$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: 2jU6nciWjzbLRobeG1MLk24AVnQvlajTufmBaRa1Otg= Subject key identifier: 99:68:1A:72:07:38:F9:B3:AB:95:88:22:B2:68:3B:6D:B3:CD:4D:D2 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584EC8CBA708C6FB352005802680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBC41 Signing time: Sun 09 Aug 2026 23:00:22 +0000 Manifest this update: Sun 09 Aug 2026 23:00:22 +0000 Manifest next update: Wed 12 Aug 2026 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: B3BptiK7qUgt6d7Hlhen306btkooHjgXLBLDVotqTyg=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: s0Y+KVTXgPSBYZWKhQudmGFBlsE9vu9lpelZ0uCv1hE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c8:cb:a7:08:c6:fb:35:20:05:80:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Aug 9 23:00:22 2026 GMT Not After : Aug 12 23:00:00 2026 GMT Subject: CN=1181cff6-57bb-433d-aa6f-d03b0156bb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:ad:2f:1a:e3:31:c4:83:38:7d:5d:96:3a: e1:f9:96:d5:96:9f:8b:0d:3c:39:05:a4:a8:87:6f: c7:02:6d:d6:06:25:ae:03:b0:31:88:50:3f:b3:c0: 72:ea:a1:b8:51:d5:7f:39:bb:eb:97:d1:05:59:ae: 01:89:1f:b4:ec:13:24:6d:fd:a7:40:35:f5:90:be: 32:3f:72:ed:d7:97:ce:5d:4c:3c:50:5e:9c:61:15: fd:cf:8d:86:f4:57:50:82:ce:0d:03:a4:95:af:27: 56:ed:7a:8e:bd:c4:12:3a:83:ec:a0:84:df:e7:56: ea:98:e1:21:05:5b:ac:a9:00:69:5a:bd:2c:a6:81: 8b:c2:0e:8d:45:79:a2:e5:0e:12:a0:35:3a:a0:99: a7:97:33:93:d2:1b:82:fc:ae:1a:62:61:5b:c6:0a: df:7d:24:cd:e8:b6:d4:1a:bc:13:ab:1d:8a:49:6e: 37:60:ae:bd:c8:bd:7d:67:be:95:5f:77:ee:aa:39: 42:ad:6c:13:c9:4a:b1:b1:46:3e:0a:29:1a:5e:8d: ca:ea:34:ee:4e:e0:74:7c:52:ab:6d:58:bf:2c:cc: 54:5f:40:b5:71:bb:51:5f:40:d3:69:bf:f2:84:b0: 3d:9e:97:40:9d:d5:72:4a:9f:7b:af:f3:8c:6f:8c: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:68:1A:72:07:38:F9:B3:AB:95:88:22:B2:68:3B:6D:B3:CD:4D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8d:19:54:97:90:c4:51:49:0b:2f:4c:df:41:cc:56:a2:6f: e7:5d:60:bf:91:c1:0f:dc:e3:96:6a:5d:af:c3:a8:0d:94:61: f6:0f:2e:ab:37:48:92:65:ff:9a:f7:df:74:21:68:23:fa:eb: 46:92:99:59:da:68:ed:f8:dc:56:9b:a8:c9:ab:1b:f8:e1:65: b3:e1:77:7d:95:c5:06:83:96:7a:64:c5:28:eb:30:67:1b:72: 11:97:cb:0b:77:e0:4e:a3:5f:ba:5f:59:23:cb:61:4c:27:1f: 16:70:0f:5f:b6:a8:64:7d:59:59:87:f9:8c:68:ab:bc:89:79: 0e:c7:09:ff:b5:3a:37:c7:03:72:0b:b9:d1:f3:42:62:59:2c: 42:b3:cd:a9:64:fc:18:78:1b:5c:88:12:a1:23:74:1b:74:24: 9e:fb:e7:aa:b2:5d:eb:41:a7:b0:b7:3c:4e:11:e9:84:56:2d: 2f:35:78:4d:b1:b7:cc:a5:ed:54:be:04:d2:2d:23:db:fa:6d: b7:28:6a:cb:ec:64:40:08:c7:fb:33:8c:97:87:fd:33:84:fb: 45:2f:b3:05:4c:2b:8f:36:bd:76:89:64:83:df:b7:c8:f4:6d: 3c:6b:ad:6c:e9:aa:aa:0f:fc:1d:44:9a:55:b4:ca:09:b8:46: 9f:9b:37:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE7Iy6cIxvs1IAWAJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI2MDgwOTIzMDAyMloXDTI2MDgxMjIzMDAwMFowLzEtMCsGA1UEAxMk MTE4MWNmZjYtNTdiYi00MzNkLWFhNmYtZDAzYjAxNTZiYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nCtLxrjMcSDOH1dljrh+ZbVlp+LDTw5BaSo h2/HAm3WBiWuA7AxiFA/s8By6qG4UdV/Obvrl9EFWa4BiR+07BMkbf2nQDX1kL4y P3Lt15fOXUw8UF6cYRX9z42G9FdQgs4NA6SVrydW7XqOvcQSOoPsoITf51bqmOEh BVusqQBpWr0spoGLwg6NRXmi5Q4SoDU6oJmnlzOT0huC/K4aYmFbxgrffSTN6LbU GrwTqx2KSW43YK69yL19Z76VX3fuqjlCrWwTyUqxsUY+CikaXo3K6jTuTuB0fFKr bVi/LMxUX0C1cbtRX0DTab/yhLA9npdAndVySp97r/OMb4xCtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJloGnIHOPmzq5WIIrJoO22zzU3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVjRlUl5DEUUkLL0zfQcxW om/nXWC/kcEP3OOWal2vw6gNlGH2Dy6rN0iSZf+a9990IWgj+utGkplZ2mjt+NxW m6jJqxv44WWz4Xd9lcUGg5Z6ZMUo6zBnG3IRl8sLd+BOo1+6X1kjy2FMJx8WcA9f tqhkfVlZh/mMaKu8iXkOxwn/tTo3xwNyC7nR80JiWSxCs82pZPwYeBtciBKhI3Qb dCSe++eqsl3rQaewtzxOEemEVi0vNXhNsbfMpe1UvgTSLSPb+m23KGrL7GRACMf7 M4yXh/0zhPtFL7MFTCuPNr12iWSD37fI9G08a61s6aqqD/wdRJpVtMoJuEafmzek -----END CERTIFICATE-----Generated at Mon Aug 10 09:02:16 2026 by rpki-client