$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft File: 407cb240-661e-489d-9198-56d20c6d1076.mft (raw, json) Hash identifier: ViWTKTigdYhz7/dCfssSR8Ba9rxaYQa7L2Z10eH5x/Y= Subject key identifier: 0D:A4:4C:F3:73:6A:3B:19:E6:E2:F0:C0:36:34:79:83:84:2B:67:F0 Authority key identifier: 2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 Certificate issuer: /CN=407cb240-661e-489d-9198-56d20c6d1076 Certificate serial: 010D0C9F4328584AF5032B1A4103E02E11BE5E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft Manifest number: 010D0C9F4328584AB7A5F7ABB157AF2EBCD95457 Signing time: Sun 24 Aug 2025 00:00:08 +0000 Manifest this update: Sun 24 Aug 2025 00:00:08 +0000 Manifest next update: Wed 27 Aug 2025 00:00:00 +0000 Files and hashes: 1: 407cb240-661e-489d-9198-56d20c6d1076.crl (hash: 4pnsIX7MMG5GtPKo4G5Uw2Y1qe9EBqj1So8aDP2xFkQ=) 2: f894fd05-f37a-38af-a864-4381a924fc4f.roa (hash: SQVh9/flibLPUsKDAR0Ljg7RKykq2hK5tELNVcP+CTo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:03:2b:1a:41:03:e0:2e:11:be:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407cb240-661e-489d-9198-56d20c6d1076 Validity Not Before: Aug 24 00:00:08 2025 GMT Not After : Aug 27 00:00:00 2025 GMT Subject: CN=b45e2a91-ca13-49e9-9bcf-a85d1bf17a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:a6:12:64:c5:8e:53:e5:ee:08:b6:f2:01: 35:01:cc:ee:aa:17:62:11:69:c9:a3:fa:40:e5:0a: 29:4c:78:0f:b4:7c:35:4e:bf:2b:ad:28:ab:60:c4: 80:b5:cf:c6:7f:de:40:e7:61:3d:81:6f:29:26:c0: 39:54:89:2a:c9:88:46:54:a3:49:9c:78:6b:49:cb: 4f:a9:d5:d5:20:c7:ad:af:7b:dc:05:40:38:e8:c7: c4:09:83:63:c6:f5:44:30:e4:f6:71:b0:15:85:20: 00:d3:71:e0:49:a9:46:b5:0a:ba:0e:14:f3:56:78: e3:8b:a9:ae:1f:85:f3:3f:10:3a:52:95:6e:db:15: c4:a7:ab:c7:85:07:d9:4c:fb:4c:50:1a:79:15:f4: 63:1c:c1:23:12:05:36:4d:99:22:6d:da:29:d9:08: 48:ea:2a:e0:b2:38:67:cf:2b:c6:60:20:8e:28:d4: 29:90:19:15:65:d2:61:45:b0:34:3e:c1:85:41:64: 8d:5c:64:be:b3:9f:8e:b1:08:8c:9a:ec:5f:65:51: c3:a4:28:fd:a8:a7:73:f9:21:cf:3e:e8:24:db:92: 6e:9d:3e:09:af:3f:04:13:3b:a6:fa:0e:b4:43:29: de:92:5d:92:e5:91:16:1d:a4:2b:64:48:f9:ec:03: c3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:4C:F3:73:6A:3B:19:E6:E2:F0:C0:36:34:79:83:84:2B:67:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076/407cb240-661e-489d-9198-56d20c6d1076.crl X509v3 Authority Key Identifier: keyid:2B:D7:08:24:8E:0E:5D:5E:E2:33:D7:18:48:2F:B4:79:72:1B:5F:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/407cb240-661e-489d-9198-56d20c6d1076.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a0:e1:99:99:86:04:e6:84:bb:27:44:11:79:bd:db:d5:f4: 1b:61:31:1c:3f:a0:7b:56:0a:2e:76:d3:84:c1:72:7d:35:29: ec:02:45:18:b9:fc:a8:64:06:25:b9:50:19:7d:e7:85:88:e7: 71:09:ba:30:ae:0c:3a:f7:5c:04:88:5b:db:b2:fe:ef:a6:59: 06:ba:3f:cd:7b:42:71:6f:99:c6:8a:1a:3b:35:10:12:fd:44: b9:ae:01:b7:7b:16:3d:6f:0e:28:86:69:4c:a9:3c:36:75:f8: 82:5c:2d:4f:03:15:54:10:fc:7f:85:45:51:43:82:28:fb:db: 48:7c:1d:c6:69:9c:2b:b3:9e:76:ec:9a:a3:8b:0f:d1:12:43: ac:ac:21:e6:b3:66:87:3f:c6:30:59:38:96:1f:42:47:10:bd: 75:1d:f7:81:4f:07:36:3a:99:1c:48:32:61:5e:f8:83:d8:88: 29:09:e8:2a:a3:3e:94:46:c0:49:cc:d7:ed:63:16:7e:f7:4f: 89:b3:51:ac:b2:15:c8:f1:54:cc:8d:3f:70:9b:c6:80:85:97: 53:2b:2a:e4:40:86:e0:f5:75:67:4c:bf:0f:c5:9c:61:f2:89: 41:a5:93:a0:46:b9:ca:48:b0:5e:46:20:4f:06:2a:64:fb:c7: 52:c3:84:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr1AysaQQPgLhG+XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDA3Y2IyNDAtNjYxZS00ODlkLTkxOTgtNTZkMjBjNmQx MDc2MB4XDTI1MDgyNDAwMDAwOFoXDTI1MDgyNzAwMDAwMFowLzEtMCsGA1UEAxMk YjQ1ZTJhOTEtY2ExMy00OWU5LTliY2YtYTg1ZDFiZjE3YTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVimEmTFjlPl7gi28gE1AczuqhdiEWnJo/pA 5QopTHgPtHw1Tr8rrSirYMSAtc/Gf95A52E9gW8pJsA5VIkqyYhGVKNJnHhrSctP qdXVIMetr3vcBUA46MfECYNjxvVEMOT2cbAVhSAA03HgSalGtQq6DhTzVnjji6mu H4XzPxA6UpVu2xXEp6vHhQfZTPtMUBp5FfRjHMEjEgU2TZkibdop2QhI6irgsjhn zyvGYCCOKNQpkBkVZdJhRbA0PsGFQWSNXGS+s5+OsQiMmuxfZVHDpCj9qKdz+SHP Pugk25JunT4Jrz8EEzum+g60Qynekl2S5ZEWHaQrZEj57APDVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA2kTPNzajsZ5uLwwDY0eYOEK2fwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDdj YjI0MC02NjFlLTQ4OWQtOTE5OC01NmQyMGM2ZDEwNzYvNDA3Y2IyNDAtNjYxZS00 ODlkLTkxOTgtNTZkMjBjNmQxMDc2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDA3Y2IyNDAtNjYxZS00ODlkLTkx OTgtNTZkMjBjNmQxMDc2LzQwN2NiMjQwLTY2MWUtNDg5ZC05MTk4LTU2ZDIwYzZk MTA3Ni5jcmwwHwYDVR0jBBgwFoAUK9cIJI4OXV7iM9cYSC+0eXIbX9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDdjYjI0MC02NjFlLTQ4OWQtOTE5OC01NmQy MGM2ZDEwNzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9oOGZmYYE5oS7J0QReb3b 1fQbYTEcP6B7VgoudtOEwXJ9NSnsAkUYufyoZAYluVAZfeeFiOdxCbowrgw691wE iFvbsv7vplkGuj/Ne0Jxb5nGiho7NRAS/US5rgG3exY9bw4ohmlMqTw2dfiCXC1P AxVUEPx/hUVRQ4Io+9tIfB3GaZwrs5527Jqjiw/REkOsrCHms2aHP8YwWTiWH0JH EL11HfeBTwc2OpkcSDJhXviD2IgpCegqoz6URsBJzNftYxZ+90+Js1GsshXI8VTM jT9wm8aAhZdTKyrkQIbg9XVnTL8PxZxh8olBpZOgRrnKSLBeRiBPBipk+8dSw4T7 -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:39 2025 by rpki-client