1:e3:70:5a:d8:c6:e4:f4:3e:5f:fb:e8:5c:93:56: c0:62:04:2a:d0:7c:f0:71:ca:b7:ad:d5:a5:97:3d: 3d:f4:1a:96:a9:b5:6d:80:70:40:3b:d8:45:2e:6e: d2:b1:dc:9c:8a:07:62:0e:d4:bf:1a:85:fa:60:5c: de:d8:fb:92:21:15:e5:31:40:95:f0:74:42:58:48: 1a:45:e9:a2:69:ed:5c:d8:16:07:9e:44:22:14:d4: 41:09:a1:27:af:94:e0:9d:7c:07:ee:51:e1:e9:1a: c8:0e:fb:ca:47:70:b0:67:b3:10:2b:76:b9:c1:ae: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:18:39:EB:8B:62:10:EF:B9:32:69:16:B0:7F:D7:A4:02:E6:9A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:df:51:ff:b5:40:20:0f:fd:69:36:2c:8e:65:54:47:ae:58: 90:d6:2b:4d:a6:ac:e0:13:54:d8:33:10:7c:fb:1e:ca:8a:9e: 8f:af:7a:6d:40:ca:57:6a:0c:28:d3:b5:82:e4:09:4f:9e:d5: 98:9b:96:d0:ef:99:6e:ba:0e:eb:b4:c0:f7:ab:0e:f1:71:a3: 3d:74:83:12:71:4d:ab:90:da:5d:86:2e:ad:c9:ac:85:93:c2: d2:04:f0:5c:b9:36:93:92:c7:19:9c:bd:17:61:29:7b:0c:dd: 1a:76:03:ac:a9:c5:ce:c1:59:42:43:cc:0b:92:14:f6:46:7f: ae:55:38:0f:be:b2:9e:ba:6b:6b:aa:81:0e:b2:f3:23:7e:90: 47:0f:aa:f2:1b:92:04:a4:c8:fc:a6:9c:77:e5:e6:f5:3f:cc: 74:fd:14:9a:b0:6a:31:80:bb:c6:c4:09:db:9a:a8:61:4e:dc: 91:b7:b2:12:37:a8:07:9f:ae:2c:16:f7:f0:94:dc:40:ab:54: 92:17:a5:32:62:12:46:8a:72:84:dc:ca:ce:b2:68:2d:54:7d: 91:70:df:db:9c:43:7d:21:4b:8c:46:2c:14:e4:61:25:d5:76: 89:82:60:5d:fc:0a:d2:1e:aa:b1:e3:5c:2d:5f:e3:9a:60:12: 45:cd:8a:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpg7xbAIkdDR1heOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI1MDcwMTIzMDAwM1oXDTI1MDcwNDIzMDAwMFowLzEtMCsGA1UEAxMk ODg1NDU0N2MtNmU2NC00NjU1LTgxZmEtNTUxYmUyYTVhODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8CzqNT7htZrs24hfPIgfx2ETLTvnQ4qOkAR g2dZ3edgIVyp+YpjU8Qp7MEcYcPRlNLwB1VH6bSDKXfEoyKCheZBwo62uuUCu50y 0iQ7/9oAVmYzmjwZrdXvziOu0LEJijSnSG5Vx/yMmqPJACRsm+WDO0XoH/o03Tk7 YQlsdKiex3eOVEOh43Ba2Mbk9D5f++hck1bAYgQq0Hzwccq3rdWllz099BqWqbVt gHBAO9hFLm7SsdycigdiDtS/GoX6YFze2PuSIRXlMUCV8HRCWEgaRemiae1c2BYH nkQiFNRBCaEnr5TgnXwH7lHh6RrIDvvKR3CwZ7MQK3a5wa6exwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGoYOeuLYhDvuTJpFrB/16QC5pphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvNDBlNDYzNjAtN2RkYi00 YmVjLWI3M2EtOTYyMGJhZWE0ZGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/31H/tUAgD/1pNiyOZVRH rliQ1itNpqzgE1TYMxB8+x7Kip6Pr3ptQMpXagwo07WC5AlPntWYm5bQ75luug7r tMD3qw7xcaM9dIMScU2rkNpdhi6tyayFk8LSBPBcuTaTkscZnL0XYSl7DN0adgOs qcXOwVlCQ8wLkhT2Rn+uVTgPvrKeumtrqoEOsvMjfpBHD6ryG5IEpMj8ppx35eb1 P8x0/RSasGoxgLvGxAnbmqhhTtyRt7ISN6gHn64sFvfwlNxAq1SSF6UyYhJGinKE 3MrOsmgtVH2RcN/bnEN9IUuMRiwU5GEl1XaJgmBd/ArSHqqx41wtX+OaYBJFzYpF -----END CERTIFICATE-----Generated at Wed Jul 2 04:34:19 2025 by rpki-client