$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft File: b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft (raw, json) Hash identifier: SO+1XXe90k6pEZWtxmyHFMHNY6dOkMCqbd1InRKrXp4= Subject key identifier: 34:2D:1E:7F:CA:90:F6:A4:D0:37:8F:C6:46:B4:42:01:81:EA:24:52 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584B1B4841287D1586EBA294B700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft Manifest number: 010D0C9F43285841C860503D02ECCF56D2C95B38 Signing time: Sat 06 Sep 2025 17:00:03 +0000 Manifest this update: Sat 06 Sep 2025 17:00:03 +0000 Manifest next update: Mon 08 Sep 2025 17:00:00 +0000 Files and hashes: 1: 6bb3e0fa-da4c-3bb0-8eed-a6f21b814e7d.roa (hash: wxDa/Ui4v3VIrvxk9yuBjhd2xvdRRPPmu8G2BVCp41k=) 2: 77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa (hash: uEdftyEqoTbTLYF/fskRyUoQGDdPK0NSbFEb7wB6vRg=) 3: 9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa (hash: HhvimkuPlAzeNW2tPkqaUPQ87QWIUSD43pj2jGVpQyI=) 4: b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl (hash: qDTbGDO+SeeFtyS3j/cMFt7dPBnOH1dzktly8qAZcSk=) 5: be063289-2e69-3acf-ad62-b42a1aa1d80d.roa (hash: IUZhZ1sHs9FUDZRxzDtHfMDfojHkF8DzeuxbfVtxEaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1b:48:41:28:7d:15:86:eb:a2:94:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Sep 6 17:00:03 2025 GMT Not After : Sep 8 17:00:00 2025 GMT Subject: CN=bfb2dbdb-43f7-4598-888d-fae9abd8c66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:05:dd:b6:ad:52:98:93:d8:e6:9e:d7:53: a0:f8:48:ff:23:29:83:2e:1f:8a:cb:17:dd:c2:1c: d2:99:df:5b:f9:81:2a:88:77:b3:c8:8c:69:01:1a: ad:05:d5:05:c0:29:28:0a:57:9d:a5:68:e1:e9:53: 36:12:94:6d:06:83:26:10:29:f4:01:a8:f2:d7:f2: 3b:09:9d:7e:65:1f:4f:17:a0:d8:17:75:3c:34:87: 10:3f:07:43:b6:fb:fd:74:b7:5c:56:61:12:d1:bc: c0:83:87:5a:83:60:b0:9d:f9:e1:1a:f8:43:4b:61: 42:75:b2:67:1e:23:aa:ff:ff:cb:6d:9a:f2:a2:11: 0b:25:3c:b8:ee:90:94:60:8d:ba:eb:60:d4:6e:06: 94:99:09:62:89:91:a4:9f:4e:48:80:da:a7:40:62: ab:27:48:c9:26:fb:56:33:3d:1e:e1:2f:f4:89:9b: 1f:cb:5b:d0:95:4f:33:cf:3c:f1:2f:a0:35:9b:b1: bb:ce:41:ad:e0:97:cb:25:cb:d9:d0:27:80:bc:05: 23:b0:d2:0d:1d:d8:01:0a:b8:57:24:b0:fb:f0:69: ba:85:67:34:3c:61:cb:64:1c:0f:cd:de:34:37:7e: da:b0:f2:f1:0a:3a:0d:67:fe:35:3d:02:10:c1:72: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:1E:7F:CA:90:F6:A4:D0:37:8F:C6:46:B4:42:01:81:EA:24:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:79:8e:94:fe:ed:1e:9b:4f:f2:88:54:2f:8a:85:9b:34:46: 4c:fc:b2:05:e2:ce:af:c7:16:41:78:a8:5f:1c:05:02:9c:52: aa:c7:d9:d6:89:5c:08:d0:b6:05:ed:d1:87:b7:da:ff:67:3a: 16:89:69:4f:d9:aa:cc:45:1d:18:af:d6:bb:21:fa:c4:4f:54: 6d:31:77:d6:c4:b0:10:1b:6f:76:e0:a3:d3:73:a6:8c:93:86: 99:b1:f7:ba:b8:45:fc:03:2e:6d:7f:25:2d:7b:58:eb:4e:fb: 4b:8c:cf:f8:c5:c1:f4:80:e5:ad:22:83:18:42:a4:03:d9:89: 4c:41:38:17:15:ca:03:07:3b:14:41:57:b9:29:0e:79:f2:32: 69:fa:71:af:9f:9e:b5:f7:7d:5e:28:9b:cf:09:e9:3c:92:67: dc:c6:e3:f2:21:b7:bd:aa:16:43:da:6d:b6:3f:46:78:08:ee: e1:ed:b2:6b:66:52:e5:b6:a8:d8:45:ad:f4:d0:8a:ae:3d:46: 04:11:a5:69:c3:ff:40:e5:ca:e4:7f:92:5e:3f:7b:eb:52:0b: 67:51:8a:ba:af:f0:4b:b5:5e:67:94:ca:be:03:84:16:a6:0c: 97:26:e8:ee:a1:ee:7c:a6:00:67:23:16:95:a7:0d:43:0a:9e: 6f:8e:fa:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsbSEEofRWG66KUtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MDkwNjE3MDAwM1oXDTI1MDkwODE3MDAwMFowLzEtMCsGA1UEAxMk YmZiMmRiZGItNDNmNy00NTk4LTg4OGQtZmFlOWFiZDhjNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTkF3batUpiT2Oae11Og+Ej/IymDLh+Kyxfd whzSmd9b+YEqiHezyIxpARqtBdUFwCkoCledpWjh6VM2EpRtBoMmECn0Aajy1/I7 CZ1+ZR9PF6DYF3U8NIcQPwdDtvv9dLdcVmES0bzAg4dag2CwnfnhGvhDS2FCdbJn HiOq///LbZryohELJTy47pCUYI2662DUbgaUmQliiZGkn05IgNqnQGKrJ0jJJvtW Mz0e4S/0iZsfy1vQlU8zzzzxL6A1m7G7zkGt4JfLJcvZ0CeAvAUjsNINHdgBCrhX JLD78Gm6hWc0PGHLZBwPzd40N37asPLxCjoNZ/41PQIQwXK+/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDQtHn/KkPak0DePxka0QgGB6iRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvYjM1ZmVmZDctZjJlNS00 MTZjLTkzMmEtMGQ1MmQ0MzBjM2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFeY6U/u0em0/yiFQvioWb NEZM/LIF4s6vxxZBeKhfHAUCnFKqx9nWiVwI0LYF7dGHt9r/ZzoWiWlP2arMRR0Y r9a7IfrET1RtMXfWxLAQG2924KPTc6aMk4aZsfe6uEX8Ay5tfyUte1jrTvtLjM/4 xcH0gOWtIoMYQqQD2YlMQTgXFcoDBzsUQVe5KQ558jJp+nGvn561931eKJvPCek8 kmfcxuPyIbe9qhZD2m22P0Z4CO7h7bJrZlLltqjYRa300IquPUYEEaVpw/9A5crk f5JeP3vrUgtnUYq6r/BLtV5nlMq+A4QWpgyXJujuoe58pgBnIxaVpw1DCp5vjvrz -----END CERTIFICATE-----Generated at Sun Sep 7 14:17:26 2025 by rpki-client