$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: glyJX6gNB3qtDSXKl5IDZUbUEImGf6ylxPx2ea4xPEA= Subject key identifier: A0:9C:DA:42:5B:95:D4:67:04:F4:7A:16:46:8A:DD:CE:F7:FC:0B:4B Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584AE9BA9CCA32B4811EE994E700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBAD6 Signing time: Tue 19 Aug 2025 23:00:03 +0000 Manifest this update: Tue 19 Aug 2025 23:00:03 +0000 Manifest next update: Thu 21 Aug 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: sk772GcNachBB7ixViRaZEoTsZUgrX3jSjraeGz8KFI=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: mcwReD9gjEOruQ9CgxXvSR3LunqDtZbmYtJsWhunKL4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:ba:9c:ca:32:b4:81:1e:e9:94:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Aug 19 23:00:03 2025 GMT Not After : Aug 21 23:00:00 2025 GMT Subject: CN=3dac4dab-3ca1-4c7a-affd-b9ecbfb88a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4f:0b:94:d7:63:15:e5:4a:c7:58:bf:a7:9c: 93:85:97:29:07:03:64:a5:98:96:14:85:68:5a:25: 50:87:39:9d:0f:82:40:ce:9a:4e:8d:28:22:87:08: a5:77:b9:32:cc:78:b4:fa:a5:28:81:a1:54:78:4e: 74:5b:0c:16:38:7a:56:ae:c2:f1:a3:85:05:61:0d: 61:fa:90:fd:d1:2e:ad:03:bc:95:b4:7b:34:54:ad: 31:3e:25:f3:01:40:7d:f5:dd:c8:12:1b:84:bd:be: 97:c6:0e:e5:51:b6:ba:e4:70:e8:2b:04:18:77:66: b1:91:e6:0e:a7:7d:be:44:f9:87:81:6e:7b:3a:c8: 8c:e2:5f:90:32:cf:60:c1:28:aa:59:56:e9:f3:ce: 63:b4:2a:5a:ee:42:bc:97:95:53:79:68:ea:94:9a: 86:b9:6b:c6:24:fa:20:33:91:b5:eb:93:56:32:4e: 59:9e:59:78:50:51:0c:ff:05:4f:9c:dd:4d:2f:36: 33:ae:23:8f:be:71:d6:0b:2d:57:53:ce:bd:c5:fb: 3d:b2:0e:0b:9c:bd:a3:37:75:db:74:ee:2a:f1:be: b7:42:49:b5:82:99:97:0c:5b:2e:da:6a:ff:1f:e6: 94:2b:b6:08:93:d4:99:e6:03:07:33:c6:6c:d5:fb: 27:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9C:DA:42:5B:95:D4:67:04:F4:7A:16:46:8A:DD:CE:F7:FC:0B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:bf:1e:73:8c:d1:84:87:46:42:b2:b3:69:8d:52:19:d3:75: 44:a4:de:e4:41:30:57:44:85:24:44:ba:38:be:57:bf:b9:7c: e5:42:35:d1:ac:f6:d4:d3:c0:33:69:ef:2f:db:8f:12:38:6c: 2a:33:a4:a9:2c:ff:7d:d7:fc:6f:8d:d0:81:5a:67:7a:61:50: 40:1d:3d:29:7d:72:dd:83:e8:55:12:bb:00:b9:f6:82:fd:b0: c9:69:e8:65:87:a1:49:5a:7c:18:b3:39:dd:5f:ce:b9:a9:be: 61:ab:a8:5e:bd:b7:d7:0e:15:d1:b5:30:21:2d:8e:8d:76:14: 70:bd:7f:70:7f:e4:16:b8:c8:c9:32:ff:97:a5:de:a8:a4:c9: e1:d4:24:a9:f2:ed:7e:97:b0:4e:ce:cb:fd:41:55:a8:59:2d: 5e:02:cb:65:ee:1d:2f:ab:6c:d0:5d:17:81:11:00:0f:78:b4: 54:7b:d6:61:ff:73:b5:b6:16:36:e7:4a:b7:b2:a3:2f:ea:29: a4:71:cf:c8:3e:1c:ad:68:c8:11:ce:bf:82:14:81:df:54:ad: 7d:a1:fa:78:2d:38:ba:d1:00:ed:83:ad:70:3e:22:45:72:86: e2:4c:0a:92:50:dc:0b:ec:d9:5e:13:ff:b0:79:e6:1b:5d:f8: 65:b6:a6:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpupzKMrSBHumU5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDgxOTIzMDAwM1oXDTI1MDgyMTIzMDAwMFowLzEtMCsGA1UEAxMk M2RhYzRkYWItM2NhMS00YzdhLWFmZmQtYjllY2JmYjg4YTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k8LlNdjFeVKx1i/p5yThZcpBwNkpZiWFIVo WiVQhzmdD4JAzppOjSgihwild7kyzHi0+qUogaFUeE50WwwWOHpWrsLxo4UFYQ1h +pD90S6tA7yVtHs0VK0xPiXzAUB99d3IEhuEvb6Xxg7lUba65HDoKwQYd2axkeYO p32+RPmHgW57OsiM4l+QMs9gwSiqWVbp885jtCpa7kK8l5VTeWjqlJqGuWvGJPog M5G165NWMk5Znll4UFEM/wVPnN1NLzYzriOPvnHWCy1XU869xfs9sg4LnL2jN3Xb dO4q8b63Qkm1gpmXDFsu2mr/H+aUK7YIk9SZ5gMHM8Zs1fsndQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKCc2kJbldRnBPR6FkaK3c73/AtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtvx5zjNGEh0ZCsrNpjVIZ 03VEpN7kQTBXRIUkRLo4vle/uXzlQjXRrPbU08Azae8v248SOGwqM6SpLP991/xv jdCBWmd6YVBAHT0pfXLdg+hVErsAufaC/bDJaehlh6FJWnwYszndX865qb5hq6he vbfXDhXRtTAhLY6NdhRwvX9wf+QWuMjJMv+Xpd6opMnh1CSp8u1+l7BOzsv9QVWo WS1eAstl7h0vq2zQXReBEQAPeLRUe9Zh/3O1thY250q3sqMv6imkcc/IPhytaMgR zr+CFIHfVK19ofp4LTi60QDtg61wPiJFcobiTAqSUNwL7NleE/+weeYbXfhltqZG -----END CERTIFICATE-----Generated at Wed Aug 20 19:10:28 2025 by rpki-client