$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft File: 40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft (raw, json) Hash identifier: FToJVmrW8kTp8iRfSzPxs2LzJoGYjNsMKfNlemc7HeE= Subject key identifier: 3E:FE:F9:56:19:FA:49:18:6B:6F:A5:B8:09:11:FE:E2:3A:8B:46:C7 Authority key identifier: 13:6C:DA:17:76:DF:B9:A7:C5:75:3A:D1:52:08:E7:F7:8D:5C:35:F8 Certificate issuer: /CN=40c6f749-6a2d-4ad9-9012-1656d0adbd53 Certificate serial: 010D0C9F4328584D49657ED0623DE2903C47EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft Manifest number: 010D0C9F4328584ADADDE88E3CD776290D500AE5 Signing time: Wed 25 Mar 2026 15:00:03 +0000 Manifest this update: Wed 25 Mar 2026 15:00:03 +0000 Manifest next update: Fri 27 Mar 2026 15:00:00 +0000 Files and hashes: 1: 40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl (hash: aAz4E+RnTFPGdp77jz2bH+3Ep8RXNSWvH+BVAPKdzGQ=) 2: 629ce3ee-3c33-3b85-90ba-b0774574ca2d.roa (hash: pzekMsI21K026IVnqNbs4Dt+DC+AQOCPeciExdWK2Ic=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:65:7e:d0:62:3d:e2:90:3c:47:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40c6f749-6a2d-4ad9-9012-1656d0adbd53 Validity Not Before: Mar 25 15:00:03 2026 GMT Not After : Mar 27 15:00:00 2026 GMT Subject: CN=f22361df-7c9d-4369-a8ed-faef0a2a8590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:21:fa:2e:85:4b:18:09:4b:5b:2f:36:b2: de:24:7a:a9:0b:2f:ec:50:94:22:79:15:88:06:37: 04:97:e4:bc:10:63:b9:09:59:09:b1:1a:06:4c:df: cb:38:14:b2:37:c4:9d:85:fd:0f:94:9f:db:20:ef: 29:87:e9:ee:ad:63:3e:71:df:3e:14:50:b0:38:a6: 94:98:8c:1e:db:c5:20:8c:e2:e3:26:1c:ce:0c:fc: 0e:3a:37:d4:89:69:86:6a:23:b7:12:f3:7c:a1:84: f4:89:89:ab:aa:d2:fe:58:43:ba:8a:6b:99:f6:ab: b3:d7:ee:29:7a:57:e2:47:23:f3:6f:72:f4:d2:37: 5b:59:1e:86:9b:99:04:99:b5:dc:d9:5f:f5:df:d9: 64:60:1e:f8:d8:a1:18:c7:a7:17:fd:a0:14:25:9a: 15:8c:81:57:6b:a4:d9:19:7a:15:1a:42:39:73:b9: 77:28:1b:ce:cf:cf:ba:19:17:d7:9e:7b:26:b5:48: 30:ef:9b:92:ee:a1:dd:5f:13:f4:81:05:ca:e0:44: 4d:c1:12:40:0c:b3:d7:86:54:a3:da:5d:df:c0:7e: 44:aa:ef:91:2d:03:f1:b9:1e:44:31:6f:47:01:17: 6f:80:b1:2b:9e:ef:92:81:81:9c:15:b3:dd:31:5f: 6e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FE:F9:56:19:FA:49:18:6B:6F:A5:B8:09:11:FE:E2:3A:8B:46:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53/40c6f749-6a2d-4ad9-9012-1656d0adbd53.crl X509v3 Authority Key Identifier: keyid:13:6C:DA:17:76:DF:B9:A7:C5:75:3A:D1:52:08:E7:F7:8D:5C:35:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/40c6f749-6a2d-4ad9-9012-1656d0adbd53.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:af:ab:4d:24:f1:2b:7f:ac:a6:82:79:bd:18:9a:33:9e:40: 02:89:fe:31:be:61:0a:51:b9:69:c6:f8:dd:0c:53:c0:e7:63: e5:dd:fa:48:eb:84:c4:34:3d:af:00:b9:ae:7c:69:3d:9d:03: f4:d7:5e:5a:4d:ea:2f:dc:8c:64:c3:cd:3a:dc:60:54:00:5f: f8:3f:02:02:1d:bf:b9:c1:3d:1b:6f:e0:d8:88:19:76:88:9d: 1d:8d:ae:d1:5f:31:85:b2:24:0e:99:6c:ba:15:93:21:7e:46: 00:4d:54:92:6a:1b:26:58:c4:1d:af:9c:e6:a2:43:d7:cb:ce: d3:5e:46:2b:02:a6:8b:45:eb:6b:71:5a:5b:c1:28:ca:17:ad: 9b:99:88:dd:0c:94:a6:7a:e0:4a:aa:2b:f5:04:8f:f9:6a:0a: f7:10:ab:7a:b8:7c:17:ef:46:fe:01:f1:87:cc:0a:30:5a:50: 78:b2:3f:80:8b:de:76:4c:20:d7:eb:1d:1e:1c:08:07:ae:a8: f5:0f:78:9c:3f:5a:d5:93:66:5b:b7:78:ac:44:b0:3b:86:af: 8d:c8:dd:6f:3e:de:79:c0:47:2f:10:d2:68:41:f6:15:aa:00: 84:95:72:23:94:dd:16:86:b2:c2:90:3e:a9:b7:1d:67:70:28: ff:b4:5c:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1JZX7QYj3ikDxH6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBjNmY3NDktNmEyZC00YWQ5LTkwMTItMTY1NmQwYWRi ZDUzMB4XDTI2MDMyNTE1MDAwM1oXDTI2MDMyNzE1MDAwMFowLzEtMCsGA1UEAxMk ZjIyMzYxZGYtN2M5ZC00MzY5LWE4ZWQtZmFlZjBhMmE4NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHgh+i6FSxgJS1svNrLeJHqpCy/sUJQieRWI BjcEl+S8EGO5CVkJsRoGTN/LOBSyN8Sdhf0PlJ/bIO8ph+nurWM+cd8+FFCwOKaU mIwe28UgjOLjJhzODPwOOjfUiWmGaiO3EvN8oYT0iYmrqtL+WEO6imuZ9quz1+4p elfiRyPzb3L00jdbWR6Gm5kEmbXc2V/139lkYB742KEYx6cX/aAUJZoVjIFXa6TZ GXoVGkI5c7l3KBvOz8+6GRfXnnsmtUgw75uS7qHdXxP0gQXK4ERNwRJADLPXhlSj 2l3fwH5Equ+RLQPxuR5EMW9HARdvgLErnu+SgYGcFbPdMV9uDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD7++VYZ+kkYa2+luAkR/uI6i0bHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MGM2 Zjc0OS02YTJkLTRhZDktOTAxMi0xNjU2ZDBhZGJkNTMvNDBjNmY3NDktNmEyZC00 YWQ5LTkwMTItMTY1NmQwYWRiZDUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDBjNmY3NDktNmEyZC00YWQ5LTkw MTItMTY1NmQwYWRiZDUzLzQwYzZmNzQ5LTZhMmQtNGFkOS05MDEyLTE2NTZkMGFk YmQ1My5jcmwwHwYDVR0jBBgwFoAUE2zaF3bfuafFdTrRUgjn941cNfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MGM2Zjc0OS02YTJkLTRhZDktOTAxMi0xNjU2 ZDBhZGJkNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6r6tNJPErf6ymgnm9GJoz nkACif4xvmEKUblpxvjdDFPA52Pl3fpI64TEND2vALmufGk9nQP0115aTeov3Ixk w8063GBUAF/4PwICHb+5wT0bb+DYiBl2iJ0dja7RXzGFsiQOmWy6FZMhfkYATVSS ahsmWMQdr5zmokPXy87TXkYrAqaLRetrcVpbwSjKF62bmYjdDJSmeuBKqiv1BI/5 agr3EKt6uHwX70b+AfGHzAowWlB4sj+Ai952TCDX6x0eHAgHrqj1D3icP1rVk2Zb t3isRLA7hq+NyN1vPt55wEcvENJoQfYVqgCElXIjlN0WhrLCkD6ptx1ncCj/tFyE -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:38 2026 by rpki-client