$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: M7wSfX/ZUavpqJzaBpUQxSgrOe4VOmhfMzV0k+PrmcE= Subject key identifier: 5C:B9:11:57:13:EB:07:34:33:6E:EA:B7:8C:9E:14:59:73:7B:8D:A3 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584A6324F56BBDC0E4E20294181C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7B9F Signing time: Wed 02 Jul 2025 18:00:10 +0000 Manifest this update: Wed 02 Jul 2025 18:00:10 +0000 Manifest next update: Sat 05 Jul 2025 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: ePCwWcRkcW3Xu9J/SUjZjPwJHUwW/IHJ+aE4tmidaPY=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: AeavAVbds6606+s6dVrePy4cbBurR8n3lxeDtP6nQ/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:24:f5:6b:bd:c0:e4:e2:02:94:18:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Jul 2 18:00:10 2025 GMT Not After : Jul 5 18:00:00 2025 GMT Subject: CN=7a4ac43c-5634-41cd-86d8-bbe1f50559f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:aa:d2:58:13:95:e9:ca:7c:97:ea:d3:af:85: 4f:7c:3e:7e:08:95:d4:d5:68:5e:7e:f8:80:4a:c5: f2:19:3a:fe:e4:63:5d:3a:c8:8f:16:e3:2f:ba:7b: 3c:eb:80:b7:f9:7d:3e:e2:a3:d0:b1:7f:63:22:9f: b7:bc:78:70:11:eb:cd:0a:3f:62:85:74:fb:37:72: 9f:25:b9:11:31:6f:d6:c4:4b:19:ef:a5:e5:f3:d2: 74:f4:ca:03:a1:3a:d1:b8:a9:f5:ec:08:b0:1a:1a: 6b:63:db:95:5d:10:b5:35:20:69:d6:15:e2:9e:85: 51:5f:42:5a:2a:79:02:52:81:50:82:fc:5d:ba:78: 0f:92:41:aa:c5:1c:cf:f3:25:91:f6:45:d4:a9:89: e8:09:04:e8:20:27:84:91:0c:cf:28:3a:f3:ee:86: 28:ff:fe:f0:7c:e2:a1:fa:cc:5f:7a:89:40:ac:84: be:72:eb:a7:85:09:ef:e4:ff:f7:34:8c:29:3b:60: c1:61:49:3c:73:de:a2:a7:2c:dc:41:ea:98:f8:f3: 2d:c2:fe:f6:c3:d7:62:8d:4f:0a:2f:d1:ea:33:06: 4c:6d:5a:ef:9f:be:91:9b:7e:49:1a:16:d1:a6:59: 31:ff:00:d3:6e:ea:88:43:b0:54:04:76:c8:5e:01: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B9:11:57:13:EB:07:34:33:6E:EA:B7:8C:9E:14:59:73:7B:8D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:82:33:1b:ec:5e:48:f0:15:b5:94:14:d1:c0:b1:67:39:9d: b3:9c:1b:b1:42:df:04:14:d2:cf:18:cb:85:13:f3:15:d3:ec: a7:41:b2:f6:4f:23:e1:87:c0:23:da:4b:c5:cb:af:58:0f:7e: e0:ef:89:b9:bb:a2:07:c3:a3:cc:94:6a:26:40:df:60:ce:e9: e6:2c:6f:ab:3e:0f:39:f5:1a:6a:2f:2c:de:21:42:3e:dc:9c: b9:84:b6:b2:69:52:b1:98:2d:a2:83:18:4f:db:97:4f:08:17: 81:65:9c:e9:df:43:65:05:82:79:cb:fc:1a:01:f7:e4:ba:f6: dd:6a:9d:6b:67:20:f9:14:ac:90:8f:71:68:0e:0b:65:51:e1: 36:23:77:e5:2a:0c:48:99:7d:1b:34:e6:f6:d1:a5:e1:7d:34: 2b:86:84:a1:2c:c9:20:b9:cb:8f:90:99:08:6b:32:52:f0:23: 45:4f:43:d9:a2:bf:eb:dc:e5:df:a5:16:ff:c1:8f:43:25:63: 49:1b:15:c4:15:5e:98:46:1b:bf:36:c1:f6:e8:e0:90:4e:0e: f0:b1:1b:e9:99:02:3d:73:e8:0d:ec:06:51:6f:d1:08:93:70: f5:72:2c:57:9c:95:26:54:55:84:c2:61:16:a1:ce:96:19:b0: 41:4f:a6:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjJPVrvcDk4gKUGBwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI1MDcwMjE4MDAxMFoXDTI1MDcwNTE4MDAwMFowLzEtMCsGA1UEAxMk N2E0YWM0M2MtNTYzNC00MWNkLTg2ZDgtYmJlMWY1MDU1OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqrSWBOV6cp8l+rTr4VPfD5+CJXU1WhefviA SsXyGTr+5GNdOsiPFuMvuns864C3+X0+4qPQsX9jIp+3vHhwEevNCj9ihXT7N3Kf JbkRMW/WxEsZ76Xl89J09MoDoTrRuKn17AiwGhprY9uVXRC1NSBp1hXinoVRX0Ja KnkCUoFQgvxdungPkkGqxRzP8yWR9kXUqYnoCQToICeEkQzPKDrz7oYo//7wfOKh +sxfeolArIS+cuunhQnv5P/3NIwpO2DBYUk8c96ipyzcQeqY+PMtwv72w9dijU8K L9HqMwZMbVrvn76Rm35JGhbRplkx/wDTbuqIQ7BUBHbIXgF8rwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFy5EVcT6wc0M27qt4yeFFlze42jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEgjMb7F5I8BW1lBTRwLFn OZ2znBuxQt8EFNLPGMuFE/MV0+ynQbL2TyPhh8Aj2kvFy69YD37g74m5u6IHw6PM lGomQN9gzunmLG+rPg859RpqLyzeIUI+3Jy5hLayaVKxmC2igxhP25dPCBeBZZzp 30NlBYJ5y/waAffkuvbdap1rZyD5FKyQj3FoDgtlUeE2I3flKgxImX0bNOb20aXh fTQrhoShLMkgucuPkJkIazJS8CNFT0PZor/r3OXfpRb/wY9DJWNJGxXEFV6YRhu/ NsH26OCQTg7wsRvpmQI9c+gN7AZRb9EIk3D1cixXnJUmVFWEwmEWoc6WGbBBT6b0 -----END CERTIFICATE-----Generated at Thu Jul 3 13:18:32 2025 by rpki-client