$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft File: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft (raw, json) Hash identifier: O6cW+KVBLpNSZ9TqR8BGTeRS9EdzPMa8laggX6PzwgU= Subject key identifier: 54:23:EA:B4:52:AF:F3:38:D2:2B:AC:0B:54:E9:40:D6:FF:19:8C:EC Authority key identifier: 96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE Certificate issuer: /CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Certificate serial: 010D0C9F4328584BC92F288F4AA1E48E06D03E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft Manifest number: 010D0C9F4328584073A830BD4C387D6BBE662615 Signing time: Sat 08 Nov 2025 00:00:08 +0000 Manifest this update: Sat 08 Nov 2025 00:00:08 +0000 Manifest next update: Mon 10 Nov 2025 00:00:00 +0000 Files and hashes: 1: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl (hash: a5c31QgVrUwq5TkD9JKa0L9uZQjIv03ef35dfPhR2ow=) 2: ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer (hash: FlOElAAKh/WY/MyS+EOmq0kTB4/upaVSjkTJzzw4Vbs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 10 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:2f:28:8f:4a:a1:e4:8e:06:d0:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Validity Not Before: Nov 8 00:00:08 2025 GMT Not After : Nov 10 00:00:00 2025 GMT Subject: CN=be447d1b-42cf-4dc9-8b5d-3eb121dbd2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:88:23:00:07:c2:de:b7:e0:ce:06:40:5e: 88:61:a0:b9:7c:81:60:09:f8:c7:0b:86:67:ce:0a: 84:51:f6:b5:7d:fe:9d:60:f7:a4:71:9d:21:ed:24: 24:4c:f9:c4:be:a5:41:95:31:cd:4e:bf:91:f7:8a: 92:b5:73:b6:42:7a:69:36:d8:9d:c6:a1:c3:b4:30: bd:ae:c5:c4:a0:32:ca:e7:d3:05:cd:e7:6f:e1:f8: 8a:ce:75:d0:d1:20:07:31:0a:6b:0d:e5:eb:d3:93: 1b:a2:9c:f2:cb:77:d9:d1:db:99:a3:df:50:ae:46: 98:d8:4f:5e:0b:ef:1c:f1:a7:0a:3c:00:b3:4b:89: fa:38:73:6b:ea:3a:af:8e:70:b8:dd:5e:ef:b5:88: 9c:8d:38:fa:f0:2d:c8:ae:ba:e8:03:7c:fa:fe:08: d1:15:82:b2:64:5b:e7:ff:71:b9:fa:9d:77:3c:de: 79:77:55:4d:99:fc:9a:35:01:a5:93:37:d5:80:98: 3c:f5:c6:0b:74:05:fe:a0:d3:00:70:77:c3:b3:db: 29:ca:7a:77:5c:c7:13:90:fa:46:0e:14:53:f8:c6: d4:35:67:6c:46:30:9b:15:3b:2f:f0:11:4f:ff:36: 87:91:21:b3:89:fc:6b:04:e2:38:2f:09:2d:b2:6d: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:23:EA:B4:52:AF:F3:38:D2:2B:AC:0B:54:E9:40:D6:FF:19:8C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl X509v3 Authority Key Identifier: keyid:96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e0:f1:cd:52:0c:5e:46:10:12:d9:6a:6c:6f:db:f1:14:e6: 7e:dd:a2:cd:b1:a9:e5:77:67:a9:29:0a:28:f0:f0:f3:d4:37: 20:bc:ab:ad:2b:0d:62:82:73:b1:36:cf:9d:1b:bf:2e:17:2e: 46:a4:39:80:20:d2:ac:87:e8:20:95:5d:af:2b:71:65:31:8a: cd:c0:ef:7a:2e:60:08:24:23:f2:5c:6c:38:ae:e3:92:22:bb: 37:0d:6a:fd:1c:b3:43:20:88:8e:10:3a:d5:33:42:f3:e9:ce: f5:69:a9:a2:2d:1d:6e:18:5b:ec:c9:b9:1e:5a:26:2a:87:7b: 26:13:1b:43:11:9b:34:92:e2:39:77:2f:da:01:b3:fa:5d:60: 08:1a:fc:ac:9a:ca:4c:7e:f0:e3:03:d6:ac:f9:d8:cd:e1:0e: ff:d8:7f:5d:5d:79:72:1e:94:98:fa:4f:32:ed:7f:b7:a1:b2: dd:d5:53:8b:84:32:6b:5a:46:8d:a6:39:f4:3b:0a:da:23:1e: c3:3b:c7:79:5d:3e:7f:03:0e:b4:61:cc:ae:3e:5a:82:59:36: b8:bd:eb:d9:fc:79:e1:6e:a0:8b:e9:54:28:dd:54:9c:87:a4: d0:05:97:b7:eb:2c:f1:1f:9c:fc:1d:45:38:ef:bc:95:02:b4: cd:76:a0:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvJLyiPSqHkjgbQPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNiN2ZiZjQtNGRlZi00OTA0LTg3ZmQtZTU5OGJmOWNm MmUzMB4XDTI1MTEwODAwMDAwOFoXDTI1MTExMDAwMDAwMFowLzEtMCsGA1UEAxMk YmU0NDdkMWItNDJjZi00ZGM5LThiNWQtM2ViMTIxZGJkMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6eIIwAHwt634M4GQF6IYaC5fIFgCfjHC4Zn zgqEUfa1ff6dYPekcZ0h7SQkTPnEvqVBlTHNTr+R94qStXO2QnppNtidxqHDtDC9 rsXEoDLK59MFzedv4fiKznXQ0SAHMQprDeXr05Mbopzyy3fZ0duZo99QrkaY2E9e C+8c8acKPACzS4n6OHNr6jqvjnC43V7vtYicjTj68C3IrrroA3z6/gjRFYKyZFvn /3G5+p13PN55d1VNmfyaNQGlkzfVgJg89cYLdAX+oNMAcHfDs9spynp3XMcTkPpG DhRT+MbUNWdsRjCbFTsv8BFP/zaHkSGzifxrBOI4Lwktsm2BlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFQj6rRSr/M40iusC1TpQNb/GYzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80M2I3 ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4YmY5Y2YyZTMvNDNiN2ZiZjQtNGRlZi00 OTA0LTg3ZmQtZTU5OGJmOWNmMmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDNiN2ZiZjQtNGRlZi00OTA0LTg3 ZmQtZTU5OGJmOWNmMmUzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjlj ZjJlMy5jcmwwHwYDVR0jBBgwFoAUlkPJBsTL9xycPUlHFeE5cQeul74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80M2I3ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4 YmY5Y2YyZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCd4PHNUgxeRhAS2Wpsb9vx FOZ+3aLNsanld2epKQoo8PDz1DcgvKutKw1ignOxNs+dG78uFy5GpDmAINKsh+gg lV2vK3FlMYrNwO96LmAIJCPyXGw4ruOSIrs3DWr9HLNDIIiOEDrVM0Lz6c71aami LR1uGFvsybkeWiYqh3smExtDEZs0kuI5dy/aAbP6XWAIGvysmspMfvDjA9as+djN 4Q7/2H9dXXlyHpSY+k8y7X+3obLd1VOLhDJrWkaNpjn0OwraIx7DO8d5XT5/Aw60 YcyuPlqCWTa4vevZ/HnhbqCL6VQo3VSch6TQBZe36yzxH5z8HUU477yVArTNdqBs -----END CERTIFICATE-----Generated at Sat Nov 8 03:22:55 2025 by rpki-client