$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft File: 35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft (raw, json) Hash identifier: iTcKzBQuBMcsg9AdRxnJrFx/eOJ16cUXp/19JDUPsvM= Subject key identifier: B4:C4:32:6E:E7:73:F6:89:AA:4B:B8:ED:49:5C:76:E6:7E:C5:5A:68 Authority key identifier: 73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 Certificate issuer: /CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c Certificate serial: 010D0C9F4328584BC03A2ECF406C92CA7F221840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft Manifest number: 010D0C9F432858484E11F94597C088108F261D84 Signing time: Tue 04 Nov 2025 19:00:03 +0000 Manifest this update: Tue 04 Nov 2025 19:00:03 +0000 Manifest next update: Fri 07 Nov 2025 19:00:00 +0000 Files and hashes: 1: 35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl (hash: WZbT0Ws30mFKqi9LOZrBnDTNpCPtyISrrX7gH+/UQsA=) 2: b533aff3-439d-33b5-bcd9-30c7b5833b92.roa (hash: XirnvbGEajHbWpu4TqhNprhMR8XwOLNgk/uXbkoofyg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:3a:2e:cf:40:6c:92:ca:7f:22:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a113bf-2a5d-4e97-9a3c-313662f5a58c Validity Not Before: Nov 4 19:00:03 2025 GMT Not After : Nov 7 19:00:00 2025 GMT Subject: CN=3a5ba334-516e-40e8-b160-d4e090261f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:69:2d:d4:c6:c9:cf:59:7c:a3:84:bc:8e:00: c6:4c:89:8d:96:d7:21:8f:62:49:03:54:f2:66:04: 68:fb:df:0d:86:14:7d:a3:a2:d3:74:16:72:ab:28: fd:22:e3:c6:49:7f:ef:47:8d:83:dc:f8:8d:9c:e6: ab:e3:28:f3:e2:a7:dc:7c:1a:13:ae:cb:b2:00:59: cc:d7:44:2f:f2:c0:dd:6b:43:fc:e8:bb:ba:6a:ae: 02:2c:28:b3:14:b6:e3:cc:d3:da:f6:1f:6f:30:03: 32:6e:64:87:57:ad:71:97:b1:0e:63:e8:92:12:1f: ae:ee:a8:69:07:d2:10:90:71:c4:ce:68:71:1e:6f: 37:ff:55:0e:9a:60:11:17:15:0f:3b:ba:be:fc:1c: 4c:2c:90:2f:72:c2:79:b7:e4:d8:cc:61:82:d8:de: 55:75:02:0d:75:20:7b:1c:fd:44:3f:27:08:b1:de: e6:21:fd:86:52:e8:2b:59:e8:ef:8e:8b:ec:00:f0: 9f:f5:b6:f8:ec:72:ed:23:a3:13:1a:5b:cc:61:48: dd:85:59:b4:5d:d4:b8:47:9b:6a:0f:d4:69:d0:ed: 93:c0:ce:1a:fa:5c:9d:cc:05:88:55:d0:a1:f4:09: 23:84:78:c9:a4:c0:5d:ef:58:c3:c8:d6:ab:ee:97: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C4:32:6E:E7:73:F6:89:AA:4B:B8:ED:49:5C:76:E6:7E:C5:5A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c/35a113bf-2a5d-4e97-9a3c-313662f5a58c.crl X509v3 Authority Key Identifier: keyid:73:F2:64:9A:96:0E:44:EE:41:93:E8:8B:FE:4C:39:EA:48:DE:D8:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/35a113bf-2a5d-4e97-9a3c-313662f5a58c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c4:d3:05:9f:0b:51:e3:53:e4:6b:84:40:06:b1:79:be:7f: 49:58:54:9b:f2:ad:01:1b:bb:54:ed:db:03:db:44:20:db:ef: 81:50:d2:5f:ee:b0:df:ac:18:ba:2f:49:bf:8e:40:54:f6:0d: b3:83:02:b1:cc:b8:9d:9e:a0:b1:db:ed:de:bc:64:0b:20:3b: 82:d2:7f:9d:36:52:05:16:9d:62:c3:b3:5f:a3:b2:cb:54:fb: 25:04:c5:ad:64:02:71:9d:99:6c:27:0a:90:44:74:38:96:14: 74:39:40:8b:18:cb:61:ea:c6:bf:66:71:d5:a4:e0:69:6f:62: e5:15:49:d7:9e:73:30:0d:bd:ee:92:e1:ae:02:6f:44:08:4d: 6c:31:d7:8e:4b:35:c8:f8:30:df:87:1b:91:2f:e7:1d:db:d3: 6e:98:bb:06:c0:d8:6a:9d:c9:a6:6e:23:d4:4e:aa:93:1e:4b: 08:c6:b7:ae:f5:fa:c4:cc:4f:b2:10:ac:29:5b:13:b8:14:a1: 1d:d7:7f:23:8a:61:3e:ae:57:ab:f7:ea:1e:99:98:2f:92:32: 51:43:eb:60:4d:75:0d:de:8d:f5:64:84:20:d4:db:be:86:6e: 2e:3e:2d:e7:af:58:c2:05:76:91:23:6c:0f:3f:c1:62:ca:d0: be:a9:c9:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAOi7PQGySyn8iGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhMTEzYmYtMmE1ZC00ZTk3LTlhM2MtMzEzNjYyZjVh NThjMB4XDTI1MTEwNDE5MDAwM1oXDTI1MTEwNzE5MDAwMFowLzEtMCsGA1UEAxMk M2E1YmEzMzQtNTE2ZS00MGU4LWIxNjAtZDRlMDkwMjYxZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmkt1MbJz1l8o4S8jgDGTImNltchj2JJA1Ty ZgRo+98NhhR9o6LTdBZyqyj9IuPGSX/vR42D3PiNnOar4yjz4qfcfBoTrsuyAFnM 10Qv8sDda0P86Lu6aq4CLCizFLbjzNPa9h9vMAMybmSHV61xl7EOY+iSEh+u7qhp B9IQkHHEzmhxHm83/1UOmmARFxUPO7q+/BxMLJAvcsJ5t+TYzGGC2N5VdQINdSB7 HP1EPycIsd7mIf2GUugrWejvjovsAPCf9bb47HLtI6MTGlvMYUjdhVm0XdS4R5tq D9Rp0O2TwM4a+lydzAWIVdCh9AkjhHjJpMBd71jDyNar7pf2WwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLTEMm7nc/aJqku47UlcduZ+xVpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNWEx MTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2NjJmNWE1OGMvMzVhMTEzYmYtMmE1ZC00 ZTk3LTlhM2MtMzEzNjYyZjVhNThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzVhMTEzYmYtMmE1ZC00ZTk3LTlh M2MtMzEzNjYyZjVhNThjLzM1YTExM2JmLTJhNWQtNGU5Ny05YTNjLTMxMzY2MmY1 YTU4Yy5jcmwwHwYDVR0jBBgwFoAUc/JkmpYORO5Bk+iL/kw56kje2NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNWExMTNiZi0yYTVkLTRlOTctOWEzYy0zMTM2 NjJmNWE1OGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcxNMFnwtR41Pka4RABrF5 vn9JWFSb8q0BG7tU7dsD20Qg2++BUNJf7rDfrBi6L0m/jkBU9g2zgwKxzLidnqCx 2+3evGQLIDuC0n+dNlIFFp1iw7Nfo7LLVPslBMWtZAJxnZlsJwqQRHQ4lhR0OUCL GMth6sa/ZnHVpOBpb2LlFUnXnnMwDb3ukuGuAm9ECE1sMdeOSzXI+DDfhxuRL+cd 29NumLsGwNhqncmmbiPUTqqTHksIxreu9frEzE+yEKwpWxO4FKEd138jimE+rler 9+oemZgvkjJRQ+tgTXUN3o31ZIQg1Nu+hm4uPi3nr1jCBXaRI2wPP8FiytC+qcmD -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:47 2025 by rpki-client