$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.mft File: 40b08720-f667-4e69-b15d-2bd25101fae8.mft (raw, json) Hash identifier: TLX37tjgxKKI//4GLRU6XYsSfhy6163V+4Cz87C6XkM= Subject key identifier: 2A:36:BB:45:6B:47:28:20:2E:AC:B8:01:00:5C:BE:74:B1:38:44:F5 Authority key identifier: A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95 Certificate issuer: /CN=40b08720-f667-4e69-b15d-2bd25101fae8 Certificate serial: 010D0C9F4328584D4C3031992AD5FC0D3D7FD380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.mft Manifest number: 010D0C9F432858435FCA8952BCE608A6093B1C6F Signing time: Thu 26 Mar 2026 15:00:03 +0000 Manifest this update: Thu 26 Mar 2026 15:00:03 +0000 Manifest next update: Sun 29 Mar 2026 15:00:00 +0000 Files and hashes: 1: 40b08720-f667-4e69-b15d-2bd25101fae8.crl (hash: xr8JdZaRJvmBnmkrarQugJjMFJkbFHyQYKUVbn4hBW0=) 2: ecafe846-9a3a-3535-a745-bbdbf853479f.roa (hash: RRz7iYBmR7UBpEok0Nx5NSZRbZKT64+i6lyMt3pqTik=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:30:31:99:2a:d5:fc:0d:3d:7f:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b08720-f667-4e69-b15d-2bd25101fae8 Validity Not Before: Mar 26 15:00:03 2026 GMT Not After : Mar 29 15:00:00 2026 GMT Subject: CN=da158b6b-8e72-425d-88a5-220a176ebf45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f4:63:4a:c6:be:fa:d6:8d:54:50:12:84:b9: 88:ef:ea:33:a2:1f:0b:27:3d:c5:ca:47:cc:f5:95: 55:80:8f:4b:4e:4f:62:fd:32:cd:55:75:43:a2:e3: 96:32:85:5e:04:1f:ae:f7:3d:9f:2b:e8:8a:17:d0: 55:36:87:2c:d0:3b:05:bd:ff:7e:74:a4:1e:1f:af: 67:a0:23:35:62:f4:e5:d7:63:4b:a0:30:c4:9d:7d: 30:02:bc:2b:43:94:4e:85:89:28:71:bd:11:6e:23: a0:fb:56:cb:c4:b2:66:48:89:c9:ab:a3:8f:a1:0f: 06:72:92:4d:37:4a:6d:64:ce:a6:cd:eb:9e:cc:57: 7a:eb:68:01:e8:46:5d:fe:f0:fc:36:d5:90:43:f9: e0:25:ca:99:a8:53:bb:08:b9:24:0b:ee:a4:bb:fc: fd:f2:90:73:71:77:d2:a1:a1:01:eb:7c:47:12:9e: d5:b0:bc:bd:4d:7b:a8:ef:99:c4:73:03:d3:5d:1a: fe:6a:02:5f:ce:ae:d4:bd:7d:a0:4f:4b:c4:99:ef: 8f:af:70:c4:48:55:66:f6:2d:9b:51:40:fc:7d:7e: f5:17:7c:73:ac:60:22:5e:20:45:23:d6:66:c5:17: 0f:cd:70:64:a3:06:80:d9:64:9d:46:22:30:8a:4b: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:36:BB:45:6B:47:28:20:2E:AC:B8:01:00:5C:BE:74:B1:38:44:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl X509v3 Authority Key Identifier: keyid:A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a0:b6:cb:86:20:5a:f5:a3:76:e9:7c:67:fc:b4:1a:b2:18: 85:ab:23:fa:80:1c:19:ee:90:33:b8:ee:bd:e2:90:43:1f:c5: 22:8d:9f:13:3b:37:68:14:4e:45:e0:3c:e3:0c:d7:88:7b:68: 76:bf:b2:e0:85:a2:04:d4:3f:dc:41:73:f0:1d:60:7b:f9:ee: bf:76:ce:c9:05:5e:4e:d2:37:25:64:1e:d5:20:38:16:2d:b2: 8a:36:13:7f:1b:c1:89:61:f8:ec:2a:89:18:69:57:e0:dc:25: 25:a2:c7:4c:eb:e4:69:0d:f9:2d:a8:4a:04:66:aa:b9:ce:19: 4d:19:c6:04:f0:b6:b8:c5:bd:22:47:ac:23:11:40:51:8c:3c: 1a:9c:54:97:f2:e8:c3:78:49:41:25:96:29:63:7d:a7:26:0c: 7a:5b:0e:a0:eb:ca:f9:c3:d1:6e:8f:56:79:e0:7b:b8:8e:52: 23:bc:fb:4f:dd:a5:d4:9f:22:c3:40:1e:1a:03:da:73:fe:9a: f3:ab:60:17:e8:bc:7a:d1:6d:5e:74:1f:74:c4:b7:c8:9d:48: d6:f9:a7:f4:85:1d:d1:5a:13:bc:af:3b:58:4d:e8:b2:59:3d: e4:a5:8f:0e:56:3a:fc:75:a0:c9:17:fc:86:55:60:0d:6e:59: c5:d9:1d:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1MMDGZKtX8DT1/04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMDg3MjAtZjY2Ny00ZTY5LWIxNWQtMmJkMjUxMDFm YWU4MB4XDTI2MDMyNjE1MDAwM1oXDTI2MDMyOTE1MDAwMFowLzEtMCsGA1UEAxMk ZGExNThiNmItOGU3Mi00MjVkLTg4YTUtMjIwYTE3NmViZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vRjSsa++taNVFAShLmI7+ozoh8LJz3FykfM 9ZVVgI9LTk9i/TLNVXVDouOWMoVeBB+u9z2fK+iKF9BVNocs0DsFvf9+dKQeH69n oCM1YvTl12NLoDDEnX0wArwrQ5ROhYkocb0RbiOg+1bLxLJmSInJq6OPoQ8GcpJN N0ptZM6mzeuezFd662gB6EZd/vD8NtWQQ/ngJcqZqFO7CLkkC+6ku/z98pBzcXfS oaEB63xHEp7VsLy9TXuo75nEcwPTXRr+agJfzq7UvX2gT0vEme+Pr3DESFVm9i2b UUD8fX71F3xzrGAiXiBFI9ZmxRcPzXBkowaA2WSdRiIwikuoqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCo2u0VrRyggLqy4AQBcvnSxOET1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MGIw ODcyMC1mNjY3LTRlNjktYjE1ZC0yYmQyNTEwMWZhZTgvNDBiMDg3MjAtZjY2Ny00 ZTY5LWIxNWQtMmJkMjUxMDFmYWU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDBiMDg3MjAtZjY2Ny00ZTY5LWIx NWQtMmJkMjUxMDFmYWU4LzQwYjA4NzIwLWY2NjctNGU2OS1iMTVkLTJiZDI1MTAx ZmFlOC5jcmwwHwYDVR0jBBgwFoAUqFBis0iqQG5Vdyh/7pzpuIb+uZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MGIwODcyMC1mNjY3LTRlNjktYjE1ZC0yYmQy NTEwMWZhZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnoLbLhiBa9aN26Xxn/LQa shiFqyP6gBwZ7pAzuO694pBDH8UijZ8TOzdoFE5F4DzjDNeIe2h2v7LghaIE1D/c QXPwHWB7+e6/ds7JBV5O0jclZB7VIDgWLbKKNhN/G8GJYfjsKokYaVfg3CUlosdM 6+RpDfktqEoEZqq5zhlNGcYE8La4xb0iR6wjEUBRjDwanFSX8ujDeElBJZYpY32n Jgx6Ww6g68r5w9Fuj1Z54Hu4jlIjvPtP3aXUnyLDQB4aA9pz/przq2AX6Lx60W1e dB90xLfInUjW+af0hR3RWhO8rztYTeiyWT3kpY8OVjr8daDJF/yGVWANblnF2R2J -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:38 2026 by rpki-client