$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft File: fa43a831-b765-4adf-a0f0-2882a5c07fab.mft (raw, json) Hash identifier: CFpLPr+Sy7MrHAgS7inCfwOwBAXTodIqPIYKRm7kdh0= Subject key identifier: 85:95:8E:A5:19:4F:E4:6D:71:7E:50:EF:B7:6F:96:C8:F3:86:38:A5 Authority key identifier: 9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C Certificate issuer: /CN=fa43a831-b765-4adf-a0f0-2882a5c07fab Certificate serial: 010D0C9F4328584B71F14775570AFBE9EDA75780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft Manifest number: 010D0C9F432858435A7F9D5337301AC5FFE31AE6 Signing time: Tue 07 Oct 2025 18:00:08 +0000 Manifest this update: Tue 07 Oct 2025 18:00:08 +0000 Manifest next update: Fri 10 Oct 2025 18:00:00 +0000 Files and hashes: 1: fa43a831-b765-4adf-a0f0-2882a5c07fab.crl (hash: dQxki+MrDZMpZ23E11mqA+BAKjzTMgiXLv+xRNGgokQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:f1:47:75:57:0a:fb:e9:ed:a7:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa43a831-b765-4adf-a0f0-2882a5c07fab Validity Not Before: Oct 7 18:00:08 2025 GMT Not After : Oct 10 18:00:00 2025 GMT Subject: CN=4b40a329-f6ef-40bf-aa30-db4ba63d0619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:51:8c:51:cd:1e:e4:36:ab:93:98:59:bc: 97:74:99:28:6a:25:0e:9c:4f:be:8e:50:e3:9f:ec: 6a:a1:1c:37:b8:ca:66:a6:81:99:8e:d8:ca:2f:28: 62:e8:64:51:b4:58:db:05:7d:6d:7a:76:57:ca:3b: 40:80:ce:7f:6a:eb:8d:90:7a:da:d1:38:0a:6c:fc: f5:37:3f:33:de:f4:4c:e9:1a:42:2c:a5:66:5f:bf: 2c:95:02:d2:32:67:d2:9f:89:ec:f6:6d:6b:75:1c: e7:e7:f4:58:8e:17:78:74:9b:29:c2:0e:3f:77:93: c9:49:58:4d:28:b5:23:07:69:62:17:59:a4:94:46: ba:a5:83:19:59:49:42:2e:fd:22:82:14:e7:2a:eb: 85:24:05:64:70:73:77:f5:cb:95:ad:5d:f7:6d:cc: 5a:0e:ca:99:c1:0e:60:bb:4d:bb:2b:32:14:f4:56: 49:ee:cc:e9:ba:a6:3d:b6:d7:66:bf:2a:7c:5b:44: 23:1a:a8:be:eb:8a:5f:33:66:72:ce:3a:55:13:3e: 43:c8:12:70:a2:8a:70:19:1d:f6:e4:01:c7:9f:58: b1:05:4f:a0:20:70:1a:f2:c0:4f:d0:d0:c2:7d:18: 07:bd:f3:b6:d9:87:07:4c:43:ac:d0:37:c4:b6:83: fc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:95:8E:A5:19:4F:E4:6D:71:7E:50:EF:B7:6F:96:C8:F3:86:38:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.crl X509v3 Authority Key Identifier: keyid:9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:bd:5f:98:25:70:39:50:68:6a:9f:cb:c2:96:b2:6b:85:61: eb:36:f8:1e:c2:fa:2c:4a:59:9c:14:66:d7:b6:83:17:d9:6a: 3a:e5:d6:5f:87:f7:28:1a:99:19:53:aa:8c:7b:77:30:68:4b: 38:9f:22:6f:b0:45:1e:6c:2b:57:37:20:26:e9:cb:11:d5:aa: 2d:d4:de:49:a0:fc:3d:8d:8f:27:7d:61:58:93:00:ef:51:50: 66:c0:40:b8:4b:20:18:f6:6f:ee:0d:27:6c:0b:a4:f1:1f:a0: de:05:b6:80:49:9f:62:40:95:79:b4:dc:9f:12:87:d0:6f:d7: e4:f3:de:29:a4:bc:f5:c5:7d:03:13:46:50:7b:fb:ea:23:d4: 5b:c7:74:65:4f:c4:65:e5:90:89:2b:27:10:7a:ef:2d:55:25: a4:f5:39:45:9f:8b:6d:92:15:48:5c:7a:de:65:8b:14:58:a3: 2d:fb:42:f4:c8:e1:aa:ed:c2:25:cd:5b:c2:3b:c9:90:76:3b: 9f:f0:14:ff:3c:78:5f:10:ec:97:c5:74:ce:81:48:f1:e9:d2: 09:ce:be:69:c3:fe:5a:29:06:27:3c:84:dc:cf:b3:19:6f:0d: 47:a0:1b:f5:61:df:53:d6:21:0a:e1:3a:ec:97:f5:91:07:bc: 6f:ea:ce:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEtx8Ud1Vwr76e2nV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmE0M2E4MzEtYjc2NS00YWRmLWEwZjAtMjg4MmE1YzA3 ZmFiMB4XDTI1MTAwNzE4MDAwOFoXDTI1MTAxMDE4MDAwMFowLzEtMCsGA1UEAxMk NGI0MGEzMjktZjZlZi00MGJmLWFhMzAtZGI0YmE2M2QwNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka1RjFHNHuQ2q5OYWbyXdJkoaiUOnE++jlDj n+xqoRw3uMpmpoGZjtjKLyhi6GRRtFjbBX1tenZXyjtAgM5/auuNkHra0TgKbPz1 Nz8z3vRM6RpCLKVmX78slQLSMmfSn4ns9m1rdRzn5/RYjhd4dJspwg4/d5PJSVhN KLUjB2liF1mklEa6pYMZWUlCLv0ighTnKuuFJAVkcHN39cuVrV33bcxaDsqZwQ5g u027KzIU9FZJ7szpuqY9ttdmvyp8W0QjGqi+64pfM2ZyzjpVEz5DyBJwoopwGR32 5AHHn1ixBU+gIHAa8sBP0NDCfRgHvfO22YcHTEOs0DfEtoP83QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIWVjqUZT+RtcX5Q77dvlsjzhjilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mYTQz YTgzMS1iNzY1LTRhZGYtYTBmMC0yODgyYTVjMDdmYWIvZmE0M2E4MzEtYjc2NS00 YWRmLWEwZjAtMjg4MmE1YzA3ZmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmE0M2E4MzEtYjc2NS00YWRmLWEw ZjAtMjg4MmE1YzA3ZmFiL2ZhNDNhODMxLWI3NjUtNGFkZi1hMGYwLTI4ODJhNWMw N2ZhYi5jcmwwHwYDVR0jBBgwFoAUnDV5RMCpzbFgsrWw68oHQh0U2pwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mYTQzYTgzMS1iNzY1LTRhZGYtYTBmMC0yODgy YTVjMDdmYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDvV+YJXA5UGhqn8vClrJr hWHrNvgewvosSlmcFGbXtoMX2Wo65dZfh/coGpkZU6qMe3cwaEs4nyJvsEUebCtX NyAm6csR1aot1N5JoPw9jY8nfWFYkwDvUVBmwEC4SyAY9m/uDSdsC6TxH6DeBbaA SZ9iQJV5tNyfEofQb9fk894ppLz1xX0DE0ZQe/vqI9Rbx3RlT8Rl5ZCJKycQeu8t VSWk9TlFn4ttkhVIXHreZYsUWKMt+0L0yOGq7cIlzVvCO8mQdjuf8BT/PHhfEOyX xXTOgUjx6dIJzr5pw/5aKQYnPITcz7MZbw1HoBv1Yd9T1iEK4Trsl/WRB7xv6s6S -----END CERTIFICATE-----Generated at Wed Oct 8 17:27:51 2025 by rpki-client