$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft File: 48a8571f-1cf3-4341-b350-3e442e19e11b.mft (raw, json) Hash identifier: sRUWst0FL20LgEefm9SONhnRoJM0YlEKzY7+PbPwbGE= Subject key identifier: A1:26:A2:77:31:FC:B5:58:D3:85:BE:7D:CF:04:50:F3:83:EA:0D:54 Authority key identifier: 4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED Certificate issuer: /CN=48a8571f-1cf3-4341-b350-3e442e19e11b Certificate serial: 010D0C9F4328584AEED8DC532F358E7ED042D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft Manifest number: 010D0C9F4328584A5DC5281C72E93A22FA425315 Signing time: Thu 21 Aug 2025 19:00:03 +0000 Manifest this update: Thu 21 Aug 2025 19:00:03 +0000 Manifest next update: Sun 24 Aug 2025 19:00:00 +0000 Files and hashes: 1: 48a8571f-1cf3-4341-b350-3e442e19e11b.crl (hash: xolNDGSDS6M9PeLY74plLCaNFKx2DXf7F51+JGN/b2Q=) 2: e247fd63-326e-3aa2-a4e5-94338705d5c2.roa (hash: Pvtzz5dSEOMqr/TXPyLT4UYn9RAqe18KysRoULb8hbc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:d8:dc:53:2f:35:8e:7e:d0:42:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a8571f-1cf3-4341-b350-3e442e19e11b Validity Not Before: Aug 21 19:00:03 2025 GMT Not After : Aug 24 19:00:00 2025 GMT Subject: CN=17943e88-fd2b-4b16-b6d1-0aa77a1cf6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:50:a9:2e:c5:af:4d:1d:3c:8f:74:d1:a1:80: 5a:32:af:1b:7f:72:4f:12:97:70:c1:ce:9b:5b:f2: e8:f1:e3:38:0e:e0:f2:52:81:11:12:45:41:27:ae: f0:23:1e:e2:b1:45:a7:54:21:c9:2c:5f:73:b0:57: b5:17:4e:b9:90:d5:c6:ca:e1:6d:3c:f8:8c:8c:fc: d4:4e:d5:c1:67:47:ee:bf:c3:33:cf:6d:6c:6f:a4: 48:0b:26:6e:12:bb:8a:34:36:9a:f2:d9:de:6e:c3: 29:64:50:9d:0c:9f:a9:c4:8f:72:15:45:c0:30:c1: 8c:2f:8f:7e:38:72:e9:53:31:f9:eb:7a:7e:95:60: 57:0e:0a:32:6f:ec:43:c4:4d:d6:21:c6:13:bd:0c: 93:b6:12:38:fa:97:3a:ee:c5:b6:79:fd:25:18:2a: b5:83:cb:06:4c:ed:2e:e6:49:5d:c4:21:e7:cb:17: 5d:7d:9c:a5:b3:68:00:74:b0:b1:0f:4a:7e:1d:34: b4:7c:27:b7:3e:e7:d2:ca:cc:87:de:58:f2:26:41: 12:27:8b:7d:1c:da:ed:c0:65:3f:ff:43:3c:79:0b: 64:e6:9f:1a:75:12:61:10:a8:cf:8e:c4:4d:bf:b7: da:4c:4c:45:5f:2b:09:a4:74:5e:7a:17:5e:fd:db: 10:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:26:A2:77:31:FC:B5:58:D3:85:BE:7D:CF:04:50:F3:83:EA:0D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl X509v3 Authority Key Identifier: keyid:4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:31:2f:03:1a:49:a0:f9:a4:2c:e6:70:7b:12:ff:22:35:86: 40:c0:11:b3:b0:db:a4:db:78:3e:46:f8:64:f6:e4:21:08:79: 31:bb:67:be:31:59:bb:cc:e6:69:51:d3:1b:80:7a:91:e4:01: c4:ab:a0:cc:45:81:f2:84:96:85:49:59:82:f1:2b:1e:a3:25: e1:97:9d:7b:f4:19:a7:48:e2:8d:9e:20:6d:12:ea:0b:29:b1: 3e:54:8d:be:fe:95:2f:1e:cc:1e:3e:fa:1f:6d:2a:c7:50:6b: 56:ae:9e:2c:b7:3a:2f:af:0c:b4:af:83:b3:21:e4:23:39:7a: db:74:a3:f8:5f:f7:6f:8e:40:92:3e:2a:47:36:76:6d:5e:b0: 77:1e:c8:00:3c:36:db:05:6e:b2:f4:84:66:28:73:30:10:1e: 97:a7:e2:ac:db:fe:fb:2a:14:b2:41:0a:27:28:3b:4d:1d:a2: b3:78:95:ce:a7:ef:19:4e:a5:1f:ef:a0:48:fb:3e:af:87:9b: 1e:c6:fb:04:da:f5:da:17:65:69:67:44:93:af:c3:5c:ef:05: f7:cc:97:7f:ac:43:3b:f8:91:0e:b1:5c:6c:74:95:68:ed:83: b4:e1:e5:74:e1:78:c2:94:cf:35:47:b9:40:73:5a:6f:8d:03: 66:36:36:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEru2NxTLzWOftBC2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhhODU3MWYtMWNmMy00MzQxLWIzNTAtM2U0NDJlMTll MTFiMB4XDTI1MDgyMTE5MDAwM1oXDTI1MDgyNDE5MDAwMFowLzEtMCsGA1UEAxMk MTc5NDNlODgtZmQyYi00YjE2LWI2ZDEtMGFhNzdhMWNmNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFCpLsWvTR08j3TRoYBaMq8bf3JPEpdwwc6b W/Lo8eM4DuDyUoEREkVBJ67wIx7isUWnVCHJLF9zsFe1F065kNXGyuFtPPiMjPzU TtXBZ0fuv8Mzz21sb6RICyZuEruKNDaa8tnebsMpZFCdDJ+pxI9yFUXAMMGML49+ OHLpUzH563p+lWBXDgoyb+xDxE3WIcYTvQyTthI4+pc67sW2ef0lGCq1g8sGTO0u 5kldxCHnyxddfZyls2gAdLCxD0p+HTS0fCe3PufSysyH3ljyJkESJ4t9HNrtwGU/ /0M8eQtk5p8adRJhEKjPjsRNv7faTExFXysJpHReehde/dsQUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKEmoncx/LVY04W+fc8EUPOD6g1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4 NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0MmUxOWUxMWIvNDhhODU3MWYtMWNmMy00 MzQxLWIzNTAtM2U0NDJlMTllMTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDhhODU3MWYtMWNmMy00MzQxLWIz NTAtM2U0NDJlMTllMTFiLzQ4YTg1NzFmLTFjZjMtNDM0MS1iMzUwLTNlNDQyZTE5 ZTExYi5jcmwwHwYDVR0jBBgwFoAUS4srJxY3nsMB7cANZ9CYOY1jE+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0 MmUxOWUxMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiMS8DGkmg+aQs5nB7Ev8i NYZAwBGzsNuk23g+Rvhk9uQhCHkxu2e+MVm7zOZpUdMbgHqR5AHEq6DMRYHyhJaF SVmC8SseoyXhl5179BmnSOKNniBtEuoLKbE+VI2+/pUvHswePvofbSrHUGtWrp4s tzovrwy0r4OzIeQjOXrbdKP4X/dvjkCSPipHNnZtXrB3HsgAPDbbBW6y9IRmKHMw EB6Xp+Ks2/77KhSyQQonKDtNHaKzeJXOp+8ZTqUf76BI+z6vh5sexvsE2vXaF2Vp Z0STr8Nc7wX3zJd/rEM7+JEOsVxsdJVo7YO04eV04XjClM81R7lAc1pvjQNmNjbJ -----END CERTIFICATE-----Generated at Fri Aug 22 01:11:05 2025 by rpki-client