$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft File: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft (raw, json) Hash identifier: U8/w2DtMQaFfoXU4qtou+kMe1QwvWHKOhTxDShwZT3E= Subject key identifier: BF:18:53:46:CD:0B:DC:13:1F:C5:21:B4:BD:CE:29:C6:D6:E7:DB:1A Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F4328584D870C1BD00963A20E7B65A200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft Manifest number: 010D0C9F432858499C71461369702FC777490EF0 Signing time: Thu 16 Apr 2026 17:00:03 +0000 Manifest this update: Thu 16 Apr 2026 17:00:03 +0000 Manifest next update: Sat 18 Apr 2026 17:00:00 +0000 Files and hashes: 1: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl (hash: QslOacRCj7QZinxn1nFpzSuglmJiq0y7j0tI74jsurU=) 2: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (hash: 7NB+4+qobNOaJs6hzFw3fyX2nkKQqAjvBs5PV44wMO8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:0c:1b:d0:09:63:a2:0e:7b:65:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: Apr 16 17:00:03 2026 GMT Not After : Apr 18 17:00:00 2026 GMT Subject: CN=3be811b6-8d79-4475-80e7-4f7c1f38c2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:ae:dd:d0:23:50:70:a9:8e:dc:a6:0b:e1: ba:59:c6:2d:37:5c:c1:ab:7b:e6:9f:f3:e2:3f:ec: c4:a6:37:c0:e6:62:7c:94:c7:74:80:64:5c:f4:10: 9b:43:cc:f6:8b:d6:1a:70:b5:2c:d5:c8:11:3d:78: c1:89:ff:37:cc:2c:d7:4d:c8:65:31:86:50:ab:38: a2:2e:89:c2:10:6e:5d:53:4d:99:9f:d2:d0:97:7d: 9e:f3:e8:f7:05:ca:48:2c:ca:6b:a3:e5:54:13:85: e8:01:2a:ea:84:ce:91:37:28:ff:e3:a8:46:34:9e: ea:43:1c:ca:cb:01:40:4d:80:74:33:da:70:e3:87: 83:62:72:15:15:94:0b:14:75:7b:e7:f2:7d:ed:11: 26:f7:d2:16:f8:f4:86:a7:23:43:9a:ad:0c:11:a6: aa:86:71:17:9a:e8:ba:88:4f:d8:92:10:41:87:70: 7c:15:17:d2:ac:a8:13:7b:4e:f5:44:d7:a2:64:a4: 81:9a:b6:53:e7:3f:ef:b5:45:db:64:01:5b:dd:69: 05:ed:a2:f6:ce:b4:8f:37:6e:6f:5a:fb:31:90:21: 0d:b4:da:3f:33:04:33:b4:43:5c:31:33:9f:02:38: 8a:5b:e0:75:4b:47:f3:17:6b:f5:d0:94:c9:ed:1f: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:18:53:46:CD:0B:DC:13:1F:C5:21:B4:BD:CE:29:C6:D6:E7:DB:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b4:07:8c:87:bf:dc:94:67:a8:f4:b1:92:e7:d2:44:a8:4c: c8:b9:f0:9a:67:2e:f9:d8:53:a7:97:ce:34:1f:e9:87:9b:2a: 92:ac:70:1a:63:3f:e4:15:cd:74:50:5c:50:89:12:38:23:09: 94:16:8d:a9:cb:cd:c5:ed:49:0f:b4:ce:83:1b:d4:cc:d3:c9: bd:24:af:59:17:08:09:49:47:72:2d:2e:14:85:3e:ec:24:61: c2:36:2e:03:59:74:ff:53:ed:de:0a:6b:00:f8:3c:c5:eb:be: 34:68:b6:bf:0d:38:55:ed:53:4b:37:43:30:3e:3b:a5:b3:1c: 98:a4:54:62:27:70:14:40:44:96:05:ce:48:9d:ee:f2:c2:69: 03:31:7c:e1:e4:cf:89:59:a9:7a:27:13:45:56:97:c4:09:57: 99:d2:80:f8:0f:ed:a5:8c:6d:d8:09:e9:61:0c:de:44:7e:da: 83:a1:ff:e5:fd:c2:fc:a2:15:ec:61:07:71:68:4d:32:fc:c0: 2e:d8:ea:e4:af:e0:58:60:23:25:3c:0f:41:07:b9:60:59:9f: 54:bc:59:f3:91:b4:84:e9:a3:04:58:da:15:42:26:32:52:24: 90:9a:45:d4:05:bc:68:cc:84:fe:d1:7b:4a:c5:e2:aa:f1:c2: 58:2d:6f:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2HDBvQCWOiDntlogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI2MDQxNjE3MDAwM1oXDTI2MDQxODE3MDAwMFowLzEtMCsGA1UEAxMk M2JlODExYjYtOGQ3OS00NDc1LTgwZTctNGY3YzFmMzhjMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPuu3dAjUHCpjtymC+G6WcYtN1zBq3vmn/Pi P+zEpjfA5mJ8lMd0gGRc9BCbQ8z2i9YacLUs1cgRPXjBif83zCzXTchlMYZQqzii LonCEG5dU02Zn9LQl32e8+j3BcpILMpro+VUE4XoASrqhM6RNyj/46hGNJ7qQxzK ywFATYB0M9pw44eDYnIVFZQLFHV75/J97REm99IW+PSGpyNDmq0MEaaqhnEXmui6 iE/YkhBBh3B8FRfSrKgTe071RNeiZKSBmrZT5z/vtUXbZAFb3WkF7aL2zrSPN25v WvsxkCENtNo/MwQztENcMTOfAjiKW+B1S0fzF2v10JTJ7R96JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL8YU0bNC9wTH8UhtL3OKcbW59saMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvMzNkMWE2YjQtOTAwMy00 YzFkLTlhNDgtMDI3MGJlNGFmNTBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvtAeMh7/clGeo9LGS59JE qEzIufCaZy752FOnl840H+mHmyqSrHAaYz/kFc10UFxQiRI4IwmUFo2py83F7UkP tM6DG9TM08m9JK9ZFwgJSUdyLS4UhT7sJGHCNi4DWXT/U+3eCmsA+DzF6740aLa/ DThV7VNLN0MwPjulsxyYpFRiJ3AUQESWBc5Ine7ywmkDMXzh5M+JWal6JxNFVpfE CVeZ0oD4D+2ljG3YCelhDN5EftqDof/l/cL8ohXsYQdxaE0y/MAu2Orkr+BYYCMl PA9BB7lgWZ9UvFnzkbSE6aMEWNoVQiYyUiSQmkXUBbxozIT+0XtKxeKq8cJYLW/S -----END CERTIFICATE-----Generated at Fri Apr 17 14:08:15 2026 by rpki-client