$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: QpEKMdYlPyvsJ5P6fqKa2EyKCjQFySJNBaNebHNuiF0= Subject key identifier: 37:0E:8D:B4:CD:19:E7:12:75:36:77:C9:FB:A4:38:7D:2A:E8:E9:14 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584ACB05154996A26438782E2380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBAC9 Signing time: Fri 08 Aug 2025 23:00:03 +0000 Manifest this update: Fri 08 Aug 2025 23:00:03 +0000 Manifest next update: Mon 11 Aug 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: B5CnQUhqHRFDAnl3Z4izt18FkiC7Szue/H3kdpnn27I=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: rBLat+x9n6nazmzronz2ASqA2H8zMEnF81+44Ygxe28=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:05:15:49:96:a2:64:38:78:2e:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Aug 8 23:00:03 2025 GMT Not After : Aug 11 23:00:00 2025 GMT Subject: CN=e50ce673-fa02-4d13-ab83-ee4f14b816f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:a1:cd:8f:54:de:4b:db:e0:09:fc:08:b9: bf:90:be:35:af:9c:2b:8f:f1:29:9a:ef:b0:f0:7e: cc:24:e4:21:b4:75:9a:21:a8:c9:f5:16:55:f9:63: 43:16:dd:0b:3e:70:0e:af:8d:1e:cb:07:01:91:9b: 05:e2:10:49:6f:98:7b:f2:24:36:89:8e:73:7d:fd: 54:e2:75:d8:5b:b0:11:97:09:b3:de:48:30:09:d2: ba:9f:8d:b4:70:66:cb:cb:0a:ac:e6:b9:1c:b9:80: fc:c2:75:a4:14:45:61:e7:bc:f1:a8:18:62:4c:63: f6:30:05:a7:da:f5:a7:e5:20:a2:c7:37:35:23:3e: ce:61:71:1a:b2:dc:60:83:d8:33:87:cf:a6:e8:ba: 37:81:73:57:04:e3:cf:58:82:52:0a:36:33:5e:0a: c2:4a:2b:37:cd:f3:bc:68:bd:71:05:7b:56:ef:90: e3:15:5f:25:a1:7b:d9:1e:a1:95:8d:e2:39:1f:dc: 8c:b2:12:e5:e1:18:8d:62:ac:07:51:12:e5:aa:17: 7e:3f:9f:ef:aa:9a:f6:86:55:ca:08:7d:73:dd:4c: a6:43:3b:f1:26:ac:28:cd:59:d4:d5:af:7e:a7:8e: 6f:11:cc:f1:cd:94:f0:d4:7e:d5:7f:e6:37:c9:ab: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0E:8D:B4:CD:19:E7:12:75:36:77:C9:FB:A4:38:7D:2A:E8:E9:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7d:2f:9c:b7:13:31:72:57:10:c3:57:22:62:9d:a7:15:b7: e0:d0:2c:49:9f:b2:c9:50:da:bf:ca:15:eb:f3:ff:19:6e:36: 5e:cc:27:15:cc:bd:3e:4b:5d:81:1b:de:55:92:da:dc:55:b1: a7:c2:f5:f0:8a:97:d3:49:2d:23:b8:a0:24:76:cf:56:d4:3e: 83:2c:4e:ad:24:af:30:bc:0d:d2:bd:15:b7:b3:f5:38:cd:79: bc:84:00:c9:75:5f:de:1d:8e:98:fa:d0:46:1d:53:4d:ec:8d: 7d:62:a2:b2:47:a7:75:95:27:fe:6c:46:9f:78:51:34:9f:5d: 6c:2b:ab:2b:67:d6:2d:64:74:7b:67:f2:35:ee:70:b2:49:cb: 1c:d1:10:0f:7f:13:1f:41:b1:65:90:be:60:41:20:41:04:5b: fe:26:07:0a:92:4d:c3:9a:3c:24:ef:44:78:71:c2:02:0c:30: 67:b0:30:b1:7e:c9:65:fa:ae:fc:f4:b0:09:e6:00:7f:25:5c: a7:76:ce:41:1a:9b:90:f0:57:b5:d1:1e:56:6c:21:2f:62:ee: 28:b5:09:4a:36:0d:ea:43:80:e0:14:96:b1:aa:6f:1f:23:97: f5:6f:25:c8:28:cb:2e:b5:cf:9d:6e:66:f8:58:cf:08:e6:96: f6:86:3e:4f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErLBRVJlqJkOHguI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDgwODIzMDAwM1oXDTI1MDgxMTIzMDAwMFowLzEtMCsGA1UEAxMk ZTUwY2U2NzMtZmEwMi00ZDEzLWFiODMtZWU0ZjE0YjgxNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL+hzY9U3kvb4An8CLm/kL41r5wrj/Epmu+w 8H7MJOQhtHWaIajJ9RZV+WNDFt0LPnAOr40eywcBkZsF4hBJb5h78iQ2iY5zff1U 4nXYW7ARlwmz3kgwCdK6n420cGbLywqs5rkcuYD8wnWkFEVh57zxqBhiTGP2MAWn 2vWn5SCixzc1Iz7OYXEastxgg9gzh8+m6Lo3gXNXBOPPWIJSCjYzXgrCSis3zfO8 aL1xBXtW75DjFV8loXvZHqGVjeI5H9yMshLl4RiNYqwHURLlqhd+P5/vqpr2hlXK CH1z3UymQzvxJqwozVnU1a9+p45vEczxzZTw1H7Vf+Y3yave7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDcOjbTNGecSdTZ3yfukOH0q6OkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTfS+ctxMxclcQw1ciYp2n Fbfg0CxJn7LJUNq/yhXr8/8ZbjZezCcVzL0+S12BG95VktrcVbGnwvXwipfTSS0j uKAkds9W1D6DLE6tJK8wvA3SvRW3s/U4zXm8hADJdV/eHY6Y+tBGHVNN7I19YqKy R6d1lSf+bEafeFE0n11sK6srZ9YtZHR7Z/I17nCyScsc0RAPfxMfQbFlkL5gQSBB BFv+JgcKkk3Dmjwk70R4ccICDDBnsDCxfsll+q789LAJ5gB/JVynds5BGpuQ8Fe1 0R5WbCEvYu4otQlKNg3qQ4DgFJaxqm8fI5f1byXIKMsutc+dbmb4WM8I5pb2hj5P -----END CERTIFICATE-----Generated at Sat Aug 9 22:40:55 2025 by rpki-client