$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft File: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft (raw, json) Hash identifier: 7CyJzZueVUBqZlFrk2smDJt46P2PsLR2XExfnLYuVh4= Subject key identifier: 85:BF:3A:1D:B3:CD:39:2C:C5:E6:D6:E8:3E:64:FD:AE:D6:C1:2F:94 Authority key identifier: 96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE Certificate issuer: /CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Certificate serial: 010D0C9F4328584B3538DC3D28DC398AA5298C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft Manifest number: 010D0C9F4328584073A830BD4C387D6BBE6625E0 Signing time: Tue 16 Sep 2025 00:00:03 +0000 Manifest this update: Tue 16 Sep 2025 00:00:03 +0000 Manifest next update: Fri 19 Sep 2025 00:00:00 +0000 Files and hashes: 1: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl (hash: M7NhXTZ0+wn1Gi8p3h7FsaueNfz3gHxsq78/SIexuF0=) 2: ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer (hash: FlOElAAKh/WY/MyS+EOmq0kTB4/upaVSjkTJzzw4Vbs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:38:dc:3d:28:dc:39:8a:a5:29:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Validity Not Before: Sep 16 00:00:03 2025 GMT Not After : Sep 19 00:00:00 2025 GMT Subject: CN=16958cac-159c-4eda-a0bd-35498923d7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:19:dc:d2:61:3a:96:13:06:d3:19:c1:c0: 6c:a5:6f:37:ba:18:bf:3b:2c:32:df:a9:14:de:72: dc:51:99:1f:3b:8a:37:57:01:27:f7:8a:7e:eb:ba: 3c:ea:b9:d9:0a:71:38:ad:16:de:5e:b2:13:d9:88: d1:55:42:2c:3a:92:6c:bd:ac:41:6b:55:51:16:1b: d1:6c:30:1e:71:4f:7e:2a:5a:3e:91:69:f9:20:3d: d8:27:4d:67:ba:65:7e:71:9d:ab:01:10:c6:5a:46: 6f:f5:31:80:06:cd:02:93:c9:94:80:1b:79:8b:28: 71:d9:88:80:70:1f:80:a8:09:0f:c8:35:b9:15:59: 8f:c1:21:52:11:39:d6:2d:5d:e0:18:3a:01:19:dd: 9c:f0:9b:64:42:d4:94:08:14:7b:3e:46:fd:89:69: 4a:61:29:d7:87:e6:ce:03:3b:46:0a:ff:d6:4e:08: 49:2b:81:76:41:27:e8:94:49:04:60:13:57:63:76: 94:a9:58:32:56:cc:16:8f:1b:c1:3d:68:ec:21:1a: 50:4a:be:34:9e:d2:ae:7c:9f:9d:92:ae:b3:dd:c6: 60:e4:41:f4:5e:9e:97:8a:e7:ab:c8:33:d5:29:8a: c0:49:16:85:06:f8:79:a4:2e:bf:53:8a:3f:ef:13: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BF:3A:1D:B3:CD:39:2C:C5:E6:D6:E8:3E:64:FD:AE:D6:C1:2F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl X509v3 Authority Key Identifier: keyid:96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9b:0d:c3:4d:b6:26:0e:16:69:8e:a0:1e:6b:ce:bf:68:78: 1a:11:4b:96:32:28:01:90:45:5b:19:ef:f3:31:c3:38:03:3c: 49:12:41:63:ae:7c:b9:8a:ef:40:b3:cf:ea:1b:8a:14:46:73: af:b3:79:34:a5:43:c8:ed:c2:ba:53:e5:10:9d:57:91:7a:29: dd:f0:6f:ae:79:04:15:f2:78:e0:83:24:4c:02:54:d3:b9:f3: 24:c6:a8:0a:fd:ae:f0:5d:2f:27:9d:45:26:6e:52:4b:ad:5c: 2f:dc:af:aa:45:68:90:8a:06:13:a5:1c:81:44:2e:5e:1c:57: be:d9:df:9f:60:1b:36:12:fb:1c:29:bb:58:e6:9c:99:d8:53: 1e:b3:19:fa:6f:d6:a3:fa:1d:75:ac:04:7f:b4:02:a0:30:2b: 3e:14:2a:22:6b:01:48:40:87:3f:f0:c5:de:7a:af:1e:8e:eb: bd:1d:79:c8:a4:92:17:b4:77:e3:64:44:79:b9:cf:de:4b:d8: fd:9e:80:43:a5:b9:04:a5:17:54:37:b1:6e:3f:71:4c:11:6b: e1:41:e2:f3:a2:cb:7f:fe:9c:90:e4:7b:d7:92:db:17:aa:17: 98:ab:ed:d2:af:2d:76:41:7d:a9:91:28:91:fe:39:48:f0:d3: 43:6b:cb:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs1ONw9KNw5iqUpjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNiN2ZiZjQtNGRlZi00OTA0LTg3ZmQtZTU5OGJmOWNm MmUzMB4XDTI1MDkxNjAwMDAwM1oXDTI1MDkxOTAwMDAwMFowLzEtMCsGA1UEAxMk MTY5NThjYWMtMTU5Yy00ZWRhLWEwYmQtMzU0OTg5MjNkN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEUZ3NJhOpYTBtMZwcBspW83uhi/Oywy36kU 3nLcUZkfO4o3VwEn94p+67o86rnZCnE4rRbeXrIT2YjRVUIsOpJsvaxBa1VRFhvR bDAecU9+Klo+kWn5ID3YJ01numV+cZ2rARDGWkZv9TGABs0Ck8mUgBt5iyhx2YiA cB+AqAkPyDW5FVmPwSFSETnWLV3gGDoBGd2c8JtkQtSUCBR7Pkb9iWlKYSnXh+bO AztGCv/WTghJK4F2QSfolEkEYBNXY3aUqVgyVswWjxvBPWjsIRpQSr40ntKufJ+d kq6z3cZg5EH0Xp6XiueryDPVKYrASRaFBvh5pC6/U4o/7xNCNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIW/Oh2zzTksxebW6D5k/a7WwS+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80M2I3 ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4YmY5Y2YyZTMvNDNiN2ZiZjQtNGRlZi00 OTA0LTg3ZmQtZTU5OGJmOWNmMmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDNiN2ZiZjQtNGRlZi00OTA0LTg3 ZmQtZTU5OGJmOWNmMmUzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjlj ZjJlMy5jcmwwHwYDVR0jBBgwFoAUlkPJBsTL9xycPUlHFeE5cQeul74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80M2I3ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4 YmY5Y2YyZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnmw3DTbYmDhZpjqAea86/ aHgaEUuWMigBkEVbGe/zMcM4AzxJEkFjrny5iu9As8/qG4oURnOvs3k0pUPI7cK6 U+UQnVeReind8G+ueQQV8njggyRMAlTTufMkxqgK/a7wXS8nnUUmblJLrVwv3K+q RWiQigYTpRyBRC5eHFe+2d+fYBs2EvscKbtY5pyZ2FMesxn6b9aj+h11rAR/tAKg MCs+FCoiawFIQIc/8MXeeq8ejuu9HXnIpJIXtHfjZER5uc/eS9j9noBDpbkEpRdU N7FuP3FMEWvhQeLzost//pyQ5HvXktsXqheYq+3Sry12QX2pkSiR/jlI8NNDa8vw -----END CERTIFICATE-----Generated at Tue Sep 16 05:57:40 2025 by rpki-client