$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: tbwOnDpk4D8sSrJNQWQU7eFUBC1eRo3Q8tjW1Js9AHg= Subject key identifier: 08:D5:43:12:43:24:44:BB:BB:DD:7C:03:D5:C6:10:C1:6A:DF:4D:A9 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584A60EF193FC2AA32C7EEFE96BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CBAA3 Signing time: Tue 01 Jul 2025 23:00:03 +0000 Manifest this update: Tue 01 Jul 2025 23:00:03 +0000 Manifest next update: Fri 04 Jul 2025 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: B5CnQUhqHRFDAnl3Z4izt18FkiC7Szue/H3kdpnn27I=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: onNGuXsMRL25YB1UclbvJ0eLvwJownUHJexRxzn/ofs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:ef:19:3f:c2:aa:32:c7:ee:fe:96:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Jul 1 23:00:03 2025 GMT Not After : Jul 4 23:00:00 2025 GMT Subject: CN=4b134be6-888f-4405-a0ed-d06191754abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1c:dd:c2:70:84:f7:87:74:f3:02:bc:ba:07: 1e:67:5f:8b:f9:fb:42:54:ed:c3:14:d1:17:e1:fe: 33:55:7d:33:70:95:82:d5:ed:17:68:dc:11:f0:8e: bb:30:3a:d3:46:40:58:28:b6:cf:29:e8:f8:25:d2: 81:23:c9:10:65:8b:fd:88:0c:03:e6:aa:53:25:b2: 63:2e:d8:40:88:80:83:9b:be:86:1c:66:24:55:a3: 5e:df:64:15:28:bc:23:de:50:2d:6a:fc:e4:6c:35: f5:6d:62:0a:f0:3c:9a:d2:80:9b:78:3b:b9:c2:57: 7e:fa:a9:e9:b4:38:b4:2b:1b:38:5a:d9:47:b4:24: 45:4f:3d:2e:e7:ae:12:20:d5:a8:3d:82:af:4a:24: 79:0e:8e:f6:e0:79:4d:56:b4:e7:3b:2e:2f:f9:0c: bd:41:48:2e:2a:13:b3:0b:e3:75:ee:e3:2c:73:26: b9:ab:4c:9f:9b:12:fd:4a:24:b7:c4:20:24:6d:41: 81:a5:54:13:07:05:51:65:1c:f2:5e:44:81:8a:f8: 24:e0:a1:86:ba:05:c2:f7:b7:37:66:a5:af:8a:5a: ef:b2:46:f7:20:f9:81:37:64:4e:80:26:ab:1a:0b: 1b:f8:eb:53:0e:6a:26:6d:19:00:4c:01:24:97:3e: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D5:43:12:43:24:44:BB:BB:DD:7C:03:D5:C6:10:C1:6A:DF:4D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ec:0c:4a:da:13:be:64:ae:90:94:f3:48:d4:32:13:b0:5d: 15:6e:3d:3d:22:e1:cc:a0:df:13:bb:ba:90:0a:76:d5:67:fa: a1:70:14:a4:6a:3a:7b:f9:71:0b:b5:b9:25:39:97:bf:d0:71: 8e:94:76:b7:5f:5c:52:ce:71:76:7d:34:7a:f1:f2:93:c0:5f: 2c:64:71:0c:8f:93:e8:f8:83:2c:16:fb:86:42:04:ec:31:c1: ef:06:8e:57:b5:a1:82:f7:22:78:29:a2:cf:24:af:d9:a1:ff: af:07:20:5d:c3:3f:e0:a0:d0:56:91:f8:0a:7b:e2:2c:d6:fd: d9:35:19:87:b2:67:9a:9c:ce:2f:03:eb:b0:59:a9:bd:21:fd: 99:73:b4:ed:62:77:d4:0c:51:2e:06:cd:f7:b6:47:13:49:01: 5e:56:b7:68:f2:68:c6:d2:26:f0:42:f4:d5:84:15:b0:1b:1f: 10:64:8f:23:ac:c4:a4:61:cd:f8:e5:90:13:2a:74:95:3f:bd: 3c:5d:dc:70:61:bf:7a:71:cb:96:16:91:92:c7:77:9c:0b:bb: 15:4e:d3:5d:e3:1d:58:61:88:db:62:1f:cf:e6:94:29:58:35: 1e:11:39:ab:68:6e:7d:81:2c:ab:21:45:ab:1f:cd:a3:17:f7: f8:72:51:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpg7xk/wqoyx+7+lrwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI1MDcwMTIzMDAwM1oXDTI1MDcwNDIzMDAwMFowLzEtMCsGA1UEAxMk NGIxMzRiZTYtODg4Zi00NDA1LWEwZWQtZDA2MTkxNzU0YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRzdwnCE94d08wK8ugceZ1+L+ftCVO3DFNEX 4f4zVX0zcJWC1e0XaNwR8I67MDrTRkBYKLbPKej4JdKBI8kQZYv9iAwD5qpTJbJj LthAiICDm76GHGYkVaNe32QVKLwj3lAtavzkbDX1bWIK8Dya0oCbeDu5wld++qnp tDi0Kxs4WtlHtCRFTz0u564SINWoPYKvSiR5Do724HlNVrTnOy4v+Qy9QUguKhOz C+N17uMscya5q0yfmxL9SiS3xCAkbUGBpVQTBwVRZRzyXkSBivgk4KGGugXC97c3 ZqWvilrvskb3IPmBN2ROgCarGgsb+OtTDmombRkATAEklz6UPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAjVQxJDJES7u918A9XGEMFq302pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR7AxK2hO+ZK6QlPNI1DIT sF0Vbj09IuHMoN8Tu7qQCnbVZ/qhcBSkajp7+XELtbklOZe/0HGOlHa3X1xSznF2 fTR68fKTwF8sZHEMj5Po+IMsFvuGQgTsMcHvBo5XtaGC9yJ4KaLPJK/Zof+vByBd wz/goNBWkfgKe+Is1v3ZNRmHsmeanM4vA+uwWam9If2Zc7TtYnfUDFEuBs33tkcT SQFeVrdo8mjG0ibwQvTVhBWwGx8QZI8jrMSkYc345ZATKnSVP708XdxwYb96ccuW FpGSx3ecC7sVTtNd4x1YYYjbYh/P5pQpWDUeETmraG59gSyrIUWrH82jF/f4clEG -----END CERTIFICATE-----Generated at Wed Jul 2 14:59:57 2025 by rpki-client