$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: afIkEvKkvWsfsXuU2yUalkcpXRmznSrwUjIfKdGVKU0= Subject key identifier: A2:8E:5D:6E:47:FE:4A:8F:5D:0C:D1:4F:CC:C3:9F:80:95:7C:38:B5 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584DD31F46DB772763DB4274C480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBBE7 Signing time: Wed 13 May 2026 23:00:04 +0000 Manifest this update: Wed 13 May 2026 23:00:04 +0000 Manifest next update: Sat 16 May 2026 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: 82bK6ndTX/Y7baY63erOlNe5DJEIuotJHjLlHWg/2Hg=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: 8EkhhPkF2Hplw9tz7FrWO+TcO9iVruhI7r6LRUMT464=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:1f:46:db:77:27:63:db:42:74:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: May 13 23:00:04 2026 GMT Not After : May 16 23:00:00 2026 GMT Subject: CN=22dd22c0-a76b-4196-929b-a75f469d4833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:8a:92:63:45:05:21:ac:de:0c:ed:10:27: 3b:ce:f6:56:7e:d8:ca:81:78:db:2e:96:71:f9:b8: 13:be:57:ad:d7:e3:07:d9:13:22:79:fb:ca:79:c1: 69:29:18:2e:9e:8b:4a:5b:61:a1:88:5b:98:8b:3e: 0a:ee:69:4f:a0:09:2d:6b:d5:41:5c:e2:9e:a0:e6: a1:96:fe:09:1b:1f:c3:ae:c3:6c:61:9d:83:c0:f4: 57:1b:d6:32:4f:c7:e0:f2:c4:a1:bf:6b:13:9e:73: 91:02:8b:a8:c8:0c:7c:96:72:17:57:bc:85:b2:42: 19:de:3d:c7:6b:35:b4:73:ac:3b:1c:76:9a:a9:09: fc:d2:e2:d5:54:d0:6c:bb:ed:6a:38:40:b5:c5:f0: 98:0d:3f:91:20:4a:94:fb:93:4a:00:53:92:f4:8b: d0:9b:a4:2b:b1:c8:f2:4d:94:3c:ad:f9:6f:48:ee: cd:29:ac:4c:c0:e4:a5:d8:bb:3f:c9:94:56:0a:a0: 30:3e:bf:b0:df:0d:bb:01:e5:57:5d:a8:09:a4:76: f3:c2:9f:03:9a:42:c4:01:14:fb:d5:1b:07:7d:29: a9:a7:ca:9e:ba:e0:80:ca:d2:2b:ec:14:91:cf:21: 0d:03:80:70:9c:6a:fa:37:12:bb:35:c2:00:cb:0e: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8E:5D:6E:47:FE:4A:8F:5D:0C:D1:4F:CC:C3:9F:80:95:7C:38:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:54:3d:51:68:70:85:ea:4d:0a:fb:0a:78:4d:49:76:03:a2: 4b:f4:c6:d4:34:70:f7:d2:bf:07:f3:91:f0:15:21:15:07:e4: 9d:d0:6d:50:4d:93:24:76:12:aa:34:e6:7d:79:9c:18:31:f6: d2:00:b2:b9:f9:18:29:61:e8:16:29:ea:c5:f8:fa:93:6e:6b: cb:db:9b:9b:b6:ce:d7:a0:e3:fc:4b:59:4f:d2:be:ee:da:4c: 45:fe:29:e6:92:55:91:07:9a:fb:f6:ed:c9:c7:06:ce:27:f4: 39:d3:17:9c:6d:50:c6:82:58:e0:07:32:12:80:b2:18:e6:82: 72:a5:63:33:10:d5:3d:3b:c7:47:af:c9:37:b8:25:6a:a7:bc: 08:ed:75:ff:53:91:29:fb:b7:e6:57:4a:17:98:79:cd:85:4b: 4a:fc:d1:85:80:50:77:b5:78:20:b5:20:0a:b7:81:df:e7:f6: 00:7e:58:5c:26:c7:27:e7:fb:4c:ee:8b:3a:c7:0a:40:f9:c2: 2c:5e:10:08:31:36:51:d5:01:58:f8:58:66:b3:fc:8d:d5:80: 3d:68:2a:1e:29:30:91:7f:a0:ef:13:40:64:91:d2:86:08:80: 8d:dd:a6:0c:32:a6:19:2f:98:ee:7d:b7:d4:96:66:36:b0:da: 85:ed:97:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3TH0bbdydj20J0xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI2MDUxMzIzMDAwNFoXDTI2MDUxNjIzMDAwMFowLzEtMCsGA1UEAxMk MjJkZDIyYzAtYTc2Yi00MTk2LTkyOWItYTc1ZjQ2OWQ0ODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0iKkmNFBSGs3gztECc7zvZWftjKgXjbLpZx +bgTvlet1+MH2RMiefvKecFpKRgunotKW2GhiFuYiz4K7mlPoAkta9VBXOKeoOah lv4JGx/DrsNsYZ2DwPRXG9YyT8fg8sShv2sTnnORAouoyAx8lnIXV7yFskIZ3j3H azW0c6w7HHaaqQn80uLVVNBsu+1qOEC1xfCYDT+RIEqU+5NKAFOS9IvQm6Qrscjy TZQ8rflvSO7NKaxMwOSl2Ls/yZRWCqAwPr+w3w27AeVXXagJpHbzwp8DmkLEART7 1RsHfSmpp8qeuuCAytIr7BSRzyENA4BwnGr6NxK7NcIAyw4ouwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKKOXW5H/kqPXQzRT8zDn4CVfDi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUVD1RaHCF6k0K+wp4TUl2 A6JL9MbUNHD30r8H85HwFSEVB+Sd0G1QTZMkdhKqNOZ9eZwYMfbSALK5+RgpYegW KerF+PqTbmvL25ubts7XoOP8S1lP0r7u2kxF/inmklWRB5r79u3JxwbOJ/Q50xec bVDGgljgBzISgLIY5oJypWMzENU9O8dHr8k3uCVqp7wI7XX/U5Ep+7fmV0oXmHnN hUtK/NGFgFB3tXggtSAKt4Hf5/YAflhcJscn5/tM7os6xwpA+cIsXhAIMTZR1QFY +Fhms/yN1YA9aCoeKTCRf6DvE0BkkdKGCICN3aYMMqYZL5jufbfUlmY2sNqF7Zei -----END CERTIFICATE-----Generated at Thu May 14 09:15:15 2026 by rpki-client