$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: z7i+wZboCYgs4xqah3UMXpOKoeHgG3sIev+k5nd7wss= Subject key identifier: A6:08:2A:19:95:36:9D:2A:54:5D:0E:C9:6F:AD:48:55:15:88:AF:F9 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584BBDE6990441270B805645F1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBB23 Signing time: Mon 03 Nov 2025 23:00:03 +0000 Manifest this update: Mon 03 Nov 2025 23:00:03 +0000 Manifest next update: Wed 05 Nov 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: Jngd0bujjYX07s5LJ5VBHEb5zKG6EtrIZBtZB9l5bOk=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: k9wzeV252VJt/6j6bDbn6g2Pa4FI7k1GznnIx46011I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:e6:99:04:41:27:0b:80:56:45:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Nov 3 23:00:03 2025 GMT Not After : Nov 5 23:00:00 2025 GMT Subject: CN=11a7cd18-0399-49f8-8131-3b7317bb0da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6d:21:7a:a3:f5:7d:a9:d2:cf:da:18:b2:eb: 13:7a:86:e8:50:fa:cd:d1:e9:d8:9d:98:40:45:0a: 1b:ec:8d:8f:ca:d1:08:38:b1:8d:01:92:c0:bc:f9: 7d:ff:96:00:d1:8c:68:15:1c:44:37:bd:c2:8d:dd: 33:35:a8:78:82:20:e2:3e:a8:47:dc:45:f3:bb:20: b9:f1:d1:13:9b:51:10:b3:7f:95:2d:2f:4f:12:4c: f8:cf:46:f8:10:2c:5b:8c:18:dd:89:ee:fd:60:4e: 6b:36:f6:12:24:64:9e:be:c8:f6:ff:04:43:7d:f6: c1:ad:fa:57:34:ad:69:85:0b:fc:5c:dc:2f:01:c0: 4c:59:b0:77:3f:a6:66:05:a2:7d:b6:92:96:4d:9a: 8a:71:ee:9a:95:9d:54:a3:74:85:21:b6:9a:a5:54: 59:1c:8c:ca:7d:8a:fa:fa:e1:42:48:a3:51:2d:88: 6d:e6:46:f5:1f:0d:97:32:0b:e2:70:97:0a:28:cc: c6:02:19:b6:5e:17:8c:07:91:3e:b1:f9:4a:1c:46: 91:99:1f:81:3b:56:d4:8d:5b:85:b1:4a:fd:87:11: 6b:7e:f2:ff:ab:21:ed:7b:83:a2:0d:95:08:e3:c9: 20:a7:a0:00:03:f3:a3:bd:f6:9a:95:95:65:50:62: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:08:2A:19:95:36:9D:2A:54:5D:0E:C9:6F:AD:48:55:15:88:AF:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:72:6c:83:5d:59:66:4a:fe:d1:e3:93:12:b5:1c:d7:9a:61: 64:c5:b1:c7:6a:7a:5a:0a:37:7c:32:8c:bb:ac:23:b2:d8:5f: 78:9d:92:ee:ac:d0:cd:04:ca:d7:01:c3:1b:0a:9e:d0:e3:f4: ab:10:dd:7e:ee:08:5b:17:f4:f5:f0:05:0d:cc:57:d1:d1:51: 34:c8:0e:3d:e1:1a:22:ee:86:cc:d1:e5:f1:5d:89:f2:06:0f: 90:ee:d8:d4:41:2b:ce:38:4a:58:a3:6b:27:32:07:b0:ac:b7: 8a:8f:06:45:b2:f7:c9:4a:92:4a:90:12:60:20:0a:06:3f:ca: 00:4f:ba:47:5a:48:c3:cd:7d:ae:7a:0a:37:8e:df:d8:cd:50: 2a:c2:17:ff:c0:c8:7e:cb:52:a4:e7:b4:df:59:21:e3:16:d1: 6d:ad:88:88:e4:26:9c:5d:38:88:7b:76:e8:06:bd:66:3a:63: fa:ba:49:08:a1:a2:41:e3:35:ed:58:9d:f2:9e:b3:0d:3d:58: 63:2c:20:79:f4:3b:51:86:39:ef:82:e0:03:fe:55:02:7c:fc: 30:cc:3c:a0:48:92:9a:8d:63:e5:fc:f9:c6:d9:71:9d:0b:fa: 99:ab:3c:6d:eb:f9:96:fb:a0:81:1b:f5:5b:25:1f:ea:21:cd: f3:be:e1:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu95pkEQScLgFZF8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MTEwMzIzMDAwM1oXDTI1MTEwNTIzMDAwMFowLzEtMCsGA1UEAxMk MTFhN2NkMTgtMDM5OS00OWY4LTgxMzEtM2I3MzE3YmIwZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW0heqP1fanSz9oYsusTeoboUPrN0enYnZhA RQob7I2PytEIOLGNAZLAvPl9/5YA0YxoFRxEN73Cjd0zNah4giDiPqhH3EXzuyC5 8dETm1EQs3+VLS9PEkz4z0b4ECxbjBjdie79YE5rNvYSJGSevsj2/wRDffbBrfpX NK1phQv8XNwvAcBMWbB3P6ZmBaJ9tpKWTZqKce6alZ1Uo3SFIbaapVRZHIzKfYr6 +uFCSKNRLYht5kb1Hw2XMgvicJcKKMzGAhm2XheMB5E+sflKHEaRmR+BO1bUjVuF sUr9hxFrfvL/qyHte4OiDZUI48kgp6AAA/OjvfaalZVlUGLBpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKYIKhmVNp0qVF0OyW+tSFUViK/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6cmyDXVlmSv7R45MStRzX mmFkxbHHanpaCjd8Moy7rCOy2F94nZLurNDNBMrXAcMbCp7Q4/SrEN1+7ghbF/T1 8AUNzFfR0VE0yA494Roi7obM0eXxXYnyBg+Q7tjUQSvOOEpYo2snMgewrLeKjwZF svfJSpJKkBJgIAoGP8oAT7pHWkjDzX2uego3jt/YzVAqwhf/wMh+y1Kk57TfWSHj FtFtrYiI5CacXTiIe3boBr1mOmP6ukkIoaJB4zXtWJ3ynrMNPVhjLCB59DtRhjnv guAD/lUCfPwwzDygSJKajWPl/PnG2XGdC/qZqzxt6/mW+6CBG/VbJR/qIc3zvuEO -----END CERTIFICATE-----Generated at Tue Nov 4 23:49:23 2025 by rpki-client