$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft (raw, json) Hash identifier: i9dx2oGHttO8vnNO8IXYoZUanUkFpmArDo5gnDkFLqE= Subject key identifier: 50:C4:FF:8D:7F:15:00:35:5F:B5:92:D1:3C:69:54:B6:7C:CC:AD:F1 Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F4328584B970C92F56162C9F0D64AA420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft Manifest number: 010D0C9F432858420F19A4505BD7EEE07D91ABB7 Signing time: Tue 21 Oct 2025 01:00:03 +0000 Manifest this update: Tue 21 Oct 2025 01:00:03 +0000 Manifest next update: Fri 24 Oct 2025 01:00:00 +0000 Files and hashes: 1: 189a7a4b-2e62-3420-8747-80aab84fcb06.roa (hash: UgYaSKMQU87lakFZDZxFwd/IXDy+YUkycSZZoNzrJic=) 2: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl (hash: q0sEFWqcbLJ6Dsj0+XNOWtsG/tn2v97FTklOvkZCHzc=) 3: c1255ba5-964c-3a54-9623-b83967aa57ed.roa (hash: juuZzMvegNrb7YVYTROTj3ng06r3OZbJYzmqqu4y2vQ=) 4: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (hash: yB7zdmfI1xUHrQF0mnW6PDB/BoJ01bpIUbqsN6GnNnQ=) 5: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (hash: nVOMN/PmtPwEi+vsOTcL2/upoct1dz9s9gvtYKYE9G4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:92:f5:61:62:c9:f0:d6:4a:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Oct 21 01:00:03 2025 GMT Not After : Oct 24 01:00:00 2025 GMT Subject: CN=543593b9-8fb9-41ec-97f5-6ff49dea05c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:16:63:6d:7d:ae:23:1b:ec:3a:f8:39:49: 23:b0:99:d0:6b:95:29:d3:a8:86:8f:45:8e:fc:51: a8:8b:ce:a6:9a:2e:24:7d:d8:7b:49:05:5d:6f:13: e8:4d:23:d6:64:13:11:e6:5d:86:02:71:98:97:2c: 54:b5:26:a8:d2:b3:5b:1f:3c:4b:77:69:70:f4:72: 8d:94:06:49:9c:49:7e:a7:aa:47:a2:34:fc:6f:c8: 27:c8:45:82:44:97:93:f7:61:76:01:08:ae:fc:41: 7f:46:f0:8e:6b:bd:7e:78:54:13:4b:cc:8e:b8:35: 9c:3b:71:30:59:79:7f:95:32:2a:c4:13:bd:5a:73: 0b:ab:b2:21:fa:c0:63:84:2d:dc:54:73:0c:9e:36: 4b:3b:cd:68:ea:94:54:56:6c:45:8b:3b:ce:3c:8d: ca:89:3c:fc:e2:49:6c:cf:3d:ed:f7:17:98:98:bd: 83:5b:54:c6:a2:b0:12:86:a2:c3:ae:97:5e:81:16: 72:36:5e:76:dc:d7:d1:55:3e:62:a2:08:c4:83:cf: 81:4f:07:16:0c:80:e5:94:9d:e2:a5:e8:fa:fb:6b: 3a:a9:1f:0e:ae:5a:4b:2b:e9:ac:4f:bf:71:1c:9b: e8:cb:ba:4a:95:47:d5:17:d9:dc:f8:14:81:15:03: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C4:FF:8D:7F:15:00:35:5F:B5:92:D1:3C:69:54:B6:7C:CC:AD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b2:2a:e3:59:2c:3b:71:56:a0:99:a6:f5:e8:eb:d9:6c:3c: 26:11:e5:9d:20:92:e0:5e:60:20:f8:83:d7:4b:3f:4f:94:20: 86:51:1b:79:3f:85:96:18:a3:0a:e8:73:f8:2e:de:6b:2f:8f: f6:71:83:84:05:e4:20:69:39:25:1a:6a:2f:32:5c:78:4b:c5: 09:86:f9:21:f6:fe:de:2e:2c:13:77:c5:8f:41:16:e8:52:1c: d0:a0:3d:5e:c1:94:26:74:f7:9c:41:a2:c7:7f:14:58:22:1f: 2e:44:b3:81:3c:2c:7f:21:b4:d6:38:68:8c:5e:02:f6:89:d5: 47:42:e4:e4:99:43:fa:06:f1:e1:31:37:55:a2:51:af:ce:ef: aa:58:23:3c:15:0d:d0:84:9d:14:46:3c:41:05:5f:cb:38:bd: 14:30:9a:a4:52:dd:ff:3a:de:e2:a8:4f:a1:8f:5a:a8:0e:64: 28:f4:85:15:e3:b4:47:b8:88:94:ec:75:85:36:2c:f6:f0:33: a6:37:3e:93:68:80:73:83:dc:dd:28:fc:99:2d:ae:8c:ab:57: 23:b6:5a:38:c5:07:6f:81:c1:a3:dd:c9:9f:84:ee:02:6c:d3: 7c:0b:5f:c2:a2:fa:25:11:db:f6:dd:2a:29:7d:ad:84:b4:bd: fa:14:94:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuXDJL1YWLJ8NZKpCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MTAyMTAxMDAwM1oXDTI1MTAyNDAxMDAwMFowLzEtMCsGA1UEAxMk NTQzNTkzYjktOGZiOS00MWVjLTk3ZjUtNmZmNDlkZWEwNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaYWY219riMb7Dr4OUkjsJnQa5Up06iGj0WO /FGoi86mmi4kfdh7SQVdbxPoTSPWZBMR5l2GAnGYlyxUtSao0rNbHzxLd2lw9HKN lAZJnEl+p6pHojT8b8gnyEWCRJeT92F2AQiu/EF/RvCOa71+eFQTS8yOuDWcO3Ew WXl/lTIqxBO9WnMLq7Ih+sBjhC3cVHMMnjZLO81o6pRUVmxFizvOPI3KiTz84kls zz3t9xeYmL2DW1TGorAShqLDrpdegRZyNl523NfRVT5iogjEg8+BTwcWDIDllJ3i pej6+2s6qR8OrlpLK+msT79xHJvoy7pKlUfVF9nc+BSBFQOF+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFDE/41/FQA1X7WS0TxpVLZ8zK3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMzVhM2YwODgtMDViNy00 NzBhLTlhZjUtNDViZDI1ZWU4ZmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVsirjWSw7cVagmab16OvZ bDwmEeWdIJLgXmAg+IPXSz9PlCCGURt5P4WWGKMK6HP4Lt5rL4/2cYOEBeQgaTkl GmovMlx4S8UJhvkh9v7eLiwTd8WPQRboUhzQoD1ewZQmdPecQaLHfxRYIh8uRLOB PCx/IbTWOGiMXgL2idVHQuTkmUP6BvHhMTdVolGvzu+qWCM8FQ3QhJ0URjxBBV/L OL0UMJqkUt3/Ot7iqE+hj1qoDmQo9IUV47RHuIiU7HWFNiz28DOmNz6TaIBzg9zd KPyZLa6Mq1cjtlo4xQdvgcGj3cmfhO4CbNN8C1/CovolEdv23Sopfa2EtL36FJQp -----END CERTIFICATE-----Generated at Tue Oct 21 15:46:34 2025 by rpki-client