$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft File: 48a8571f-1cf3-4341-b350-3e442e19e11b.mft (raw, json) Hash identifier: 6XmprmxWn2oBb6AVasgjPL5pWvD8yZ2T1fwg9F9nXFw= Subject key identifier: FA:25:8E:BA:59:65:A0:6F:82:1E:8B:2D:7A:A8:05:67:C1:FD:69:75 Authority key identifier: 4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED Certificate issuer: /CN=48a8571f-1cf3-4341-b350-3e442e19e11b Certificate serial: 010D0C9F4328584A6E6D661C5FB45125795D59C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft Manifest number: 010D0C9F4328584A5DC5281C72E93A22FA4252E7 Signing time: Sun 06 Jul 2025 19:00:04 +0000 Manifest this update: Sun 06 Jul 2025 19:00:04 +0000 Manifest next update: Wed 09 Jul 2025 19:00:00 +0000 Files and hashes: 1: 48a8571f-1cf3-4341-b350-3e442e19e11b.crl (hash: DQ3BXMaSQO0w/NBYGdXDTqHVQ5Isal+Msxvzzv9t9U4=) 2: e247fd63-326e-3aa2-a4e5-94338705d5c2.roa (hash: Pvtzz5dSEOMqr/TXPyLT4UYn9RAqe18KysRoULb8hbc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6e:6d:66:1c:5f:b4:51:25:79:5d:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a8571f-1cf3-4341-b350-3e442e19e11b Validity Not Before: Jul 6 19:00:04 2025 GMT Not After : Jul 9 19:00:00 2025 GMT Subject: CN=12b1ef51-be1e-4c67-8152-d43834f58418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:56:90:b7:c0:6b:59:0d:23:86:ff:75:5e:f3: 2e:96:bb:c6:6b:9c:09:2d:ca:13:55:12:69:2f:5a: 61:9b:74:f2:3a:67:94:fc:a6:7d:cd:f3:2d:fc:9a: 82:85:62:d8:fe:67:90:78:1c:0d:1c:a8:53:b3:04: 6e:7b:aa:df:e2:a9:eb:dd:a0:aa:80:e3:df:ce:34: a9:30:59:ec:87:18:a8:d3:15:92:86:e8:4a:09:df: 6e:21:8c:bf:0f:d2:93:79:39:42:f2:50:91:4e:71: 95:3c:b0:39:a2:ed:ac:17:34:0d:14:83:a0:dd:9f: 7f:22:dd:1e:4d:48:0f:da:3c:fa:b5:b3:8d:19:c2: 05:c6:ba:51:51:6d:c7:54:d1:28:9e:2d:c7:23:97: 5b:e2:20:20:44:8b:d9:49:48:d3:75:df:52:55:bc: c3:99:3f:fe:15:96:43:0a:95:4d:51:16:91:89:72: 78:92:67:46:6d:53:6a:df:cb:5c:20:54:1a:09:e8: c8:4c:ef:14:65:2a:b1:bc:a0:c6:ee:a1:81:d3:ef: b7:3c:7f:49:18:06:db:10:ce:7d:f2:e7:37:53:cd: ce:b1:48:e1:98:7b:76:46:39:71:4c:82:20:9f:e3: 23:fa:f9:12:94:b1:5b:e0:5b:88:78:9c:cd:26:e7: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:8E:BA:59:65:A0:6F:82:1E:8B:2D:7A:A8:05:67:C1:FD:69:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl X509v3 Authority Key Identifier: keyid:4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c3:9e:68:c6:ad:54:e9:02:96:df:ac:ea:0d:1f:3f:11:83: ee:0e:ac:ec:d6:cb:4a:f4:34:ed:91:ba:9e:c1:4d:f7:e8:52: 36:54:b7:9a:a0:a2:51:81:a9:93:24:98:b4:b5:67:59:df:34: 53:95:7c:8f:87:a4:fe:ca:9c:e0:86:ba:f2:ff:cc:18:f9:bf: 5a:38:7d:98:b2:cd:24:4c:62:2b:69:b6:31:a9:9a:bc:1b:3f: 93:14:b7:9d:d7:55:64:a1:a1:3a:26:86:8c:29:64:2f:c8:86: f6:77:a5:1c:40:59:11:74:7e:0b:8a:86:59:b9:88:63:ee:69: 73:00:eb:db:8b:0a:fc:ea:90:87:05:18:4c:86:d0:89:7f:af: bd:d1:a4:7c:07:44:df:77:ea:59:06:d5:f7:a9:e4:31:c3:0c: 09:27:5f:31:5a:61:fd:09:b5:c0:e2:b6:c1:8d:b9:e7:e9:15: 54:7f:32:21:24:70:c2:be:ff:65:94:b2:33:e0:ee:ea:3f:35: 1b:fc:3b:d8:a6:b2:31:94:ad:83:c5:34:8f:36:d9:14:54:cc: bd:f4:ea:9b:c9:b0:01:c1:34:c2:f0:10:b1:30:60:95:ed:73: 60:6c:3b:78:38:93:e8:9e:e2:3d:80:62:25:09:b5:8b:7e:76: ca:a2:94:41 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpubWYcX7RRJXldWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhhODU3MWYtMWNmMy00MzQxLWIzNTAtM2U0NDJlMTll MTFiMB4XDTI1MDcwNjE5MDAwNFoXDTI1MDcwOTE5MDAwMFowLzEtMCsGA1UEAxMk MTJiMWVmNTEtYmUxZS00YzY3LTgxNTItZDQzODM0ZjU4NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVaQt8BrWQ0jhv91XvMulrvGa5wJLcoTVRJp L1phm3TyOmeU/KZ9zfMt/JqChWLY/meQeBwNHKhTswRue6rf4qnr3aCqgOPfzjSp MFnshxio0xWShuhKCd9uIYy/D9KTeTlC8lCRTnGVPLA5ou2sFzQNFIOg3Z9/It0e TUgP2jz6tbONGcIFxrpRUW3HVNEoni3HI5db4iAgRIvZSUjTdd9SVbzDmT/+FZZD CpVNURaRiXJ4kmdGbVNq38tcIFQaCejITO8UZSqxvKDG7qGB0++3PH9JGAbbEM59 8uc3U83OsUjhmHt2RjlxTIIgn+Mj+vkSlLFb4FuIeJzNJufhRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPoljrpZZaBvgh6LLXqoBWfB/Wl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4 NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0MmUxOWUxMWIvNDhhODU3MWYtMWNmMy00 MzQxLWIzNTAtM2U0NDJlMTllMTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDhhODU3MWYtMWNmMy00MzQxLWIz NTAtM2U0NDJlMTllMTFiLzQ4YTg1NzFmLTFjZjMtNDM0MS1iMzUwLTNlNDQyZTE5 ZTExYi5jcmwwHwYDVR0jBBgwFoAUS4srJxY3nsMB7cANZ9CYOY1jE+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0 MmUxOWUxMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdw55oxq1U6QKW36zqDR8/ EYPuDqzs1stK9DTtkbqewU336FI2VLeaoKJRgamTJJi0tWdZ3zRTlXyPh6T+ypzg hrry/8wY+b9aOH2Yss0kTGIrabYxqZq8Gz+TFLed11VkoaE6JoaMKWQvyIb2d6Uc QFkRdH4LioZZuYhj7mlzAOvbiwr86pCHBRhMhtCJf6+90aR8B0Tfd+pZBtX3qeQx wwwJJ18xWmH9CbXA4rbBjbnn6RVUfzIhJHDCvv9llLIz4O7qPzUb/DvYprIxlK2D xTSPNtkUVMy99OqbybABwTTC8BCxMGCV7XNgbDt4OJPonuI9gGIlCbWLfnbKopRB -----END CERTIFICATE-----Generated at Mon Jul 7 08:15:24 2025 by rpki-client