$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft File: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft (raw, json) Hash identifier: dVMGnKxrQpbeEXkLhHOJOpP9acI2xzsHCvRxUTxKr1I= Subject key identifier: F4:9F:63:1A:55:58:0E:26:FC:2F:63:67:B5:79:94:0D:B2:9E:B7:6A Authority key identifier: 96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE Certificate issuer: /CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Certificate serial: 010D0C9F4328584B91596FF3FD746776F113C700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft Manifest number: 010D0C9F4328584073A830BD4C387D6BBE662601 Signing time: Sun 19 Oct 2025 00:00:03 +0000 Manifest this update: Sun 19 Oct 2025 00:00:03 +0000 Manifest next update: Tue 21 Oct 2025 00:00:00 +0000 Files and hashes: 1: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl (hash: aC8MqiZIVrAlnztkp/huGBAEFjYPw5QPaLk8k0Hlhx8=) 2: ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer (hash: FlOElAAKh/WY/MyS+EOmq0kTB4/upaVSjkTJzzw4Vbs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:59:6f:f3:fd:74:67:76:f1:13:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Validity Not Before: Oct 19 00:00:03 2025 GMT Not After : Oct 21 00:00:00 2025 GMT Subject: CN=191f0ba0-7f49-4213-9193-d5fc8e9a9624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:13:c8:c8:11:47:a8:1c:07:75:2b:55:e5:ad: c8:64:28:e0:0d:8e:c3:00:d3:8e:8b:12:1a:3d:7a: 84:00:eb:24:5e:58:5b:0f:b4:03:cf:fd:ff:ac:9d: 0a:33:35:53:ef:58:23:da:b8:a3:d9:e0:2d:09:c9: fe:29:df:1b:0d:f7:4b:49:fe:59:b4:13:27:f9:fd: f0:e8:e0:ce:e2:c3:33:e2:4d:8b:cb:ea:bd:c4:5a: f3:f9:06:57:b5:27:05:5f:79:f6:9c:53:3a:75:18: f8:f7:0e:8b:f0:26:ef:10:ed:24:2f:8e:40:d1:72: 3b:9c:c1:78:82:af:ec:80:7e:f6:55:15:e0:37:a1: 20:b5:0b:2e:8c:3f:55:20:1c:44:2e:dc:cc:ee:7b: 9e:a2:19:3e:7d:7e:3e:d5:85:4c:79:46:e1:95:76: 0d:b3:ea:0f:7a:e4:7c:ca:1d:07:c1:06:df:e6:f0: 97:7c:52:93:31:c5:79:aa:2c:03:28:c0:0a:8c:c7: 6c:7c:57:b1:5d:a9:d1:5e:f4:13:94:bd:dc:b3:7e: b5:3d:c7:35:99:b5:c7:e6:9d:69:44:dc:ac:15:88: e6:16:f2:98:23:76:7a:2b:8a:86:e0:b6:28:9c:49: b4:8f:0e:58:34:ee:04:f3:af:1d:38:13:f5:0c:86: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9F:63:1A:55:58:0E:26:FC:2F:63:67:B5:79:94:0D:B2:9E:B7:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl X509v3 Authority Key Identifier: keyid:96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:03:1b:71:02:b0:11:e5:ef:28:ee:90:0c:1b:3e:47:0a:b8: 5a:be:92:b0:aa:61:2f:92:44:ed:86:77:4b:cc:66:8f:da:ff: df:fb:35:a2:de:7e:ef:7c:e6:6a:54:c3:1c:2c:c8:5b:25:21: 1d:83:64:88:c5:d9:5e:67:21:56:40:56:5f:d4:01:8c:6d:fc: eb:f0:b4:58:ef:94:57:51:90:af:9a:fd:93:14:95:b7:ca:cc: ce:21:65:4a:37:37:55:58:3c:5d:3c:98:72:0f:75:c2:91:fa: 11:7b:fa:cf:f8:c3:7b:9c:43:d1:40:a0:50:1e:40:59:53:6e: 7e:b6:ba:41:a0:15:52:85:68:91:91:9c:48:95:d8:47:66:0c: 40:a0:92:97:1a:c3:32:0b:ea:1e:83:eb:14:12:b7:ac:b4:c5: 38:69:e7:c6:04:b5:ee:da:75:c4:75:b6:b2:76:92:8f:5e:96: b5:a7:c7:58:c1:a0:b3:76:8f:a2:60:e6:61:b1:85:77:d7:8f: 66:be:f9:4b:01:5d:e6:af:db:12:9c:cc:ce:de:18:ca:8c:96: bf:ef:17:77:06:2c:e2:f1:ed:a9:3c:e0:4a:39:a3:40:cb:22: e7:a1:e6:29:15:34:da:9c:85:e4:ff:35:87:66:1f:18:c9:e3: b0:e0:bc:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuRWW/z/XRndvETxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNiN2ZiZjQtNGRlZi00OTA0LTg3ZmQtZTU5OGJmOWNm MmUzMB4XDTI1MTAxOTAwMDAwM1oXDTI1MTAyMTAwMDAwMFowLzEtMCsGA1UEAxMk MTkxZjBiYTAtN2Y0OS00MjEzLTkxOTMtZDVmYzhlOWE5NjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxPIyBFHqBwHdStV5a3IZCjgDY7DANOOixIa PXqEAOskXlhbD7QDz/3/rJ0KMzVT71gj2rij2eAtCcn+Kd8bDfdLSf5ZtBMn+f3w 6ODO4sMz4k2Ly+q9xFrz+QZXtScFX3n2nFM6dRj49w6L8CbvEO0kL45A0XI7nMF4 gq/sgH72VRXgN6EgtQsujD9VIBxELtzM7nueohk+fX4+1YVMeUbhlXYNs+oPeuR8 yh0HwQbf5vCXfFKTMcV5qiwDKMAKjMdsfFexXanRXvQTlL3cs361Pcc1mbXH5p1p RNysFYjmFvKYI3Z6K4qG4LYonEm0jw5YNO4E868dOBP1DIZErwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPSfYxpVWA4m/C9jZ7V5lA2ynrdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80M2I3 ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4YmY5Y2YyZTMvNDNiN2ZiZjQtNGRlZi00 OTA0LTg3ZmQtZTU5OGJmOWNmMmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDNiN2ZiZjQtNGRlZi00OTA0LTg3 ZmQtZTU5OGJmOWNmMmUzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjlj ZjJlMy5jcmwwHwYDVR0jBBgwFoAUlkPJBsTL9xycPUlHFeE5cQeul74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80M2I3ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4 YmY5Y2YyZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYAxtxArAR5e8o7pAMGz5H CrhavpKwqmEvkkTthndLzGaP2v/f+zWi3n7vfOZqVMMcLMhbJSEdg2SIxdleZyFW QFZf1AGMbfzr8LRY75RXUZCvmv2TFJW3yszOIWVKNzdVWDxdPJhyD3XCkfoRe/rP +MN7nEPRQKBQHkBZU25+trpBoBVShWiRkZxIldhHZgxAoJKXGsMyC+oeg+sUEres tMU4aefGBLXu2nXEdbaydpKPXpa1p8dYwaCzdo+iYOZhsYV3149mvvlLAV3mr9sS nMzO3hjKjJa/7xd3Bizi8e2pPOBKOaNAyyLnoeYpFTTanIXk/zWHZh8YyeOw4Lx8 -----END CERTIFICATE-----Generated at Sun Oct 19 23:17:10 2025 by rpki-client