$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft File: 33c78d60-34eb-4fed-8e25-925b95a30c8e.mft (raw, json) Hash identifier: kcB6Q+GfKafLI3kvp++tj7RZj84zMD/UzBWi0Jyxz9A= Subject key identifier: 2D:45:C6:2F:9F:A0:83:92:CE:49:65:95:A7:65:B1:C8:7B:9B:1C:B8 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584B95E2CD6570F0866636D48E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft Manifest number: 010D0C9F432858467B5CA7EDE1E555E58476421A Signing time: Mon 20 Oct 2025 15:00:03 +0000 Manifest this update: Mon 20 Oct 2025 15:00:03 +0000 Manifest next update: Thu 23 Oct 2025 15:00:00 +0000 Files and hashes: 1: 33c78d60-34eb-4fed-8e25-925b95a30c8e.crl (hash: teGlX20rZ1M9k5YfUDwwOGZBJ20fAG/TC9N/iN/RFJ0=) 2: 38442203-0a23-3c40-8941-6f49f8a5fb72.roa (hash: kLeynUFXt5ya8n/tPFJcqzU+fj1mI1l8edxVAyd/ePU=) 3: 6c7472b0-6d12-33be-a9f9-85e26dc54729.roa (hash: YBn3TQJXlYKLHy2G5EbwybgfzDamRNqKwjSbuFp/+hw=) 4: 9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa (hash: 5yyo2bpIbSTpsbVGcOWwYbVZAoJH8SpMuGipDgi/TSM=) 5: af56c26b-429b-351b-b947-c8b53bdd868c.roa (hash: Zhy86Dz4mwGRP6JhcjMzcHF82pLWNBuF/uMjyGXeXOo=) 6: b9fe9136-6711-31b6-a248-652d58c6a9e1.roa (hash: QQvPeEM59Odp/AW6nwg+l/eoK7ZNz4SwfSGTbvgi5M4=) 7: c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (hash: SdPpbso1KbznZPXdq509CXPx/7yj0MWIQfDNchW9dic=) 8: d97ee865-1f02-3f65-9877-a6064187b157.roa (hash: kBFFB60AIqppenIsNQSma6VFulG4yDbhcJRYXg4wNKQ=) 9: e604780b-4bf4-362f-9661-294a2090b35c.roa (hash: Mb3ya/Ocimxl3NY2LFH/MdbUtV9MiZN9hOhSev6J2FU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:e2:cd:65:70:f0:86:66:36:d4:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Oct 20 15:00:03 2025 GMT Not After : Oct 23 15:00:00 2025 GMT Subject: CN=14aaca42-78b7-4b5e-b2a6-ed4aa5d97f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:1f:2e:4e:a2:dc:ff:d7:ed:44:c8:92:b8: b7:b7:2d:ef:33:0e:bb:f6:b9:57:12:64:62:80:6d: fb:15:0c:5e:0d:fe:87:00:bd:41:cb:c8:13:35:cd: 28:5c:06:81:22:e7:8c:8d:ef:a2:d0:4e:17:6c:04: f6:a1:67:2e:2c:12:fd:d9:95:b7:cc:69:de:7f:e1: 71:18:3d:e2:16:c1:04:c9:bd:77:30:ff:a1:b5:fe: c7:fb:c8:76:06:c9:ba:88:bc:de:84:eb:0c:b1:02: 20:80:10:51:ef:23:2b:3a:4f:14:fa:3a:b4:0d:37: 91:de:48:18:a3:f7:79:95:02:9a:d0:95:98:e4:2d: 02:f2:46:89:91:de:83:c3:12:07:b1:05:d1:96:56: bd:2d:2d:af:40:62:e6:f0:37:57:d8:1d:cc:b1:41: 5b:23:5f:5b:28:6b:bd:1b:db:1c:f6:b3:78:f0:7d: e0:de:d2:f2:29:c1:18:53:07:19:d8:01:26:ec:8a: 99:3b:3a:c6:8c:6d:44:6c:41:2d:5b:58:3a:62:e2: 43:4a:df:a6:ce:93:a6:30:d8:0f:2a:8d:30:66:28: da:a6:8b:a0:e9:22:f9:d3:b3:7f:6d:c1:82:79:11: 58:43:04:6b:2d:6f:df:60:48:fa:76:ed:56:4b:c4: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:45:C6:2F:9F:A0:83:92:CE:49:65:95:A7:65:B1:C8:7B:9B:1C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:81:c7:cd:9a:a8:0a:df:72:c1:a4:bb:31:78:b9:a0:3a:ef: 00:3c:f9:80:fb:a5:8d:d2:90:84:34:92:88:9b:64:37:23:75: 9a:fe:09:1d:7c:bd:a9:d7:d9:c6:47:41:88:2b:4a:95:95:5b: 91:0e:b6:c8:1c:04:de:23:c2:28:11:38:ee:c1:6a:26:7d:7f: 61:ab:46:f9:89:3b:86:be:a1:b3:8f:04:7a:f6:70:20:85:a4: 63:fc:d5:61:6c:6e:99:6d:1b:58:6e:47:85:0d:8f:5f:ae:7d: a5:55:a6:17:79:53:63:03:6c:3d:a5:3b:5c:33:f6:74:ee:66: e0:fe:de:dd:a6:a4:d7:92:4a:88:1d:2c:3a:c9:13:38:a4:83: f8:cc:2f:2d:4a:b1:d9:9c:1d:9a:6a:ab:0f:23:47:28:0c:9d: ca:43:21:a9:29:bf:ef:8a:8f:fa:cb:5d:45:da:15:97:bb:7b: a2:d0:ab:70:fb:1f:de:75:54:72:29:3d:e2:7c:af:3d:c0:e0: a3:1e:66:e0:0f:a0:ad:79:32:97:97:e3:98:fc:4a:95:f6:61: f2:09:a1:23:2f:29:f0:00:c4:af:a4:e8:45:50:96:c4:d5:11: 25:7a:ad:f3:59:60:4f:81:d5:6c:0e:05:73:68:5c:0e:7b:0f: 6b:2c:71:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuV4s1lcPCGZjbUjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI1MTAyMDE1MDAwM1oXDTI1MTAyMzE1MDAwMFowLzEtMCsGA1UEAxMk MTRhYWNhNDItNzhiNy00YjVlLWIyYTYtZWQ0YWE1ZDk3ZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhsfLk6i3P/X7UTIkri3ty3vMw679rlXEmRi gG37FQxeDf6HAL1By8gTNc0oXAaBIueMje+i0E4XbAT2oWcuLBL92ZW3zGnef+Fx GD3iFsEEyb13MP+htf7H+8h2Bsm6iLzehOsMsQIggBBR7yMrOk8U+jq0DTeR3kgY o/d5lQKa0JWY5C0C8kaJkd6DwxIHsQXRlla9LS2vQGLm8DdX2B3MsUFbI19bKGu9 G9sc9rN48H3g3tLyKcEYUwcZ2AEm7IqZOzrGjG1EbEEtW1g6YuJDSt+mzpOmMNgP Ko0wZijapoug6SL507N/bcGCeRFYQwRrLW/fYEj6du1WS8TQTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC1Fxi+foIOSzkllladlsch7mxy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMzNjNzhkNjAtMzRlYi00 ZmVkLThlMjUtOTI1Yjk1YTMwYzhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtgcfNmqgK33LBpLsxeLmg Ou8APPmA+6WN0pCENJKIm2Q3I3Wa/gkdfL2p19nGR0GIK0qVlVuRDrbIHATeI8Io ETjuwWomfX9hq0b5iTuGvqGzjwR69nAghaRj/NVhbG6ZbRtYbkeFDY9frn2lVaYX eVNjA2w9pTtcM/Z07mbg/t7dpqTXkkqIHSw6yRM4pIP4zC8tSrHZnB2aaqsPI0co DJ3KQyGpKb/vio/6y11F2hWXu3ui0Ktw+x/edVRyKT3ifK89wOCjHmbgD6CteTKX l+OY/EqV9mHyCaEjLynwAMSvpOhFUJbE1REleq3zWWBPgdVsDgVzaFwOew9rLHFG -----END CERTIFICATE-----Generated at Tue Oct 21 15:22:59 2025 by rpki-client