$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft File: 33d8879e-24de-4dd1-bab7-7cc451009cc2.mft (raw, json) Hash identifier: MZoa3IqUuLZFXDIITpDJZeE2Eb1bUV5zUS5ljIov/Ms= Subject key identifier: 21:39:86:21:C9:45:3A:E7:2B:E9:41:BC:70:D3:B9:56:E0:39:63:87 Authority key identifier: 73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB Certificate issuer: /CN=33d8879e-24de-4dd1-bab7-7cc451009cc2 Certificate serial: 010D0C9F4328584AF0F0E9B806D8F4D541436100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft Manifest number: 010D0C9F4328584902E0AF2B30A574FF63D49FB6 Signing time: Fri 22 Aug 2025 13:00:08 +0000 Manifest this update: Fri 22 Aug 2025 13:00:08 +0000 Manifest next update: Sun 24 Aug 2025 13:00:00 +0000 Files and hashes: 1: 33d8879e-24de-4dd1-bab7-7cc451009cc2.crl (hash: q5GM5s/vghcCCieqFZT77H1bD+IsTzkK1upnP2YR6lY=) 2: 83c7a286-9c49-3189-98ae-ea46ce63e22b.roa (hash: jse84S1JfWO8vexChRYba31n1H5Im4crABpDS5Jm2c8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f0:e9:b8:06:d8:f4:d5:41:43:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d8879e-24de-4dd1-bab7-7cc451009cc2 Validity Not Before: Aug 22 13:00:08 2025 GMT Not After : Aug 24 13:00:00 2025 GMT Subject: CN=8210c8b1-e0ab-4794-a3ae-eb53f5eba9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f6:30:e9:ba:3a:a3:d9:08:c0:eb:6f:2f:53: 55:a8:c9:48:86:b7:c7:40:af:16:2a:22:72:6e:17: 9d:62:8a:6b:bb:6c:65:f5:2d:6d:d2:58:5b:ae:7b: 88:73:f1:2a:2e:7d:f7:89:40:24:f8:31:34:8a:73: 28:3f:42:60:89:da:06:83:c2:21:e5:e5:ea:a8:48: 92:7b:5b:66:0c:13:65:10:8d:ea:0e:9c:87:fe:3e: c2:09:03:35:86:38:01:68:19:78:e1:b5:3a:6d:3c: 78:8f:18:d3:c4:8d:33:1a:8b:8d:d0:18:d7:41:b1: 47:44:89:a0:ec:75:26:83:e2:d7:f3:e5:79:65:77: d8:a7:9f:8b:f2:ca:0a:c4:6d:ad:0b:e6:61:19:d0: 1b:19:8f:83:76:e2:a0:f5:0c:c2:82:c2:36:af:da: 9d:33:9a:82:20:f1:d8:34:d2:2e:47:e2:f8:01:b2: b1:df:7f:7a:9a:59:fc:67:fe:da:58:7b:a0:24:0f: f6:3e:82:ed:73:2d:c5:ed:45:a3:25:f7:41:d7:71: f5:53:e4:4b:86:76:65:af:41:97:e4:25:0f:a4:95: b0:f9:6d:06:00:53:61:49:8a:a3:1c:69:0c:e2:11: dc:5f:6b:ad:8b:61:58:73:10:59:45:ee:e9:59:6e: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:86:21:C9:45:3A:E7:2B:E9:41:BC:70:D3:B9:56:E0:39:63:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.crl X509v3 Authority Key Identifier: keyid:73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:13:64:fd:81:6a:26:c9:80:c4:d3:73:62:cb:cd:1b:04:b4: af:55:3d:88:4d:01:26:10:0b:0c:58:76:5a:22:8a:67:f0:4c: e0:73:68:fc:b9:56:b1:39:b6:f8:f2:65:ed:18:dd:6e:18:6a: 43:26:10:43:61:ad:a5:12:6d:7c:13:91:2b:40:88:6c:40:d0: 21:90:87:65:49:7a:e8:dc:d4:e9:b5:31:b3:98:c2:a1:91:cb: c7:3e:2a:50:d2:2f:f4:0e:68:d7:40:87:55:7f:95:b8:08:d9: d1:6d:08:49:6b:fe:3b:a8:4b:dd:fe:09:f4:43:c8:21:16:87: 28:7f:28:99:a8:0f:ce:f2:76:e4:67:8d:e3:90:96:ef:36:7d: e7:ff:b8:09:d1:02:59:27:15:0a:d3:d6:da:ba:18:e5:96:0e: 81:a7:c6:51:d2:0b:da:5a:85:8c:0d:ce:ea:4b:fd:dc:e5:1b: 89:3f:b4:c8:b6:39:c8:a8:e4:19:3a:61:65:60:4e:a9:68:58: 22:66:08:0d:9d:10:eb:56:cc:b4:b8:b9:ff:d1:7e:b3:e8:41: aa:5e:60:9c:dc:62:96:f4:0e:c3:af:89:c9:c3:62:b4:cf:94: cc:b5:0b:49:a5:c3:85:e0:49:f1:ef:4c:e4:79:43:99:01:d5: c2:ae:8c:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErw8Om4Btj01UFDYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkODg3OWUtMjRkZS00ZGQxLWJhYjctN2NjNDUxMDA5 Y2MyMB4XDTI1MDgyMjEzMDAwOFoXDTI1MDgyNDEzMDAwMFowLzEtMCsGA1UEAxMk ODIxMGM4YjEtZTBhYi00Nzk0LWEzYWUtZWI1M2Y1ZWJhOWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PYw6bo6o9kIwOtvL1NVqMlIhrfHQK8WKiJy bhedYopru2xl9S1t0lhbrnuIc/EqLn33iUAk+DE0inMoP0JgidoGg8Ih5eXqqEiS e1tmDBNlEI3qDpyH/j7CCQM1hjgBaBl44bU6bTx4jxjTxI0zGouN0BjXQbFHRImg 7HUmg+LX8+V5ZXfYp5+L8soKxG2tC+ZhGdAbGY+DduKg9QzCgsI2r9qdM5qCIPHY NNIuR+L4AbKx3396mln8Z/7aWHugJA/2PoLtcy3F7UWjJfdB13H1U+RLhnZlr0GX 5CUPpJWw+W0GAFNhSYqjHGkM4hHcX2uti2FYcxBZRe7pWW5QkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCE5hiHJRTrnK+lBvHDTuVbgOWOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Q4 ODc5ZS0yNGRlLTRkZDEtYmFiNy03Y2M0NTEwMDljYzIvMzNkODg3OWUtMjRkZS00 ZGQxLWJhYjctN2NjNDUxMDA5Y2MyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkODg3OWUtMjRkZS00ZGQxLWJh YjctN2NjNDUxMDA5Y2MyLzMzZDg4NzllLTI0ZGUtNGRkMS1iYWI3LTdjYzQ1MTAw OWNjMi5jcmwwHwYDVR0jBBgwFoAUc7pflcFl7vs1foTVc2Xa9Qis7qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2Q4ODc5ZS0yNGRlLTRkZDEtYmFiNy03Y2M0 NTEwMDljYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzE2T9gWomyYDE03Niy80b BLSvVT2ITQEmEAsMWHZaIopn8Ezgc2j8uVaxObb48mXtGN1uGGpDJhBDYa2lEm18 E5ErQIhsQNAhkIdlSXro3NTptTGzmMKhkcvHPipQ0i/0DmjXQIdVf5W4CNnRbQhJ a/47qEvd/gn0Q8ghFocofyiZqA/O8nbkZ43jkJbvNn3n/7gJ0QJZJxUK09bauhjl lg6Bp8ZR0gvaWoWMDc7qS/3c5RuJP7TItjnIqOQZOmFlYE6paFgiZggNnRDrVsy0 uLn/0X6z6EGqXmCc3GKW9A7Dr4nJw2K0z5TMtQtJpcOF4Enx70zkeUOZAdXCrozk -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:38 2025 by rpki-client