$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft File: 48e1915e-1132-4c62-a522-0f196fb03c8f.mft (raw, json) Hash identifier: 8WVuCZfWJuYbuDLqQeIjS1gIBgtLftkjBanicjFo9zQ= Subject key identifier: 3E:D7:1C:AF:E7:DC:60:7C:58:95:41:05:47:87:9D:1F:D8:84:38:48 Authority key identifier: 92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57 Certificate issuer: /CN=48e1915e-1132-4c62-a522-0f196fb03c8f Certificate serial: 010D0C9F4328584BB921B986628B9AED4046C800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft Manifest number: 010D0C9F4328584073A8432DDEA7EF12650B4F40 Signing time: Sun 02 Nov 2025 06:00:08 +0000 Manifest this update: Sun 02 Nov 2025 06:00:08 +0000 Manifest next update: Tue 04 Nov 2025 06:00:00 +0000 Files and hashes: 1: 0c386be9-e47f-3c2f-8593-dfacf6bebbd4.roa (hash: c8vvuYyLkflM4yxxkAGzJeg1uQRVlkjyoOj9qsbF+44=) 2: 48e1915e-1132-4c62-a522-0f196fb03c8f.crl (hash: YgbR2luuEq1lG3rh/sbs4wPPtQpaxJ4zsjQt8hpBau4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b9:21:b9:86:62:8b:9a:ed:40:46:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e1915e-1132-4c62-a522-0f196fb03c8f Validity Not Before: Nov 2 06:00:08 2025 GMT Not After : Nov 4 06:00:00 2025 GMT Subject: CN=1c8dec4b-009b-469b-b771-a0e8054e7ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:17:75:16:5c:fd:89:16:f9:18:48:96:f5:ec: 6a:7f:6d:d7:d8:d5:ca:8e:05:0b:27:2f:3e:52:08: 15:6e:8e:11:75:97:74:90:f9:47:a7:2d:58:bb:5c: 53:57:ac:d1:39:8f:81:81:ca:a2:92:1d:8a:5a:ed: ab:f4:69:bc:4e:bd:ec:a3:77:ee:57:b9:55:f7:68: cf:ea:88:d5:c4:6e:06:d6:8f:1e:8f:53:de:a8:e8: d5:e9:95:b1:58:26:eb:30:3e:e2:8e:87:dc:be:76: c2:e0:dc:01:dc:a9:d8:75:20:16:bf:b6:1c:27:b2: 69:bb:3c:da:19:ad:53:fe:91:2e:17:b1:c4:7b:49: b3:a2:c1:6f:1a:ea:79:f2:52:8e:0c:74:b7:90:53: 9d:65:fc:ee:7d:35:60:3b:a9:09:88:cb:4d:f0:59: a8:1a:f4:a0:07:96:85:91:f0:7b:4f:fc:a2:04:3f: d1:8b:a1:97:d0:b8:38:67:cb:11:40:81:a8:19:99: e9:41:60:de:38:34:56:83:21:f2:b7:6d:4e:cc:67: 09:13:da:6c:d6:a6:7a:bc:c0:1a:85:0d:c6:e1:6f: d6:c7:5d:2d:4d:25:7d:78:a3:84:0b:05:04:99:20: 77:ea:7a:29:16:69:35:b6:4b:a4:b1:2e:3c:b3:b7: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D7:1C:AF:E7:DC:60:7C:58:95:41:05:47:87:9D:1F:D8:84:38:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.crl X509v3 Authority Key Identifier: keyid:92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9f:9a:1f:88:6c:95:20:97:95:e4:92:01:7f:48:88:6d:87: e1:22:82:16:c2:84:e6:dc:7a:cd:b2:01:cb:7c:72:14:a3:c4: 9d:5b:12:44:59:e7:6f:f4:02:64:a2:c9:8f:03:47:29:2b:88: 9e:ed:c8:5d:72:a0:61:fb:55:56:0a:af:57:bb:30:57:c6:ee: bb:ac:18:8a:8c:24:ae:44:6b:2b:ff:57:9f:61:ef:b2:95:a5: d5:e4:85:8a:7c:b3:15:16:51:cc:25:11:1c:23:5e:b6:de:68: 76:3b:70:a7:a5:c1:1f:08:8b:72:7e:e8:7b:2e:7a:45:3b:d7: f4:e3:8f:79:dc:0d:30:56:19:7a:25:5f:6b:9a:29:9c:8f:80: 9a:af:0d:83:bd:4c:2d:4f:14:3a:9f:2c:7d:bd:68:3b:9b:56: de:ae:c6:00:1b:48:37:93:f0:45:de:98:9f:ca:fb:1a:41:55: de:5a:f9:b6:3d:6c:74:29:58:72:45:33:82:c7:dc:8c:b4:34: b6:cd:e5:fe:f7:60:cf:dd:11:2f:9b:98:46:88:91:44:7d:9a: 80:cb:3e:ed:eb:52:92:0e:96:99:5c:ec:b4:d6:4c:5c:25:b2: 5e:2c:63:7b:4b:29:5f:c3:0a:a4:f4:2c:ed:13:7d:9f:dc:8e: 28:3a:51:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu5IbmGYoua7UBGyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhlMTkxNWUtMTEzMi00YzYyLWE1MjItMGYxOTZmYjAz YzhmMB4XDTI1MTEwMjA2MDAwOFoXDTI1MTEwNDA2MDAwMFowLzEtMCsGA1UEAxMk MWM4ZGVjNGItMDA5Yi00NjliLWI3NzEtYTBlODA1NGU3Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Rd1Flz9iRb5GEiW9exqf23X2NXKjgULJy8+ UggVbo4RdZd0kPlHpy1Yu1xTV6zROY+Bgcqikh2KWu2r9Gm8Tr3so3fuV7lV92jP 6ojVxG4G1o8ej1PeqOjV6ZWxWCbrMD7ijofcvnbC4NwB3KnYdSAWv7YcJ7Jpuzza Ga1T/pEuF7HEe0mzosFvGup58lKODHS3kFOdZfzufTVgO6kJiMtN8FmoGvSgB5aF kfB7T/yiBD/Ri6GX0Lg4Z8sRQIGoGZnpQWDeODRWgyHyt21OzGcJE9ps1qZ6vMAa hQ3G4W/Wx10tTSV9eKOECwUEmSB36nopFmk1tkuksS48s7cuzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD7XHK/n3GB8WJVBBUeHnR/YhDhIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OGUx OTE1ZS0xMTMyLTRjNjItYTUyMi0wZjE5NmZiMDNjOGYvNDhlMTkxNWUtMTEzMi00 YzYyLWE1MjItMGYxOTZmYjAzYzhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDhlMTkxNWUtMTEzMi00YzYyLWE1 MjItMGYxOTZmYjAzYzhmLzQ4ZTE5MTVlLTExMzItNGM2Mi1hNTIyLTBmMTk2ZmIw M2M4Zi5jcmwwHwYDVR0jBBgwFoAUkm/s7ssK+QNqAmLbC9kRKgtDgVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OGUxOTE1ZS0xMTMyLTRjNjItYTUyMi0wZjE5 NmZiMDNjOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1n5ofiGyVIJeV5JIBf0iI bYfhIoIWwoTm3HrNsgHLfHIUo8SdWxJEWedv9AJkosmPA0cpK4ie7chdcqBh+1VW Cq9XuzBXxu67rBiKjCSuRGsr/1efYe+ylaXV5IWKfLMVFlHMJREcI1623mh2O3Cn pcEfCItyfuh7LnpFO9f044953A0wVhl6JV9rmimcj4Carw2DvUwtTxQ6nyx9vWg7 m1bersYAG0g3k/BF3pifyvsaQVXeWvm2PWx0KVhyRTOCx9yMtDS2zeX+92DP3REv m5hGiJFEfZqAyz7t61KSDpaZXOy01kxcJbJeLGN7Sylfwwqk9CztE32f3I4oOlF9 -----END CERTIFICATE-----Generated at Sun Nov 2 07:39:57 2025 by rpki-client