$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: pR/6PKYXS0VTYgZK558fVMB0+jHGzmQie7AwI5Tww+E= Subject key identifier: 23:A3:83:A1:A0:99:73:C2:CA:A1:D9:DF:6B:DD:CB:B2:34:9B:73:30 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584F810CD7C23C731D8BC37FEC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBC85 Signing time: Wed 14 Oct 2026 23:00:25 +0000 Manifest this update: Wed 14 Oct 2026 23:00:25 +0000 Manifest next update: Sat 17 Oct 2026 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: L+8m635dUzXLdecS6BMao7Jr8dQNfc2aHVmJzDTos3Q=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: ToLWMfnmfe0aa7++0gnV2pvTop1th3HtDP+mUQ5FGjM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:81:0c:d7:c2:3c:73:1d:8b:c3:7f:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Oct 14 23:00:25 2026 GMT Not After : Oct 17 23:00:00 2026 GMT Subject: CN=5881428a-05c9-4243-9698-218d87a4446d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:09:4e:3b:62:c8:03:f7:b2:37:12:29:bd:db: db:e1:af:a5:d6:b3:ab:35:9d:5d:dd:3b:a8:87:86: 62:4b:27:3f:6f:37:a3:90:a8:6a:25:66:81:ce:ed: f8:e0:9d:b6:e8:f1:51:cb:28:f8:c5:81:e9:b1:98: 58:00:b9:b7:1e:18:d0:79:f0:6e:52:07:21:d5:5e: 87:f9:b0:9d:26:45:c0:83:5e:35:e4:e7:71:04:f7: 6c:ba:b3:cc:ed:43:a7:34:0b:1b:1a:75:85:78:c2: 9d:58:e0:2f:58:5f:93:0e:e6:05:10:d1:bc:8c:0b: 18:65:51:81:c5:f1:47:66:63:5a:a7:9a:f1:10:58: e2:0b:82:d3:71:e8:dd:6f:58:72:4e:54:34:b7:8e: 68:74:64:8b:f1:2f:3b:5e:4b:d2:a9:21:67:f6:01: f9:87:92:bf:ce:5a:8b:d0:48:8c:09:b2:5a:37:e5: 97:c2:40:d5:77:e3:85:53:dc:69:94:14:0e:7b:9c: a2:3e:f8:a2:4e:fc:ca:81:3e:68:9a:13:9b:fa:a9: 13:e4:b9:bc:67:d4:d5:87:7f:48:05:8e:ee:26:79: 3f:67:50:bb:18:66:12:37:4a:82:2f:a1:b3:b7:5c: f0:d4:cb:48:6d:88:1f:8b:7e:ad:41:a3:af:18:8a: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A3:83:A1:A0:99:73:C2:CA:A1:D9:DF:6B:DD:CB:B2:34:9B:73:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9a:4c:dc:e1:e6:84:29:f5:11:00:ce:1b:78:07:f4:ca:fb: 99:ab:3d:4e:ba:f5:98:b0:43:67:3d:6c:f0:f9:ce:74:c1:43: 73:c5:92:29:4e:b9:2a:6f:1f:b3:0b:cd:e8:43:7b:7d:f1:bf: fa:af:ec:fc:05:5f:a2:e7:05:4a:36:82:1a:96:f0:42:6a:87: db:bf:6e:ff:da:0b:87:c7:27:b8:ae:3a:27:3b:a0:82:27:e2: 99:e0:bf:5a:42:b6:22:50:d0:3a:11:35:57:f7:31:7e:f4:d6: dc:84:47:73:ff:6b:23:ec:3a:4d:10:d3:40:67:69:d6:0e:7a: 70:06:a0:96:54:fb:04:46:01:08:a1:b3:4d:07:72:e3:de:97: 9d:21:3b:1c:04:82:df:b6:59:81:8b:34:0d:dc:bb:a0:c7:1a: a4:44:ec:11:2d:37:2a:74:22:a5:78:2d:a0:2f:b4:1d:19:f4: 69:19:8e:f3:b5:50:91:88:60:ea:b1:33:63:6b:f6:f9:be:cd: 11:f5:f4:0b:96:91:d5:a1:42:4f:53:27:15:90:bd:a9:ef:bc: 27:80:d3:0f:cc:fd:ed:bb:48:18:c5:9e:dd:8d:17:da:3d:1e: 27:30:09:a0:00:77:f5:4b:13:cc:37:f2:43:fd:40:d1:b6:69: 36:30:17:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+BDNfCPHMdi8N/7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI2MTAxNDIzMDAyNVoXDTI2MTAxNzIzMDAwMFowLzEtMCsGA1UEAxMk NTg4MTQyOGEtMDVjOS00MjQzLTk2OTgtMjE4ZDg3YTQ0NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwlOO2LIA/eyNxIpvdvb4a+l1rOrNZ1d3Tuo h4ZiSyc/bzejkKhqJWaBzu344J226PFRyyj4xYHpsZhYALm3HhjQefBuUgch1V6H +bCdJkXAg1415OdxBPdsurPM7UOnNAsbGnWFeMKdWOAvWF+TDuYFENG8jAsYZVGB xfFHZmNap5rxEFjiC4LTcejdb1hyTlQ0t45odGSL8S87XkvSqSFn9gH5h5K/zlqL 0EiMCbJaN+WXwkDVd+OFU9xplBQOe5yiPviiTvzKgT5omhOb+qkT5Lm8Z9TVh39I BY7uJnk/Z1C7GGYSN0qCL6Gzt1zw1MtIbYgfi36tQaOvGIoFvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCOjg6GgmXPCyqHZ32vdy7I0m3MwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGmkzc4eaEKfURAM4beAf0 yvuZqz1OuvWYsENnPWzw+c50wUNzxZIpTrkqbx+zC83oQ3t98b/6r+z8BV+i5wVK NoIalvBCaofbv27/2guHxye4rjonO6CCJ+KZ4L9aQrYiUNA6ETVX9zF+9NbchEdz /2sj7DpNENNAZ2nWDnpwBqCWVPsERgEIobNNB3Lj3pedITscBILftlmBizQN3Lug xxqkROwRLTcqdCKleC2gL7QdGfRpGY7ztVCRiGDqsTNja/b5vs0R9fQLlpHVoUJP UycVkL2p77wngNMPzP3tu0gYxZ7djRfaPR4nMAmgAHf1SxPMN/JD/UDRtmk2MBdp -----END CERTIFICATE-----Generated at Thu Oct 15 19:27:36 2026 by rpki-client