$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft File: 33ecaab9-1807-4780-80d0-6a8df954060e.mft (raw, json) Hash identifier: pTSU2kts4S5L9eIup8kWDTc10Q+rOKm5Zu+MlenO2yQ= Subject key identifier: 35:74:3F:3C:EA:B9:81:65:7E:2B:3E:EE:38:54:B7:F1:BA:2C:72:A8 Authority key identifier: 7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76 Certificate issuer: /CN=33ecaab9-1807-4780-80d0-6a8df954060e Certificate serial: 010D0C9F4328584B945FAA42793051469226A4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft Manifest number: 010D0C9F43285842CFE88180315B383C505FD65D Signing time: Mon 20 Oct 2025 02:00:03 +0000 Manifest this update: Mon 20 Oct 2025 02:00:03 +0000 Manifest next update: Thu 23 Oct 2025 02:00:00 +0000 Files and hashes: 1: 33ecaab9-1807-4780-80d0-6a8df954060e.crl (hash: tu+ruoIbJ14OYNBWGel+dFSkU1X5ceM3AYVV2ArHXj4=) 2: 589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer (hash: XAa0gDRr7fL9GEBC89v/sBhiJcGRw3mvoS7Ev2CMgzo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:5f:aa:42:79:30:51:46:92:26:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ecaab9-1807-4780-80d0-6a8df954060e Validity Not Before: Oct 20 02:00:03 2025 GMT Not After : Oct 23 02:00:00 2025 GMT Subject: CN=75f43208-61a7-41be-be7e-4f223e7aec21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:18:24:4c:56:e3:01:ad:01:fc:7d:33:87:39: 2d:3c:45:81:07:1f:d9:57:cc:30:e8:b3:5e:b3:f8: 0f:0d:81:29:3b:f8:9e:46:92:9d:3a:8b:03:d5:64: 3e:23:2c:e2:c6:9e:07:46:9f:84:7c:0c:f2:b9:a6: e8:6c:44:80:07:18:bb:2c:99:04:7e:67:bc:5d:9c: 30:71:c1:a1:e7:78:01:e8:5d:66:50:a7:e6:91:be: 3c:5c:26:e3:88:ef:12:13:95:a7:91:fb:60:33:80: 47:03:38:48:31:54:c9:2a:3c:5b:33:29:c8:75:b6: 61:45:37:be:3a:dd:b8:ec:b9:86:f2:c7:be:0e:20: a2:a6:af:d2:9a:57:d4:1c:25:63:7f:32:64:8c:9c: 1c:c9:00:b1:ed:50:d4:49:8d:c7:bd:75:d9:21:d0: 7c:e9:06:66:d0:85:bb:f6:86:ab:5a:44:d2:a9:07: b0:c0:63:53:93:24:25:ed:06:9e:12:42:6c:77:e4: f5:0c:d2:17:f3:1c:b5:11:7f:f0:ea:ff:97:a6:4e: 4a:bc:52:03:45:8b:e2:80:bc:6f:28:cd:8f:2b:18: 67:3c:05:56:71:b8:3d:6c:a6:81:35:3d:24:79:0e: e4:78:d7:17:88:47:0f:98:37:83:24:2e:50:90:54: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:74:3F:3C:EA:B9:81:65:7E:2B:3E:EE:38:54:B7:F1:BA:2C:72:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl X509v3 Authority Key Identifier: keyid:7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e9:93:24:32:26:cf:a3:f1:f8:85:e5:f1:b2:88:e3:f7:ae: fc:33:d6:77:8d:1e:12:69:32:c2:c8:58:f5:93:fc:af:35:ec: 12:95:22:2e:b5:21:b8:c7:c1:90:f0:cc:be:2a:53:43:d0:3e: da:5c:55:a4:95:59:97:d6:80:97:cb:a1:a7:4e:cf:b2:ff:df: 66:62:86:b4:73:19:59:5e:58:99:e8:60:29:e6:ba:bc:7c:47: 8c:63:1e:8b:2b:59:f7:bb:a2:b8:96:95:34:f0:20:b5:af:68: 3d:ee:b1:3e:be:cd:15:61:fa:f5:72:ac:a7:38:44:a5:d4:35: 82:da:47:bc:ff:2a:80:d4:c2:bd:af:14:86:fe:81:cb:ab:56: 94:30:00:51:70:dc:2d:f5:d5:b0:79:7d:58:d1:4d:e4:77:9a: fd:85:7c:ae:37:f0:28:b6:e0:97:92:73:32:a0:cc:0b:12:88: ad:11:90:a9:3e:2e:31:fe:b1:47:78:ca:a3:68:9b:d0:d4:87: 13:ac:9a:86:76:4c:77:cf:ce:1f:57:8b:dc:7a:2a:aa:ea:ee: c8:f0:8f:24:fc:3e:84:80:61:d7:c6:f6:9d:e8:7e:f0:9b:e4: 81:b3:42:17:0e:07:cb:c7:bb:4b:97:20:da:48:7f:41:41:b8: 0b:6d:21:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUX6pCeTBRRpImpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNlY2FhYjktMTgwNy00NzgwLTgwZDAtNmE4ZGY5NTQw NjBlMB4XDTI1MTAyMDAyMDAwM1oXDTI1MTAyMzAyMDAwMFowLzEtMCsGA1UEAxMk NzVmNDMyMDgtNjFhNy00MWJlLWJlN2UtNGYyMjNlN2FlYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxgkTFbjAa0B/H0zhzktPEWBBx/ZV8ww6LNe s/gPDYEpO/ieRpKdOosD1WQ+Iyzixp4HRp+EfAzyuabobESABxi7LJkEfme8XZww ccGh53gB6F1mUKfmkb48XCbjiO8SE5WnkftgM4BHAzhIMVTJKjxbMynIdbZhRTe+ Ot247LmG8se+DiCipq/SmlfUHCVjfzJkjJwcyQCx7VDUSY3HvXXZIdB86QZm0IW7 9oarWkTSqQewwGNTkyQl7QaeEkJsd+T1DNIX8xy1EX/w6v+Xpk5KvFIDRYvigLxv KM2PKxhnPAVWcbg9bKaBNT0keQ7keNcXiEcPmDeDJC5QkFTe1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDV0PzzquYFlfis+7jhUt/G6LHKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zM2Vj YWFiOS0xODA3LTQ3ODAtODBkMC02YThkZjk1NDA2MGUvMzNlY2FhYjktMTgwNy00 NzgwLTgwZDAtNmE4ZGY5NTQwNjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzNlY2FhYjktMTgwNy00NzgwLTgw ZDAtNmE4ZGY5NTQwNjBlLzMzZWNhYWI5LTE4MDctNDc4MC04MGQwLTZhOGRmOTU0 MDYwZS5jcmwwHwYDVR0jBBgwFoAUe3GY99gfYA8V+3PyF6256e4zMnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zM2VjYWFiOS0xODA3LTQ3ODAtODBkMC02YThk Zjk1NDA2MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCI6ZMkMibPo/H4heXxsojj 9678M9Z3jR4SaTLCyFj1k/yvNewSlSIutSG4x8GQ8My+KlND0D7aXFWklVmX1oCX y6GnTs+y/99mYoa0cxlZXliZ6GAp5rq8fEeMYx6LK1n3u6K4lpU08CC1r2g97rE+ vs0VYfr1cqynOESl1DWC2ke8/yqA1MK9rxSG/oHLq1aUMABRcNwt9dWweX1Y0U3k d5r9hXyuN/AotuCXknMyoMwLEoitEZCpPi4x/rFHeMqjaJvQ1IcTrJqGdkx3z84f V4vceiqq6u7I8I8k/D6EgGHXxvad6H7wm+SBs0IXDgfLx7tLlyDaSH9BQbgLbSHa -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:27 2025 by rpki-client