$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft File: 48a8571f-1cf3-4341-b350-3e442e19e11b.mft (raw, json) Hash identifier: BcM1ez0C1GClP6t8fzmB7FluR3p519efOtBm8VG0g48= Subject key identifier: 11:07:69:94:20:A8:7A:B4:74:49:41:41:A6:AC:19:E9:7E:6F:7A:FF Authority key identifier: 4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED Certificate issuer: /CN=48a8571f-1cf3-4341-b350-3e442e19e11b Certificate serial: 010D0C9F4328584AF46E3F5B456E84DF89167620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft Manifest number: 010D0C9F4328584A5DC5281C72E93A22FA425317 Signing time: Sat 23 Aug 2025 19:00:04 +0000 Manifest this update: Sat 23 Aug 2025 19:00:04 +0000 Manifest next update: Tue 26 Aug 2025 19:00:00 +0000 Files and hashes: 1: 48a8571f-1cf3-4341-b350-3e442e19e11b.crl (hash: pvWK8QEwDusxZqLp3y1Hr+qjlMV+XPbTg5KkLD6ZR70=) 2: e247fd63-326e-3aa2-a4e5-94338705d5c2.roa (hash: Pvtzz5dSEOMqr/TXPyLT4UYn9RAqe18KysRoULb8hbc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:6e:3f:5b:45:6e:84:df:89:16:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a8571f-1cf3-4341-b350-3e442e19e11b Validity Not Before: Aug 23 19:00:04 2025 GMT Not After : Aug 26 19:00:00 2025 GMT Subject: CN=bd6851d9-1bab-4088-af9d-db9128124db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:15:0d:39:f4:fa:8a:2d:fb:ff:45:dc:f5:b0: 03:df:c8:75:c3:1e:b2:d8:f0:6e:c2:31:57:64:ac: 03:02:f9:e2:aa:02:4c:94:0e:c3:16:db:84:f0:6f: 80:65:57:a8:d8:e2:5f:cd:3f:03:b5:55:9c:6c:fc: c6:29:71:fb:bb:09:c2:67:95:dc:76:af:b9:fc:ee: 4e:44:a5:4f:bc:a9:90:21:66:ad:f1:b2:f7:45:ce: c6:3b:03:e1:8f:a7:b4:af:3d:6b:0c:90:3d:07:bf: a5:ac:3a:04:64:7f:d0:13:76:19:fb:11:c5:85:71: a7:4d:85:5c:49:ea:5a:e4:f5:07:d7:7a:d8:5b:70: 95:2e:88:51:ad:9b:eb:36:05:dd:56:87:6f:ac:06: 30:d9:2f:6f:3b:a1:cd:72:53:3d:b5:dc:bf:2b:39: aa:f1:a1:c4:a2:c1:39:4c:2a:27:c1:49:90:d1:e5: 6d:29:d1:77:07:5c:d2:39:a5:49:0d:77:c9:9f:b1: 05:14:3c:62:d7:3c:42:b9:80:e7:a8:06:c5:de:1f: a5:2f:5b:7d:d4:53:c0:41:69:b9:5c:dc:0b:9c:13: 3a:f9:bb:dc:dc:2d:8a:f1:cd:69:f3:57:28:87:05: 0b:6f:01:52:fd:12:76:b9:c5:c0:09:be:42:75:70: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:07:69:94:20:A8:7A:B4:74:49:41:41:A6:AC:19:E9:7E:6F:7A:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl X509v3 Authority Key Identifier: keyid:4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7e:c3:fb:95:ae:98:ff:ed:28:19:11:cc:d8:e5:e6:d4:2a: 52:3f:03:75:3a:e7:c0:b4:2f:f8:83:a1:71:11:b8:dc:a6:40: ed:0f:b3:0f:bc:48:f4:3d:79:87:ba:5a:47:fa:8f:7b:22:0f: a9:91:fe:41:e5:77:a5:26:a7:c6:be:7a:03:3b:e6:e9:59:dc: a3:15:83:64:ad:2e:06:5e:47:d3:a7:4b:a4:9b:d3:d0:df:4a: 1f:eb:4c:2d:1b:a0:c8:3e:ba:18:d3:04:80:59:b4:cb:cb:ea: 3b:64:cc:f4:60:78:e6:a8:4e:6b:92:77:9b:53:08:c4:33:40: 7b:01:eb:9d:55:89:92:b0:76:d0:8c:2d:3f:3d:6c:0e:15:d3: d9:e2:0a:79:e1:b6:7e:fc:d4:84:80:dc:c2:04:fb:99:75:e0: 3f:72:e3:e8:08:87:53:1d:83:b3:ac:10:0e:0c:5b:06:e1:de: 8f:99:66:3b:b0:94:c5:13:ed:59:42:23:1a:15:df:4b:6e:bf: 7c:10:7d:8c:04:7c:9d:2e:11:82:68:53:ca:96:47:d6:3e:70: 38:71:b1:8c:e4:f6:fa:a5:6c:43:a8:3b:ff:65:ef:14:99:1b: 3d:ac:60:27:54:77:80:c1:ab:f4:f7:ce:1b:77:20:6e:cb:b2: e9:e3:98:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0bj9bRW6E34kWdiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhhODU3MWYtMWNmMy00MzQxLWIzNTAtM2U0NDJlMTll MTFiMB4XDTI1MDgyMzE5MDAwNFoXDTI1MDgyNjE5MDAwMFowLzEtMCsGA1UEAxMk YmQ2ODUxZDktMWJhYi00MDg4LWFmOWQtZGI5MTI4MTI0ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihUNOfT6ii37/0Xc9bAD38h1wx6y2PBuwjFX ZKwDAvniqgJMlA7DFtuE8G+AZVeo2OJfzT8DtVWcbPzGKXH7uwnCZ5Xcdq+5/O5O RKVPvKmQIWat8bL3Rc7GOwPhj6e0rz1rDJA9B7+lrDoEZH/QE3YZ+xHFhXGnTYVc Sepa5PUH13rYW3CVLohRrZvrNgXdVodvrAYw2S9vO6HNclM9tdy/Kzmq8aHEosE5 TConwUmQ0eVtKdF3B1zSOaVJDXfJn7EFFDxi1zxCuYDnqAbF3h+lL1t91FPAQWm5 XNwLnBM6+bvc3C2K8c1p81cohwULbwFS/RJ2ucXACb5CdXBmeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBEHaZQgqHq0dElBQaasGel+b3r/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4 NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0MmUxOWUxMWIvNDhhODU3MWYtMWNmMy00 MzQxLWIzNTAtM2U0NDJlMTllMTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDhhODU3MWYtMWNmMy00MzQxLWIz NTAtM2U0NDJlMTllMTFiLzQ4YTg1NzFmLTFjZjMtNDM0MS1iMzUwLTNlNDQyZTE5 ZTExYi5jcmwwHwYDVR0jBBgwFoAUS4srJxY3nsMB7cANZ9CYOY1jE+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0 MmUxOWUxMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBafsP7la6Y/+0oGRHM2OXm 1CpSPwN1OufAtC/4g6FxEbjcpkDtD7MPvEj0PXmHulpH+o97Ig+pkf5B5XelJqfG vnoDO+bpWdyjFYNkrS4GXkfTp0ukm9PQ30of60wtG6DIProY0wSAWbTLy+o7ZMz0 YHjmqE5rknebUwjEM0B7AeudVYmSsHbQjC0/PWwOFdPZ4gp54bZ+/NSEgNzCBPuZ deA/cuPoCIdTHYOzrBAODFsG4d6PmWY7sJTFE+1ZQiMaFd9Lbr98EH2MBHydLhGC aFPKlkfWPnA4cbGM5Pb6pWxDqDv/Ze8UmRs9rGAnVHeAwav0984bdyBuy7Lp45iR -----END CERTIFICATE-----Generated at Sun Aug 24 01:33:31 2025 by rpki-client