$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft File: 040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft (raw, json) Hash identifier: ydri8ql2seRWiMBsbO4gEzrdCtYjG1/Q4qKjf7wOtNI= Subject key identifier: 70:A0:BF:5A:BE:D3:1B:86:4D:83:8D:75:FE:C3:41:34:80:CF:CD:58 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584B93717D491487BF347AFB3700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft Manifest number: 010D0C9F43285843BEC4AE1BB07D5E68AC3146F2 Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Wed 22 Oct 2025 18:00:00 +0000 Files and hashes: 1: 040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl (hash: R6SG9i6AGTfufyAxNBp3wf5gSo6kn8mq6AuWb/fEmLs=) 2: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (hash: 18VS4VzFmaEL8Uc47L/SQeCDXOU3mWIh3eivWgE8sTY=) 3: 4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (hash: 2hzBS30vcdg47cJxj8p7DTfhK7/uZE0Th00GU1i+ef8=) 4: a00e1f15-edb2-3c13-b022-338fbe6d0327.roa (hash: N688XZruIWfWYL8BRSQTIhxEXpjo0TPWARHZpodFilE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:7d:49:14:87:bf:34:7a:fb:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 22 18:00:00 2025 GMT Subject: CN=2af1d0df-404e-497b-bbd6-3afa8b243139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:e9:8a:d7:37:f6:8b:ec:be:e8:e3:74:c0: 91:a2:3b:64:1e:82:f6:11:fb:7a:99:fc:d4:d1:fa: 27:72:7a:da:96:c8:39:25:0c:9c:aa:d1:e7:b1:c9: f7:c5:79:d0:3d:15:fd:88:33:a7:9f:42:bc:cc:7b: 8d:11:9d:21:5e:46:fa:2f:4e:8a:9e:41:51:9a:b7: dc:64:f3:29:d4:0f:19:6a:5e:55:8d:3f:37:a2:ce: 03:0a:f4:17:1d:9c:a9:82:27:32:eb:ee:1e:73:da: 66:a6:bd:be:32:96:9c:af:a8:63:5e:4f:8e:b1:78: d1:9d:1c:5d:e5:4f:a9:1a:3a:30:f9:7d:15:2d:03: 4f:36:01:c7:82:9d:2d:ee:70:62:30:8b:69:d9:79: 73:4e:e0:cc:a3:8b:c9:f6:b5:d6:01:26:d8:97:e3: 6f:73:b7:d2:56:92:6e:94:be:b2:bd:78:db:2a:b5: e7:42:5b:57:f4:18:68:94:90:05:ac:79:fd:d7:19: 93:12:fb:23:7f:7f:21:5f:be:eb:8a:52:74:5a:c2: 68:25:42:43:57:c7:c8:f5:fa:59:6e:da:af:a9:8d: b8:8c:7d:6f:0e:e4:c9:7d:7f:6b:ab:a1:2a:be:00: 95:99:cd:e0:07:07:a0:68:1d:0e:52:cb:64:3b:22: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A0:BF:5A:BE:D3:1B:86:4D:83:8D:75:FE:C3:41:34:80:CF:CD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:fa:e8:8f:e7:50:f3:1f:c2:4c:c8:bb:0b:40:82:06:7c:4b: 50:21:d8:80:30:da:f3:47:84:c5:44:0b:00:48:5c:be:7a:b7: 48:fc:ce:80:81:41:5c:47:34:86:fa:ea:11:f1:2f:40:49:fd: 6f:3d:67:48:8e:c1:e7:b2:6f:41:27:62:14:e8:e4:a9:7f:e0: 82:f5:fd:28:e3:a2:5b:1b:33:ed:5e:d2:d0:d1:d0:bc:ac:7b: 09:82:a9:90:11:a6:0e:81:e9:6a:93:c5:17:0b:d5:84:a2:e4: 34:ce:8d:db:af:70:33:0e:ac:95:1a:da:7f:15:3e:52:64:35: 7d:30:94:23:7d:27:3d:12:0c:b9:9f:a6:49:da:8e:50:ac:a7: a7:0a:35:df:e3:fb:6e:16:c0:0e:8a:92:8a:2e:bb:77:d3:b3: 9c:5a:b5:78:29:c8:ff:9d:6a:97:91:7d:38:b3:f2:0f:1f:ff: e6:d0:a7:fa:58:57:f8:db:22:06:04:9c:86:be:b7:ef:61:8d: 91:cc:2b:59:47:81:fd:63:6d:4d:d6:f7:26:e1:44:e6:18:0f: 6b:70:21:4c:3b:eb:55:b9:33:56:26:e5:eb:e0:1e:66:88:cf: 7b:19:14:ee:6d:59:2c:06:99:d5:f8:9f:ca:4a:79:17:8a:75: 89:94:58:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcX1JFIe/NHr7NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMjE4MDAwMFowLzEtMCsGA1UEAxMk MmFmMWQwZGYtNDA0ZS00OTdiLWJiZDYtM2FmYThiMjQzMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy/pitc39ovsvujjdMCRojtkHoL2Eft6mfzU 0foncnralsg5JQycqtHnscn3xXnQPRX9iDOnn0K8zHuNEZ0hXkb6L06KnkFRmrfc ZPMp1A8Zal5VjT83os4DCvQXHZypgicy6+4ec9pmpr2+Mpacr6hjXk+OsXjRnRxd 5U+pGjow+X0VLQNPNgHHgp0t7nBiMItp2XlzTuDMo4vJ9rXWASbYl+Nvc7fSVpJu lL6yvXjbKrXnQltX9BholJAFrHn91xmTEvsjf38hX77rilJ0WsJoJUJDV8fI9fpZ btqvqY24jH1vDuTJfX9rq6EqvgCVmc3gBwegaB0OUstkOyJMvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHCgv1q+0xuGTYONdf7DQTSAz81YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvMDQwZjRhNGEtOGYzMS00 N2Y4LTg1MjktMWVjYjExYTRlNjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCG+uiP51DzH8JMyLsLQIIG fEtQIdiAMNrzR4TFRAsASFy+erdI/M6AgUFcRzSG+uoR8S9ASf1vPWdIjsHnsm9B J2IU6OSpf+CC9f0o46JbGzPtXtLQ0dC8rHsJgqmQEaYOgelqk8UXC9WEouQ0zo3b r3AzDqyVGtp/FT5SZDV9MJQjfSc9Egy5n6ZJ2o5QrKenCjXf4/tuFsAOipKKLrt3 07OcWrV4Kcj/nWqXkX04s/IPH//m0Kf6WFf42yIGBJyGvrfvYY2RzCtZR4H9Y21N 1vcm4UTmGA9rcCFMO+tVuTNWJuXr4B5miM97GRTubVksBpnV+J/KSnkXinWJlFhW -----END CERTIFICATE-----Generated at Mon Oct 20 05:20:49 2025 by rpki-client