$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft File: b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft (raw, json) Hash identifier: 5fa32cFwEHjntKd49UuBzZJwMoIw0weiQ4gutB15tiM= Subject key identifier: FB:3D:81:15:2D:26:C5:58:29:BD:3A:EF:59:96:E3:6F:2C:C5:2A:1A Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584ABF27B112DA5A3474B477FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft Manifest number: 010D0C9F43285841C860503D02ECCF56D2C95B14 Signing time: Mon 04 Aug 2025 17:00:03 +0000 Manifest this update: Mon 04 Aug 2025 17:00:03 +0000 Manifest next update: Thu 07 Aug 2025 17:00:00 +0000 Files and hashes: 1: 6bb3e0fa-da4c-3bb0-8eed-a6f21b814e7d.roa (hash: wxDa/Ui4v3VIrvxk9yuBjhd2xvdRRPPmu8G2BVCp41k=) 2: 77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa (hash: X4JNO3H8HM4AHFnUIpDBO8wIvwfW1mRQdDzdxaEpFn4=) 3: 9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa (hash: HhvimkuPlAzeNW2tPkqaUPQ87QWIUSD43pj2jGVpQyI=) 4: b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl (hash: uUf3PqQLXCg6obbL1tuKYYdgwlMEXcjX2R47HthWnNc=) 5: be063289-2e69-3acf-ad62-b42a1aa1d80d.roa (hash: IUZhZ1sHs9FUDZRxzDtHfMDfojHkF8DzeuxbfVtxEaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:27:b1:12:da:5a:34:74:b4:77:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Aug 4 17:00:03 2025 GMT Not After : Aug 7 17:00:00 2025 GMT Subject: CN=4327f08a-4733-4c5e-8c39-8638dcd14706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:64:2e:c1:a8:f2:f3:6e:db:77:67:91:be:7d: 63:2c:c7:1d:3d:c0:2b:99:7e:59:a9:41:bb:45:d2: 65:4f:44:9b:b1:37:13:56:20:e3:c3:0e:b0:94:ec: dc:db:b6:e5:73:9a:53:5a:5e:04:d8:a1:80:7d:fa: 40:a5:d3:57:70:6b:c0:4e:57:73:e8:9e:81:16:c8: 9b:fe:32:38:56:c2:21:d0:60:4d:9b:49:a1:28:fa: 1c:37:11:35:59:dd:33:05:80:c7:39:cc:bc:e9:5b: 10:bd:31:b3:8c:43:b3:1e:78:59:e2:30:5a:04:04: 5c:8c:99:bf:b2:7e:e3:92:f4:87:b7:76:e8:ff:89: ca:70:06:2c:01:7b:c9:8b:9a:be:d0:80:54:49:6e: d0:4e:87:b3:57:56:2a:7a:71:95:a9:0d:52:61:f3: 95:49:dd:05:31:e4:14:3d:b2:bd:48:7f:d3:7c:fd: fd:ab:de:64:aa:46:ad:2b:1c:6c:ca:a1:1d:c3:38: cf:c3:a1:13:6d:ad:02:a5:52:89:6d:4b:8b:8f:92: 5a:65:ac:87:b4:97:9d:71:fa:ec:33:b9:38:66:a8: a9:74:80:47:c1:53:ff:46:14:f6:4a:81:82:ee:1a: 0b:8b:d0:16:d3:ef:a1:7d:44:80:15:2c:e5:36:50: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:81:15:2D:26:C5:58:29:BD:3A:EF:59:96:E3:6F:2C:C5:2A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fb:ab:6c:af:27:5d:23:62:ed:bd:05:0b:89:e1:04:b5:4d: 06:62:5f:ab:92:f0:c9:9d:ef:e0:89:3c:da:b9:fd:67:08:fe: af:7a:df:46:ae:c0:61:a6:8e:63:d0:3b:36:21:5f:9e:b6:b9: f7:27:60:9d:68:64:ce:ef:d7:50:9d:46:84:f8:85:86:1c:f4: 0d:08:18:95:85:da:d6:38:98:d1:a4:a7:b0:e8:77:d2:99:e9: 79:19:d7:0c:4b:30:6c:6f:d0:b6:dc:74:37:a9:1c:4e:de:7d: ec:43:23:4d:b1:74:88:4f:60:db:fc:13:4a:52:19:91:f3:f9: 9b:fd:06:e9:c7:2a:1f:a0:04:ac:05:62:c0:52:2a:18:d3:94: 43:81:66:9c:28:f2:a6:fd:3d:df:24:ad:0f:f9:69:19:d8:94: ab:ed:81:3a:47:d1:47:9f:59:44:04:f7:4d:8b:6f:50:10:c6: bb:bf:28:17:56:d7:14:e8:02:58:54:2c:54:fd:a9:02:0e:6f: f6:13:d5:fe:e0:a5:c5:1e:fa:d8:82:d6:29:86:94:e2:1e:f5: 68:00:f0:53:98:c8:fc:21:8d:ee:a7:46:63:f4:67:59:a6:f7: e5:47:41:70:4e:03:48:37:e3:75:24:df:02:19:85:0d:66:50: 74:99:9f:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq/J7ES2lo0dLR3/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MDgwNDE3MDAwM1oXDTI1MDgwNzE3MDAwMFowLzEtMCsGA1UEAxMk NDMyN2YwOGEtNDczMy00YzVlLThjMzktODYzOGRjZDE0NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGQuwajy827bd2eRvn1jLMcdPcArmX5ZqUG7 RdJlT0SbsTcTViDjww6wlOzc27blc5pTWl4E2KGAffpApdNXcGvATldz6J6BFsib /jI4VsIh0GBNm0mhKPocNxE1Wd0zBYDHOcy86VsQvTGzjEOzHnhZ4jBaBARcjJm/ sn7jkvSHt3bo/4nKcAYsAXvJi5q+0IBUSW7QToezV1YqenGVqQ1SYfOVSd0FMeQU PbK9SH/TfP39q95kqkatKxxsyqEdwzjPw6ETba0CpVKJbUuLj5JaZayHtJedcfrs M7k4ZqipdIBHwVP/RhT2SoGC7hoLi9AW0++hfUSAFSzlNlDkzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPs9gRUtJsVYKb0671mW428sxSoaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvYjM1ZmVmZDctZjJlNS00 MTZjLTkzMmEtMGQ1MmQ0MzBjM2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC+6tsryddI2LtvQULieEE tU0GYl+rkvDJne/giTzauf1nCP6vet9GrsBhpo5j0Ds2IV+etrn3J2CdaGTO79dQ nUaE+IWGHPQNCBiVhdrWOJjRpKew6HfSmel5GdcMSzBsb9C23HQ3qRxO3n3sQyNN sXSIT2Db/BNKUhmR8/mb/QbpxyofoASsBWLAUioY05RDgWacKPKm/T3fJK0P+WkZ 2JSr7YE6R9FHn1lEBPdNi29QEMa7vygXVtcU6AJYVCxU/akCDm/2E9X+4KXFHvrY gtYphpTiHvVoAPBTmMj8IY3up0Zj9GdZpvflR0FwTgNIN+N1JN8CGYUNZlB0mZ81 -----END CERTIFICATE-----Generated at Mon Aug 4 18:32:11 2025 by rpki-client