$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft File: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft (raw, json) Hash identifier: t+TIAIfF7DFvW4Ii8zdJpgwrBqA8O/m8uttej9Me/1c= Subject key identifier: 3A:9F:ED:A2:23:C5:B5:D8:C1:45:FF:3B:47:28:9D:B3:F7:EF:84:91 Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F4328584DCFA1E8C4243FED9D8F46A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft Manifest number: 010D0C9F432858499C71461369702FC777490F0A Signing time: Tue 12 May 2026 17:00:03 +0000 Manifest this update: Tue 12 May 2026 17:00:03 +0000 Manifest next update: Thu 14 May 2026 17:00:00 +0000 Files and hashes: 1: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl (hash: bUsLfq720ns6UhTA9Vgssenp6xGOCZsnn8+MPwCQ8ws=) 2: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (hash: 7NB+4+qobNOaJs6hzFw3fyX2nkKQqAjvBs5PV44wMO8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:a1:e8:c4:24:3f:ed:9d:8f:46:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: May 12 17:00:03 2026 GMT Not After : May 14 17:00:00 2026 GMT Subject: CN=e42b4c17-8605-4665-92c7-08e78609cf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d4:84:ea:50:60:d8:a3:9a:35:ac:b5:6f:18: 2e:b7:1a:f7:12:76:37:4b:84:e0:15:84:e4:39:0b: 3c:b3:a4:fd:40:91:71:84:e6:66:68:9d:54:6a:fa: ae:49:11:97:ab:ed:d8:4e:73:89:07:81:0b:76:e9: c0:03:82:b9:f4:7c:83:ea:fb:c3:b4:66:61:1e:d2: 4b:29:fd:39:0a:99:e9:d8:b1:1b:e2:dd:47:19:a2: 32:5b:67:20:b5:dd:a1:d8:74:c2:3b:d3:17:59:22: b4:e6:4b:30:b9:78:1a:28:77:9e:d7:8b:8b:8c:19: 41:57:49:ef:25:70:6a:e7:61:4d:a8:e3:3a:4b:d1: 69:da:21:32:2e:27:35:8d:38:fb:02:e8:ed:1d:cb: 4c:63:ca:f6:09:c2:6c:b9:60:ed:fc:6d:e3:f9:c4: 37:fd:eb:b2:a1:08:7b:5e:59:8a:af:87:55:7c:57: 5a:3e:bc:dc:d6:d4:15:d3:ca:0d:1a:1f:3c:6e:53: c0:81:b4:67:e8:36:d3:f1:7a:c2:0e:fd:d9:51:d5: b2:46:d2:83:4d:66:03:aa:21:c3:7b:d8:19:eb:4d: 1a:8a:c3:64:59:96:69:6e:45:a4:3f:41:e5:2b:e6: b6:01:c3:4c:58:84:90:e0:6b:51:76:e5:3c:ba:63: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9F:ED:A2:23:C5:B5:D8:C1:45:FF:3B:47:28:9D:B3:F7:EF:84:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:48:c0:82:d2:92:a7:a6:f0:55:6d:b3:9f:c1:ef:2d:24:e8: a5:b7:5b:51:b5:e1:ab:78:99:65:49:5d:52:a7:87:9e:13:9f: ed:ca:6e:a3:6e:1d:d1:43:df:c1:1f:1c:07:92:2d:62:8e:26: 51:65:d9:53:a2:ae:05:8c:21:3a:36:7c:d8:4c:63:ec:52:e3: 57:9f:6d:7e:d0:2a:33:12:6b:cf:83:0e:f5:3e:e0:6f:48:d7: bb:4d:e0:58:3c:b7:31:22:08:65:9a:83:af:57:70:40:ab:ef: b4:e2:05:5f:28:07:b7:ac:f2:08:a3:7c:e9:9a:e9:98:5c:8e: 7b:4e:77:e0:f9:eb:27:3e:c6:a0:0b:95:a3:eb:b8:a1:9f:f1: a6:aa:a4:da:9b:34:6e:7a:e5:7a:ea:69:b9:42:28:ff:6e:57: 5c:22:77:d0:6c:34:f2:14:9c:ef:49:31:1e:e6:25:b3:22:67: 7e:5d:d2:eb:e3:e1:36:27:08:49:fe:ae:66:17:e9:e7:c4:da: 37:41:6c:74:5c:dc:18:b4:d4:62:9a:af:52:b8:53:ae:7b:76: e8:9d:50:9a:91:5b:51:fe:c7:19:e7:3f:13:cb:b5:ae:9d:c9: ca:23:5e:06:43:17:7d:30:b7:93:aa:46:c9:42:44:9e:fa:ee: 2c:49:b5:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3PoejEJD/tnY9GpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI2MDUxMjE3MDAwM1oXDTI2MDUxNDE3MDAwMFowLzEtMCsGA1UEAxMk ZTQyYjRjMTctODYwNS00NjY1LTkyYzctMDhlNzg2MDljZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNSE6lBg2KOaNay1bxgutxr3EnY3S4TgFYTk OQs8s6T9QJFxhOZmaJ1UavquSRGXq+3YTnOJB4ELdunAA4K59HyD6vvDtGZhHtJL Kf05Cpnp2LEb4t1HGaIyW2cgtd2h2HTCO9MXWSK05kswuXgaKHee14uLjBlBV0nv JXBq52FNqOM6S9Fp2iEyLic1jTj7AujtHctMY8r2CcJsuWDt/G3j+cQ3/euyoQh7 XlmKr4dVfFdaPrzc1tQV08oNGh88blPAgbRn6DbT8XrCDv3ZUdWyRtKDTWYDqiHD e9gZ600aisNkWZZpbkWkP0HlK+a2AcNMWISQ4GtRduU8umPZ6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDqf7aIjxbXYwUX/O0conbP374SRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvMzNkMWE2YjQtOTAwMy00 YzFkLTlhNDgtMDI3MGJlNGFmNTBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYSMCC0pKnpvBVbbOfwe8t JOilt1tRteGreJllSV1Sp4eeE5/tym6jbh3RQ9/BHxwHki1ijiZRZdlToq4FjCE6 NnzYTGPsUuNXn21+0CozEmvPgw71PuBvSNe7TeBYPLcxIghlmoOvV3BAq++04gVf KAe3rPIIo3zpmumYXI57Tnfg+esnPsagC5Wj67ihn/GmqqTamzRueuV66mm5Qij/ bldcInfQbDTyFJzvSTEe5iWzImd+XdLr4+E2JwhJ/q5mF+nnxNo3QWx0XNwYtNRi mq9SuFOue3bonVCakVtR/scZ5z8Ty7WuncnKI14GQxd9MLeTqkbJQkSe+u4sSbX4 -----END CERTIFICATE-----Generated at Wed May 13 06:17:19 2026 by rpki-client