$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: btIMRSm5mkhZqGkN2VNUaCraIZigdMh4OAjLkjOC/00= Subject key identifier: 67:D3:6D:40:34:8C:73:09:CD:54:0A:38:98:65:AE:44:01:EA:D1:B5 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F43285849D28E402FEA4504522AE86D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBA6E Signing time: Sun 11 May 2025 23:00:07 +0000 Manifest this update: Sun 11 May 2025 23:00:07 +0000 Manifest next update: Tue 13 May 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: F5g1J8XDc1/3uoeyDNhfCIbCDrTzuKcwWlMCDHzjPAY=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: KWC1xRXj8YZjhz+OYjMOMj7RGJRkNiUOSFoGLTaDu/M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:8e:40:2f:ea:45:04:52:2a:e8:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: May 11 23:00:07 2025 GMT Not After : May 13 23:00:00 2025 GMT Subject: CN=745b1754-089c-4c28-b103-ac1f70d78837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:be:29:16:1f:e6:56:db:aa:cc:12:75:c0:40: f6:1f:93:23:1a:c3:30:52:0c:05:2f:26:ee:98:de: f3:49:3e:7e:56:01:51:46:5e:5e:cd:80:08:3b:9f: c8:ce:9d:3e:61:c1:4f:3d:b5:e9:1d:7a:78:ae:8d: f8:c5:e9:de:42:c3:66:ae:37:fe:e5:c7:da:24:6c: 24:4b:4d:5b:48:a4:7a:75:ec:03:ce:dd:5d:2c:a5: c8:4d:21:e4:9d:34:2a:64:c6:36:42:d3:6c:2d:ea: 2f:0e:d3:52:1c:d2:6a:8d:0f:91:92:fb:cd:0b:38: 77:7c:ad:57:b0:84:f5:05:69:52:aa:ab:83:68:ba: 6e:bc:ca:6d:ac:01:d1:37:07:b5:d4:f0:1b:89:f1: 9b:e9:79:5e:24:a5:ee:6a:99:f8:9c:ff:5c:1f:3f: c9:af:56:ae:fe:52:19:3c:97:3c:9d:19:ed:b4:a5: b3:9b:3b:a4:a8:77:ff:48:9a:a6:05:bd:d8:c0:a1: a0:06:45:84:b5:5b:fc:15:66:a9:c2:a4:47:21:64: 96:fc:58:a9:90:85:1e:1d:8f:3f:0b:2c:e0:b0:e9: a4:00:ec:fc:b1:e0:0c:0e:75:db:42:c9:e1:6a:98: 7d:09:78:75:20:c0:ce:82:1a:a5:b7:37:0e:94:66: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D3:6D:40:34:8C:73:09:CD:54:0A:38:98:65:AE:44:01:EA:D1:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d6:96:b3:e4:f7:7c:7f:19:fa:65:03:3c:5f:a5:57:94:59: ca:49:8b:e3:8a:e4:f2:4e:e7:5d:6d:0c:14:5a:5d:f4:70:9c: e2:4f:11:8f:3e:33:b4:31:9f:61:27:5a:a5:27:eb:23:1b:ca: 8f:82:67:fd:64:d3:e6:4c:6f:3a:f3:06:20:21:67:38:46:86: 20:a6:91:8a:4b:b9:cc:ee:8a:a0:e6:f5:af:a4:01:88:44:f0: c4:c6:70:73:8c:20:b8:cb:99:c5:2f:be:25:2b:9b:ae:66:86: dd:56:30:f4:6c:18:d7:d6:8b:c5:de:8f:26:69:c5:55:d1:21: 0e:4a:8a:20:8a:d1:4c:dc:3d:07:a0:f8:f0:a5:c0:2e:c1:fe: 88:70:e9:a8:ca:20:65:00:23:d9:b4:6e:c0:10:41:83:e2:43: 1b:f5:cf:cf:ed:6f:a5:19:8c:a6:f5:56:72:d1:04:f1:8e:14: ab:87:63:de:0a:3b:20:05:b5:78:5c:60:e3:87:f9:46:ad:c0: 0e:92:88:cf:e6:e3:a6:cf:a5:93:8f:d4:60:f4:1d:b5:71:ec: 54:5c:bb:8a:6e:88:e5:cd:69:2e:fe:ab:dc:46:3f:81:2f:db: 46:62:e6:a7:a4:d3:cb:ca:60:bc:b9:01:4c:5a:25:db:2f:59: ea:b1:07:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnSjkAv6kUEUirobQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDUxMTIzMDAwN1oXDTI1MDUxMzIzMDAwMFowLzEtMCsGA1UEAxMk NzQ1YjE3NTQtMDg5Yy00YzI4LWIxMDMtYWMxZjcwZDc4ODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb4pFh/mVtuqzBJ1wED2H5MjGsMwUgwFLybu mN7zST5+VgFRRl5ezYAIO5/Izp0+YcFPPbXpHXp4ro34xeneQsNmrjf+5cfaJGwk S01bSKR6dewDzt1dLKXITSHknTQqZMY2QtNsLeovDtNSHNJqjQ+RkvvNCzh3fK1X sIT1BWlSqquDaLpuvMptrAHRNwe11PAbifGb6XleJKXuapn4nP9cHz/Jr1au/lIZ PJc8nRnttKWzmzukqHf/SJqmBb3YwKGgBkWEtVv8FWapwqRHIWSW/FipkIUeHY8/ CyzgsOmkAOz8seAMDnXbQsnhaph9CXh1IMDOghqltzcOlGaZ4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGfTbUA0jHMJzVQKOJhlrkQB6tG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA31paz5Pd8fxn6ZQM8X6VX lFnKSYvjiuTyTuddbQwUWl30cJziTxGPPjO0MZ9hJ1qlJ+sjG8qPgmf9ZNPmTG86 8wYgIWc4RoYgppGKS7nM7oqg5vWvpAGIRPDExnBzjCC4y5nFL74lK5uuZobdVjD0 bBjX1ovF3o8macVV0SEOSoogitFM3D0HoPjwpcAuwf6IcOmoyiBlACPZtG7AEEGD 4kMb9c/P7W+lGYym9VZy0QTxjhSrh2PeCjsgBbV4XGDjh/lGrcAOkojP5uOmz6WT j9Rg9B21cexUXLuKbojlzWku/qvcRj+BL9tGYuanpNPLymC8uQFMWiXbL1nqsQfe -----END CERTIFICATE-----Generated at Mon May 12 08:19:47 2025 by rpki-client