$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft File: 48a8571f-1cf3-4341-b350-3e442e19e11b.mft (raw, json) Hash identifier: u9p4yjyecPT+dI53Aaj7Eexy8knUriAAaHAC2M05lHg= Subject key identifier: 31:D9:EB:96:B4:91:A4:6C:00:C5:67:2B:F7:61:65:38:9A:04:65:FB Authority key identifier: 4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED Certificate issuer: /CN=48a8571f-1cf3-4341-b350-3e442e19e11b Certificate serial: 010D0C9F4328584BA71A038387015D707663C648 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft Manifest number: 010D0C9F4328584A5DC5281C72E93A22FA425359 Signing time: Sun 26 Oct 2025 19:00:03 +0000 Manifest this update: Sun 26 Oct 2025 19:00:03 +0000 Manifest next update: Wed 29 Oct 2025 19:00:00 +0000 Files and hashes: 1: 48a8571f-1cf3-4341-b350-3e442e19e11b.crl (hash: IOvj47/2ZsXKLxeUf++GTnKvvxJuCZxh1k775PTyGa4=) 2: e247fd63-326e-3aa2-a4e5-94338705d5c2.roa (hash: ooCoPYJtJPkdshHp+kAfvOPk7jA9KJP2GpnLYCawApQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:1a:03:83:87:01:5d:70:76:63:c6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a8571f-1cf3-4341-b350-3e442e19e11b Validity Not Before: Oct 26 19:00:03 2025 GMT Not After : Oct 29 19:00:00 2025 GMT Subject: CN=f703d2a5-d136-44b1-b9f7-41e0815c54ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:8f:b4:e1:85:b8:dc:1b:08:7a:87:fe:34: de:8d:64:31:6e:84:19:74:60:0c:2a:c2:13:29:6a: c2:f1:19:15:9f:56:b4:88:5d:46:32:21:c7:30:2a: fa:8f:38:3f:78:ef:66:fd:a1:37:8b:01:f6:e0:cb: cc:8b:a0:60:7a:27:51:de:69:ec:f6:34:33:f2:1b: f8:e4:33:32:e5:3b:c5:9c:44:ae:98:80:8b:95:c0: 3d:28:3c:87:af:10:96:35:25:2e:88:48:40:e4:7e: d9:63:db:68:4f:c6:cb:96:c7:2b:7a:24:bc:17:2b: d1:93:88:9f:64:5e:2f:a6:be:ec:86:3c:8a:de:d9: e1:0c:aa:c2:5c:40:e5:3a:0a:c1:3b:05:0b:a8:b7: 8e:91:f0:0a:0f:c8:4b:5f:e7:64:ea:5e:80:64:c3: 22:61:e9:d9:1c:30:42:6a:a9:56:6f:c4:21:c7:ee: 9e:b2:5d:13:2b:72:86:09:d9:8e:cb:c2:16:57:e8: df:1e:90:bf:76:35:a3:e4:75:a7:a4:a0:0e:ab:57: a6:a0:1d:44:ba:b4:30:34:29:c6:72:b7:7f:8e:4a: fb:e7:9f:09:01:46:41:43:a7:62:50:74:1c:ef:e6: c4:18:f1:26:63:09:79:70:e7:bb:3b:dd:28:51:12: 69:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:EB:96:B4:91:A4:6C:00:C5:67:2B:F7:61:65:38:9A:04:65:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl X509v3 Authority Key Identifier: keyid:4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c5:8a:3f:75:c3:05:e4:c6:f4:63:0e:8f:d5:65:9b:1e:f9: 76:5b:9e:bb:82:30:a8:ad:41:1c:d5:b0:b0:3b:1f:48:d5:cb: eb:2e:bd:69:02:48:ac:c3:09:11:87:c9:07:75:1b:41:47:41: 85:53:bb:1a:7e:a8:aa:9c:e0:99:5a:16:37:39:2b:38:a3:9d: 37:02:1d:2b:3d:7b:b9:9f:5e:a5:f3:e8:2c:cf:f0:bc:4c:ab: fd:7b:4e:9e:11:36:67:ce:00:28:87:41:44:51:7d:51:a6:90: 30:7e:e6:fa:2c:96:86:57:4d:81:af:cd:ef:7e:61:23:8c:c3: de:b8:e9:01:fa:66:e6:94:c6:b4:52:7d:1a:c6:b6:40:cf:ee: fc:19:70:c7:ec:d3:07:2b:cc:8b:28:66:30:7a:56:04:09:d3: 21:19:f5:1b:51:0c:e1:13:8a:4d:83:c3:3e:c0:6e:68:62:e9: fb:8d:82:cb:91:84:52:d3:ef:f0:bb:3d:be:ea:e6:4f:b9:e5: 55:95:df:fa:2a:70:f2:73:79:63:f6:50:aa:66:27:60:74:cb: f6:3a:3c:b5:7a:a7:22:95:fe:e4:bc:6f:a7:a4:fb:6b:9e:8e: 1c:b3:61:e7:8c:60:43:cc:0f:5d:b7:85:46:99:bb:55:6b:17: 2d:53:24:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEunGgODhwFdcHZjxkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhhODU3MWYtMWNmMy00MzQxLWIzNTAtM2U0NDJlMTll MTFiMB4XDTI1MTAyNjE5MDAwM1oXDTI1MTAyOTE5MDAwMFowLzEtMCsGA1UEAxMk ZjcwM2QyYTUtZDEzNi00NGIxLWI5ZjctNDFlMDgxNWM1NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjCPtOGFuNwbCHqH/jTejWQxboQZdGAMKsIT KWrC8RkVn1a0iF1GMiHHMCr6jzg/eO9m/aE3iwH24MvMi6BgeidR3mns9jQz8hv4 5DMy5TvFnESumICLlcA9KDyHrxCWNSUuiEhA5H7ZY9toT8bLlscreiS8FyvRk4if ZF4vpr7shjyK3tnhDKrCXEDlOgrBOwULqLeOkfAKD8hLX+dk6l6AZMMiYenZHDBC aqlWb8Qhx+6esl0TK3KGCdmOy8IWV+jfHpC/djWj5HWnpKAOq1emoB1EurQwNCnG crd/jkr7558JAUZBQ6diUHQc7+bEGPEmYwl5cOe7O90oURJpqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDHZ65a0kaRsAMVnK/dhZTiaBGX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4 NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0MmUxOWUxMWIvNDhhODU3MWYtMWNmMy00 MzQxLWIzNTAtM2U0NDJlMTllMTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDhhODU3MWYtMWNmMy00MzQxLWIz NTAtM2U0NDJlMTllMTFiLzQ4YTg1NzFmLTFjZjMtNDM0MS1iMzUwLTNlNDQyZTE5 ZTExYi5jcmwwHwYDVR0jBBgwFoAUS4srJxY3nsMB7cANZ9CYOY1jE+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0 MmUxOWUxMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZxYo/dcMF5Mb0Yw6P1WWb Hvl2W567gjCorUEc1bCwOx9I1cvrLr1pAkiswwkRh8kHdRtBR0GFU7safqiqnOCZ WhY3OSs4o503Ah0rPXu5n16l8+gsz/C8TKv9e06eETZnzgAoh0FEUX1RppAwfub6 LJaGV02Br83vfmEjjMPeuOkB+mbmlMa0Un0axrZAz+78GXDH7NMHK8yLKGYwelYE CdMhGfUbUQzhE4pNg8M+wG5oYun7jYLLkYRS0+/wuz2+6uZPueVVld/6KnDyc3lj 9lCqZidgdMv2Ojy1eqcilf7kvG+npPtrno4cs2HnjGBDzA9dt4VGmbtVaxctUyQH -----END CERTIFICATE-----Generated at Mon Oct 27 01:17:21 2025 by rpki-client