$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft File: 7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft (raw, json) Hash identifier: xtfG/QfsIjYLJjruvmtZmF2ZDBc+aBGJZM0KgmW5UsA= Subject key identifier: 98:27:E2:07:A8:19:EB:A9:51:2C:1E:0D:A9:08:8A:AE:EC:AC:74:FF Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82 Certificate issuer: /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719 Certificate serial: 010D0C9F4328584BC01C658BBB9CE75FFD435080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft Manifest number: 010D0C9F4328584073A8206A323C451F4241C7FE Signing time: Tue 04 Nov 2025 18:00:03 +0000 Manifest this update: Tue 04 Nov 2025 18:00:03 +0000 Manifest next update: Fri 07 Nov 2025 18:00:00 +0000 Files and hashes: 1: 7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl (hash: zc5PSl1trcikmOSAWo5NwNGRed1+hYTb+64mpUqlFR0=) 2: 844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa (hash: 4B96ULeGiJ4gthpnXsvuqctlMgYv+t2UPozCPx/cg+4=) 3: 9b11998f-c03e-3565-b33d-908b5f9e5a87.roa (hash: btsKmkI+QfiXXnJK43xLbRr1Tpmq14iGcFtETVy1HNo=) 4: fbe2bfbc-2227-3697-b746-051389402bb9.roa (hash: BB+W6z03VtlS0NQ++VOXhtURYSGpC4mK2lFxmi5XNII=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:1c:65:8b:bb:9c:e7:5f:fd:43:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719 Validity Not Before: Nov 4 18:00:03 2025 GMT Not After : Nov 7 18:00:00 2025 GMT Subject: CN=d9e0667c-f067-4257-83ee-b60d2ac3ea74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:6c:0e:ae:d4:20:f8:30:5a:c8:cc:0e:4b: af:85:9f:0e:3e:5f:79:bc:2f:17:9a:e3:24:ff:bd: 73:fc:fd:2c:0c:f7:f6:cf:31:cf:44:ec:e0:9b:ff: 44:61:a0:7a:e6:c3:c1:6e:a7:69:18:b3:d8:23:68: 65:f9:cb:5a:4c:23:43:73:2b:69:e4:94:5b:40:fb: 44:f0:e8:73:8b:69:7a:0d:3b:b8:dd:b2:3a:80:c7: c6:a9:98:3b:f6:44:38:a2:6e:4f:f6:c4:2c:69:ae: 92:2a:f5:b5:6a:bd:6e:f8:6f:70:47:a3:76:4c:71: c0:c5:88:7d:77:42:b0:38:30:55:ce:e9:a5:16:f8: 0c:e5:a0:50:a8:a0:a0:50:b1:12:cd:40:51:6b:5f: 71:b0:cc:3f:55:80:bc:e7:5d:ce:cc:78:0d:b6:e3: e5:c7:8c:99:80:cb:2d:49:9d:88:98:79:30:0a:dc: cd:c5:5c:5d:a4:31:62:67:64:cc:84:cd:65:43:7c: 12:2a:26:1e:bb:67:f8:c7:2e:b3:ed:29:aa:e6:22: f8:7a:e5:be:c5:e2:ce:ea:a7:86:47:58:73:58:f0: ef:27:3c:a2:97:b2:3d:1a:84:03:e6:c0:e8:53:0d: fd:3d:87:5e:9e:21:89:40:24:8a:54:2d:bf:30:56: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:27:E2:07:A8:19:EB:A9:51:2C:1E:0D:A9:08:8A:AE:EC:AC:74:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl X509v3 Authority Key Identifier: keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e5:ee:ff:1d:07:05:70:cc:bd:a5:76:dc:94:9c:e0:a5:bf: f2:0b:7f:70:de:85:c0:20:a7:2a:36:2d:14:ee:e3:8f:b6:33: 7b:a8:1e:59:9b:85:72:b4:a8:24:2a:21:21:37:ae:50:94:0a: cf:c0:04:b7:05:25:0e:29:0b:ef:2e:66:2f:16:c1:e8:e8:1f: 14:8e:b5:d8:12:c1:60:37:5b:44:5c:48:30:67:fa:67:49:c5: 3f:4a:f7:0f:0b:29:30:3a:60:4c:a3:50:e4:96:0e:80:fa:a9: cd:8a:30:66:df:c6:65:ef:e0:95:c8:65:aa:a1:31:7c:e0:28: eb:60:84:40:08:4e:53:b2:a6:a6:7b:32:14:9d:f5:cd:35:95: 4e:80:c9:04:fa:7e:47:d1:99:84:29:d5:cb:84:41:3c:cc:be: 08:3a:41:a3:5c:33:86:fe:04:b3:b8:11:27:a8:ce:f4:cf:db: 59:a0:b9:dd:c9:ca:61:82:8d:ca:9b:c6:25:de:dd:56:0f:01: f8:5b:1c:3c:03:3e:48:b5:c5:6b:e4:f3:4b:ad:58:e0:f1:cf: 65:f4:86:bf:cc:53:9e:46:2d:3a:dd:93:f1:c1:8d:fd:b6:36: ca:dc:b2:aa:2e:00:75:1c:24:79:e5:54:10:2c:e0:89:35:79: 7e:4a:4f:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAHGWLu5znX/1DUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M0OGQ1ZmItMDU5Yi00ZmQyLTkyYTgtMzFmMTQzZjVm NzE5MB4XDTI1MTEwNDE4MDAwM1oXDTI1MTEwNzE4MDAwMFowLzEtMCsGA1UEAxMk ZDllMDY2N2MtZjA2Ny00MjU3LTgzZWUtYjYwZDJhYzNlYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxtsDq7UIPgwWsjMDkuvhZ8OPl95vC8XmuMk /71z/P0sDPf2zzHPROzgm/9EYaB65sPBbqdpGLPYI2hl+ctaTCNDcytp5JRbQPtE 8Ohzi2l6DTu43bI6gMfGqZg79kQ4om5P9sQsaa6SKvW1ar1u+G9wR6N2THHAxYh9 d0KwODBVzumlFvgM5aBQqKCgULESzUBRa19xsMw/VYC8513OzHgNtuPlx4yZgMst SZ2ImHkwCtzNxVxdpDFiZ2TMhM1lQ3wSKiYeu2f4xy6z7Smq5iL4euW+xeLO6qeG R1hzWPDvJzyil7I9GoQD5sDoUw39PYdeniGJQCSKVC2/MFa+JQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJgn4geoGeupUSweDakIiq7srHT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4 ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYxNDNmNWY3MTkvN2M0OGQ1ZmItMDU5Yi00 ZmQyLTkyYTgtMzFmMTQzZjVmNzE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M0OGQ1ZmItMDU5Yi00ZmQyLTky YTgtMzFmMTQzZjVmNzE5LzdjNDhkNWZiLTA1OWItNGZkMi05MmE4LTMxZjE0M2Y1 ZjcxOS5jcmwwHwYDVR0jBBgwFoAUsNZ6EZWdK+SlsteNAwZ2bkyD94IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzQ4ZDVmYi0wNTliLTRmZDItOTJhOC0zMWYx NDNmNWY3MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBz5e7/HQcFcMy9pXbclJzg pb/yC39w3oXAIKcqNi0U7uOPtjN7qB5Zm4VytKgkKiEhN65QlArPwAS3BSUOKQvv LmYvFsHo6B8UjrXYEsFgN1tEXEgwZ/pnScU/SvcPCykwOmBMo1Dklg6A+qnNijBm 38Zl7+CVyGWqoTF84CjrYIRACE5TsqamezIUnfXNNZVOgMkE+n5H0ZmEKdXLhEE8 zL4IOkGjXDOG/gSzuBEnqM70z9tZoLndycphgo3Km8Yl3t1WDwH4Wxw8Az5ItcVr 5PNLrVjg8c9l9Ia/zFOeRi063ZPxwY39tjbK3LKqLgB1HCR55VQQLOCJNXl+Sk/n -----END CERTIFICATE-----Generated at Wed Nov 5 08:20:31 2025 by rpki-client