$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft (raw, json) Hash identifier: tg02rT7/nALERHx7ALXeEPaqs57x9wuanC+79u7zVi4= Subject key identifier: F0:1B:B6:C4:15:C7:0A:54:41:54:F0:C5:39:E8:ED:B2:15:34:64:BF Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F4328584AC2E098F6BAA916E22D204C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft Manifest number: 010D0C9F432858420F19A4505BD7EEE07D91AB69 Signing time: Wed 06 Aug 2025 01:00:03 +0000 Manifest this update: Wed 06 Aug 2025 01:00:03 +0000 Manifest next update: Sat 09 Aug 2025 01:00:00 +0000 Files and hashes: 1: 189a7a4b-2e62-3420-8747-80aab84fcb06.roa (hash: jptvq0zN6QWrlB9s6rcgkomnsVRHnd9IxdeXPrvlY/M=) 2: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl (hash: CEmYHgX0/C0csdcn5CqLCNfUJuhJ488qPs2NYTW6HX8=) 3: c1255ba5-964c-3a54-9623-b83967aa57ed.roa (hash: OWXBWwPkeiLEbId2bt51WTT2tF7weco/17Lea7fALjg=) 4: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (hash: l/VgOdYmsmIp9MYJnNyh6Bx03OfsvT/tbIXTmyJrU14=) 5: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (hash: N8E0iZoXl0YZIu7A8LK10xDawhL03GVvGjqnbJZvcKc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:98:f6:ba:a9:16:e2:2d:20:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Aug 6 01:00:03 2025 GMT Not After : Aug 9 01:00:00 2025 GMT Subject: CN=74fdd534-e9c6-4702-b944-5126380b3043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:fe:30:2d:5b:d5:c9:ce:b3:72:7f:4a:05: f0:55:5c:c6:38:73:1c:52:87:8b:58:ab:aa:a0:af: b8:66:e0:66:47:bc:2b:5f:c9:76:63:ac:80:fc:d6: 47:ff:89:7a:65:cf:bc:fe:00:fc:02:68:72:58:5d: e5:69:70:73:d9:48:1a:40:64:1e:26:23:70:6c:9d: 4c:4a:de:7f:3a:03:fe:e8:8d:04:f4:a4:30:ed:41: ef:73:4d:64:d3:3c:65:59:96:55:bf:a6:cb:c4:3c: 13:4e:ba:9f:b5:93:e6:e7:2c:89:dc:b3:44:31:b3: 1e:ed:e8:c8:b0:e3:00:56:01:65:95:35:43:06:da: 37:da:5f:32:6e:0f:f8:1e:0e:20:0e:59:86:3d:9e: b4:c2:51:9f:0d:73:e2:db:48:e1:27:ed:14:96:20: 61:65:72:6e:2b:a1:ac:d0:63:18:07:85:cc:ca:d5: 08:25:e8:1d:1f:12:13:a8:e6:42:7a:7b:4e:96:d5: 8c:08:04:36:e4:91:29:65:19:4d:4e:22:b0:3a:40: f9:df:62:22:50:2b:37:28:dc:6a:d5:3a:4a:0d:57: 68:0c:6c:f8:8c:44:3b:07:6f:a5:a4:9a:d4:4f:08: f3:cb:15:08:bd:29:3f:2f:3a:80:da:bd:e4:51:53: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1B:B6:C4:15:C7:0A:54:41:54:F0:C5:39:E8:ED:B2:15:34:64:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a6:57:df:b9:d0:bc:a9:cb:e5:47:38:86:3a:12:08:11:b8: 1e:5b:2b:f8:75:41:ce:59:43:a7:3d:11:aa:39:9a:a0:d1:87: 17:22:93:58:78:37:8b:f8:f9:36:91:63:c5:64:f2:36:8d:54: d7:ae:3d:d5:0f:7f:44:87:03:aa:50:dc:e1:50:3b:80:10:8f: 59:ac:9a:1a:03:8a:17:b1:a3:b0:04:f8:ae:51:e9:48:49:6f: 5f:37:87:31:52:0f:9b:e6:9c:26:44:2d:4f:b7:27:ac:be:d2: 7e:35:d0:32:fe:e0:91:9e:e2:69:04:39:94:c1:45:cd:ec:4a: d1:ad:50:f0:21:84:66:3b:11:6d:19:48:24:d1:e2:aa:a6:4f: 3a:31:65:98:a3:3d:85:dd:b5:95:09:c4:f2:a0:b4:78:c8:5b: 94:11:13:26:58:00:ab:84:93:a3:62:b9:93:90:dd:8a:70:3e: b6:80:cd:76:88:77:84:5c:44:34:33:51:a2:1b:02:1c:fc:9f: 82:aa:ac:81:cd:f8:20:46:a8:e2:72:ef:a6:46:ad:56:41:5c: 36:98:e9:4a:b2:f1:ed:c6:94:92:a2:5e:1b:2f:f0:13:e3:6f: d6:6a:e0:c7:00:ed:1d:6b:fd:df:36:70:d0:4a:ff:f8:a7:3f: 6b:0b:0c:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErC4Jj2uqkW4i0gTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MDgwNjAxMDAwM1oXDTI1MDgwOTAxMDAwMFowLzEtMCsGA1UEAxMk NzRmZGQ1MzQtZTljNi00NzAyLWI5NDQtNTEyNjM4MGIzMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZH+MC1b1cnOs3J/SgXwVVzGOHMcUoeLWKuq oK+4ZuBmR7wrX8l2Y6yA/NZH/4l6Zc+8/gD8AmhyWF3laXBz2UgaQGQeJiNwbJ1M St5/OgP+6I0E9KQw7UHvc01k0zxlWZZVv6bLxDwTTrqftZPm5yyJ3LNEMbMe7ejI sOMAVgFllTVDBto32l8ybg/4Hg4gDlmGPZ60wlGfDXPi20jhJ+0UliBhZXJuK6Gs 0GMYB4XMytUIJegdHxITqOZCentOltWMCAQ25JEpZRlNTiKwOkD532IiUCs3KNxq 1TpKDVdoDGz4jEQ7B2+lpJrUTwjzyxUIvSk/LzqA2r3kUVM9dwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPAbtsQVxwpUQVTwxTno7bIVNGS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMzVhM2YwODgtMDViNy00 NzBhLTlhZjUtNDViZDI1ZWU4ZmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPplffudC8qcvlRziGOhII EbgeWyv4dUHOWUOnPRGqOZqg0YcXIpNYeDeL+Pk2kWPFZPI2jVTXrj3VD39EhwOq UNzhUDuAEI9ZrJoaA4oXsaOwBPiuUelISW9fN4cxUg+b5pwmRC1PtyesvtJ+NdAy /uCRnuJpBDmUwUXN7ErRrVDwIYRmOxFtGUgk0eKqpk86MWWYoz2F3bWVCcTyoLR4 yFuUERMmWACrhJOjYrmTkN2KcD62gM12iHeEXEQ0M1GiGwIc/J+CqqyBzfggRqji cu+mRq1WQVw2mOlKsvHtxpSSol4bL/AT42/WauDHAO0da/3fNnDQSv/4pz9rCwx1 -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:21 2025 by rpki-client