$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft File: 40e46360-7ddb-4bec-b73a-9620baea4da1.mft (raw, json) Hash identifier: wl0XZQRG6ie/wjmpQL274aaphMOAHhzyx4vc6IVaKz0= Subject key identifier: CE:F5:2E:CF:B1:E9:80:E1:A6:B2:C1:45:C9:35:C7:72:73:FE:88:3F Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F4328584AF21AB630CDCF3A52DFCA6F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft Manifest number: 010D0C9F4328584073A82E66D03332414A6484D8 Signing time: Fri 22 Aug 2025 23:00:08 +0000 Manifest this update: Fri 22 Aug 2025 23:00:08 +0000 Manifest next update: Mon 25 Aug 2025 23:00:00 +0000 Files and hashes: 1: 40e46360-7ddb-4bec-b73a-9620baea4da1.crl (hash: gWeuPqYlhl6z0bl9RstNcxjGWdulwyH1B8P3qN6FrjE=) 2: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (hash: x7msGCOqkyxVCODN5fFOpR8SMBCwfql7NTnstzW7chk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:1a:b6:30:cd:cf:3a:52:df:ca:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: Aug 22 23:00:08 2025 GMT Not After : Aug 25 23:00:00 2025 GMT Subject: CN=145ba535-4682-4f40-9d6c-5e7d389e82a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:85:46:01:7e:1a:b2:bc:01:a4:ab:60:5b:34: 68:88:0f:1b:cd:09:e6:28:36:00:f1:99:a0:84:77: 49:cd:87:f8:31:c7:be:d5:f6:b7:5a:c1:96:c5:76: 3b:8b:ba:38:44:d6:9d:27:29:23:d9:f3:e3:5d:b9: a0:b7:77:b4:c1:78:16:95:37:c0:38:a5:0d:79:2d: 92:9b:9f:d5:fa:e6:25:d9:49:fd:19:90:94:cd:f2: 7b:da:4f:8c:c7:09:e8:15:d4:b4:fa:c6:b0:cc:ea: 99:d4:34:b1:6a:96:bc:55:f6:39:23:00:1d:d6:49: af:b7:10:ea:70:a0:ae:ba:eb:74:4c:f6:02:db:da: 6c:83:b1:2d:f2:f7:37:e7:31:fd:59:c2:0b:24:2f: c6:33:39:c1:35:f9:b7:e1:99:17:42:40:c3:a6:95: 51:dc:1e:fe:f9:01:f0:bd:ca:ac:72:ed:10:b7:5d: 1f:e2:32:4a:0c:3e:5b:2e:bf:f8:62:6a:b3:01:8c: 30:23:a3:a9:c0:fc:dc:ab:a1:3b:5d:9f:69:8b:b0: 83:d2:6f:79:a3:b1:83:37:75:db:12:9d:7e:5a:56: 4d:a7:81:27:d3:34:bd:c2:ff:df:51:27:77:02:ca: c4:d4:f9:9f:63:e4:55:0b:9d:7e:84:81:1b:b7:8a: c7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:2E:CF:B1:E9:80:E1:A6:B2:C1:45:C9:35:C7:72:73:FE:88:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:09:a6:49:db:56:44:5c:6e:8d:c6:cd:78:88:f2:a8:99:17: c5:b9:a8:c5:1e:02:fc:c0:0f:fe:6b:45:ff:f6:52:b4:be:c9: 57:11:17:fe:7a:12:6b:b8:74:6c:09:54:8f:c0:c9:bb:e2:86: 38:25:be:1b:5f:40:94:ae:a6:8c:aa:b4:5a:3f:4a:00:14:2e: 4f:16:e5:58:0f:ed:8c:72:1c:76:06:a1:85:b5:e4:f7:5b:88: 62:cc:23:f4:54:9a:b9:dd:c6:75:94:2e:05:73:44:14:3c:e6: 90:61:c2:8c:f8:1a:73:39:d5:e5:32:70:9c:33:bc:f8:37:82: ea:d2:ce:ea:a9:bd:9d:8d:9f:2e:f7:da:fb:ef:52:41:02:d4: 2d:22:81:bc:b6:17:f1:f7:0f:f0:6f:5c:25:fd:c2:ea:7b:92: 99:82:c8:35:9d:6a:61:18:18:a9:2d:78:e4:5a:0d:17:53:e7: fe:dd:af:16:b4:60:0a:70:67:9d:a0:8a:2c:a6:e1:a2:0f:d7: 20:a8:ba:0b:4b:e3:82:1f:94:ef:f7:96:ba:87:fd:1d:c6:87: 18:a5:e2:67:24:47:ff:47:d5:3e:5c:9a:6c:a3:6d:b3:e9:7c: 9c:d0:1d:e2:5a:11:b4:c5:b2:57:de:fe:21:71:e4:5e:fd:50: d8:a9:a8:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryGrYwzc86Ut/Kb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI1MDgyMjIzMDAwOFoXDTI1MDgyNTIzMDAwMFowLzEtMCsGA1UEAxMk MTQ1YmE1MzUtNDY4Mi00ZjQwLTlkNmMtNWU3ZDM4OWU4MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoVGAX4asrwBpKtgWzRoiA8bzQnmKDYA8Zmg hHdJzYf4Mce+1fa3WsGWxXY7i7o4RNadJykj2fPjXbmgt3e0wXgWlTfAOKUNeS2S m5/V+uYl2Un9GZCUzfJ72k+MxwnoFdS0+sawzOqZ1DSxapa8VfY5IwAd1kmvtxDq cKCuuut0TPYC29psg7Et8vc35zH9WcILJC/GMznBNfm34ZkXQkDDppVR3B7++QHw vcqscu0Qt10f4jJKDD5bLr/4YmqzAYwwI6OpwPzcq6E7XZ9pi7CD0m95o7GDN3Xb Ep1+WlZNp4En0zS9wv/fUSd3AsrE1PmfY+RVC51+hIEbt4rHWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM71Ls+x6YDhprLBRck1x3Jz/og/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvNDBlNDYzNjAtN2RkYi00 YmVjLWI3M2EtOTYyMGJhZWE0ZGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfCaZJ21ZEXG6Nxs14iPKo mRfFuajFHgL8wA/+a0X/9lK0vslXERf+ehJruHRsCVSPwMm74oY4Jb4bX0CUrqaM qrRaP0oAFC5PFuVYD+2Mchx2BqGFteT3W4hizCP0VJq53cZ1lC4Fc0QUPOaQYcKM +BpzOdXlMnCcM7z4N4Lq0s7qqb2djZ8u99r771JBAtQtIoG8thfx9w/wb1wl/cLq e5KZgsg1nWphGBipLXjkWg0XU+f+3a8WtGAKcGedoIospuGiD9cgqLoLS+OCH5Tv 95a6h/0dxocYpeJnJEf/R9U+XJpso22z6Xyc0B3iWhG0xbJX3v4hceRe/VDYqaiw -----END CERTIFICATE-----Generated at Sat Aug 23 18:42:11 2025 by rpki-client