$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft File: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft (raw, json) Hash identifier: DmGm3dWrxjhYc9GGTkYL+vOw9eC3hb80/lhup79tqFY= Subject key identifier: BB:CA:5F:49:9E:B1:9D:AD:62:21:34:55:B9:09:0F:3F:63:95:CE:D7 Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F4328584F4024630B23BA081BE35B2330 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft Manifest number: 010D0C9F432858499C71461369702FC777490F92 Signing time: Mon 21 Sep 2026 17:00:22 +0000 Manifest this update: Mon 21 Sep 2026 17:00:22 +0000 Manifest next update: Wed 23 Sep 2026 17:00:00 +0000 Files and hashes: 1: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl (hash: QmWs2rdxqOEXhSAgL+8CE4RpW0p/mYdeapBbKoSf4H8=) 2: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (hash: 34S7QhQLEVXvvWChYpsoMGXHVREahKPWghM9MoEzrik=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:40:24:63:0b:23:ba:08:1b:e3:5b:23:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: Sep 21 17:00:22 2026 GMT Not After : Sep 23 17:00:00 2026 GMT Subject: CN=239cb1a5-811c-4521-a587-0fa7168c174a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:9f:1a:95:25:cd:8d:1f:7f:19:c3:0d:d2: 30:62:81:ea:91:5a:22:6b:e4:3d:4f:98:62:6b:cd: 8a:3a:79:c6:08:dc:db:35:e2:b2:c5:b8:e5:40:0f: 02:9d:e9:49:ab:b0:7b:45:27:31:da:fe:2e:ec:1f: 5f:9f:46:6e:7f:e2:ec:1b:8a:11:60:50:40:14:cc: 8c:a1:97:14:5e:a1:f4:dd:82:0b:2a:64:fd:83:e2: c9:d1:09:87:7f:94:5d:4c:21:27:e8:2d:43:39:5b: 74:da:21:a8:20:92:a6:36:47:0d:b9:d5:e9:f8:cd: a6:85:cc:7e:cc:1e:67:f9:e7:2a:46:40:47:9d:e6: 4a:83:51:38:f6:45:7d:0d:99:43:e9:6c:07:44:d2: 00:95:45:62:cc:ef:b6:81:45:97:66:cb:f8:d6:98: 77:17:a3:c3:13:b1:d8:17:01:bb:63:6a:ad:11:f4: bc:cd:a3:29:82:b4:98:06:de:e5:4f:ac:15:be:c4: e1:c0:68:b0:df:b5:a0:19:e7:d9:03:62:3c:9d:3f: cb:4e:91:92:9a:50:12:86:e0:4f:91:f6:85:94:44: 80:54:ba:6e:44:96:9c:13:a9:cb:a9:19:3e:bf:23: a6:3a:46:38:50:52:9f:f6:fb:f7:64:c6:43:ae:36: e4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:5F:49:9E:B1:9D:AD:62:21:34:55:B9:09:0F:3F:63:95:CE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8c:08:1f:a1:85:c5:34:e8:8c:df:7a:7c:d2:23:3a:c8:f8: 47:e0:30:d9:ce:2c:4e:3b:88:8c:5a:04:d3:f2:63:09:5f:8c: 83:f7:8b:58:16:47:0c:10:1c:6a:72:ee:08:50:ff:26:2a:9f: 1d:48:5f:6c:03:d2:cb:80:2b:05:25:84:c6:35:30:f4:2c:34: 72:9a:d3:fd:6b:b0:01:da:d6:ad:fc:05:cb:fe:f0:b3:a3:4c: 06:d0:2d:d3:ea:74:25:e7:3b:7b:c4:5d:ca:c2:72:60:95:78: fc:72:d1:42:02:d2:13:ab:44:92:ba:55:e3:1d:e8:d2:99:2d: 92:ff:c6:1b:18:00:2c:8d:51:e7:d6:05:d9:56:9d:cb:67:11: a9:e4:63:06:02:c1:23:a7:14:72:d7:f4:05:c6:9e:bd:04:50: 7c:75:1e:c1:b2:5d:5b:63:fe:f0:6d:a7:9c:34:f8:1a:30:4e: b5:a2:2d:b1:ed:67:94:7b:05:91:2d:86:83:82:47:b6:dc:4d: d8:76:40:e1:85:0d:15:ad:c0:fc:74:b5:ab:f4:48:09:97:f7: b2:11:a4:fc:82:56:bc:1f:68:9f:a6:ed:5a:38:11:8a:83:b0: b2:b1:7c:cf:6c:17:23:de:f5:4e:9c:33:a4:be:bd:c7:c4:5b: a9:f7:31:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9AJGMLI7oIG+NbIzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI2MDkyMTE3MDAyMloXDTI2MDkyMzE3MDAwMFowLzEtMCsGA1UEAxMk MjM5Y2IxYTUtODExYy00NTIxLWE1ODctMGZhNzE2OGMxNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo2fGpUlzY0ffxnDDdIwYoHqkVoia+Q9T5hi a82KOnnGCNzbNeKyxbjlQA8CnelJq7B7RScx2v4u7B9fn0Zuf+LsG4oRYFBAFMyM oZcUXqH03YILKmT9g+LJ0QmHf5RdTCEn6C1DOVt02iGoIJKmNkcNudXp+M2mhcx+ zB5n+ecqRkBHneZKg1E49kV9DZlD6WwHRNIAlUVizO+2gUWXZsv41ph3F6PDE7HY FwG7Y2qtEfS8zaMpgrSYBt7lT6wVvsThwGiw37WgGefZA2I8nT/LTpGSmlAShuBP kfaFlESAVLpuRJacE6nLqRk+vyOmOkY4UFKf9vv3ZMZDrjbkFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLvKX0mesZ2tYiE0VbkJDz9jlc7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvMzNkMWE2YjQtOTAwMy00 YzFkLTlhNDgtMDI3MGJlNGFmNTBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAjAgfoYXFNOiM33p80iM6 yPhH4DDZzixOO4iMWgTT8mMJX4yD94tYFkcMEBxqcu4IUP8mKp8dSF9sA9LLgCsF JYTGNTD0LDRymtP9a7AB2tat/AXL/vCzo0wG0C3T6nQl5zt7xF3KwnJglXj8ctFC AtITq0SSulXjHejSmS2S/8YbGAAsjVHn1gXZVp3LZxGp5GMGAsEjpxRy1/QFxp69 BFB8dR7Bsl1bY/7wbaecNPgaME61oi2x7WeUewWRLYaDgke23E3YdkDhhQ0VrcD8 dLWr9EgJl/eyEaT8gla8H2ifpu1aOBGKg7CysXzPbBcj3vVOnDOkvr3HxFup9zGR -----END CERTIFICATE-----Generated at Tue Sep 22 07:06:28 2026 by rpki-client