
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
File: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft (raw, json)
Hash identifier: ZveXXaRGX9Hws6fMA9atmPWIEDanFINbItbQq8siTeQ=
Subject key identifier: 40:DF:5F:DD:C5:86:59:98:35:9C:AB:22:EF:2F:57:2D:2A:43:02:17
Authority key identifier: 96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE
Certificate issuer: /CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3
Certificate serial: 010D0C9F4328584BBE0463257A482882859DC8E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
Manifest number: 010D0C9F4328584073A830BD4C387D6BBE662611
Signing time: Tue 04 Nov 2025 00:00:03 +0000
Manifest this update: Tue 04 Nov 2025 00:00:03 +0000
Manifest next update: Thu 06 Nov 2025 00:00:00 +0000
Files and hashes: 1: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl (hash: 8fQnCdvkBuwyDCY6bTpaJJyqNwJAPIcoQp/VRtDmVjM=)
2: ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer (hash: FlOElAAKh/WY/MyS+EOmq0kTB4/upaVSjkTJzzw4Vbs=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:04:63:25:7a:48:28:82:85:9d:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3
Validity
Not Before: Nov 4 00:00:03 2025 GMT
Not After : Nov 6 00:00:00 2025 GMT
Subject: CN=bf3ff33a-a638-4426-b788-2ee2503e568d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:78:05:4a:d8:2e:8a:f0:ea:54:4f:0e:29:
bb:bb:9b:8b:21:ae:65:1b:3e:8a:ae:98:04:da:ac:
8d:dd:33:98:ea:1f:8e:da:1d:9c:2d:74:a5:e3:33:
2d:dd:ed:3b:69:cf:fc:97:14:86:32:b0:b5:61:b9:
5a:39:78:11:c4:0a:9d:0e:05:3e:05:df:a5:b0:ef:
ad:36:e8:5c:85:06:c2:32:8b:19:e9:b7:bb:4f:b9:
89:ee:c8:db:a1:f7:0c:cc:7d:76:d8:22:43:4e:40:
c7:0a:3c:0e:da:18:70:ba:34:11:b9:c0:57:96:df:
ea:5f:62:e7:16:a1:3b:c0:c7:43:62:d8:0d:ab:af:
14:58:4e:83:55:16:c4:9e:b6:1b:78:7e:f1:b9:a6:
9b:76:62:e0:fd:61:01:99:ca:13:6a:84:18:54:e2:
5a:1e:43:52:8b:0a:5c:18:90:d8:73:88:7b:fe:21:
0e:68:3c:fc:17:a9:49:02:06:dc:86:d0:cc:45:aa:
79:ad:bd:49:bb:96:1b:64:a6:4e:4d:9c:a8:06:0e:
e1:cd:b0:9a:a0:7e:f9:fc:e7:5c:bc:05:3a:31:38:
43:21:07:d5:47:62:d9:c2:fe:bd:ee:73:af:b8:0f:
99:73:45:7c:0e:af:28:53:fc:87:5f:d1:54:ac:43:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:5F:DD:C5:86:59:98:35:9C:AB:22:EF:2F:57:2D:2A:43:02:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
X509v3 Authority Key Identifier:
keyid:96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a4:34:3a:b7:65:78:a5:03:cb:ca:38:5e:73:86:10:c8:ec:
51:1f:a5:b2:2a:2a:a6:b9:54:09:7f:bd:1b:a1:77:ad:ff:70:
82:88:ae:94:b1:93:4d:4f:de:ee:8e:7d:8a:6a:73:3a:64:8e:
e0:89:c3:2d:17:1a:79:04:71:1a:33:07:ff:2c:91:aa:2f:ec:
bd:e2:8c:48:f6:48:c1:4e:48:cd:a0:71:f2:8c:66:2c:5c:bc:
03:59:ad:94:8d:49:ae:d4:1a:03:22:bd:c5:b2:ce:72:e6:16:
1b:03:5d:17:41:93:d3:ba:68:ca:b0:74:99:25:bb:3e:80:7c:
5d:cc:8d:b8:23:00:ad:6e:ad:fa:33:51:09:3f:fd:bd:f3:a1:
9c:5c:93:ca:a4:fd:8c:ea:3d:ec:bc:e2:ac:a6:00:c1:2c:dc:
5b:cd:e9:35:06:c8:1d:cd:67:c1:c7:03:ca:ba:ba:4f:b8:5b:
20:fe:d5:a1:65:b4:87:ee:09:42:6b:53:4e:73:8c:18:82:37:
b7:63:86:2d:ad:79:9a:86:d2:b8:dc:0d:78:8e:0c:4f:47:4f:
cf:98:e3:25:0b:69:65:4a:5d:ea:39:d3:30:d3:99:8f:29:23:
04:d8:24:a3:43:c0:bd:ac:27:58:48:a1:70:a6:6d:44:03:d0:
e0:5d:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:00:06 2025 by rpki-client