$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: gTyS8V1VQXTJLOuTXgyqbfVbyyhCf5rcJ9QNIZluaXI= Subject key identifier: A6:B7:7E:A8:E3:63:BD:4F:6B:08:10:E8:89:D3:85:2F:34:AE:B7:0F Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584AF45084E36BB5C50542798A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7BD4 Signing time: Sat 23 Aug 2025 18:00:08 +0000 Manifest this update: Sat 23 Aug 2025 18:00:08 +0000 Manifest next update: Tue 26 Aug 2025 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: /OFihVs8AcrxV6onhMYQ68ilzHw5S1Nym6pI0t3tEfg=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: qHs6f+W2BpW1HUluaXSbZeFAKDUiIf20iNNqO4At4O4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:50:84:e3:6b:b5:c5:05:42:79:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Aug 23 18:00:08 2025 GMT Not After : Aug 26 18:00:00 2025 GMT Subject: CN=31e54be1-04af-46a8-b74d-58a8daaf577e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:04:ab:ff:25:94:39:8a:06:a8:a9:c9:83: f2:5d:9f:34:b5:63:b4:49:00:7e:29:aa:a7:0d:8b: e7:57:ae:77:6a:5a:cb:45:02:23:93:73:fc:10:68: 8a:d7:7a:fb:8f:2a:d5:1e:64:d8:f5:8e:55:d8:54: c0:6f:c7:85:52:ad:79:0b:cb:d4:8c:d1:fe:79:fb: 08:cb:50:a5:af:4b:32:13:4e:a3:41:25:08:6c:89: f5:c6:f8:36:8a:74:b4:87:d7:7b:da:9b:bf:56:04: b9:3b:a4:60:0a:8b:2d:81:dc:29:87:77:32:ca:9f: bb:ae:63:5c:b9:67:c0:6c:70:7b:52:45:4e:45:c9: 2c:13:4e:d3:96:10:db:0b:12:1b:12:d2:dc:18:89: d8:95:4a:9d:b5:ce:07:89:46:6a:2d:b2:70:6f:a7: 0d:06:3c:f3:4b:ec:ea:e6:35:93:5d:64:36:de:84: ac:6b:45:9c:5b:46:7a:00:67:23:48:10:4f:67:1a: f9:0f:d2:a0:a5:29:e0:9a:f7:46:74:b5:4a:cc:ee: bb:96:ae:21:3c:e3:47:fb:31:8b:39:b7:f6:be:7e: b3:bd:57:35:e2:b8:bb:5d:30:ee:4d:95:b0:83:b7: 7c:fb:9f:cc:f0:ea:b1:aa:a7:3e:4a:6f:22:9a:c9: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B7:7E:A8:E3:63:BD:4F:6B:08:10:E8:89:D3:85:2F:34:AE:B7:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:db:7b:2a:80:e4:cc:25:b9:f0:0e:3f:33:73:57:f8:be:9b: 05:fd:9b:7c:5d:2e:db:99:6d:68:dd:44:19:4a:b2:c3:f5:b4: 42:72:26:b4:ec:5c:5b:ea:15:98:92:e8:38:93:69:60:16:a3: 6c:b0:a7:18:7c:6a:b6:14:58:eb:6d:0c:c9:52:90:6e:72:1d: 84:51:76:0e:b9:57:e7:a0:04:bd:68:3b:67:db:24:f1:22:ab: c7:30:da:26:8e:43:ab:f0:c7:fc:3b:26:c5:c3:61:97:4b:e3: 01:80:c8:27:0b:17:7d:a5:da:2d:ff:ea:aa:31:9e:01:d7:46: a9:5b:f4:82:81:bf:31:c1:9d:d9:3d:d4:ec:84:f8:d4:a6:30: af:1c:7e:fa:62:e5:4c:fe:0f:26:4f:30:f6:b3:99:c9:17:08: 8c:01:8f:d2:4d:75:67:5b:5a:d0:b3:87:23:63:a5:77:c9:13: 28:f9:3d:f9:a2:fa:d5:0d:22:26:17:e2:07:7e:3b:f3:e2:22: 62:c0:1b:34:de:a0:dd:f2:08:7b:eb:40:1e:34:da:86:e2:8d: c6:39:25:79:ac:73:b3:d7:4a:b2:36:cc:fb:a7:fe:a7:2c:55: bc:6d:41:17:96:74:aa:15:c0:38:28:8f:0e:d6:85:11:b8:3f: 36:d9:49:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0UITja7XFBUJ5ikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI1MDgyMzE4MDAwOFoXDTI1MDgyNjE4MDAwMFowLzEtMCsGA1UEAxMk MzFlNTRiZTEtMDRhZi00NmE4LWI3NGQtNThhOGRhYWY1NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9MEq/8llDmKBqipyYPyXZ80tWO0SQB+Kaqn DYvnV653alrLRQIjk3P8EGiK13r7jyrVHmTY9Y5V2FTAb8eFUq15C8vUjNH+efsI y1Clr0syE06jQSUIbIn1xvg2inS0h9d72pu/VgS5O6RgCostgdwph3cyyp+7rmNc uWfAbHB7UkVORcksE07TlhDbCxIbEtLcGInYlUqdtc4HiUZqLbJwb6cNBjzzS+zq 5jWTXWQ23oSsa0WcW0Z6AGcjSBBPZxr5D9KgpSngmvdGdLVKzO67lq4hPONH+zGL Obf2vn6zvVc14ri7XTDuTZWwg7d8+5/M8Oqxqqc+Sm8imsksgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKa3fqjjY71PawgQ6InThS80rrcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBK23sqgOTMJbnwDj8zc1f4 vpsF/Zt8XS7bmW1o3UQZSrLD9bRCcia07Fxb6hWYkug4k2lgFqNssKcYfGq2FFjr bQzJUpBuch2EUXYOuVfnoAS9aDtn2yTxIqvHMNomjkOr8Mf8OybFw2GXS+MBgMgn Cxd9pdot/+qqMZ4B10apW/SCgb8xwZ3ZPdTshPjUpjCvHH76YuVM/g8mTzD2s5nJ FwiMAY/STXVnW1rQs4cjY6V3yRMo+T35ovrVDSImF+IHfjvz4iJiwBs03qDd8gh7 60AeNNqG4o3GOSV5rHOz10qyNsz7p/6nLFW8bUEXlnSqFcA4KI8O1oURuD822Ul2 -----END CERTIFICATE-----Generated at Sat Aug 23 21:16:29 2025 by rpki-client