$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft File: 48c4aba6-5e67-450a-b4a4-647523380d01.mft (raw, json) Hash identifier: gkBQc+TU2w3xNEl9iC9pec0LI1IGF6nilnkUI27XK+A= Subject key identifier: 4E:E3:95:BA:D5:02:F8:46:70:D2:62:74:AC:D4:2E:1A:5D:C3:73:79 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584BBFA553B5C2BD6FB3472D7200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft Manifest number: 010D0C9F4328584AC7335B8FD03D8085210CB35F Signing time: Tue 04 Nov 2025 14:00:08 +0000 Manifest this update: Tue 04 Nov 2025 14:00:08 +0000 Manifest next update: Thu 06 Nov 2025 14:00:00 +0000 Files and hashes: 1: 0952e798-9d39-3263-bdb3-03a59c0c85e4.roa (hash: OWBxu/jWsJN8qicswhGvyhLpYDx1jy3Bwf3mXQ5JV28=) 2: 266b72c7-068e-3e59-931f-459ec4f0f705.roa (hash: Ls4aMC+GKDShnXWeQSbA1bWDQxcfhGHpWhFLunUNxzU=) 3: 3f7e0d16-021d-374b-b2b4-3923362ea427.roa (hash: x+/YYV9maritLYXmB2kVUHWbIRSmrDZFxml9TcnfZ6Q=) 4: 48c4aba6-5e67-450a-b4a4-647523380d01.crl (hash: svywfSsybjEIKmZ2UIBmlZ70iUSFaj/ro0pKOY4y094=) 5: 8a33a951-e355-313c-9b36-7f71a8dc82c0.roa (hash: JHgfxuwvKgl2LjQMGeQZbFjTWKPvi4rm+h4qGW215ng=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:53:b5:c2:bd:6f:b3:47:2d:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Nov 4 14:00:08 2025 GMT Not After : Nov 6 14:00:00 2025 GMT Subject: CN=07346ef0-ca19-49fe-9cbe-f359fb23797d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:54:57:64:de:2d:39:05:21:93:a9:ec:1b:ff: 39:48:47:f9:41:e7:18:3e:1d:d7:9f:af:99:79:3a: 7f:d9:f1:21:52:a7:73:63:bf:66:26:cb:68:79:39: 1e:b5:84:67:30:1c:8e:b3:98:87:54:a6:7b:a2:a7: e8:e5:91:2f:75:d7:d6:7f:0e:43:a0:05:dc:42:46: 46:9f:49:bc:b6:94:1d:d5:6a:6a:bd:5e:8b:0e:38: 2b:5d:15:60:88:ac:d4:ae:11:52:4f:6a:38:18:cd: 28:38:03:32:95:5b:0b:a0:e6:fe:3f:3e:1a:b0:d9: 61:3d:13:09:76:7c:b7:92:48:eb:6c:82:e9:03:fa: ae:d9:d1:27:f5:44:d3:15:fd:4c:f4:93:de:3a:dd: 03:35:69:f3:36:ce:f5:40:85:4e:fa:2a:4f:66:34: 4c:91:0a:14:26:b0:d0:14:79:e3:bf:5d:e5:de:5f: 80:c2:84:01:75:89:5a:0b:94:66:c2:06:89:84:79: 4f:b7:1d:c0:44:38:6e:77:db:69:31:34:2f:1f:84: c2:06:36:96:76:62:dc:60:b6:6a:a9:f7:f2:88:06: 68:81:44:44:00:a2:6f:75:d4:9d:0b:61:66:a3:b3: 45:73:c9:ca:10:ad:c9:c6:7e:e5:9f:d2:be:83:5f: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E3:95:BA:D5:02:F8:46:70:D2:62:74:AC:D4:2E:1A:5D:C3:73:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:85:06:d8:52:a2:29:d7:ee:8c:4a:5f:d0:66:b2:3d:9d:50: 79:a6:ca:61:c8:d0:f4:2d:5b:0c:34:bb:89:d7:04:d0:59:f8: dc:5c:27:65:fa:ff:ea:98:97:2e:4f:2c:6d:4d:12:e4:37:fa: 2d:cc:75:6a:3a:b3:ed:51:45:13:16:7f:5b:3e:a3:77:89:9f: 55:d7:c8:94:fd:35:e0:bc:ba:7d:da:c2:6f:ed:0a:08:e0:ce: df:a7:00:5e:88:29:7a:99:dd:29:26:9b:d6:6f:53:71:06:d5: 9e:08:17:42:48:98:ff:e9:f3:fd:aa:ae:1a:07:9f:49:dd:c9: 69:97:02:43:ad:71:03:aa:eb:6b:97:fc:9f:ba:41:d8:3f:2d: 54:2a:c6:8a:ba:95:25:60:b6:ea:7a:fb:68:bb:81:f6:f4:4f: 2f:3d:1f:ee:0f:d0:4c:e6:d4:d4:fd:0f:47:ee:35:9f:64:05: b5:85:dd:69:c9:91:f8:fe:f2:56:c8:48:23:9d:a3:b3:24:14: 2d:4e:68:cd:10:95:3b:69:88:e0:12:ed:ab:35:5b:d1:c4:5c: 09:8d:11:59:4f:c4:13:e6:12:b7:44:97:52:8e:e3:ba:dc:61: 8d:e5:51:d0:f0:20:8c:08:a6:d6:61:85:b6:30:57:c2:19:b1: 1b:39:9d:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/pVO1wr1vs0ctcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI1MTEwNDE0MDAwOFoXDTI1MTEwNjE0MDAwMFowLzEtMCsGA1UEAxMk MDczNDZlZjAtY2ExOS00OWZlLTljYmUtZjM1OWZiMjM3OTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1RXZN4tOQUhk6nsG/85SEf5QecYPh3Xn6+Z eTp/2fEhUqdzY79mJstoeTketYRnMByOs5iHVKZ7oqfo5ZEvddfWfw5DoAXcQkZG n0m8tpQd1WpqvV6LDjgrXRVgiKzUrhFST2o4GM0oOAMylVsLoOb+Pz4asNlhPRMJ dny3kkjrbILpA/qu2dEn9UTTFf1M9JPeOt0DNWnzNs71QIVO+ipPZjRMkQoUJrDQ FHnjv13l3l+AwoQBdYlaC5RmwgaJhHlPtx3ARDhud9tpMTQvH4TCBjaWdmLcYLZq qffyiAZogUREAKJvddSdC2Fmo7NFc8nKEK3Jxn7ln9K+g18T7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE7jlbrVAvhGcNJidKzULhpdw3N5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvNDhjNGFiYTYtNWU2Ny00 NTBhLWI0YTQtNjQ3NTIzMzgwZDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7hQbYUqIp1+6MSl/QZrI9 nVB5psphyND0LVsMNLuJ1wTQWfjcXCdl+v/qmJcuTyxtTRLkN/otzHVqOrPtUUUT Fn9bPqN3iZ9V18iU/TXgvLp92sJv7QoI4M7fpwBeiCl6md0pJpvWb1NxBtWeCBdC SJj/6fP9qq4aB59J3clplwJDrXEDqutrl/yfukHYPy1UKsaKupUlYLbqevtou4H2 9E8vPR/uD9BM5tTU/Q9H7jWfZAW1hd1pyZH4/vJWyEgjnaOzJBQtTmjNEJU7aYjg Eu2rNVvRxFwJjRFZT8QT5hK3RJdSjuO63GGN5VHQ8CCMCKbWYYW2MFfCGbEbOZ3s -----END CERTIFICATE-----Generated at Wed Nov 5 12:30:59 2025 by rpki-client