$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft File: 35c42a25-42c3-46fe-9914-5b8394eae9b1.mft (raw, json) Hash identifier: CWQ8e6109WEqGxLMeXmkF1xN/V1LSx7G9H8iVvJ40jQ= Subject key identifier: CB:F9:5E:7B:14:06:DB:2D:16:F2:5B:A4:09:61:5D:0F:EC:AC:3B:8D Authority key identifier: 03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB Certificate issuer: /CN=35c42a25-42c3-46fe-9914-5b8394eae9b1 Certificate serial: 010D0C9F4328584BAB4A09F312537A69C7449D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft Manifest number: 010D0C9F43285846E1CD999D4767BA1CE4727901 Signing time: Tue 28 Oct 2025 07:00:03 +0000 Manifest this update: Tue 28 Oct 2025 07:00:03 +0000 Manifest next update: Thu 30 Oct 2025 07:00:00 +0000 Files and hashes: 1: 1542f51d-2157-31f8-91cd-a013c591d66f.roa (hash: kHELo4TA4anTtppd6ZCtSNebEI80f5mp+BZGsEgK6+k=) 2: 35c42a25-42c3-46fe-9914-5b8394eae9b1.crl (hash: othdSjtCJgmuaf24dcAGas8iW8VngvUsAPDfVJIb2fo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:4a:09:f3:12:53:7a:69:c7:44:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35c42a25-42c3-46fe-9914-5b8394eae9b1 Validity Not Before: Oct 28 07:00:03 2025 GMT Not After : Oct 30 07:00:00 2025 GMT Subject: CN=7b6346e4-3c3e-4401-9f24-cb6d40c7a4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:e6:32:e6:e8:dd:c6:7c:82:35:95:78:c3: 13:6e:f2:3f:6e:d2:a7:2a:29:bc:32:04:d4:df:d2: 90:39:d8:81:61:39:c6:d7:96:c8:9b:39:7f:95:85: 43:de:1e:03:b1:d7:01:62:49:a4:34:c8:00:a0:4a: 73:a8:6a:cc:2f:0b:4b:40:b3:9c:bb:c1:3b:d4:48: eb:32:ea:e1:da:af:b8:00:ca:e3:ed:98:cd:80:ce: 41:0a:6c:89:42:e0:f9:f1:01:77:18:2e:f1:25:e2: ac:47:94:f4:19:f0:a0:ec:cc:70:05:69:10:70:f9: 42:d6:b7:bf:42:55:51:62:82:3b:e9:f0:e7:cd:5e: f9:51:1d:24:d8:05:b1:08:a9:f5:46:41:d6:07:a6: eb:c2:38:ea:29:de:b0:4f:04:88:60:78:c0:8b:b8: ce:c6:f6:7a:22:0f:c4:57:d3:8d:a2:88:a6:31:b4: 75:32:28:c6:ae:85:e8:99:14:57:47:7b:ec:2b:88: dc:8b:f7:8b:2e:d5:a2:20:2c:2e:f9:8a:d9:23:15: b6:32:76:a0:db:39:3d:8e:06:60:f6:b9:15:99:38: 9c:73:bf:43:07:d5:de:c6:47:ba:2d:c2:e9:5a:42: f7:cb:e0:17:28:c2:07:7c:d6:1e:e7:93:32:8b:ea: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F9:5E:7B:14:06:DB:2D:16:F2:5B:A4:09:61:5D:0F:EC:AC:3B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1/35c42a25-42c3-46fe-9914-5b8394eae9b1.crl X509v3 Authority Key Identifier: keyid:03:BA:AD:1D:6A:A5:E8:52:56:17:AE:8D:E4:EB:87:44:65:38:E6:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/35c42a25-42c3-46fe-9914-5b8394eae9b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c1:be:bc:cb:50:72:72:b6:0e:16:1f:ec:87:9b:c4:e3:c2: ba:14:57:87:2f:c0:f8:80:26:66:17:d6:51:2d:a3:6e:48:27: af:80:71:b2:a3:e5:40:1a:d4:f0:5d:5a:f3:9c:e2:2e:fb:85: 80:16:9b:ab:23:7b:4a:7b:bc:4f:88:b8:23:31:9f:58:98:31: 4d:12:35:c0:ec:8d:33:a5:4f:2f:c4:e7:18:9e:5c:be:de:de: fd:eb:58:18:92:cd:58:58:98:f9:3c:e5:81:8b:58:91:9b:76: a7:88:6b:93:df:0a:2d:dd:95:ab:62:dd:8c:fd:8d:30:59:10: a1:30:4d:2e:00:86:e1:3b:03:a2:84:72:13:96:ae:aa:80:fc: 90:e5:08:24:83:0e:4a:c0:4a:b8:6d:42:85:02:57:37:a3:5e: 44:a5:18:10:c2:2e:07:b6:90:e3:8a:ae:e8:2b:aa:9a:34:1d: db:d0:d2:ce:a6:d5:74:ce:b5:fc:8c:3a:4a:48:ae:0f:29:f2: e9:4c:67:08:fb:34:7d:28:f5:fb:cb:98:3a:e7:c3:79:73:60: a3:15:69:41:30:af:80:21:73:28:76:6e:aa:87:53:bc:7c:a2: e4:7c:14:8d:05:a8:5a:cf:72:94:57:5a:ad:6f:52:11:a8:81: c4:ef:24:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEurSgnzElN6acdEnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjNDJhMjUtNDJjMy00NmZlLTk5MTQtNWI4Mzk0ZWFl OWIxMB4XDTI1MTAyODA3MDAwM1oXDTI1MTAzMDA3MDAwMFowLzEtMCsGA1UEAxMk N2I2MzQ2ZTQtM2MzZS00NDAxLTlmMjQtY2I2ZDQwYzdhNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGHmMubo3cZ8gjWVeMMTbvI/btKnKim8MgTU 39KQOdiBYTnG15bImzl/lYVD3h4DsdcBYkmkNMgAoEpzqGrMLwtLQLOcu8E71Ejr Murh2q+4AMrj7ZjNgM5BCmyJQuD58QF3GC7xJeKsR5T0GfCg7MxwBWkQcPlC1re/ QlVRYoI76fDnzV75UR0k2AWxCKn1RkHWB6brwjjqKd6wTwSIYHjAi7jOxvZ6Ig/E V9ONooimMbR1MijGroXomRRXR3vsK4jci/eLLtWiICwu+YrZIxW2Mnag2zk9jgZg 9rkVmTicc79DB9Xexke6LcLpWkL3y+AXKMIHfNYe55Myi+pkgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMv5XnsUBtstFvJbpAlhXQ/srDuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNWM0 MmEyNS00MmMzLTQ2ZmUtOTkxNC01YjgzOTRlYWU5YjEvMzVjNDJhMjUtNDJjMy00 NmZlLTk5MTQtNWI4Mzk0ZWFlOWIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzVjNDJhMjUtNDJjMy00NmZlLTk5 MTQtNWI4Mzk0ZWFlOWIxLzM1YzQyYTI1LTQyYzMtNDZmZS05OTE0LTViODM5NGVh ZTliMS5jcmwwHwYDVR0jBBgwFoAUA7qtHWql6FJWF66N5OuHRGU45vswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNWM0MmEyNS00MmMzLTQ2ZmUtOTkxNC01Yjgz OTRlYWU5YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEwb68y1BycrYOFh/sh5vE 48K6FFeHL8D4gCZmF9ZRLaNuSCevgHGyo+VAGtTwXVrznOIu+4WAFpurI3tKe7xP iLgjMZ9YmDFNEjXA7I0zpU8vxOcYnly+3t7961gYks1YWJj5POWBi1iRm3aniGuT 3wot3ZWrYt2M/Y0wWRChME0uAIbhOwOihHITlq6qgPyQ5Qgkgw5KwEq4bUKFAlc3 o15EpRgQwi4HtpDjiq7oK6qaNB3b0NLOptV0zrX8jDpKSK4PKfLpTGcI+zR9KPX7 y5g658N5c2CjFWlBMK+AIXModm6qh1O8fKLkfBSNBahaz3KUV1qtb1IRqIHE7ySz -----END CERTIFICATE-----Generated at Tue Oct 28 16:23:57 2025 by rpki-client