$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft File: 38ec4694-a70f-4329-b713-f4da59e49973.mft (raw, json) Hash identifier: FriSMWlD5VlO1kIB3Xf3u/bdf0bVOGzRfFHlk1Bhw/o= Subject key identifier: 71:0C:20:FD:F4:5C:DB:45:06:81:2F:9D:8F:8E:55:7F:C1:D4:1D:F8 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F4328584B938F3BEAB43AD9D3D14BCE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft Manifest number: 010D0C9F4328584073A81FB6CCA512A58B351294 Signing time: Sun 19 Oct 2025 19:00:03 +0000 Manifest this update: Sun 19 Oct 2025 19:00:03 +0000 Manifest next update: Wed 22 Oct 2025 19:00:00 +0000 Files and hashes: 1: 38ec4694-a70f-4329-b713-f4da59e49973.crl (hash: ml9AQr8+PSSYfk0+W4KTYphiujSTzw7UXDHDpUGEsNc=) 2: 41b495a1-3627-3667-af41-d2072d5d9889.roa (hash: ULqP74opf2mBpFL0rboHSG1OMpAUyG4Zi4D3oxQzwdE=) 3: db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa (hash: tpwIHAPeP6VO01vStT1MXeARsWZrICbXBqQ+6206mSI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:93:8f:3b:ea:b4:3a:d9:d3:d1:4b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: Oct 19 19:00:03 2025 GMT Not After : Oct 22 19:00:00 2025 GMT Subject: CN=4aac8718-0abd-4652-82fc-1a1e2e3807e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:48:b9:5d:a7:7b:ba:20:61:bd:0d:0d:da:56: 1f:5e:97:1c:65:5b:60:d5:13:4e:3e:49:cd:12:dd: 6b:ed:4b:a1:80:e4:f1:17:d7:ac:43:a8:ee:3e:8e: 21:f0:7b:3e:a9:d7:ba:98:31:24:23:14:0b:16:a4: 3e:de:c1:b4:5d:8d:b7:a0:d4:81:e9:46:49:74:d3: f0:cd:a7:7a:a0:18:46:c0:da:af:b1:d0:7b:10:41: 72:c6:34:d2:4b:5b:a9:93:a6:ee:c0:df:f0:0b:3b: 31:87:d5:e7:15:cd:fe:81:ed:cf:58:e9:4f:6e:e2: a8:a3:a4:bc:d5:b9:c1:6f:fc:94:9b:ba:9f:83:2e: cb:bd:76:57:71:6c:db:39:cd:aa:1d:89:42:d9:06: 31:03:88:51:87:4a:3c:a5:4a:8d:9c:cb:40:55:4c: 6b:a0:f4:c5:4a:99:ab:af:c1:f3:c7:9c:41:f7:57: de:0e:f6:20:a1:2b:9f:09:0c:ee:d0:3e:78:02:bb: 35:87:69:b0:62:2f:e4:1b:c4:33:b0:3b:65:ff:05: ec:8f:49:38:dc:5c:40:37:29:67:d4:17:e9:8b:a4: ba:d3:f0:5a:c8:d0:bc:27:66:86:ec:ec:3f:a7:53: 84:3d:bd:8f:52:88:ea:9b:8d:ad:4c:fb:7e:c8:41: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0C:20:FD:F4:5C:DB:45:06:81:2F:9D:8F:8E:55:7F:C1:D4:1D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1e:41:75:d3:d2:d1:2b:5f:f7:72:2a:0d:bc:29:2d:92:7d: 6b:fe:8b:5e:b6:39:93:99:b0:29:57:05:74:b1:74:6f:f2:4e: b2:72:e2:91:a1:e0:8c:69:ed:8c:72:db:95:b0:75:2a:91:99: a7:cf:6d:f4:32:9e:86:f2:62:2a:d9:66:1a:fe:24:65:ab:bb: ee:8a:1f:eb:23:1a:9a:b6:95:f9:51:be:7d:50:35:0c:8d:45: 5d:8d:33:f9:69:90:af:e1:08:ff:5e:e6:b4:34:f9:2f:7b:20: 0b:28:73:cf:8e:82:28:a6:4c:13:b8:34:27:fa:3a:b1:d9:a5: 96:bf:1d:6b:71:e6:2d:79:d8:20:12:6f:f2:52:7a:bd:7e:eb: c7:9d:20:95:cd:4d:17:52:d2:f7:54:ea:f9:80:4c:a5:1a:89: fd:da:4f:cf:b6:94:ef:f4:15:7d:89:0f:e8:db:ff:3a:dd:6a: b6:4d:1f:7d:3e:93:93:a7:89:a4:f7:02:8d:60:0a:c8:c4:24: e4:fe:53:0d:2c:92:c4:f0:62:8d:15:4e:92:48:c5:5c:19:bb: 9f:ff:a8:c4:70:75:d8:ee:2b:ec:90:30:02:fd:93:d9:c0:e3: ca:49:f0:d1:3b:45:d8:d2:9d:59:c6:6c:3a:88:fe:c4:3c:ba: 68:c4:ca:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuTjzvqtDrZ09FLzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI1MTAxOTE5MDAwM1oXDTI1MTAyMjE5MDAwMFowLzEtMCsGA1UEAxMk NGFhYzg3MTgtMGFiZC00NjUyLTgyZmMtMWExZTJlMzgwN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgki5Xad7uiBhvQ0N2lYfXpccZVtg1RNOPknN Et1r7UuhgOTxF9esQ6juPo4h8Hs+qde6mDEkIxQLFqQ+3sG0XY23oNSB6UZJdNPw zad6oBhGwNqvsdB7EEFyxjTSS1upk6buwN/wCzsxh9XnFc3+ge3PWOlPbuKoo6S8 1bnBb/yUm7qfgy7LvXZXcWzbOc2qHYlC2QYxA4hRh0o8pUqNnMtAVUxroPTFSpmr r8Hzx5xB91feDvYgoSufCQzu0D54Ars1h2mwYi/kG8QzsDtl/wXsj0k43FxANyln 1Bfpi6S60/BayNC8J2aG7Ow/p1OEPb2PUojqm42tTPt+yEEF7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHEMIP30XNtFBoEvnY+OVX/B1B34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvMzhlYzQ2OTQtYTcwZi00 MzI5LWI3MTMtZjRkYTU5ZTQ5OTczLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqHkF109LRK1/3cioNvCkt kn1r/otetjmTmbApVwV0sXRv8k6ycuKRoeCMae2MctuVsHUqkZmnz230Mp6G8mIq 2WYa/iRlq7vuih/rIxqatpX5Ub59UDUMjUVdjTP5aZCv4Qj/Xua0NPkveyALKHPP joIopkwTuDQn+jqx2aWWvx1rceYtedggEm/yUnq9fuvHnSCVzU0XUtL3VOr5gEyl Gon92k/PtpTv9BV9iQ/o2/863Wq2TR99PpOTp4mk9wKNYArIxCTk/lMNLJLE8GKN FU6SSMVcGbuf/6jEcHXY7ivskDAC/ZPZwOPKSfDRO0XY0p1Zxmw6iP7EPLpoxMoc -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:41 2025 by rpki-client