$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: Z9+89FfJkzemQEcmVxsjSR8PSVWK/oQmVkPtXq0GXkQ= Subject key identifier: FE:53:19:38:99:D2:06:7C:F9:43:E2:2F:00:9C:84:EB:29:B8:B8:B3 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584A5E2471984F410A37E4539100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBAA2 Signing time: Mon 30 Jun 2025 23:00:08 +0000 Manifest this update: Mon 30 Jun 2025 23:00:08 +0000 Manifest next update: Wed 02 Jul 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: B5CnQUhqHRFDAnl3Z4izt18FkiC7Szue/H3kdpnn27I=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: wukSkCsEn1ybdxgdLVXIhMNzQ9JQRby2FFG8TgHFwVo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:24:71:98:4f:41:0a:37:e4:53:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Jun 30 23:00:08 2025 GMT Not After : Jul 2 23:00:00 2025 GMT Subject: CN=0f903f43-e48b-4ec4-adaf-51c68ae486a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:19:0e:68:90:0a:bf:ca:09:ff:f5:d7:5f: 2c:4b:1a:a9:ec:1f:ab:48:92:0c:4f:27:f3:a9:21: 4f:d8:e7:1d:c3:02:88:f8:ef:44:54:4f:e9:33:c0: f4:4c:0c:bd:98:61:7e:f8:12:96:c5:a2:87:12:a5: 59:b1:93:a4:ee:05:48:b9:c7:a5:62:5b:62:fb:c8: 80:44:6b:df:d9:16:84:41:c2:ad:e5:bd:c7:a9:10: bf:59:ca:b1:19:93:80:25:d5:74:f1:df:0f:3c:13: 32:23:9e:16:3b:e1:40:bf:f6:77:9b:a7:2f:ef:6b: 25:db:70:73:5a:d0:92:dd:d8:b1:28:3f:53:60:51: f3:ad:5d:f9:fd:5f:62:87:d6:0c:a1:8c:c5:32:16: 6e:33:af:91:67:45:5b:18:70:c1:d0:b9:c7:3b:94: 11:ad:2e:81:76:37:e1:2a:8b:f9:17:27:dd:0a:04: 90:eb:b7:d0:67:7a:67:28:a4:33:f6:72:2b:41:60: 04:e8:04:50:5f:8f:92:3c:17:38:f9:d7:5a:c9:e9: b1:ab:da:d8:58:99:6a:12:30:43:14:ff:6f:d3:81: dd:cf:3c:65:d6:b6:b7:b1:22:33:90:ee:ad:c9:4d: 26:b7:ea:6f:6e:3a:a1:5a:2d:dc:67:ea:4f:11:31: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:53:19:38:99:D2:06:7C:F9:43:E2:2F:00:9C:84:EB:29:B8:B8:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:45:79:a6:19:e2:e2:ff:e7:d5:03:0a:81:47:be:4d:ef:fd: fa:41:51:8e:c7:33:4b:9d:a2:1e:01:91:63:0b:1e:14:c0:83: 0d:64:93:0b:b5:93:a9:ee:3f:6f:98:fb:52:f6:29:ac:9b:d1: 91:34:8e:81:31:3f:3e:5c:40:12:30:67:3a:cf:38:93:a1:e1: 1a:ff:f6:a4:c8:07:da:7d:78:c5:34:6d:4a:f0:28:74:f5:9e: 77:e4:11:a9:bb:f4:40:aa:7a:98:b6:66:ea:2f:ea:1e:e1:f4: d2:e1:02:28:31:67:04:4c:52:e4:f5:65:7f:86:3e:04:89:ab: 09:6c:42:f4:42:55:9a:f6:f5:b7:ba:57:20:15:fb:e9:07:f7: 56:df:56:b7:59:46:fc:4e:35:96:12:45:c2:72:9f:59:d9:52: 03:05:00:1b:76:bf:69:5d:ce:3c:b2:74:59:d3:80:9e:1a:5a: f7:21:25:67:bc:c6:58:e3:84:89:82:07:cd:39:9b:65:5a:8a: 03:9b:a4:10:9f:44:34:16:06:97:6a:00:09:0f:bd:36:c8:1c: 87:bf:99:b3:b9:08:9f:7f:ea:9e:91:77:ce:a2:6c:5e:a8:9a: 6d:f2:f8:13:84:79:16:e8:36:cc:e2:3f:b2:e2:f3:a2:1e:0f: f4:17:8a:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeJHGYT0EKN+RTkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDYzMDIzMDAwOFoXDTI1MDcwMjIzMDAwMFowLzEtMCsGA1UEAxMk MGY5MDNmNDMtZTQ4Yi00ZWM0LWFkYWYtNTFjNjhhZTQ4NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCgZDmiQCr/KCf/1118sSxqp7B+rSJIMTyfz qSFP2OcdwwKI+O9EVE/pM8D0TAy9mGF++BKWxaKHEqVZsZOk7gVIucelYlti+8iA RGvf2RaEQcKt5b3HqRC/WcqxGZOAJdV08d8PPBMyI54WO+FAv/Z3m6cv72sl23Bz WtCS3dixKD9TYFHzrV35/V9ih9YMoYzFMhZuM6+RZ0VbGHDB0LnHO5QRrS6Bdjfh Kov5FyfdCgSQ67fQZ3pnKKQz9nIrQWAE6ARQX4+SPBc4+ddayemxq9rYWJlqEjBD FP9v04Hdzzxl1ra3sSIzkO6tyU0mt+pvbjqhWi3cZ+pPETFtbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP5TGTiZ0gZ8+UPiLwCchOspuLizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmRXmmGeLi/+fVAwqBR75N 7/36QVGOxzNLnaIeAZFjCx4UwIMNZJMLtZOp7j9vmPtS9imsm9GRNI6BMT8+XEAS MGc6zziToeEa//akyAfafXjFNG1K8Ch09Z535BGpu/RAqnqYtmbqL+oe4fTS4QIo MWcETFLk9WV/hj4EiasJbEL0QlWa9vW3ulcgFfvpB/dW31a3WUb8TjWWEkXCcp9Z 2VIDBQAbdr9pXc48snRZ04CeGlr3ISVnvMZY44SJggfNOZtlWooDm6QQn0Q0FgaX agAJD702yByHv5mzuQiff+qekXfOomxeqJpt8vgThHkW6DbM4j+y4vOiHg/0F4q0 -----END CERTIFICATE-----Generated at Tue Jul 1 02:01:56 2025 by rpki-client