$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: nh8A7mKsm9W4iJKwqWXB+PSwnWYPUv8KzzbotpRko2o= Subject key identifier: 5E:4D:FB:02:93:50:FA:0A:62:27:B0:23:09:8E:AF:B4:7F:CC:94:42 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584DD05494ED22AF9F997D87ADE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBBE6 Signing time: Tue 12 May 2026 23:00:03 +0000 Manifest this update: Tue 12 May 2026 23:00:03 +0000 Manifest next update: Thu 14 May 2026 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: 82bK6ndTX/Y7baY63erOlNe5DJEIuotJHjLlHWg/2Hg=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: 2bRo32m/UcIFGbZvN8/VaDsQw4c3G5SCp7m7qjAuA4I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:54:94:ed:22:af:9f:99:7d:87:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: May 12 23:00:03 2026 GMT Not After : May 14 23:00:00 2026 GMT Subject: CN=1e3f41f5-910d-4806-aaf1-dc1dc563355f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:c5:a5:af:a5:4f:3b:20:a5:ce:24:c1:7f: 60:b0:e9:65:af:77:57:5c:4a:07:b9:08:cd:de:31: 4a:76:fa:11:56:ba:d0:13:b3:9d:7b:b0:07:10:83: 4f:b5:8d:2e:ef:9c:e1:57:6d:91:63:5c:15:2b:3f: 54:02:61:7c:54:91:ef:8a:b5:29:14:a1:14:e2:f0: 50:5e:01:fa:ef:7c:43:e0:4f:35:ba:d6:49:86:67: 84:2b:1c:b1:94:05:b0:5b:f8:b1:1a:60:1b:6b:ea: 0e:87:5f:ab:be:d6:43:13:72:19:ae:21:9d:e6:ee: 89:91:95:6b:aa:3b:0e:a0:61:4d:17:a8:7a:c1:a6: 4e:10:65:c3:4f:3e:3e:c4:8b:2b:be:cc:28:94:83: 46:fb:e9:77:22:f9:1c:88:c1:78:d5:0f:78:66:b5: 63:53:8f:cc:c7:f9:47:9e:3f:fc:4b:ae:d3:49:68: 3e:db:83:2a:b8:61:dd:a1:ed:39:aa:d8:9e:1c:52: 0c:8b:48:a3:80:73:c5:13:4f:bf:d4:76:fb:d7:65: 29:be:3a:aa:71:c8:f5:57:46:3f:3e:31:6e:ed:8f: e0:8c:70:ad:28:36:f1:f8:f3:6a:21:59:97:b8:b5: ef:f5:f0:20:bf:ce:1d:c1:36:ad:a6:d4:2a:a8:10: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4D:FB:02:93:50:FA:0A:62:27:B0:23:09:8E:AF:B4:7F:CC:94:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:16:1b:e7:39:1c:20:7c:8b:fa:f0:63:a8:0f:d1:f2:93:08: 9a:e7:a5:dd:7c:9c:7d:a2:7c:bd:73:be:b9:ce:5a:a7:7c:04: 7d:6d:3a:da:5c:5c:84:b9:b3:31:3b:80:52:72:d0:3c:18:8c: 5b:57:51:fa:75:76:4d:d5:ff:3c:e2:ff:ca:f5:9f:75:bd:62: f8:9e:c4:3d:63:be:25:41:a2:55:74:e1:6a:a8:a1:be:9c:3c: 9c:fe:e6:2b:66:c2:1a:5c:73:35:e8:6c:0d:7a:60:7c:e5:fb: 71:d7:70:6b:9a:b0:e8:5e:d7:ef:70:cd:b1:43:56:c1:38:31: ec:84:74:b2:00:46:bc:bc:ad:e0:a7:a8:07:0b:d9:30:84:92: 7e:c7:9f:3d:e4:01:47:9a:88:a9:52:db:3b:a6:c8:28:46:ca: 6b:5b:20:9b:03:20:43:10:23:f6:0a:3f:bb:2c:44:3d:3c:93: 29:0b:a9:50:ae:91:2c:03:01:8a:67:86:49:e9:a1:1a:3f:d5: a1:58:71:16:d3:6c:1e:26:d7:86:2a:d6:af:98:26:7e:ed:a6: a9:67:4d:c8:b7:ad:4c:e3:7f:f7:7d:02:37:52:6c:f0:27:1f: 79:a5:fd:7c:c9:98:c2:fc:9f:4a:6e:28:fa:65:4b:a6:0a:90: 89:c2:31:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3QVJTtIq+fmX2HreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI2MDUxMjIzMDAwM1oXDTI2MDUxNDIzMDAwMFowLzEtMCsGA1UEAxMk MWUzZjQxZjUtOTEwZC00ODA2LWFhZjEtZGMxZGM1NjMzNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXHFpa+lTzsgpc4kwX9gsOllr3dXXEoHuQjN 3jFKdvoRVrrQE7Ode7AHEINPtY0u75zhV22RY1wVKz9UAmF8VJHvirUpFKEU4vBQ XgH673xD4E81utZJhmeEKxyxlAWwW/ixGmAba+oOh1+rvtZDE3IZriGd5u6JkZVr qjsOoGFNF6h6waZOEGXDTz4+xIsrvswolING++l3IvkciMF41Q94ZrVjU4/Mx/lH nj/8S67TSWg+24MquGHdoe05qtieHFIMi0ijgHPFE0+/1Hb712Upvjqqccj1V0Y/ PjFu7Y/gjHCtKDbx+PNqIVmXuLXv9fAgv84dwTatptQqqBB+uQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF5N+wKTUPoKYiewIwmOr7R/zJRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPFhvnORwgfIv68GOoD9Hy kwia56XdfJx9ony9c765zlqnfAR9bTraXFyEubMxO4BSctA8GIxbV1H6dXZN1f88 4v/K9Z91vWL4nsQ9Y74lQaJVdOFqqKG+nDyc/uYrZsIaXHM16GwNemB85ftx13Br mrDoXtfvcM2xQ1bBODHshHSyAEa8vK3gp6gHC9kwhJJ+x5895AFHmoipUts7psgo RsprWyCbAyBDECP2Cj+7LEQ9PJMpC6lQrpEsAwGKZ4ZJ6aEaP9WhWHEW02weJteG KtavmCZ+7aapZ03It61M43/3fQI3UmzwJx95pf18yZjC/J9Kbij6ZUumCpCJwjFD -----END CERTIFICATE-----Generated at Wed May 13 15:46:15 2026 by rpki-client