$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft File: 35b4b3a4-a195-4325-8f07-9376a8ef2903.mft (raw, json) Hash identifier: v0Wer/LLX17yaUPTUderinid6BZ7SkbwkpR8nwhoFJM= Subject key identifier: 16:DE:BC:A1:A1:EC:E5:81:47:F0:98:12:6C:16:75:AA:C4:7C:EC:A6 Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 Certificate issuer: /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Certificate serial: 010D0C9F4328584BC075C36BB674C40BC1AD5F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft Manifest number: 010D0C9F43285840FFEB05220C09EDB2BD3F497D Signing time: Tue 04 Nov 2025 21:00:08 +0000 Manifest this update: Tue 04 Nov 2025 21:00:08 +0000 Manifest next update: Fri 07 Nov 2025 21:00:00 +0000 Files and hashes: 1: 068688c1-0def-318a-acc5-4f64a4b57119.roa (hash: sA9pbisZMxlS6Zdf0/AQhdhGXIoYgXFyRXdGfhkMjWI=) 2: 0a2e426f-ed15-36c1-abf3-d5cb6e3344ea.roa (hash: Trx9ngUp4ynuR5wdvFwAH1mkZJMjoTnP+/B4TPJ2AfA=) 3: 35b4b3a4-a195-4325-8f07-9376a8ef2903.crl (hash: 4I1Kc/QgjrQ0EedZecm6fmmSpq1cnLMZ8V06ePG24X0=) 4: 3aaaadca-24e4-3f81-8fc4-456ca0f93295.roa (hash: 79hsNpSRiLEGcZUyK5WuCra213ot/3O1CjNdwY1Mduw=) 5: 6e261569-380e-34de-a0a0-35a19e70cb49.roa (hash: RZRx5C9tQCWqdIkKpajQkJ5lpPq3WnE/U1qI7yQaul4=) 6: 976a2d8b-f6cf-3428-afc3-45e6a1e5cd0f.roa (hash: gxyZP9tH4sBSxndddtc+8ZCOrEGN7p03WqWj3uPuY18=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:75:c3:6b:b6:74:c4:0b:c1:ad:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903 Validity Not Before: Nov 4 21:00:08 2025 GMT Not After : Nov 7 21:00:00 2025 GMT Subject: CN=1db44f53-f384-463b-930e-4d7baa4ab417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:65:3f:22:20:50:cb:ae:50:9b:b5:8c:d1: c6:3c:cd:a1:c1:30:52:ae:be:e9:94:0f:94:59:3c: 69:cf:51:28:ed:fa:1a:45:cb:76:d1:7f:01:88:20: c0:74:8a:a6:d9:13:73:48:d2:c7:74:07:5b:1d:c5: 44:ae:de:fd:04:f2:df:c6:2a:a3:19:71:2a:ca:8a: 1c:62:1f:d2:bc:97:f6:a7:31:6c:fd:33:2e:6a:fe: b9:97:2f:16:c3:2e:ce:77:04:7e:be:c4:62:d1:03: f1:b5:44:5d:42:29:3c:51:d5:a2:f9:71:58:0f:e8: 01:8e:c4:9f:fc:67:dc:a7:f7:2b:7e:24:1e:b4:d8: 9a:79:de:84:fc:7a:1b:38:e2:3b:eb:24:b5:75:6e: 0f:e0:ed:35:a0:de:3f:f6:5c:70:1c:8d:f0:cc:8f: 75:8f:f7:fb:56:8f:8d:34:7b:33:f1:43:dd:b4:7c: d8:9d:95:3e:ed:42:f5:2a:3a:75:7c:15:bc:0c:3b: 5e:b0:42:67:86:14:c3:56:1c:d3:e1:7c:d4:0e:d1: 90:82:57:f0:3c:f1:3d:74:11:00:64:bc:92:51:fe: 1e:e3:7a:4c:25:b2:d9:2a:53:b5:e6:3c:22:29:c6: e8:3c:29:8a:e9:36:09:06:1a:8a:fb:ce:63:ae:4a: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DE:BC:A1:A1:EC:E5:81:47:F0:98:12:6C:16:75:AA:C4:7C:EC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl X509v3 Authority Key Identifier: keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:15:54:bd:69:69:3b:23:7d:b8:48:9c:c0:2c:ff:1f:05:8a: 3c:41:63:4d:54:8a:20:42:a8:1f:92:de:9c:59:89:d6:b7:a4: 6d:ac:7e:73:97:c7:a8:1b:4d:05:26:03:78:b9:95:e6:77:a8: 01:60:7d:2e:b0:89:72:15:e8:35:b4:79:d6:d8:d2:b9:d9:a9: dd:ba:74:b1:37:18:02:88:70:ae:1c:e8:79:d6:64:dc:9a:ce: d6:2b:b6:cb:8e:e9:64:d1:39:fe:b0:3a:10:dc:37:31:c1:d2: 83:e6:0b:a2:5c:80:9c:37:d5:2f:47:a5:2c:85:3f:6f:4d:ce: f1:4d:dd:ab:54:11:f7:d6:b4:e3:d4:80:bc:42:35:dc:4a:b7: 1c:2d:8f:8d:f5:9d:32:89:28:8f:bf:b5:25:6c:ab:1a:ea:4c: 73:c1:11:a2:a0:fa:45:b2:ea:37:4f:fd:db:2f:5c:f4:57:ae: 14:92:28:df:0f:e0:ad:9c:b5:be:ed:a3:82:b0:a5:bf:12:75: cf:55:9a:fa:3e:3b:d3:05:62:f0:14:97:c5:52:6c:d1:c2:47: a4:7a:e7:58:75:ae:90:cc:73:fd:7d:06:51:9f:5d:ca:35:cb: 03:7a:ee:5c:64:52:68:34:5d:39:73:05:26:03:08:dd:63:85: 17:a8:e8:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAdcNrtnTEC8GtX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViNGIzYTQtYTE5NS00MzI1LThmMDctOTM3NmE4ZWYy OTAzMB4XDTI1MTEwNDIxMDAwOFoXDTI1MTEwNzIxMDAwMFowLzEtMCsGA1UEAxMk MWRiNDRmNTMtZjM4NC00NjNiLTkzMGUtNGQ3YmFhNGFiNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4khlPyIgUMuuUJu1jNHGPM2hwTBSrr7plA+U WTxpz1Eo7foaRct20X8BiCDAdIqm2RNzSNLHdAdbHcVErt79BPLfxiqjGXEqyooc Yh/SvJf2pzFs/TMuav65ly8Wwy7OdwR+vsRi0QPxtURdQik8UdWi+XFYD+gBjsSf /Gfcp/crfiQetNiaed6E/HobOOI76yS1dW4P4O01oN4/9lxwHI3wzI91j/f7Vo+N NHsz8UPdtHzYnZU+7UL1Kjp1fBW8DDtesEJnhhTDVhzT4XzUDtGQglfwPPE9dBEA ZLySUf4e43pMJbLZKlO15jwiKcboPCmK6TYJBhqK+85jrkqlHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBbevKGh7OWBR/CYEmwWdarEfOymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0 YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2YThlZjI5MDMvMzViNGIzYTQtYTE5NS00 MzI1LThmMDctOTM3NmE4ZWYyOTAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzViNGIzYTQtYTE5NS00MzI1LThm MDctOTM3NmE4ZWYyOTAzLzM1YjRiM2E0LWExOTUtNDMyNS04ZjA3LTkzNzZhOGVm MjkwMy5jcmwwHwYDVR0jBBgwFoAUuan0c5Rg+PnDmag9AVdSgl973GYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWI0YjNhNC1hMTk1LTQzMjUtOGYwNy05Mzc2 YThlZjI5MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeFVS9aWk7I324SJzALP8f BYo8QWNNVIogQqgfkt6cWYnWt6RtrH5zl8eoG00FJgN4uZXmd6gBYH0usIlyFeg1 tHnW2NK52andunSxNxgCiHCuHOh51mTcms7WK7bLjulk0Tn+sDoQ3DcxwdKD5gui XICcN9UvR6UshT9vTc7xTd2rVBH31rTj1IC8QjXcSrccLY+N9Z0yiSiPv7UlbKsa 6kxzwRGioPpFsuo3T/3bL1z0V64UkijfD+CtnLW+7aOCsKW/EnXPVZr6PjvTBWLw FJfFUmzRwkekeudYda6QzHP9fQZRn13KNcsDeu5cZFJoNF05cwUmAwjdY4UXqOj3 -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:15 2025 by rpki-client