$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft (raw, json) Hash identifier: ud8j44ZJk+VPceDGec0SpPhrjYs9KjvYnEwIN9+ttb8= Subject key identifier: 0C:CE:A2:2B:93:A9:65:E4:17:97:8A:51:45:92:A7:61:33:7D:90:5C Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F4328584BBE22337635A9D8E72B01E7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft Manifest number: 010D0C9F432858420F19A4505BD7EEE07D91ABC6 Signing time: Tue 04 Nov 2025 01:00:08 +0000 Manifest this update: Tue 04 Nov 2025 01:00:08 +0000 Manifest next update: Fri 07 Nov 2025 01:00:00 +0000 Files and hashes: 1: 189a7a4b-2e62-3420-8747-80aab84fcb06.roa (hash: 8RwHw8SWYLNet8p7wwLM2043u9aUyJBDD/KU8F1MthA=) 2: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl (hash: JK2421UY3TzNP2Zl7HmA5dV2wxq46gNWMzprSkQR2Bg=) 3: c1255ba5-964c-3a54-9623-b83967aa57ed.roa (hash: juvsyykoIoKayDt5+Ey0yvNQRk9jxotgjeykED8+Dpw=) 4: c98bcc7f-33a9-3609-84f1-216cce3ea44e.roa (hash: 3po6BxzLKrUilvS8dYubBIcZFA7OjXg888KwLzH/JPk=) 5: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (hash: EKx4VgOdbZyzpCx9cG1/WYb2TnQ0jHxFRJLFx9Tj0u4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:22:33:76:35:a9:d8:e7:2b:01:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: Nov 4 01:00:08 2025 GMT Not After : Nov 7 01:00:00 2025 GMT Subject: CN=63485734-829d-4e03-87c9-3c3af1bd5937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:ba:ca:cd:15:b5:74:a6:3b:3b:4a:d6:7e: 9e:fd:00:bc:98:f5:fe:bf:1a:ad:01:37:40:bd:d2: 18:e8:c4:f6:87:b5:4b:30:b8:b2:66:0f:a8:af:f9: 57:a5:e0:5b:b9:ff:68:94:1a:6d:c3:2c:c3:25:5c: a5:23:38:b1:fa:51:80:57:26:90:b4:6d:a3:c9:19: ce:1c:1b:a2:0f:7d:86:5d:5c:7d:0f:11:04:a5:20: 08:ac:23:20:ff:24:36:27:8b:0e:73:a5:41:2a:f6: bd:17:ac:c4:9b:55:c6:a6:03:2a:46:67:b3:a6:5d: 55:5d:67:7b:f0:05:78:83:18:b0:02:d1:07:b4:a6: 05:d8:50:29:7e:f5:af:09:ca:e5:24:58:f5:07:b9: 36:98:35:f6:aa:1f:49:ca:c4:9a:1c:de:74:8d:a6: 83:92:ce:8f:54:7f:69:43:ab:28:99:b3:6b:51:ea: fa:38:7e:c8:33:11:7a:c3:bc:83:6d:cb:32:c0:dc: 4d:1f:c4:69:79:c7:fc:63:9d:68:bd:d7:4d:69:63: 58:e2:71:22:87:7d:31:6e:5f:d2:c9:75:fb:58:7e: c3:d5:76:28:43:01:f5:8d:54:10:88:e0:e1:c2:82: 34:ad:52:e7:c6:1f:c5:59:90:38:6c:61:20:d8:41: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CE:A2:2B:93:A9:65:E4:17:97:8A:51:45:92:A7:61:33:7D:90:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a2:0e:2e:af:85:74:01:80:ae:f0:79:ed:a2:8c:55:be:ba: 05:57:52:9f:16:e8:e3:ae:c9:7f:f3:df:68:07:fe:64:d2:d3: 13:26:ca:53:60:1f:86:50:df:e6:49:ca:9a:13:a1:d6:4d:40: e3:7d:17:48:31:cb:94:27:d3:02:a1:a5:61:95:9a:1f:37:ca: 98:03:7c:f8:b0:d8:27:56:fb:38:36:7b:b0:4f:73:d6:b0:39: d1:1a:f0:c9:c1:5a:94:aa:20:e4:73:e2:db:f6:0a:f4:b5:ac: ef:f3:6b:d0:d7:40:3f:44:45:64:90:f3:bc:a1:b0:7d:10:55: c8:8b:db:65:6c:1a:46:f8:df:b8:16:1a:b6:bc:b4:0d:dd:ce: 22:4a:bc:2e:4d:4e:41:98:c5:25:9c:d8:9f:b1:f7:5a:80:01: 53:56:e7:c1:53:8b:3f:32:66:c3:d4:d6:3b:2c:d8:c8:3a:a7: b3:94:32:cc:a5:6a:fd:90:a4:24:e1:a1:b2:40:86:ef:ac:78: 31:5b:e5:9c:13:31:4f:a8:b4:20:08:58:a4:75:82:26:ad:08: 39:c6:04:18:bd:6d:d1:c6:2c:7b:d0:f0:1f:19:60:c0:30:aa: 56:07:33:d3:03:a7:11:cb:81:ae:1e:ae:eb:50:f5:f4:81:6a: af:99:2d:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu+IjN2NanY5ysB58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MTEwNDAxMDAwOFoXDTI1MTEwNzAxMDAwMFowLzEtMCsGA1UEAxMk NjM0ODU3MzQtODI5ZC00ZTAzLTg3YzktM2MzYWYxYmQ1OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss66ys0VtXSmOztK1n6e/QC8mPX+vxqtATdA vdIY6MT2h7VLMLiyZg+or/lXpeBbuf9olBptwyzDJVylIzix+lGAVyaQtG2jyRnO HBuiD32GXVx9DxEEpSAIrCMg/yQ2J4sOc6VBKva9F6zEm1XGpgMqRmezpl1VXWd7 8AV4gxiwAtEHtKYF2FApfvWvCcrlJFj1B7k2mDX2qh9JysSaHN50jaaDks6PVH9p Q6sombNrUer6OH7IMxF6w7yDbcsywNxNH8Rpecf8Y51ovddNaWNY4nEih30xbl/S yXX7WH7D1XYoQwH1jVQQiODhwoI0rVLnxh/FWZA4bGEg2EGfawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAzOoiuTqWXkF5eKUUWSp2EzfZBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMzVhM2YwODgtMDViNy00 NzBhLTlhZjUtNDViZDI1ZWU4ZmMxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASog4ur4V0AYCu8HntooxV vroFV1KfFujjrsl/899oB/5k0tMTJspTYB+GUN/mScqaE6HWTUDjfRdIMcuUJ9MC oaVhlZofN8qYA3z4sNgnVvs4NnuwT3PWsDnRGvDJwVqUqiDkc+Lb9gr0tazv82vQ 10A/REVkkPO8obB9EFXIi9tlbBpG+N+4Fhq2vLQN3c4iSrwuTU5BmMUlnNifsfda gAFTVufBU4s/MmbD1NY7LNjIOqezlDLMpWr9kKQk4aGyQIbvrHgxW+WcEzFPqLQg CFikdYImrQg5xgQYvW3Rxix70PAfGWDAMKpWBzPTA6cRy4GuHq7rUPX0gWqvmS27 -----END CERTIFICATE-----Generated at Tue Nov 4 23:41:28 2025 by rpki-client