$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft (raw, json) Hash identifier: Rb5+aD3xkkmO/KeKByBVvK2zgUHA2mr7TPVVziUPI1Y= Subject key identifier: B9:41:7F:68:22:ED:A7:B2:02:69:63:29:27:B7:5A:82:ED:D7:D6:11 Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F4328584A5E5FF739F83708A49585A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft Manifest number: 010D0C9F432858420F19A4505BD7EEE07D91AB45 Signing time: Tue 01 Jul 2025 01:00:03 +0000 Manifest this update: Tue 01 Jul 2025 01:00:03 +0000 Manifest next update: Fri 04 Jul 2025 01:00:00 +0000 Files and hashes: 1: 189a7a4b-2e62-3420-8747-80aab84fcb06.roa (hash: jptvq0zN6QWrlB9s6rcgkomnsVRHnd9IxdeXPrvlY/M=) 2: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl (hash: ttUQAXVcp32i/54OEyP0tpvYspU+UFVRDdAkU5Z8I4I=) 3: c1255ba5-964c-3a54-9623-b83967aa57ed.roa (hash: OWXBWwPkeiLEbId2bt51WTT2tF7weco/17Lea7fALjg=) 4: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (hash: l/VgOdYmsmIp9MYJnNyh6Bx03OfsvT/tbIXTmyJrU14=) 5: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (hash: N8E0iZoXl0YZIu7A8LK10xDawhL03GVvGjqnbJZvcKc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:5f:f7:39:f8:37:08:a4:95:85:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Jul 1 01:00:03 2025 GMT Not After : Jul 4 01:00:00 2025 GMT Subject: CN=04fde9a5-32a1-42ed-bc06-af69cd31bb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:0f:1f:5f:7d:b1:e8:1e:57:54:f7:8c:32: 77:69:6a:0c:73:78:49:15:36:3a:fa:87:0d:41:45: 88:b8:ba:1e:ba:cd:2a:46:7b:94:6e:87:0e:24:59: 3c:a2:b8:1c:aa:51:21:5a:5c:85:88:83:2e:87:0b: 97:fa:9d:70:e6:c9:b1:f5:d1:60:7e:f5:4b:a4:55: b3:81:70:e7:3a:51:9c:e8:2e:2d:f2:b5:bb:ac:1e: f8:e8:43:9e:d2:73:70:16:53:c8:44:8d:66:b1:f4: c3:fd:2f:fd:71:b9:0b:cf:41:cb:9e:b8:41:e2:8e: 6e:d1:24:5e:5a:27:f2:5f:6d:d5:14:12:c4:30:bf: d2:3f:b6:cd:89:4b:3e:e9:9a:fe:b8:59:9b:8b:f6: 10:9a:f5:1c:6d:cf:b1:36:70:14:5a:bc:6e:a6:b0: ae:e3:bb:2f:64:8d:78:5d:9d:e3:0e:d5:56:51:5c: de:f1:7b:a9:9b:7b:e9:0f:dc:b0:96:04:66:2c:da: 21:bc:a9:d3:64:6d:20:1c:db:f6:66:6f:7a:31:fc: 54:03:2c:40:4f:ff:b7:9d:4c:ab:31:53:8f:eb:91: 0d:b4:eb:ca:ec:f4:0f:57:39:dc:21:1d:98:77:69: aa:2d:32:e0:fc:cf:2c:a5:d8:90:f8:9b:8a:72:5f: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:41:7F:68:22:ED:A7:B2:02:69:63:29:27:B7:5A:82:ED:D7:D6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6e:bb:72:d4:c3:6e:3c:a2:84:1c:ca:4a:75:c8:cb:fd:9c: 32:17:ae:47:67:33:45:28:33:45:42:5d:fd:4c:3d:7a:a0:ea: 99:f2:b8:ba:da:fb:56:e0:03:f2:6c:69:d1:d2:ad:c5:b4:7d: dc:08:fe:27:14:d7:2b:fc:b6:8c:76:21:ff:54:fb:25:75:7f: f5:33:ef:b6:33:e0:9c:28:c2:08:a7:b4:84:32:ad:87:ec:54: 85:3c:41:05:aa:81:ad:33:8f:24:b8:5a:24:82:23:ab:8b:e7: 44:bd:05:08:37:3b:30:e8:66:53:dd:16:33:de:6d:76:79:3b: cd:66:a0:d8:ae:83:c6:80:f9:c9:3a:cb:9b:7c:41:03:b9:88: 6b:1b:55:a8:a0:80:c4:a9:c7:b6:5e:23:1e:51:c7:43:c5:ad: fb:61:b7:04:11:3a:9f:c4:64:8c:d4:bd:57:b2:71:63:cc:f3: c0:59:36:2f:00:a4:33:ca:7b:64:b4:f5:b7:7c:c1:a8:b8:07: f1:15:5f:32:48:17:4d:1b:97:f4:63:45:8c:ff:18:20:b8:38: 0b:83:91:2a:9d:39:79:52:53:ea:55:96:a0:e3:88:0c:65:33: c3:9c:5c:63:7b:54:c1:81:5a:7c:29:ef:2c:2c:e4:c0:5c:e1: 37:96:4a:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeX/c5+DcIpJWFpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MDcwMTAxMDAwM1oXDTI1MDcwNDAxMDAwMFowLzEtMCsGA1UEAxMk MDRmZGU5YTUtMzJhMS00MmVkLWJjMDYtYWY2OWNkMzFiYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo0PH199segeV1T3jDJ3aWoMc3hJFTY6+ocN QUWIuLoeus0qRnuUbocOJFk8orgcqlEhWlyFiIMuhwuX+p1w5smx9dFgfvVLpFWz gXDnOlGc6C4t8rW7rB746EOe0nNwFlPIRI1msfTD/S/9cbkLz0HLnrhB4o5u0SRe WifyX23VFBLEML/SP7bNiUs+6Zr+uFmbi/YQmvUcbc+xNnAUWrxuprCu47svZI14 XZ3jDtVWUVze8Xupm3vpD9ywlgRmLNohvKnTZG0gHNv2Zm96MfxUAyxAT/+3nUyr MVOP65ENtOvK7PQPVzncIR2Yd2mqLTLg/M8spdiQ+JuKcl+wIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLlBf2gi7aeyAmljKSe3WoLt19YRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMzVhM2YwODgtMDViNy00 NzBhLTlhZjUtNDViZDI1ZWU4ZmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGbrty1MNuPKKEHMpKdcjL /ZwyF65HZzNFKDNFQl39TD16oOqZ8ri62vtW4APybGnR0q3FtH3cCP4nFNcr/LaM diH/VPsldX/1M++2M+CcKMIIp7SEMq2H7FSFPEEFqoGtM48kuFokgiOri+dEvQUI Nzsw6GZT3RYz3m12eTvNZqDYroPGgPnJOsubfEEDuYhrG1WooIDEqce2XiMeUcdD xa37YbcEETqfxGSM1L1XsnFjzPPAWTYvAKQzyntktPW3fMGouAfxFV8ySBdNG5f0 Y0WM/xgguDgLg5EqnTl5UlPqVZag44gMZTPDnFxje1TBgVp8Ke8sLOTAXOE3lkrW -----END CERTIFICATE-----Generated at Tue Jul 1 16:01:56 2025 by rpki-client