$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: 3KZi5A9EhuwhUk0ajqtxV1xsYjaj/1oyrt+KIy5djOY= Subject key identifier: E6:93:DF:86:D8:4B:3A:06:EB:37:0B:13:4F:4F:74:02:94:FF:DE:92 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584B8BA64947A75558F8C8147400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBB10 Signing time: Thu 16 Oct 2025 23:00:03 +0000 Manifest this update: Thu 16 Oct 2025 23:00:03 +0000 Manifest next update: Sat 18 Oct 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: sk772GcNachBB7ixViRaZEoTsZUgrX3jSjraeGz8KFI=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: vdv9Y77SwT4Wty7qO9kx752w6avzaovjzHBpl9guULk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:a6:49:47:a7:55:58:f8:c8:14:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Oct 16 23:00:03 2025 GMT Not After : Oct 18 23:00:00 2025 GMT Subject: CN=1f33da99-33de-472d-a001-5cbb70d00efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:c0:d2:55:6b:14:c2:a7:31:61:01:95:2c: 15:53:6a:2d:a7:f0:42:de:25:69:53:db:a0:3b:0f: fc:dc:bd:74:49:70:b2:5b:88:92:8f:2f:92:57:7e: 64:f9:40:5f:d6:83:61:dd:c6:10:ea:c1:c8:d9:b6: f3:83:6f:78:a7:65:48:d0:29:98:25:4c:60:1c:b0: 7f:72:d9:17:19:d7:93:d3:29:3b:51:b7:16:46:80: 5f:7e:d3:87:e4:8d:75:ed:6c:13:26:d7:89:4b:be: f8:1f:47:98:55:37:7e:3d:92:05:35:60:27:f2:53: 55:d3:a3:96:cf:c8:59:a6:fa:b5:95:af:f2:4b:dc: 57:74:72:fa:78:ea:66:a9:26:be:d9:c5:48:57:a7: 71:35:6e:9e:ed:4e:05:f1:57:b6:e7:b2:66:b0:af: 2f:c3:8f:5f:67:fe:e5:fe:c6:e5:00:87:fb:c1:d7: a7:6e:79:6b:b2:f7:2c:b2:e4:6f:11:12:d7:c0:05: 9b:dd:40:e2:1d:d7:0d:5b:f9:44:09:7a:e0:5d:a6: f3:3a:63:1a:50:c9:26:a3:c3:85:97:04:3b:65:aa: 8d:a1:dc:34:43:80:0c:e7:4f:74:6c:a8:91:ba:80: 1e:2c:46:cc:cb:2d:93:de:11:dc:c5:90:b5:19:62: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:93:DF:86:D8:4B:3A:06:EB:37:0B:13:4F:4F:74:02:94:FF:DE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5d:f0:60:3a:26:5d:71:72:f8:28:02:fe:44:97:7b:eb:91: 36:c0:2c:ab:b2:d3:e6:b0:22:20:36:b8:f0:df:4d:92:51:13: 7f:fc:0b:fd:37:85:b8:3e:5d:fc:2a:a1:d7:29:21:f6:36:ab: 9c:83:36:de:f1:eb:51:50:7e:45:29:ee:69:84:01:1f:c8:5c: d5:0f:15:2d:f6:c2:8c:89:a8:82:95:46:c0:71:15:43:c4:9c: c1:fd:fd:c4:7a:fc:eb:10:70:c7:f3:3d:c7:e7:b7:81:a0:91: 42:e5:cc:72:a7:53:51:c1:98:9d:7d:d5:9d:6e:85:9a:5d:cc: f5:b3:2b:73:b8:2d:7a:85:2a:e3:3f:28:bb:4a:e5:6f:36:af: e7:44:8b:19:99:94:e2:e4:f6:d9:83:71:ca:27:16:3e:82:72: 75:e6:aa:e7:f4:18:2a:93:0c:88:fd:d0:7b:70:19:28:6c:2f: 3b:7e:a1:38:3f:27:8a:ea:2b:05:5b:f9:ac:77:cf:30:07:92: 24:1d:ff:45:5a:f4:06:69:51:c6:73:57:e1:62:eb:3d:90:af: b6:c2:c3:7e:f5:ff:41:62:c6:01:1e:5d:52:e6:84:67:f7:5b: 8d:ff:47:db:ba:1a:4f:35:a7:ec:22:b8:e0:f6:14:e5:ce:ea: bb:03:c0:df -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuLpklHp1VY+MgUdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MTAxNjIzMDAwM1oXDTI1MTAxODIzMDAwMFowLzEtMCsGA1UEAxMk MWYzM2RhOTktMzNkZS00NzJkLWEwMDEtNWNiYjcwZDAwZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT/A0lVrFMKnMWEBlSwVU2otp/BC3iVpU9ug Ow/83L10SXCyW4iSjy+SV35k+UBf1oNh3cYQ6sHI2bbzg294p2VI0CmYJUxgHLB/ ctkXGdeT0yk7UbcWRoBfftOH5I117WwTJteJS774H0eYVTd+PZIFNWAn8lNV06OW z8hZpvq1la/yS9xXdHL6eOpmqSa+2cVIV6dxNW6e7U4F8Ve257JmsK8vw49fZ/7l /sblAIf7wdenbnlrsvcssuRvERLXwAWb3UDiHdcNW/lECXrgXabzOmMaUMkmo8OF lwQ7ZaqNodw0Q4AM5090bKiRuoAeLEbMyy2T3hHcxZC1GWLmVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOaT34bYSzoG6zcLE09PdAKU/96SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJXfBgOiZdcXL4KAL+RJd7 65E2wCyrstPmsCIgNrjw302SURN//Av9N4W4Pl38KqHXKSH2Nqucgzbe8etRUH5F Ke5phAEfyFzVDxUt9sKMiaiClUbAcRVDxJzB/f3EevzrEHDH8z3H57eBoJFC5cxy p1NRwZidfdWdboWaXcz1sytzuC16hSrjPyi7SuVvNq/nRIsZmZTi5PbZg3HKJxY+ gnJ15qrn9BgqkwyI/dB7cBkobC87fqE4PyeK6isFW/msd88wB5IkHf9FWvQGaVHG c1fhYus9kK+2wsN+9f9BYsYBHl1S5oRn91uN/0fbuhpPNafsIrjg9hTlzuq7A8Df -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:16 2025 by rpki-client