$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft File: b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft (raw, json) Hash identifier: acOcxftHvso8Go8EkEMPrWXlrDvZ+B/NV3cA3LmANco= Subject key identifier: AB:09:81:9C:FE:42:B4:FE:84:FF:1A:7F:A1:AB:6F:89:AF:3A:D4:63 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584AF1680858D7986AA4A78BFF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft Manifest number: 010D0C9F43285841C860503D02ECCF56D2C95B27 Signing time: Fri 22 Aug 2025 17:00:08 +0000 Manifest this update: Fri 22 Aug 2025 17:00:08 +0000 Manifest next update: Mon 25 Aug 2025 17:00:00 +0000 Files and hashes: 1: 6bb3e0fa-da4c-3bb0-8eed-a6f21b814e7d.roa (hash: wxDa/Ui4v3VIrvxk9yuBjhd2xvdRRPPmu8G2BVCp41k=) 2: 77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa (hash: X4JNO3H8HM4AHFnUIpDBO8wIvwfW1mRQdDzdxaEpFn4=) 3: 9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa (hash: HhvimkuPlAzeNW2tPkqaUPQ87QWIUSD43pj2jGVpQyI=) 4: b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl (hash: YWitT/hN5aKXpUBDKZs2VcY9ledYkjjlkj8AsNLDwPM=) 5: be063289-2e69-3acf-ad62-b42a1aa1d80d.roa (hash: IUZhZ1sHs9FUDZRxzDtHfMDfojHkF8DzeuxbfVtxEaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:68:08:58:d7:98:6a:a4:a7:8b:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Aug 22 17:00:08 2025 GMT Not After : Aug 25 17:00:00 2025 GMT Subject: CN=7a120ce0-9d9f-4733-8a4d-46dce76622f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:75:c7:b7:8f:96:63:58:1c:51:b6:45:48:2f: 32:2d:5a:e1:c2:63:1a:74:c0:03:d0:88:25:cf:d7: 1e:61:4c:5b:7a:1f:80:1f:94:1f:74:e5:a5:ce:76: 0e:e0:84:05:30:17:67:1a:24:eb:f3:0e:df:c1:2d: 81:5c:f1:18:25:0a:56:71:c7:df:40:c2:8d:c7:ad: 0c:d5:fb:2e:1b:59:72:c1:ce:d0:71:45:19:24:f0: e9:9f:40:81:e6:1e:2a:8e:35:29:77:90:f5:35:a7: 3c:e4:3b:cf:f7:48:23:05:40:88:4f:32:ed:62:0a: 95:33:44:e7:a9:fe:79:cc:6c:4a:b3:e6:67:8d:78: 90:8e:96:4c:b3:b9:5f:1d:bf:63:26:5e:f5:3e:be: a4:da:bc:8b:0c:52:4e:a3:b2:23:95:40:71:fc:46: e3:0a:6e:c1:a1:72:a6:0a:9f:d3:ef:92:bb:72:92: 41:86:ee:94:1d:d6:46:2d:a7:da:98:a5:ed:15:58: 6e:ac:4c:06:6a:fe:c7:fe:eb:aa:ab:81:7c:d9:cd: 38:78:d2:dc:b3:f6:a3:43:b7:fa:e9:e4:00:b2:15: c5:29:67:1d:bf:55:09:ee:a1:42:9b:0c:44:cd:06: e3:fd:16:c0:f3:3c:81:08:7f:ad:09:b9:9f:3b:eb: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:09:81:9C:FE:42:B4:FE:84:FF:1A:7F:A1:AB:6F:89:AF:3A:D4:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e3:f4:97:b1:7a:5c:32:36:3b:81:11:75:ce:08:fd:6b:72: e3:f3:9a:c5:b0:f6:ee:f6:1f:5e:77:77:c2:10:86:81:c9:c1: 92:81:38:eb:bd:18:0c:d5:a9:a7:14:10:8f:4c:56:45:78:74: f0:8c:33:88:c2:a6:55:67:c7:46:22:64:94:66:6c:43:7b:c6: 51:2e:0e:bd:f4:33:b8:31:ec:82:e1:a1:68:32:73:33:85:38: 14:c9:0e:b6:3a:94:b0:8e:00:28:11:2c:47:f2:00:c3:48:04: ae:c3:46:c8:5d:de:20:e3:08:b0:0e:88:50:bf:11:9c:73:a3: 8a:23:ef:03:96:0c:ed:85:25:54:b0:51:43:c2:18:fe:93:52: 88:1b:f6:58:be:04:17:2a:3f:30:a4:c3:c6:11:22:15:29:ef: 96:c8:da:c5:03:8b:d6:49:1d:29:37:fb:d5:d0:35:7a:3b:c2: a6:f7:36:bd:2c:e3:31:e9:d7:7b:f1:aa:99:49:73:ab:29:08: 4d:93:fb:e1:77:4e:66:6c:7d:6f:15:b8:2a:f0:79:ac:cf:3a: 0e:3f:fb:24:8c:61:0f:d1:e7:de:9d:f6:af:89:84:73:83:4f: 98:3b:68:64:74:14:7f:08:5f:b5:3b:8c:b1:9d:e6:9b:3d:43: 07:49:c0:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxaAhY15hqpKeL/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MDgyMjE3MDAwOFoXDTI1MDgyNTE3MDAwMFowLzEtMCsGA1UEAxMk N2ExMjBjZTAtOWQ5Zi00NzMzLThhNGQtNDZkY2U3NjYyMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHXHt4+WY1gcUbZFSC8yLVrhwmMadMAD0Igl z9ceYUxbeh+AH5QfdOWlznYO4IQFMBdnGiTr8w7fwS2BXPEYJQpWccffQMKNx60M 1fsuG1lywc7QcUUZJPDpn0CB5h4qjjUpd5D1Nac85DvP90gjBUCITzLtYgqVM0Tn qf55zGxKs+ZnjXiQjpZMs7lfHb9jJl71Pr6k2ryLDFJOo7IjlUBx/EbjCm7BoXKm Cp/T75K7cpJBhu6UHdZGLafamKXtFVhurEwGav7H/uuqq4F82c04eNLcs/ajQ7f6 6eQAshXFKWcdv1UJ7qFCmwxEzQbj/RbA8zyBCH+tCbmfO+vPeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKsJgZz+QrT+hP8af6Grb4mvOtRjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvYjM1ZmVmZDctZjJlNS00 MTZjLTkzMmEtMGQ1MmQ0MzBjM2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAs4/SXsXpcMjY7gRF1zgj9 a3Lj85rFsPbu9h9ed3fCEIaBycGSgTjrvRgM1amnFBCPTFZFeHTwjDOIwqZVZ8dG ImSUZmxDe8ZRLg699DO4MeyC4aFoMnMzhTgUyQ62OpSwjgAoESxH8gDDSASuw0bI Xd4g4wiwDohQvxGcc6OKI+8DlgzthSVUsFFDwhj+k1KIG/ZYvgQXKj8wpMPGESIV Ke+WyNrFA4vWSR0pN/vV0DV6O8Km9za9LOMx6dd78aqZSXOrKQhNk/vhd05mbH1v Fbgq8HmszzoOP/skjGEP0efenfaviYRzg0+YO2hkdBR/CF+1O4yxneabPUMHScCD -----END CERTIFICATE-----Generated at Sat Aug 23 16:52:01 2025 by rpki-client