$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft File: 33ecaab9-1807-4780-80d0-6a8df954060e.mft (raw, json) Hash identifier: MzI4x+zuUMmdT7/dvdJ6cGperpu+d/uQN/DnKunSY7w= Subject key identifier: 49:11:C5:FE:A9:3A:12:55:1E:E6:42:93:1A:04:76:07:71:2D:D9:3F Authority key identifier: 7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76 Certificate issuer: /CN=33ecaab9-1807-4780-80d0-6a8df954060e Certificate serial: 010D0C9F4328584DEC98BFD0457E62145D0F0720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft Manifest number: 010D0C9F43285842CFE88180315B383C505FD73B Signing time: Sat 23 May 2026 02:00:03 +0000 Manifest this update: Sat 23 May 2026 02:00:03 +0000 Manifest next update: Mon 25 May 2026 02:00:00 +0000 Files and hashes: 1: 33ecaab9-1807-4780-80d0-6a8df954060e.crl (hash: XHvd/OGBFQMGg4f4SRhKGXpxXfPapMsNVXSVB/Gb+CU=) 2: 589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer (hash: z+49tVeAqmLLSnz03GJ1zFjOh0Nm+RnjqITedqrGpgk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:98:bf:d0:45:7e:62:14:5d:0f:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ecaab9-1807-4780-80d0-6a8df954060e Validity Not Before: May 23 02:00:03 2026 GMT Not After : May 25 02:00:00 2026 GMT Subject: CN=a1ab6310-e758-403b-ad0b-f42eb51e9245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:54:7f:9c:b1:e6:eb:2d:33:55:a5:b0:47: 91:d1:f6:10:4a:b0:1f:ac:74:63:9b:ef:aa:c2:5f: b4:8e:1d:0e:e4:e5:cb:28:bc:61:7c:1a:d1:1b:3d: 27:52:42:13:a0:be:10:4d:84:1d:8d:50:10:e1:54: ad:54:97:dd:76:f3:8c:61:6c:d8:bf:ee:65:22:fb: 78:fb:d5:ba:c2:16:01:af:98:54:9b:7a:75:ee:2f: 81:6b:6e:41:15:13:37:cc:d9:7d:84:2d:3d:72:7d: c2:c5:2c:bf:2b:6c:fe:d4:60:e5:4c:e1:85:be:e4: 6a:a4:ac:40:85:52:3b:a5:e3:5d:ac:fa:c3:08:a7: 6a:48:b5:a6:a6:9e:7d:71:85:2d:89:5a:ab:ed:26: 0b:93:19:48:3a:cf:25:de:bc:18:72:53:05:df:8f: 39:22:7c:61:46:05:b7:67:a5:f5:c9:3e:18:b3:e4: 1b:bc:ef:7d:c3:d2:a6:6b:5b:df:34:e8:c8:17:9b: ec:7e:21:82:5c:3d:87:39:87:7f:15:94:35:3f:a8: 80:ab:2c:d0:b0:36:cf:e0:51:44:88:20:26:4b:b4: eb:14:c1:c6:09:d5:bc:a6:d1:69:88:33:7b:41:64: e3:36:88:25:c0:28:0a:05:c1:21:a6:19:61:b4:b3: 05:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:11:C5:FE:A9:3A:12:55:1E:E6:42:93:1A:04:76:07:71:2D:D9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl X509v3 Authority Key Identifier: keyid:7B:71:98:F7:D8:1F:60:0F:15:FB:73:F2:17:AD:B9:E9:EE:33:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ab:83:f8:5f:41:3e:57:66:cc:cb:b7:9d:a8:32:8d:ca:b6: 59:d9:38:e9:9a:22:10:f0:68:d4:83:94:ec:42:00:01:ca:6d: 77:12:b3:d4:02:bf:27:55:e0:59:ba:9e:a4:6d:2d:e4:40:36: db:14:fb:cb:cb:1d:84:d3:a9:17:37:79:73:34:dd:af:9e:79: d1:76:09:08:63:e1:a3:10:ad:1b:2e:8b:60:84:db:26:97:9a: f7:bd:73:f2:d8:e6:21:bf:c4:a0:31:27:91:bd:61:87:31:a0: bb:72:01:6d:df:87:50:16:39:5f:19:ef:81:ac:a9:9c:7b:db: 51:05:34:22:0d:85:6e:b1:66:9d:80:e8:4b:a1:1e:b3:4f:6c: c0:a3:fe:1c:70:40:21:cc:71:47:1a:c6:44:51:d9:32:4d:71: 30:03:de:25:77:e8:3c:fc:1d:c2:00:d1:4c:55:85:f3:0d:e2: 22:f1:a4:f1:0f:cc:a3:cc:c1:6d:1e:a4:4e:7a:59:93:7d:ce: 1d:b0:95:c3:40:6d:70:a4:cd:fd:99:45:56:b1:c2:8c:57:8a: 1d:db:d0:55:22:95:c9:42:43:b5:45:61:15:56:d0:cf:7b:ac: 45:98:ee:33:76:52:23:7c:42:3c:07:b7:e0:e0:c0:bc:1a:2a: 8c:99:f6:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3smL/QRX5iFF0PByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNlY2FhYjktMTgwNy00NzgwLTgwZDAtNmE4ZGY5NTQw NjBlMB4XDTI2MDUyMzAyMDAwM1oXDTI2MDUyNTAyMDAwMFowLzEtMCsGA1UEAxMk YTFhYjYzMTAtZTc1OC00MDNiLWFkMGItZjQyZWI1MWU5MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg5Uf5yx5ustM1WlsEeR0fYQSrAfrHRjm++q wl+0jh0O5OXLKLxhfBrRGz0nUkIToL4QTYQdjVAQ4VStVJfddvOMYWzYv+5lIvt4 +9W6whYBr5hUm3p17i+Ba25BFRM3zNl9hC09cn3CxSy/K2z+1GDlTOGFvuRqpKxA hVI7peNdrPrDCKdqSLWmpp59cYUtiVqr7SYLkxlIOs8l3rwYclMF3485InxhRgW3 Z6X1yT4Ys+QbvO99w9Kma1vfNOjIF5vsfiGCXD2HOYd/FZQ1P6iAqyzQsDbP4FFE iCAmS7TrFMHGCdW8ptFpiDN7QWTjNoglwCgKBcEhphlhtLMFbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEkRxf6pOhJVHuZCkxoEdgdxLdk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zM2Vj YWFiOS0xODA3LTQ3ODAtODBkMC02YThkZjk1NDA2MGUvMzNlY2FhYjktMTgwNy00 NzgwLTgwZDAtNmE4ZGY5NTQwNjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzNlY2FhYjktMTgwNy00NzgwLTgw ZDAtNmE4ZGY5NTQwNjBlLzMzZWNhYWI5LTE4MDctNDc4MC04MGQwLTZhOGRmOTU0 MDYwZS5jcmwwHwYDVR0jBBgwFoAUe3GY99gfYA8V+3PyF6256e4zMnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zM2VjYWFiOS0xODA3LTQ3ODAtODBkMC02YThk Zjk1NDA2MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRq4P4X0E+V2bMy7edqDKN yrZZ2TjpmiIQ8GjUg5TsQgABym13ErPUAr8nVeBZup6kbS3kQDbbFPvLyx2E06kX N3lzNN2vnnnRdgkIY+GjEK0bLotghNsml5r3vXPy2OYhv8SgMSeRvWGHMaC7cgFt 34dQFjlfGe+BrKmce9tRBTQiDYVusWadgOhLoR6zT2zAo/4ccEAhzHFHGsZEUdky TXEwA94ld+g8/B3CANFMVYXzDeIi8aTxD8yjzMFtHqROelmTfc4dsJXDQG1wpM39 mUVWscKMV4od29BVIpXJQkO1RWEVVtDPe6xFmO4zdlIjfEI8B7fg4MC8GiqMmfZE -----END CERTIFICATE-----Generated at Sat May 23 15:17:26 2026 by rpki-client