$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.mft File: 35bf5b69-9d60-4f63-9abc-a4e6a43e4318.mft (raw, json) Hash identifier: F3sGib6M1rVOUbBQNT1qEJZyF6fX9/FEVMg834wa6+A= Subject key identifier: ED:B4:0C:00:55:C5:53:D6:87:EE:4F:3C:C5:77:75:70:33:40:45:F1 Authority key identifier: E7:60:A7:89:3C:60:B7:D2:E3:D4:50:6B:F4:10:57:F2:A7:D6:A6:59 Certificate issuer: /CN=35bf5b69-9d60-4f63-9abc-a4e6a43e4318 Certificate serial: 010D0C9F4328584BBFFEA53A9CE1475C44090380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.mft Manifest number: 010D0C9F4328584AC205383909A8523751201C3B Signing time: Tue 04 Nov 2025 17:00:08 +0000 Manifest this update: Tue 04 Nov 2025 17:00:08 +0000 Manifest next update: Thu 06 Nov 2025 17:00:00 +0000 Files and hashes: 1: 35bf5b69-9d60-4f63-9abc-a4e6a43e4318.crl (hash: 5m8JmRRHY/n42fn2FNH/AfFO6QcNskT3r8gC31oGO0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:fe:a5:3a:9c:e1:47:5c:44:09:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bf5b69-9d60-4f63-9abc-a4e6a43e4318 Validity Not Before: Nov 4 17:00:08 2025 GMT Not After : Nov 6 17:00:00 2025 GMT Subject: CN=0b7f43cb-93b4-47d2-b30a-08aad02d10ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:d0:8b:ba:59:98:da:86:d5:61:15:c8:33: e3:87:ad:ec:fa:24:2e:c0:fb:09:8f:74:b1:fc:bb: 8a:0a:0a:d5:96:9b:72:1a:13:6b:ce:d4:33:60:8e: 33:e5:70:b6:10:e8:fd:b8:83:55:03:91:9e:e4:f0: c1:a3:d3:1e:14:4f:78:ac:c7:39:20:7d:43:d9:d8: 10:4e:93:a8:2a:7d:ec:18:1a:6f:ca:72:5f:8c:26: c0:ff:5d:06:14:e4:11:2b:b7:15:2a:d1:c4:a6:11: 13:7d:b7:82:65:ed:12:1e:3b:0e:17:03:fe:4b:4c: b3:a4:9a:89:46:e2:a7:a5:42:b1:31:76:d1:ec:7d: 0a:bb:df:54:55:ef:53:61:88:ac:c0:4b:3e:7d:2d: bd:b3:93:4d:a9:d0:dc:04:e9:82:92:f5:b6:7b:30: 56:5f:24:1d:77:6f:b7:29:27:e6:50:04:c5:a3:ef: 12:d8:94:16:1c:6c:a0:bc:66:f1:e7:7d:65:d6:ad: 82:d3:51:99:56:fc:05:1d:81:62:03:bc:75:63:77: 48:fd:cc:d4:c7:fd:bd:79:63:e4:25:e4:e6:03:6f: 7a:35:35:b6:b8:b1:7a:c7:2c:81:c2:3e:54:b7:90: 57:35:35:25:20:e5:46:0e:1a:59:cc:10:67:3b:bf: fa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B4:0C:00:55:C5:53:D6:87:EE:4F:3C:C5:77:75:70:33:40:45:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.crl X509v3 Authority Key Identifier: keyid:E7:60:A7:89:3C:60:B7:D2:E3:D4:50:6B:F4:10:57:F2:A7:D6:A6:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35bf5b69-9d60-4f63-9abc-a4e6a43e4318.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ee:d6:f2:8a:98:0f:06:54:1e:38:fc:36:76:5c:80:87:7a: 23:63:38:5b:4e:77:d0:4b:73:9f:a6:07:8e:7b:23:79:99:4f: 94:70:07:c2:35:11:ba:0a:93:03:fd:f1:99:5b:56:86:a9:fa: 99:92:f1:ac:cf:56:f6:29:06:2e:a5:61:6d:ae:52:88:e9:20: 54:45:d8:2d:ea:57:0b:5b:d9:24:ee:9c:14:7f:f6:91:b2:3e: e1:b4:72:b2:7d:c4:89:0d:de:8a:9e:de:07:a8:e4:8e:1b:77: b2:94:37:40:ac:83:48:dd:7e:73:10:6d:dc:2c:37:02:18:f2: 6c:3c:93:61:5c:a3:53:e8:ce:6a:23:b6:d8:9a:59:86:0e:d6: 5c:dd:06:10:67:dd:e2:6d:55:63:18:75:2f:fe:db:d3:58:20: 71:86:17:be:d0:51:c6:a3:a3:fb:04:28:5b:fa:cf:61:b5:79: b9:b8:ea:dd:27:3f:13:09:c7:ee:6b:31:7c:6c:c4:b7:58:95: 2a:26:d5:92:c6:ae:cc:89:aa:ac:8a:da:66:6b:0f:ab:12:dd: 21:e4:59:17:05:05:f5:bc:69:71:58:d8:ef:53:38:44:94:c1: 8c:e1:6b:7a:2d:4f:70:ab:fb:52:4f:a3:1a:10:90:7a:b0:fc: 83:14:9d:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu//qU6nOFHXEQJA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZjViNjktOWQ2MC00ZjYzLTlhYmMtYTRlNmE0M2U0 MzE4MB4XDTI1MTEwNDE3MDAwOFoXDTI1MTEwNjE3MDAwMFowLzEtMCsGA1UEAxMk MGI3ZjQzY2ItOTNiNC00N2QyLWIzMGEtMDhhYWQwMmQxMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvATQi7pZmNqG1WEVyDPjh63s+iQuwPsJj3Sx /LuKCgrVlptyGhNrztQzYI4z5XC2EOj9uINVA5Ge5PDBo9MeFE94rMc5IH1D2dgQ TpOoKn3sGBpvynJfjCbA/10GFOQRK7cVKtHEphETfbeCZe0SHjsOFwP+S0yzpJqJ RuKnpUKxMXbR7H0Ku99UVe9TYYiswEs+fS29s5NNqdDcBOmCkvW2ezBWXyQdd2+3 KSfmUATFo+8S2JQWHGygvGbx531l1q2C01GZVvwFHYFiA7x1Y3dI/czUx/29eWPk JeTmA296NTW2uLF6xyyBwj5Ut5BXNTUlIOVGDhpZzBBnO7/66QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO20DABVxVPWh+5PPMV3dXAzQEXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJm NWI2OS05ZDYwLTRmNjMtOWFiYy1hNGU2YTQzZTQzMTgvMzViZjViNjktOWQ2MC00 ZjYzLTlhYmMtYTRlNmE0M2U0MzE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZjViNjktOWQ2MC00ZjYzLTlh YmMtYTRlNmE0M2U0MzE4LzM1YmY1YjY5LTlkNjAtNGY2My05YWJjLWE0ZTZhNDNl NDMxOC5jcmwwHwYDVR0jBBgwFoAU52CniTxgt9Lj1FBr9BBX8qfWplkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJmNWI2OS05ZDYwLTRmNjMtOWFiYy1hNGU2 YTQzZTQzMTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO7tbyipgPBlQeOPw2dlyA h3ojYzhbTnfQS3OfpgeOeyN5mU+UcAfCNRG6CpMD/fGZW1aGqfqZkvGsz1b2KQYu pWFtrlKI6SBURdgt6lcLW9kk7pwUf/aRsj7htHKyfcSJDd6Knt4HqOSOG3eylDdA rINI3X5zEG3cLDcCGPJsPJNhXKNT6M5qI7bYmlmGDtZc3QYQZ93ibVVjGHUv/tvT WCBxhhe+0FHGo6P7BChb+s9htXm5uOrdJz8TCcfuazF8bMS3WJUqJtWSxq7Miaqs itpmaw+rEt0h5FkXBQX1vGlxWNjvUzhElMGM4Wt6LU9wq/tST6MaEJB6sPyDFJ2W -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:57 2025 by rpki-client