$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: sDgw2tgYapupFeVHDfAD1c86XitJQ9X1ZivQp/IlFFY= Subject key identifier: 22:15:DB:EF:B8:51:B4:0A:4C:82:D8:EA:BA:91:64:41:03:A0:ED:E7 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584E99560BE94981092BC2733880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBC30 Signing time: Thu 23 Jul 2026 23:00:23 +0000 Manifest this update: Thu 23 Jul 2026 23:00:23 +0000 Manifest next update: Sat 25 Jul 2026 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: B3BptiK7qUgt6d7Hlhen306btkooHjgXLBLDVotqTyg=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: BCcyUFBq8wMEDC+vJyyNbmoTQElhMC4uGrKvrASYX/U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:99:56:0b:e9:49:81:09:2b:c2:73:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Jul 23 23:00:23 2026 GMT Not After : Jul 25 23:00:00 2026 GMT Subject: CN=dea13856-43a7-425d-a6cd-ee6f3271f9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:c1:aa:f5:d8:ac:30:6d:4d:fd:1c:60:2b: a4:d7:fd:e1:91:0c:c8:5d:fb:34:99:5c:28:7c:f8: 50:43:db:50:de:f7:c1:69:d4:49:1a:85:97:b9:03: 09:20:22:ba:62:6d:7b:77:5b:cf:f0:3a:3c:27:d8: 6a:5e:74:c7:4d:a8:f5:c6:8e:76:70:62:60:92:0b: 1f:dd:09:a2:5a:ce:2c:9d:33:f7:17:0a:01:d7:71: ba:3b:49:54:e0:32:f1:d1:3d:9c:bc:c8:70:36:68: e1:20:00:c2:aa:d6:d0:cd:2e:c6:d5:91:c1:c2:97: 82:ea:db:99:24:9b:0a:20:39:62:b7:32:8c:29:0c: 04:84:95:ca:36:f1:ed:64:9f:ec:59:c6:ef:22:f4: da:f4:ed:c5:29:f8:6a:2f:40:62:dc:e3:c6:95:98: 68:53:51:96:00:8c:ca:29:a3:c5:a1:e7:e8:73:b8: 96:7b:06:02:bb:cb:34:a8:87:be:b0:be:10:f4:f2: 6c:a8:8a:f3:70:f1:5d:85:42:66:11:bc:ad:fa:5a: 5b:73:ae:60:74:1e:4d:fc:30:81:6c:30:e4:e2:eb: 11:8d:13:fa:42:8e:47:ce:a5:80:92:9e:e5:64:20: 34:f2:39:38:db:82:bb:01:16:87:34:8c:87:ad:92: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:DB:EF:B8:51:B4:0A:4C:82:D8:EA:BA:91:64:41:03:A0:ED:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e5:db:47:a6:23:7c:2d:f9:66:25:96:c4:f0:84:04:6a:fc: f3:94:53:71:74:be:c5:28:c1:6f:a4:f3:bf:94:9c:c5:c0:9c: 5a:f7:e3:b7:87:cd:0b:38:8c:b2:c5:18:31:2d:e5:d7:09:d6: ac:42:f8:3b:57:5f:52:25:38:31:f0:03:6c:02:bd:88:6d:4d: 05:3f:21:7f:fd:76:e5:2d:24:d7:ca:b5:cf:42:cf:50:07:93: ff:2d:75:71:07:8e:e1:fc:7b:8e:9e:90:ca:57:de:be:dd:f0: 0e:27:a5:ef:e2:b0:9c:a5:b7:df:ea:e9:c1:14:c7:de:52:1b: f1:db:e4:c7:14:da:b9:d8:2e:92:8e:1e:c9:7a:cc:57:39:7b: a6:fd:3b:18:eb:1c:1a:14:6a:87:7a:43:65:26:89:23:14:eb: af:18:f8:87:f7:92:a6:84:28:31:5d:8a:5b:63:87:1a:66:fb: 5f:5b:7a:64:63:0a:fe:1e:44:9f:bf:2b:ab:0c:f7:a7:00:b3: d9:5e:9e:5d:81:67:41:b8:35:09:b3:f6:45:64:de:fe:f0:69: a9:59:b2:66:8c:76:04:73:f7:88:7f:2b:4f:c6:40:a9:bb:77: 21:ca:2c:2e:6c:33:61:6c:6f:85:ef:ab:d8:43:45:d0:9d:dc: 65:97:cf:6c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE6ZVgvpSYEJK8JzOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI2MDcyMzIzMDAyM1oXDTI2MDcyNTIzMDAwMFowLzEtMCsGA1UEAxMk ZGVhMTM4NTYtNDNhNy00MjVkLWE2Y2QtZWU2ZjMyNzFmOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfnBqvXYrDBtTf0cYCuk1/3hkQzIXfs0mVwo fPhQQ9tQ3vfBadRJGoWXuQMJICK6Ym17d1vP8Do8J9hqXnTHTaj1xo52cGJgkgsf 3QmiWs4snTP3FwoB13G6O0lU4DLx0T2cvMhwNmjhIADCqtbQzS7G1ZHBwpeC6tuZ JJsKIDlitzKMKQwEhJXKNvHtZJ/sWcbvIvTa9O3FKfhqL0Bi3OPGlZhoU1GWAIzK KaPFoefoc7iWewYCu8s0qIe+sL4Q9PJsqIrzcPFdhUJmEbyt+lpbc65gdB5N/DCB bDDk4usRjRP6Qo5HzqWAkp7lZCA08jk424K7ARaHNIyHrZJNSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCIV2++4UbQKTILY6rqRZEEDoO3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk5dtHpiN8LflmJZbE8IQE avzzlFNxdL7FKMFvpPO/lJzFwJxa9+O3h80LOIyyxRgxLeXXCdasQvg7V19SJTgx 8ANsAr2IbU0FPyF//XblLSTXyrXPQs9QB5P/LXVxB47h/HuOnpDKV96+3fAOJ6Xv 4rCcpbff6unBFMfeUhvx2+THFNq52C6Sjh7JesxXOXum/TsY6xwaFGqHekNlJokj FOuvGPiH95KmhCgxXYpbY4caZvtfW3pkYwr+HkSfvyurDPenALPZXp5dgWdBuDUJ s/ZFZN7+8GmpWbJmjHYEc/eIfytPxkCpu3chyiwubDNhbG+F76vYQ0XQndxll89s -----END CERTIFICATE-----Generated at Fri Jul 24 21:34:42 2026 by rpki-client