$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft File: 33ecaab9-1807-4780-80d0-6a8df954060e.mft (raw, json) Hash identifier: vORXcQZQzqt/4YY3txSuggDIwjHE76htoH8MU2rZLZc= Subject key identifier: 7F:F1:03:4F:C8:39:C0:D8:0D:37:C3:AC:10:1D:D1:1A:81:DB:F2:BA Authority key identifier: 7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76 Certificate issuer: /CN=33ecaab9-1807-4780-80d0-6a8df954060e Certificate serial: 010D0C9F4328584D4AAD1D167CBB1CA67E41FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft Manifest number: 010D0C9F43285842CFE88180315B383C505FD700 Signing time: Thu 26 Mar 2026 02:00:09 +0000 Manifest this update: Thu 26 Mar 2026 02:00:09 +0000 Manifest next update: Sat 28 Mar 2026 02:00:00 +0000 Files and hashes: 1: 33ecaab9-1807-4780-80d0-6a8df954060e.crl (hash: otuqS3xnAZXtg9yClgAOkeoRJiVLNKRBgbJ7I1Yo1Zs=) 2: 589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer (hash: z+49tVeAqmLLSnz03GJ1zFjOh0Nm+RnjqITedqrGpgk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:ad:1d:16:7c:bb:1c:a6:7e:41:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ecaab9-1807-4780-80d0-6a8df954060e Validity Not Before: Mar 26 02:00:09 2026 GMT Not After : Mar 28 02:00:00 2026 GMT Subject: CN=228eeb60-690a-46a8-8e33-9d6b3b5bc10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:d8:45:2f:8b:53:85:39:02:6e:22:b5:30: 0e:1f:22:cb:3c:d8:c2:cc:42:47:87:b1:40:5a:a7: a9:bd:45:6a:72:e3:9f:38:84:98:a3:9d:b3:45:16: fd:b3:e4:34:94:ab:ce:cd:7f:86:c4:be:7c:3d:85: 7e:73:e9:4c:95:1b:fb:d8:9c:c3:ce:78:fc:c2:8e: 9f:2e:89:7b:4c:1c:c0:77:c6:98:af:a9:e6:3d:b4: 9e:b4:99:aa:96:ad:80:36:39:7e:d9:f0:cc:f4:e3: 74:ec:b7:75:ec:f9:48:12:bc:b7:af:dd:cf:b4:4b: 58:4d:8a:17:36:6c:17:84:a1:a8:54:7c:3d:5a:63: a8:d6:f5:02:80:7d:18:be:36:e1:ad:8c:a3:4c:63: 1e:94:7e:7c:f6:a7:c5:02:f3:9a:3b:bf:f1:48:ec: c0:67:df:7c:ff:46:19:e4:54:7d:7e:09:d6:87:ed: 9b:c6:73:e6:e8:59:12:2f:e9:12:c8:e2:28:8d:7e: 21:8c:72:c8:f6:c5:96:f7:4d:a1:99:41:ca:c9:57: b0:0d:fd:7e:a7:03:04:c7:08:b9:34:9b:27:b5:ef: ed:8b:07:90:fd:f3:31:b2:61:4a:40:85:4e:ae:1c: 1c:8a:26:21:3f:0d:52:52:9c:f3:5e:d9:22:a4:8c: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F1:03:4F:C8:39:C0:D8:0D:37:C3:AC:10:1D:D1:1A:81:DB:F2:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl X509v3 Authority Key Identifier: keyid:7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b2:35:4e:82:42:75:46:53:e8:49:65:27:b9:32:ec:f1:a8: b2:77:78:c9:51:ac:3c:47:0d:a0:4b:cc:81:c6:26:cc:fe:7d: 77:30:75:b0:e5:31:7d:1f:9e:fb:b0:98:55:b8:7e:e2:3e:62: a1:98:9a:10:57:a0:b1:3a:0b:98:6c:2f:f6:06:f9:0f:0a:59: 60:e3:4d:5f:e5:43:e2:ed:26:dd:66:de:bb:5d:c0:a6:64:6b: 75:94:47:ea:f5:34:06:53:45:d4:e8:d2:12:9c:bf:7c:2d:28: c3:79:b6:a4:39:26:be:80:8d:57:2d:1b:55:0c:60:6b:df:39: d9:14:f0:52:05:2e:40:a0:85:a2:07:31:a4:a6:c9:ac:2b:59: e3:3b:8c:eb:50:4a:30:b2:fe:fd:45:5d:20:5c:c2:8e:48:62: ae:03:e6:25:bb:45:44:7c:8c:15:7f:28:de:f1:d2:4c:c9:ac: 5a:a2:e9:75:02:96:0a:07:c8:aa:92:d2:9c:14:1c:4b:3d:1b: b1:92:96:26:29:68:21:92:b6:76:5f:cd:cb:34:8c:aa:0b:f5: c3:b7:dc:db:fc:4d:c4:28:e8:81:a7:d3:98:bc:c9:87:e8:28: 1b:d9:1a:ff:0a:1d:f4:5a:df:ed:09:77:0e:ed:9e:8c:17:f8: 05:4e:d3:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KrR0WfLscpn5B/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNlY2FhYjktMTgwNy00NzgwLTgwZDAtNmE4ZGY5NTQw NjBlMB4XDTI2MDMyNjAyMDAwOVoXDTI2MDMyODAyMDAwMFowLzEtMCsGA1UEAxMk MjI4ZWViNjAtNjkwYS00NmE4LThlMzMtOWQ2YjNiNWJjMTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIzYRS+LU4U5Am4itTAOHyLLPNjCzEJHh7FA WqepvUVqcuOfOISYo52zRRb9s+Q0lKvOzX+GxL58PYV+c+lMlRv72JzDznj8wo6f Lol7TBzAd8aYr6nmPbSetJmqlq2ANjl+2fDM9ON07Ld17PlIEry3r93PtEtYTYoX NmwXhKGoVHw9WmOo1vUCgH0YvjbhrYyjTGMelH589qfFAvOaO7/xSOzAZ998/0YZ 5FR9fgnWh+2bxnPm6FkSL+kSyOIojX4hjHLI9sWW902hmUHKyVewDf1+pwMExwi5 NJsnte/tiweQ/fMxsmFKQIVOrhwciiYhPw1SUpzzXtkipIwk9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH/xA0/IOcDYDTfDrBAd0RqB2/K6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zM2Vj YWFiOS0xODA3LTQ3ODAtODBkMC02YThkZjk1NDA2MGUvMzNlY2FhYjktMTgwNy00 NzgwLTgwZDAtNmE4ZGY5NTQwNjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzNlY2FhYjktMTgwNy00NzgwLTgw ZDAtNmE4ZGY5NTQwNjBlLzMzZWNhYWI5LTE4MDctNDc4MC04MGQwLTZhOGRmOTU0 MDYwZS5jcmwwHwYDVR0jBBgwFoAUe3GY99gfYA8V+3PyF6256e4zMnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zM2VjYWFiOS0xODA3LTQ3ODAtODBkMC02YThk Zjk1NDA2MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBysjVOgkJ1RlPoSWUnuTLs 8aiyd3jJUaw8Rw2gS8yBxibM/n13MHWw5TF9H577sJhVuH7iPmKhmJoQV6CxOguY bC/2BvkPCllg401f5UPi7SbdZt67XcCmZGt1lEfq9TQGU0XU6NISnL98LSjDebak OSa+gI1XLRtVDGBr3znZFPBSBS5AoIWiBzGkpsmsK1njO4zrUEowsv79RV0gXMKO SGKuA+Ylu0VEfIwVfyje8dJMyaxaoul1ApYKB8iqktKcFBxLPRuxkpYmKWghkrZ2 X83LNIyqC/XDt9zb/E3EKOiBp9OYvMmH6Cgb2Rr/Ch30Wt/tCXcO7Z6MF/gFTtNw -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:23 2026 by rpki-client