$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft File: 48a8571f-1cf3-4341-b350-3e442e19e11b.mft (raw, json) Hash identifier: HrOUMsaoaEgMYvHybzWmaeXnBzpc6wXYO3sClCKWa7s= Subject key identifier: 39:23:D3:9E:B2:AD:9C:BF:5E:97:C2:8D:DB:6F:E5:2D:C8:AF:49:18 Authority key identifier: 4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED Certificate issuer: /CN=48a8571f-1cf3-4341-b350-3e442e19e11b Certificate serial: 010D0C9F4328584BC03A297CF92D5D400E726980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft Manifest number: 010D0C9F4328584A5DC5281C72E93A22FA425362 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Thu 06 Nov 2025 19:00:00 +0000 Files and hashes: 1: 48a8571f-1cf3-4341-b350-3e442e19e11b.crl (hash: ooM4qRqv5NNYzyKLj0cC7e74U1phT5xEOFV7/Xk+c5w=) 2: e247fd63-326e-3aa2-a4e5-94338705d5c2.roa (hash: ooCoPYJtJPkdshHp+kAfvOPk7jA9KJP2GpnLYCawApQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:29:7c:f9:2d:5d:40:0e:72:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a8571f-1cf3-4341-b350-3e442e19e11b Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 6 19:00:00 2025 GMT Subject: CN=d70cf05e-0499-449d-b62b-f5bfd4405fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:de:b9:92:d5:7d:b3:97:6a:6f:9c:f8:74: 4d:bc:23:52:ed:42:52:f7:a8:44:fd:0c:4b:0c:28: 34:f6:a1:b7:f9:ad:e5:8a:57:01:6f:ad:28:83:3a: 6f:e1:ee:1f:d0:38:1c:d5:4d:d5:2c:0f:3d:44:35: 94:ff:02:0c:63:02:ca:52:d5:a1:97:21:a3:98:46: 10:44:d3:ca:0b:84:c5:fb:0e:59:4f:2d:20:f8:13: 21:a8:91:25:ad:b4:29:ad:60:14:67:11:b1:48:97: ff:c5:3a:b6:92:73:19:b9:9e:93:6b:49:f8:34:56: 95:ff:4b:3f:cb:89:0f:5f:d9:36:cb:c8:f4:51:fd: c6:73:59:49:61:a2:e4:a8:2e:17:d2:04:e4:0e:b3: 18:58:79:e9:90:1d:32:fe:c0:f5:41:2f:94:8c:1c: 0e:e2:0a:b9:5f:9f:c0:82:29:aa:c7:e1:b1:a4:19: 8b:9f:db:e5:01:e1:24:a6:73:67:55:02:90:21:60: 02:20:c6:6f:cb:6d:5e:03:85:98:b3:9b:ee:00:3d: fe:75:08:82:64:bb:39:bd:aa:48:00:91:d9:05:f9: 7d:64:ae:33:00:c4:cb:3c:62:77:cd:30:70:4e:0b: e6:e3:40:bc:63:f5:a4:ff:d3:82:cf:58:cd:f3:e2: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:23:D3:9E:B2:AD:9C:BF:5E:97:C2:8D:DB:6F:E5:2D:C8:AF:49:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl X509v3 Authority Key Identifier: keyid:4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:59:f5:92:3e:24:e6:8d:30:04:d3:1d:83:1b:a9:58:f9:7e: e4:20:bd:9a:10:92:6b:32:1f:fc:de:fe:4a:b9:49:3b:f3:93: 90:e1:01:67:5d:15:41:4e:65:04:30:2a:d9:bf:03:69:fe:b0: 40:d2:fc:b0:8f:b3:96:57:c1:e2:82:a7:5a:e9:b1:80:ab:35: 09:ff:62:04:f1:78:d7:13:2f:4a:6a:73:c0:bd:d6:b5:70:17: 1c:73:c3:b8:ff:d0:c2:f6:5d:54:94:6e:61:51:54:07:71:14: 54:da:b5:19:e3:d8:cb:42:8e:5f:05:6a:62:fa:13:18:08:68: a3:88:66:4d:bf:d3:33:26:f1:d6:27:e3:77:25:c1:e8:ab:aa: 5c:d9:61:66:88:8d:31:6e:ce:03:e6:3c:87:06:25:c6:cd:92: 23:df:e5:79:de:7d:1f:d2:3b:ed:a4:f1:95:ad:64:8e:58:63: a2:b5:8e:2a:19:2c:0c:92:87:62:3a:87:c1:af:30:b8:1e:87: d2:ad:11:1e:42:9f:be:a9:f7:6a:a6:b5:ed:ee:cb:cb:16:c7: 4b:7b:6c:ba:47:64:cc:ec:8e:9f:74:82:ea:a5:94:77:06:f1: 97:ad:e1:6a:e9:b8:b5:2e:d2:9e:ce:ea:70:7a:36:cc:08:e6: 06:46:0a:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOil8+S1dQA5yaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhhODU3MWYtMWNmMy00MzQxLWIzNTAtM2U0NDJlMTll MTFiMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNjE5MDAwMFowLzEtMCsGA1UEAxMk ZDcwY2YwNWUtMDQ5OS00NDlkLWI2MmItZjViZmQ0NDA1ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHzeuZLVfbOXam+c+HRNvCNS7UJS96hE/QxL DCg09qG3+a3lilcBb60ogzpv4e4f0Dgc1U3VLA89RDWU/wIMYwLKUtWhlyGjmEYQ RNPKC4TF+w5ZTy0g+BMhqJElrbQprWAUZxGxSJf/xTq2knMZuZ6Ta0n4NFaV/0s/ y4kPX9k2y8j0Uf3Gc1lJYaLkqC4X0gTkDrMYWHnpkB0y/sD1QS+UjBwO4gq5X5/A gimqx+GxpBmLn9vlAeEkpnNnVQKQIWACIMZvy21eA4WYs5vuAD3+dQiCZLs5vapI AJHZBfl9ZK4zAMTLPGJ3zTBwTgvm40C8Y/Wk/9OCz1jN8+L5pQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDkj056yrZy/XpfCjdtv5S3Ir0kYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4 NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0MmUxOWUxMWIvNDhhODU3MWYtMWNmMy00 MzQxLWIzNTAtM2U0NDJlMTllMTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDhhODU3MWYtMWNmMy00MzQxLWIz NTAtM2U0NDJlMTllMTFiLzQ4YTg1NzFmLTFjZjMtNDM0MS1iMzUwLTNlNDQyZTE5 ZTExYi5jcmwwHwYDVR0jBBgwFoAUS4srJxY3nsMB7cANZ9CYOY1jE+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0 MmUxOWUxMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGWfWSPiTmjTAE0x2DG6lY +X7kIL2aEJJrMh/83v5KuUk785OQ4QFnXRVBTmUEMCrZvwNp/rBA0vywj7OWV8Hi gqda6bGAqzUJ/2IE8XjXEy9KanPAvda1cBccc8O4/9DC9l1UlG5hUVQHcRRU2rUZ 49jLQo5fBWpi+hMYCGijiGZNv9MzJvHWJ+N3JcHoq6pc2WFmiI0xbs4D5jyHBiXG zZIj3+V53n0f0jvtpPGVrWSOWGOitY4qGSwMkodiOofBrzC4HofSrREeQp++qfdq prXt7svLFsdLe2y6R2TM7I6fdILqpZR3BvGXreFq6bi1LtKezupwejbMCOYGRgrU -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:50 2025 by rpki-client