$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft File: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft (raw, json) Hash identifier: Y9plinjrcUxPW0t5nsgqmhSBk9tAi/A4aUwklNiwhDU= Subject key identifier: 22:85:1B:95:32:D7:4F:91:FC:F9:85:E1:42:F2:D6:16:DB:3A:76:93 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584B93717B635AE8C5B4ED65BDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft Manifest number: 010D0C9F4328584A0F6F5277F198146B052F7C0E Signing time: Sun 19 Oct 2025 18:00:08 +0000 Manifest this update: Sun 19 Oct 2025 18:00:08 +0000 Manifest next update: Tue 21 Oct 2025 18:00:00 +0000 Files and hashes: 1: 040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl (hash: GMmTW5I3z634yj3SHuIM+BhLa9Q3cJrStDVAZv3XUp8=) 2: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (hash: qHs6f+W2BpW1HUluaXSbZeFAKDUiIf20iNNqO4At4O4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:71:7b:63:5a:e8:c5:b4:ed:65:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Oct 19 18:00:08 2025 GMT Not After : Oct 21 18:00:00 2025 GMT Subject: CN=aa3b54bc-1edc-461d-9586-bb4f855df738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:c5:8f:3e:d4:f6:af:69:7c:9a:c8:7d:65: 04:6f:c7:82:b4:d8:1d:37:aa:2e:cc:61:68:67:4e: bb:9e:30:2d:4a:9a:6f:30:78:87:01:32:f9:79:d9: 19:ee:97:f5:10:a5:f3:8d:81:e7:c1:a0:48:81:39: 60:55:78:76:cf:0b:c9:3c:d3:f7:61:1d:59:68:1c: f8:9b:21:08:8c:3d:5e:60:47:f4:c7:cb:f6:96:8a: 29:1d:b3:68:39:c3:b6:8d:59:b8:eb:43:e8:e4:24: bc:a7:83:64:a3:2c:1b:6d:78:d4:c5:b7:d4:9b:77: ca:63:c3:b5:34:5c:61:a3:90:46:99:50:68:75:a6: 81:bd:6a:48:94:2c:b7:3a:c9:29:a0:7a:74:66:a5: 77:45:5c:84:1b:32:dd:20:ed:85:61:a0:a7:0e:07: 9d:1a:ed:f3:ef:37:2f:f6:2a:97:4c:92:d6:26:a0: bd:3d:05:fb:8c:99:69:96:82:66:b5:44:e4:66:49: e4:d7:85:6f:89:a1:b0:da:ac:25:ea:74:e2:e1:58: 2e:b3:2f:81:09:46:c9:71:a5:f6:8a:2d:dc:0f:3e: 4e:f6:b1:10:2c:25:7c:64:0e:79:38:bc:c3:57:dc: 1f:54:43:fd:e7:1a:d6:f4:20:ec:1c:0f:4e:b6:f7: 1b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:1B:95:32:D7:4F:91:FC:F9:85:E1:42:F2:D6:16:DB:3A:76:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0f:76:96:b8:73:ec:52:51:c8:b1:14:df:ae:1b:07:36:c2: 71:71:82:23:3c:db:ec:e3:fa:0b:3f:8d:09:38:15:dd:4f:10: f7:54:29:bd:88:c8:95:28:32:9c:dd:e8:85:5c:41:37:d5:4c: 8a:17:09:8d:ad:fd:a7:99:6a:a1:f5:c2:06:af:9f:5f:9c:5f: b7:b3:10:f8:2b:90:2e:a3:c0:40:ac:d1:d1:83:cd:b4:45:42: 73:d8:3d:c9:d4:48:9f:64:e4:69:0d:a9:22:e0:28:98:a8:c1: 92:90:3a:de:70:0d:25:e3:6f:68:ee:01:e9:5f:57:7f:d1:85: 88:4b:23:3c:45:9b:6f:ce:09:ed:37:d8:d3:73:56:2d:a1:86: 22:bb:fd:05:6c:fa:3a:ce:91:3c:17:1e:81:10:13:0d:72:78: 65:9a:f0:25:93:4f:a1:e0:fb:ea:cf:a2:da:db:69:28:c9:35: d5:0c:97:78:1d:46:31:94:f1:e4:6e:d2:d9:c9:7e:3a:05:56: 57:5f:12:d0:58:01:51:ba:1a:e6:b3:43:d8:67:f2:c2:b5:23: fb:31:55:09:54:e5:67:8f:f3:1d:40:fa:fb:5e:07:ac:4e:fa: 6a:94:b5:ce:55:dd:19:67:60:0f:7b:8f:13:3e:07:96:db:b0: 03:1e:b4:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTcXtjWujFtO1lvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI1MTAxOTE4MDAwOFoXDTI1MTAyMTE4MDAwMFowLzEtMCsGA1UEAxMk YWEzYjU0YmMtMWVkYy00NjFkLTk1ODYtYmI0Zjg1NWRmNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieTFjz7U9q9pfJrIfWUEb8eCtNgdN6ouzGFo Z067njAtSppvMHiHATL5edkZ7pf1EKXzjYHnwaBIgTlgVXh2zwvJPNP3YR1ZaBz4 myEIjD1eYEf0x8v2loopHbNoOcO2jVm460Po5CS8p4NkoywbbXjUxbfUm3fKY8O1 NFxho5BGmVBodaaBvWpIlCy3OskpoHp0ZqV3RVyEGzLdIO2FYaCnDgedGu3z7zcv 9iqXTJLWJqC9PQX7jJlploJmtUTkZknk14VviaGw2qwl6nTi4Vgusy+BCUbJcaX2 ii3cDz5O9rEQLCV8ZA55OLzDV9wfVEP95xrW9CDsHA9OtvcbjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCKFG5Uy10+R/PmF4ULy1hbbOnaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvMDQwYTk4ZTEtMGNiOS00 ZTIzLTkxMGUtMjBlYzVkZmU4YmVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1D3aWuHPsUlHIsRTfrhsH NsJxcYIjPNvs4/oLP40JOBXdTxD3VCm9iMiVKDKc3eiFXEE31UyKFwmNrf2nmWqh 9cIGr59fnF+3sxD4K5Auo8BArNHRg820RUJz2D3J1EifZORpDaki4CiYqMGSkDre cA0l429o7gHpX1d/0YWISyM8RZtvzgntN9jTc1YtoYYiu/0FbPo6zpE8Fx6BEBMN cnhlmvAlk0+h4Pvqz6La22koyTXVDJd4HUYxlPHkbtLZyX46BVZXXxLQWAFRuhrm s0PYZ/LCtSP7MVUJVOVnj/MdQPr7XgesTvpqlLXOVd0ZZ2APe48TPgeW27ADHrTY -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:20 2025 by rpki-client