$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: v+E3tnjbaysyoKSmKr5ig4bBZ27cpIKlshWN7fl5EQo= Subject key identifier: AF:88:5C:52:0F:3B:EE:5A:FE:62:B8:47:B5:7E:D4:90:B1:B2:FF:97 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584D0753509934CAB6409363AD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBB9C Signing time: Sun 01 Mar 2026 23:00:03 +0000 Manifest this update: Sun 01 Mar 2026 23:00:03 +0000 Manifest next update: Tue 03 Mar 2026 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: qYwNqIvR4LJ4ga4q6cOeGt8zKQ4vJwu/Tq0CEHTRIO8=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: olfWPxuKWD5Y3mIeU26uo/CbPrRrdOhgbJcARdruQV0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:53:50:99:34:ca:b6:40:93:63:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Mar 1 23:00:03 2026 GMT Not After : Mar 3 23:00:00 2026 GMT Subject: CN=b737bbb1-b393-4f24-9e61-d11a3badf7b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:bf:35:c6:0d:ef:4f:9e:f2:e7:cf:12:aa: 56:38:22:01:41:a3:12:b8:73:fa:9d:0b:85:6f:15: 06:bc:45:f3:51:9c:f9:47:0a:e1:5c:61:c9:17:fd: d2:e6:c1:55:85:28:e0:e4:eb:e5:b8:2f:4c:21:ed: 5a:ed:54:79:2f:30:49:bc:2b:43:dd:19:6d:6e:6c: 6d:18:df:a5:b9:ec:b4:cc:9a:82:f6:70:f5:9c:86: 84:a5:05:c5:9c:92:9d:de:b7:09:9e:a9:6d:50:20: 44:be:8a:75:14:7c:ee:12:81:8d:bf:15:52:e7:91: a5:05:e3:d9:4a:41:2b:f2:b9:e9:50:d7:25:f1:fd: 2a:2e:39:d1:66:2e:55:f2:2f:11:f7:09:a3:89:a9: ea:6a:5a:7e:c3:95:f4:c4:65:cb:62:b2:15:9b:37: d7:92:10:cb:f0:28:ce:4c:a0:ec:e9:af:38:4b:e5: 01:bb:bf:a5:c7:16:1f:34:15:76:45:a2:ac:93:d7: 4a:55:f5:03:7e:4b:0b:d0:5c:fd:40:d6:77:7f:6f: 28:46:2e:f9:c4:1d:6e:2d:16:a2:55:67:6a:ef:b0: 6a:10:22:6a:b1:79:39:28:ed:04:51:1e:e6:b8:66: 05:47:65:1a:6f:c3:7a:76:00:33:e0:a6:7e:93:2b: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:88:5C:52:0F:3B:EE:5A:FE:62:B8:47:B5:7E:D4:90:B1:B2:FF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:29:9f:2c:35:6d:4e:c2:7c:8c:02:3c:52:c4:49:43:26:da: 52:24:a7:64:08:1a:bb:18:98:d3:17:03:26:90:a5:27:47:c8: 03:b6:f0:b9:05:5e:5e:07:97:07:9a:f8:74:c8:b0:34:22:b8: 7d:33:2d:c7:ca:3d:ad:e5:76:73:cf:d3:a4:17:37:d6:12:e1: 53:ea:b2:9a:58:ea:7b:60:41:a9:47:57:e2:29:fe:60:a4:20: 14:22:f3:84:22:0d:59:1f:7d:3d:19:78:45:4a:03:6c:37:5f: d1:92:32:e1:6c:e7:05:1d:59:ab:38:e1:71:7e:1d:19:d7:27: 70:7e:29:d0:ab:33:38:ff:a1:c0:fa:27:62:54:6f:2a:a6:bd: 7e:6f:89:02:65:d9:1e:b8:ae:21:c9:c8:34:cf:a7:33:c5:6f: 4e:d3:51:47:0a:60:c0:6b:bd:81:ee:47:4b:2f:65:b9:de:89: d3:26:68:83:50:75:53:cb:45:32:34:fd:1a:26:12:84:0d:7f: 5b:e2:39:c5:2a:54:b1:2c:46:31:63:ac:92:64:9d:ae:2a:fc: 99:71:b8:7f:62:86:ee:83:ef:50:b2:84:2d:dc:f4:c2:11:6c: 33:7d:cd:37:d1:7c:0d:fd:14:53:ec:83:48:69:52:31:79:93: 58:97:c4:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0HU1CZNMq2QJNjrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI2MDMwMTIzMDAwM1oXDTI2MDMwMzIzMDAwMFowLzEtMCsGA1UEAxMk YjczN2JiYjEtYjM5My00ZjI0LTllNjEtZDExYTNiYWRmN2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIy/NcYN70+e8ufPEqpWOCIBQaMSuHP6nQuF bxUGvEXzUZz5RwrhXGHJF/3S5sFVhSjg5OvluC9MIe1a7VR5LzBJvCtD3Rltbmxt GN+luey0zJqC9nD1nIaEpQXFnJKd3rcJnqltUCBEvop1FHzuEoGNvxVS55GlBePZ SkEr8rnpUNcl8f0qLjnRZi5V8i8R9wmjianqalp+w5X0xGXLYrIVmzfXkhDL8CjO TKDs6a84S+UBu7+lxxYfNBV2RaKsk9dKVfUDfksL0Fz9QNZ3f28oRi75xB1uLRai VWdq77BqECJqsXk5KO0EUR7muGYFR2Uab8N6dgAz4KZ+kyvRlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK+IXFIPO+5a/mK4R7V+1JCxsv+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoKZ8sNW1OwnyMAjxSxElD JtpSJKdkCBq7GJjTFwMmkKUnR8gDtvC5BV5eB5cHmvh0yLA0Irh9My3Hyj2t5XZz z9OkFzfWEuFT6rKaWOp7YEGpR1fiKf5gpCAUIvOEIg1ZH309GXhFSgNsN1/RkjLh bOcFHVmrOOFxfh0Z1ydwfinQqzM4/6HA+idiVG8qpr1+b4kCZdkeuK4hycg0z6cz xW9O01FHCmDAa72B7kdLL2W53onTJmiDUHVTy0UyNP0aJhKEDX9b4jnFKlSxLEYx Y6ySZJ2uKvyZcbh/Yobug+9QsoQt3PTCEWwzfc030XwN/RRT7INIaVIxeZNYl8Rh -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:29 2026 by rpki-client