$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft File: 33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft (raw, json) Hash identifier: V8yYIzWCxWezgDzOx29yBf4MOK8wSKhykYrz0aKUVTs= Subject key identifier: C2:4A:4B:7C:3B:FE:77:20:D9:E3:32:C1:B3:84:C2:A7:EE:C0:1E:93 Authority key identifier: 47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 Certificate issuer: /CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Certificate serial: 010D0C9F4328584D07E8429C397C413F07FF7E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft Manifest number: 010D0C9F4328584C3C213C9A5D08B64975492E0B Signing time: Mon 02 Mar 2026 04:00:09 +0000 Manifest this update: Mon 02 Mar 2026 04:00:09 +0000 Manifest next update: Wed 04 Mar 2026 04:00:00 +0000 Files and hashes: 1: 33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl (hash: E38ZNyuOfZuvufeYUA6C2ZU3gZCrPyW4dtIHtYpGkBg=) 2: 46076094-8e03-3dc1-bce6-04a236bc0d4f.roa (hash: YX9pOuC1ImDjTFmqwiiJ8VmQFVxhRju6IF22cG6VGvg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:e8:42:9c:39:7c:41:3f:07:ff:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Validity Not Before: Mar 2 04:00:09 2026 GMT Not After : Mar 4 04:00:00 2026 GMT Subject: CN=0fa155f1-8922-47d1-a7b7-a32856a9de7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d8:ae:5c:ed:31:b6:8f:f7:52:30:e1:fb:b6: 78:57:8e:8c:63:1c:f0:d4:05:8b:15:c1:60:7e:da: 3a:76:49:1c:37:f6:d0:a7:04:16:14:05:6e:32:73: bc:37:e0:f2:06:a5:93:f8:ae:d1:a6:ec:dd:10:18: 2e:f6:0c:0f:44:96:12:c2:ed:ad:78:cd:9f:21:75: 3b:e3:51:f9:26:a7:43:4c:28:c4:35:d6:12:c3:6a: da:72:03:65:66:ff:46:51:d8:de:9c:f5:59:e9:a8: ca:50:6a:a4:06:be:14:d2:04:09:5a:e5:ef:92:93: 8e:e0:aa:f2:f1:27:17:e4:d1:af:d9:22:d7:ee:bb: 11:d5:d5:35:cb:75:32:9b:7b:52:5d:c1:66:85:84: 96:9e:67:58:30:0e:bd:59:d7:c3:65:77:97:9b:c3: 3a:f5:cb:55:47:aa:f9:e6:da:bd:e7:ec:ac:94:74: 7d:21:cb:c1:02:b9:46:eb:62:5e:03:63:a1:18:c8: f8:de:4e:72:4c:5c:e3:9c:c2:b6:bb:3b:d8:48:3b: 3b:8b:80:83:29:69:fc:d1:0b:da:c1:1c:35:99:93: 24:7f:a2:fc:dc:a1:1b:c1:44:9b:b1:d7:45:a9:39: 17:70:55:fd:c6:df:1e:b5:f0:d3:b0:0e:27:07:85: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4A:4B:7C:3B:FE:77:20:D9:E3:32:C1:B3:84:C2:A7:EE:C0:1E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl X509v3 Authority Key Identifier: keyid:47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e8:c2:38:1a:18:df:b9:ee:b6:1d:87:81:d8:53:aa:e7:97: ae:ba:c8:d8:02:ef:1b:a3:ff:fd:e4:ab:fb:9a:fb:26:1f:bd: 17:68:51:3d:c7:30:03:8c:d4:c5:d8:11:4e:ba:b5:49:a9:71: 9a:b6:00:7e:0a:f3:d7:28:51:ea:3e:77:22:9f:38:1f:8f:46: 98:ed:7f:3d:4b:22:5a:cf:9b:f2:2a:fc:66:69:56:84:2a:4d: 01:44:67:e8:22:7f:f4:01:20:e7:46:2e:22:e5:21:c9:13:7a: 9e:52:1d:8b:70:7d:93:d5:26:78:de:60:ee:ba:df:8f:62:f7: 1b:0b:21:67:b8:44:83:41:78:bd:33:55:12:c8:26:a4:34:ce: a0:d1:c0:c7:92:6d:06:c0:31:57:e3:4b:3d:7e:93:ca:24:e8: 9b:34:49:c2:bb:b2:f5:9d:33:a2:71:da:c9:bd:06:e7:ef:2e: 1c:b0:dc:1f:df:91:8c:7a:f6:b6:4c:ce:fc:a1:77:79:83:74: 3d:24:a7:70:2b:30:b4:67:46:75:54:67:2e:85:1b:10:ba:9a: c2:d7:43:af:d1:8b:95:59:a6:71:86:bc:3b:4c:db:e3:28:66: 7b:e7:68:3e:09:57:f3:0a:d1:3e:16:29:ae:71:12:bd:8b:b8: 71:de:f0:64 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0H6EKcOXxBPwf/foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNmYmQ4NWQtYmM2NS00MmE2LThjNzgtYzNmMDVkYTk5 MDFiMB4XDTI2MDMwMjA0MDAwOVoXDTI2MDMwNDA0MDAwMFowLzEtMCsGA1UEAxMk MGZhMTU1ZjEtODkyMi00N2QxLWE3YjctYTMyODU2YTlkZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNiuXO0xto/3UjDh+7Z4V46MYxzw1AWLFcFg fto6dkkcN/bQpwQWFAVuMnO8N+DyBqWT+K7RpuzdEBgu9gwPRJYSwu2teM2fIXU7 41H5JqdDTCjENdYSw2racgNlZv9GUdjenPVZ6ajKUGqkBr4U0gQJWuXvkpOO4Kry 8ScX5NGv2SLX7rsR1dU1y3Uym3tSXcFmhYSWnmdYMA69WdfDZXeXm8M69ctVR6r5 5tq95+yslHR9IcvBArlG62JeA2OhGMj43k5yTFzjnMK2uzvYSDs7i4CDKWn80Qva wRw1mZMkf6L83KEbwUSbsddFqTkXcFX9xt8etfDTsA4nB4VSfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJKS3w7/ncg2eMywbOEwqfuwB6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zM2Zi ZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2YwNWRhOTkwMWIvMzNmYmQ4NWQtYmM2NS00 MmE2LThjNzgtYzNmMDVkYTk5MDFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzNmYmQ4NWQtYmM2NS00MmE2LThj NzgtYzNmMDVkYTk5MDFiLzMzZmJkODVkLWJjNjUtNDJhNi04Yzc4LWMzZjA1ZGE5 OTAxYi5jcmwwHwYDVR0jBBgwFoAURxTWpBzPVPbrz6AC+raxYEueVpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zM2ZiZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2Yw NWRhOTkwMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCY6MI4Ghjfue62HYeB2FOq 55euusjYAu8bo//95Kv7mvsmH70XaFE9xzADjNTF2BFOurVJqXGatgB+CvPXKFHq Pncinzgfj0aY7X89SyJaz5vyKvxmaVaEKk0BRGfoIn/0ASDnRi4i5SHJE3qeUh2L cH2T1SZ43mDuut+PYvcbCyFnuESDQXi9M1USyCakNM6g0cDHkm0GwDFX40s9fpPK JOibNEnCu7L1nTOicdrJvQbn7y4csNwf35GMeva2TM78oXd5g3Q9JKdwKzC0Z0Z1 VGcuhRsQuprC10Ov0YuVWaZxhrw7TNvjKGZ752g+CVfzCtE+FimucRK9i7hx3vBk -----END CERTIFICATE-----Generated at Mon Mar 2 09:41:38 2026 by rpki-client