$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft File: 33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft (raw, json) Hash identifier: +cSTN6UlqzBABt2S2UCyEY6ZyVsZuBqaWvEQaiNO1aQ= Subject key identifier: 95:25:18:EB:F7:FF:A3:97:97:D2:43:5F:D3:90:1F:97:BA:05:3B:4D Authority key identifier: 47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 Certificate issuer: /CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Certificate serial: 010D0C9F4328584F3EA141BC05C5F9D1B3CD7DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft Manifest number: 010D0C9F4328584C3C213C9A5D08B64975492EDD Signing time: Mon 21 Sep 2026 04:00:23 +0000 Manifest this update: Mon 21 Sep 2026 04:00:23 +0000 Manifest next update: Thu 24 Sep 2026 04:00:00 +0000 Files and hashes: 1: 33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl (hash: 5u/c+rG3u3ngbC4PCSGuNzmgg5nLZmDmgp8ML3/udIA=) 2: 46076094-8e03-3dc1-bce6-04a236bc0d4f.roa (hash: 747Iya7DsuDyrmw1Jzs9lERUtQY8zmIuk78jGizp8bM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:a1:41:bc:05:c5:f9:d1:b3:cd:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Validity Not Before: Sep 21 04:00:23 2026 GMT Not After : Sep 24 04:00:00 2026 GMT Subject: CN=bbf083b4-51c2-4eaf-9505-2ff8d3d32667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:16:77:9b:1b:dd:42:55:19:24:69:26:07: e0:64:dd:c6:bd:4a:fe:e0:1d:61:54:dd:e2:be:15: c4:55:53:67:85:fe:43:ad:51:50:37:d5:ca:29:a7: 23:76:38:06:11:b5:e2:ae:9e:1d:e2:bc:59:b0:f0: 01:2d:07:8b:8d:6d:f4:a8:11:a1:17:9e:22:5d:96: 9a:d8:d5:43:09:0b:69:63:11:9c:99:c2:ec:60:c8: 61:41:b0:83:35:fc:5e:b4:21:c1:56:40:18:2a:c0: 26:ea:3b:ec:39:f8:b2:ea:41:e2:ea:d5:00:a9:64: 5f:1b:2b:7d:a4:46:cd:a4:1b:6c:90:1c:00:83:69: a5:77:e0:8a:61:c0:b2:6d:7b:c2:e6:5f:d9:cc:71: 76:03:f0:ef:69:b7:d1:10:6d:af:22:f0:6c:f2:ae: 8a:88:3e:73:d2:7b:d4:1e:7b:75:2b:a9:b5:af:27: 7f:70:4e:9c:91:af:7f:e6:f8:57:6b:49:c3:55:2d: 3f:13:fa:9d:db:7d:de:70:be:25:08:c8:c6:e4:3e: e9:e9:86:1b:ad:a6:51:a8:b5:61:ae:29:1b:03:d8: 66:22:4e:d8:09:e4:77:fa:10:c1:a4:51:93:cb:30: 19:bc:63:80:31:5a:b3:66:97:0c:0e:a3:8e:98:9f: fe:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:25:18:EB:F7:FF:A3:97:97:D2:43:5F:D3:90:1F:97:BA:05:3B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl X509v3 Authority Key Identifier: keyid:47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e6:15:13:cf:dc:b8:7a:50:22:02:1a:b7:0f:a2:77:30:fb: cf:e1:92:ba:c5:e6:a7:28:64:6f:29:2f:18:37:f4:28:47:53: b2:fd:dd:4e:33:48:73:95:a9:d1:ea:73:e3:47:a8:9d:89:e2: 0a:82:dc:48:6d:c5:2c:aa:1e:71:c9:12:99:4b:0a:cf:17:61: 06:ef:5b:8d:2a:87:dc:48:8a:47:62:6c:98:82:94:bb:1e:b3: 78:5b:a4:f1:45:c5:f0:1b:0d:7a:18:3d:b7:d4:6c:7a:d2:91: eb:1a:26:75:c4:71:2c:25:c1:3a:80:4e:72:56:e8:98:45:61: 50:8b:d3:5d:f9:a1:ec:4d:03:5f:2f:5d:e6:51:53:ba:8c:f2: 65:b3:1b:b6:28:b9:17:9b:4e:4e:1e:b7:06:f0:ef:5f:ad:9f: 6f:90:23:89:c8:be:87:8c:31:87:d3:38:28:72:a7:4f:d8:09: 47:06:2d:7c:29:23:2c:89:bb:7a:35:56:ae:86:2b:33:33:25: c2:7b:14:70:fe:8e:5f:e5:fb:c1:33:f1:be:8f:69:80:ca:59: 77:26:47:78:81:73:46:95:98:dd:f1:c2:ae:fa:aa:3f:f4:e8: a3:98:ad:f0:25:16:0f:c6:4e:4b:a5:36:2d:ec:0b:02:ff:a1: 7f:92:c1:7e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE8+oUG8BcX50bPNfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNmYmQ4NWQtYmM2NS00MmE2LThjNzgtYzNmMDVkYTk5 MDFiMB4XDTI2MDkyMTA0MDAyM1oXDTI2MDkyNDA0MDAwMFowLzEtMCsGA1UEAxMk YmJmMDgzYjQtNTFjMi00ZWFmLTk1MDUtMmZmOGQzZDMyNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn4Wd5sb3UJVGSRpJgfgZN3GvUr+4B1hVN3i vhXEVVNnhf5DrVFQN9XKKacjdjgGEbXirp4d4rxZsPABLQeLjW30qBGhF54iXZaa 2NVDCQtpYxGcmcLsYMhhQbCDNfxetCHBVkAYKsAm6jvsOfiy6kHi6tUAqWRfGyt9 pEbNpBtskBwAg2mld+CKYcCybXvC5l/ZzHF2A/DvabfREG2vIvBs8q6KiD5z0nvU Hnt1K6m1ryd/cE6cka9/5vhXa0nDVS0/E/qd233ecL4lCMjG5D7p6YYbraZRqLVh rikbA9hmIk7YCeR3+hDBpFGTyzAZvGOAMVqzZpcMDqOOmJ/+5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJUlGOv3/6OXl9JDX9OQH5e6BTtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zM2Zi ZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2YwNWRhOTkwMWIvMzNmYmQ4NWQtYmM2NS00 MmE2LThjNzgtYzNmMDVkYTk5MDFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzNmYmQ4NWQtYmM2NS00MmE2LThj NzgtYzNmMDVkYTk5MDFiLzMzZmJkODVkLWJjNjUtNDJhNi04Yzc4LWMzZjA1ZGE5 OTAxYi5jcmwwHwYDVR0jBBgwFoAURxTWpBzPVPbrz6AC+raxYEueVpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zM2ZiZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2Yw NWRhOTkwMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn5hUTz9y4elAiAhq3D6J3 MPvP4ZK6xeanKGRvKS8YN/QoR1Oy/d1OM0hzlanR6nPjR6idieIKgtxIbcUsqh5x yRKZSwrPF2EG71uNKofcSIpHYmyYgpS7HrN4W6TxRcXwGw16GD231Gx60pHrGiZ1 xHEsJcE6gE5yVuiYRWFQi9Nd+aHsTQNfL13mUVO6jPJlsxu2KLkXm05OHrcG8O9f rZ9vkCOJyL6HjDGH0zgocqdP2AlHBi18KSMsibt6NVauhiszMyXCexRw/o5f5fvB M/G+j2mAyll3Jkd4gXNGlZjd8cKu+qo/9OijmK3wJRYPxk5LpTYt7AsC/6F/ksF+ -----END CERTIFICATE-----Generated at Mon Sep 21 16:01:55 2026 by rpki-client