$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: hsR9Ht080s4dLL7H/ICb04fe59F1y13g3D5ETllDStE= Subject key identifier: 88:49:D7:DA:29:E9:92:A9:6E:53:C9:59:0D:DF:E7:FB:2D:A7:9E:45 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584AF4E5595D368CCBB35B221C60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBADA Signing time: Sat 23 Aug 2025 23:00:03 +0000 Manifest this update: Sat 23 Aug 2025 23:00:03 +0000 Manifest next update: Mon 25 Aug 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: sk772GcNachBB7ixViRaZEoTsZUgrX3jSjraeGz8KFI=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: 4Sm7MxE7aq5tgOmJVe5Z8FJ2XZJJsDN1GuwPzU6UvOs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:e5:59:5d:36:8c:cb:b3:5b:22:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Aug 23 23:00:03 2025 GMT Not After : Aug 25 23:00:00 2025 GMT Subject: CN=8ad9b2a6-ae12-49d6-8f2d-25458b98c7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:bf:c6:62:7e:f9:85:f9:e3:38:54:62:5f: f0:86:32:0a:fd:f3:06:5e:72:54:66:1c:ad:33:ec: 6b:2b:9e:c7:90:b8:84:1e:6f:9c:e4:1e:20:b6:01: ec:40:73:e9:28:6f:24:66:ff:7e:17:d9:19:04:94: 4c:27:af:ab:3c:b8:0e:dd:9e:87:6b:d4:c2:5b:24: 5d:46:53:07:69:19:30:4f:8b:6b:14:5d:ae:1e:d9: 4a:c8:9a:13:f0:8d:ce:d9:ef:c8:f7:48:c8:51:a7: 72:68:e2:f7:0a:17:f0:e1:d3:d4:9f:7b:c5:a1:1c: b7:b9:ee:fa:58:c3:80:bd:98:60:cd:32:46:e1:1f: c9:8e:50:93:39:a0:72:29:c2:d2:f6:cd:fb:9b:ec: 1f:88:73:2b:85:9d:cd:67:67:68:b5:94:6f:59:bf: 26:b7:f7:e0:b5:af:6f:ac:d8:24:29:3e:3e:3e:34: a9:1c:89:4b:45:bd:ce:57:a2:14:fd:79:77:4c:a2: 60:3b:da:24:a9:68:2d:11:5a:80:55:06:00:1b:fe: ca:0a:84:03:63:7c:32:6a:5f:e7:c9:fd:c9:34:b2: d6:93:e5:84:9c:26:6c:4a:78:d7:98:ca:11:73:0f: 84:c2:7c:16:ce:5c:23:aa:c3:c4:b3:e5:bd:86:c9: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:D7:DA:29:E9:92:A9:6E:53:C9:59:0D:DF:E7:FB:2D:A7:9E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:8e:e2:00:20:43:a8:60:c6:50:4c:29:80:40:45:0e:ee:f3: d2:81:79:91:91:f6:9a:35:98:0f:c6:39:65:f2:c4:71:b1:0f: af:02:ec:86:ab:05:bc:c1:e4:8c:e2:4e:4d:c6:50:6a:b6:81: 22:36:cd:5b:56:04:d7:6b:a3:aa:29:62:b6:a0:9d:c2:3a:08: c9:43:38:c6:57:4b:a5:39:69:1d:9c:68:d0:1b:2b:1f:5a:fa: 08:eb:c2:6e:bc:da:6b:24:0b:7a:6f:bd:e6:02:38:40:b7:3f: 17:33:ed:49:15:35:61:89:7c:92:26:ed:f8:b0:72:27:8b:0f: de:66:3b:64:fa:1a:fc:73:e5:c7:31:3d:21:51:6f:c1:67:36: 54:f8:3e:30:a5:f3:3c:4e:cc:25:35:3d:78:42:e0:ce:41:4b: bc:e4:47:f0:19:0e:5f:5f:15:75:67:f4:80:a4:65:85:d0:ff: 34:4d:26:ec:ca:a5:eb:09:85:b2:34:98:c8:de:15:c4:cf:73: 8c:cd:29:5a:9a:8b:2f:e1:ff:a3:14:c6:ff:2d:fd:f4:d2:a5: 4b:b9:67:53:be:63:47:dc:56:3d:a3:02:cc:1b:c6:de:40:ec: 17:5a:f0:a7:97:45:5d:d4:39:c6:2c:17:53:6b:8d:51:dc:c7: bb:da:8d:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr05VldNozLs1siHGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDgyMzIzMDAwM1oXDTI1MDgyNTIzMDAwMFowLzEtMCsGA1UEAxMk OGFkOWIyYTYtYWUxMi00OWQ2LThmMmQtMjU0NThiOThjN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniq/xmJ++YX54zhUYl/whjIK/fMGXnJUZhyt M+xrK57HkLiEHm+c5B4gtgHsQHPpKG8kZv9+F9kZBJRMJ6+rPLgO3Z6Ha9TCWyRd RlMHaRkwT4trFF2uHtlKyJoT8I3O2e/I90jIUadyaOL3Chfw4dPUn3vFoRy3ue76 WMOAvZhgzTJG4R/JjlCTOaByKcLS9s37m+wfiHMrhZ3NZ2dotZRvWb8mt/fgta9v rNgkKT4+PjSpHIlLRb3OV6IU/Xl3TKJgO9okqWgtEVqAVQYAG/7KCoQDY3wyal/n yf3JNLLWk+WEnCZsSnjXmMoRcw+EwnwWzlwjqsPEs+W9hsl4nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIhJ19op6ZKpblPJWQ3f5/stp55FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcjuIAIEOoYMZQTCmAQEUO 7vPSgXmRkfaaNZgPxjll8sRxsQ+vAuyGqwW8weSM4k5NxlBqtoEiNs1bVgTXa6Oq KWK2oJ3COgjJQzjGV0ulOWkdnGjQGysfWvoI68JuvNprJAt6b73mAjhAtz8XM+1J FTVhiXySJu34sHIniw/eZjtk+hr8c+XHMT0hUW/BZzZU+D4wpfM8TswlNT14QuDO QUu85EfwGQ5fXxV1Z/SApGWF0P80TSbsyqXrCYWyNJjI3hXEz3OMzSlamosv4f+j FMb/Lf300qVLuWdTvmNH3FY9owLMG8beQOwXWvCnl0Vd1DnGLBdTa41R3Me72o16 -----END CERTIFICATE-----Generated at Sun Aug 24 04:29:33 2025 by rpki-client