$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft File: 48e1915e-1132-4c62-a522-0f196fb03c8f.mft (raw, json) Hash identifier: GV75T+yDFkFWSc85/0dA+7bojft+nUHLCEetCEEB9zk= Subject key identifier: 80:D4:5A:DC:71:8F:A8:79:3B:56:B5:42:47:FB:9C:83:2F:B8:C0:64 Authority key identifier: 92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57 Certificate issuer: /CN=48e1915e-1132-4c62-a522-0f196fb03c8f Certificate serial: 010D0C9F4328584BBEB7192A9310271538702380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft Manifest number: 010D0C9F4328584073A8432DDEA7EF12650B4F42 Signing time: Tue 04 Nov 2025 06:00:08 +0000 Manifest this update: Tue 04 Nov 2025 06:00:08 +0000 Manifest next update: Thu 06 Nov 2025 06:00:00 +0000 Files and hashes: 1: 0c386be9-e47f-3c2f-8593-dfacf6bebbd4.roa (hash: c8vvuYyLkflM4yxxkAGzJeg1uQRVlkjyoOj9qsbF+44=) 2: 48e1915e-1132-4c62-a522-0f196fb03c8f.crl (hash: Gl+Rw0gG5ZOWrZRPxvt/Yg/+MmOUUe8G0sgTB2J6dAg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:b7:19:2a:93:10:27:15:38:70:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e1915e-1132-4c62-a522-0f196fb03c8f Validity Not Before: Nov 4 06:00:08 2025 GMT Not After : Nov 6 06:00:00 2025 GMT Subject: CN=f03b4f70-c545-4447-8220-67688dcb9ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:19:a2:62:a1:98:44:b2:70:65:38:e6:95: 24:b1:af:ba:91:07:2e:bb:6e:38:5d:0a:a0:f5:1f: 00:a1:2b:19:92:a8:9e:46:1a:8a:48:95:37:33:0c: 13:f2:01:de:bd:f9:34:01:a8:57:7d:c9:07:c2:3a: f6:6b:e0:7c:8e:36:00:cc:61:18:b4:a7:63:fc:b2: e1:14:91:f9:c7:cf:ee:5b:0c:28:38:52:a3:41:72: 40:ec:87:45:4b:f2:cc:cc:5f:4d:98:2e:ed:6b:ff: 3d:3a:1d:1e:e8:db:25:64:c0:32:d0:4e:32:cb:c9: a5:7d:fa:22:ba:d3:ec:31:6f:cf:19:58:2c:fb:0c: eb:17:5e:55:c7:81:b2:e6:c6:e1:61:d6:85:5d:69: 6a:4b:4a:ae:86:2c:70:67:68:1d:b0:6c:02:0e:65: 4b:fb:b5:03:75:62:55:ec:c7:f6:f4:9e:29:72:d8: ab:0f:bb:c8:02:d3:e9:9a:a2:71:27:05:c4:59:43: 4d:ec:0b:47:c2:38:7b:6f:12:82:5c:e5:f5:9b:9d: 91:53:a6:ae:34:dd:b4:77:81:ab:59:75:8b:fe:6a: a7:68:2f:05:f1:e6:0d:c0:a7:38:07:50:d2:c4:0d: 74:a7:b7:46:34:0a:9f:ea:c8:b9:ef:28:d2:e7:5d: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D4:5A:DC:71:8F:A8:79:3B:56:B5:42:47:FB:9C:83:2F:B8:C0:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.crl X509v3 Authority Key Identifier: keyid:92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f1:00:3f:7c:97:70:b0:0c:e6:dd:16:f0:80:2d:71:14:6c: 6a:f7:23:23:86:52:ac:d9:64:91:33:2f:2e:d6:7e:ad:a9:80: f6:da:83:34:90:d9:05:2b:f6:d0:f9:29:43:2c:a1:d1:69:f7: c2:3c:e5:9f:6c:1b:36:cb:5f:9c:0d:58:0e:75:8b:9c:6a:c1: 6e:9a:f6:c2:0e:4e:f5:15:a9:bd:e5:81:c8:fa:01:71:47:4a: de:0d:ad:5f:75:b3:41:16:1f:9a:09:bf:66:e8:b9:c9:dd:19: cf:0d:e3:9e:8e:f7:aa:fe:e2:ac:77:78:0a:40:52:f7:9a:66: 4b:44:b4:87:af:1e:5f:a4:c9:fe:66:b4:43:35:f5:e8:3b:64: 19:98:5b:7f:02:e8:a7:d3:83:f0:c7:e5:99:4d:28:5d:02:07: 73:a1:e8:31:d9:7e:d1:eb:1a:d9:42:20:a4:85:e3:f0:00:81: 10:dd:63:ea:e6:12:9d:ca:e8:c1:87:63:3e:21:01:e4:0e:69: 39:d8:db:85:c2:54:3c:ea:61:41:d1:d5:59:7d:3b:ae:b0:47: 25:81:b2:82:39:ac:f3:42:1c:17:f3:97:d7:df:11:ee:43:4e: d7:6c:3a:fd:f9:d5:25:30:81:67:a0:0f:91:84:61:2f:c8:6a: b5:35:2b:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+txkqkxAnFThwI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhlMTkxNWUtMTEzMi00YzYyLWE1MjItMGYxOTZmYjAz YzhmMB4XDTI1MTEwNDA2MDAwOFoXDTI1MTEwNjA2MDAwMFowLzEtMCsGA1UEAxMk ZjAzYjRmNzAtYzU0NS00NDQ3LTgyMjAtNjc2ODhkY2I5ZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdsZomKhmESycGU45pUksa+6kQcuu244XQqg 9R8AoSsZkqieRhqKSJU3MwwT8gHevfk0AahXfckHwjr2a+B8jjYAzGEYtKdj/LLh FJH5x8/uWwwoOFKjQXJA7IdFS/LMzF9NmC7ta/89Oh0e6NslZMAy0E4yy8mlffoi utPsMW/PGVgs+wzrF15Vx4Gy5sbhYdaFXWlqS0quhixwZ2gdsGwCDmVL+7UDdWJV 7Mf29J4pctirD7vIAtPpmqJxJwXEWUNN7AtHwjh7bxKCXOX1m52RU6auNN20d4Gr WXWL/mqnaC8F8eYNwKc4B1DSxA10p7dGNAqf6si57yjS510KvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIDUWtxxj6h5O1a1Qkf7nIMvuMBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OGUx OTE1ZS0xMTMyLTRjNjItYTUyMi0wZjE5NmZiMDNjOGYvNDhlMTkxNWUtMTEzMi00 YzYyLWE1MjItMGYxOTZmYjAzYzhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDhlMTkxNWUtMTEzMi00YzYyLWE1 MjItMGYxOTZmYjAzYzhmLzQ4ZTE5MTVlLTExMzItNGM2Mi1hNTIyLTBmMTk2ZmIw M2M4Zi5jcmwwHwYDVR0jBBgwFoAUkm/s7ssK+QNqAmLbC9kRKgtDgVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OGUxOTE1ZS0xMTMyLTRjNjItYTUyMi0wZjE5 NmZiMDNjOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh8QA/fJdwsAzm3RbwgC1x FGxq9yMjhlKs2WSRMy8u1n6tqYD22oM0kNkFK/bQ+SlDLKHRaffCPOWfbBs2y1+c DVgOdYucasFumvbCDk71Fam95YHI+gFxR0reDa1fdbNBFh+aCb9m6LnJ3RnPDeOe jveq/uKsd3gKQFL3mmZLRLSHrx5fpMn+ZrRDNfXoO2QZmFt/Auin04Pwx+WZTShd Agdzoegx2X7R6xrZQiCkhePwAIEQ3WPq5hKdyujBh2M+IQHkDmk52NuFwlQ86mFB 0dVZfTuusEclgbKCOazzQhwX85fX3xHuQ07XbDr9+dUlMIFnoA+RhGEvyGq1NSv1 -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:45 2025 by rpki-client