$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft File: 60af319e-0c74-40e2-b93c-daa51c45791e.mft (raw, json) Hash identifier: jfzy8UR+C+bUhz5KF2QrHM/LCz9R8x81tsD9/vKKPeE= Subject key identifier: 82:44:14:41:F5:CD:75:72:2A:C0:EF:E0:1B:4F:6D:73:DA:4F:9C:32 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F4328584B96958715F96B939CBC6C57C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft Manifest number: 010D0C9F43285844FAD1DEDA63DD5B41DF68F800 Signing time: Mon 20 Oct 2025 21:00:08 +0000 Manifest this update: Mon 20 Oct 2025 21:00:08 +0000 Manifest next update: Thu 23 Oct 2025 21:00:00 +0000 Files and hashes: 1: 4df6fcae-809c-334c-948c-a1db49d80779.roa (hash: 5HgqkoNINmYhDbvJKtfIdYQZLUTB3v24eAzB2azo00o=) 2: 5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa (hash: 0sWaWRHwTPo7Mh3d+TSpUmXj9JRbmX0uxLpLXO0Nssc=) 3: 60af319e-0c74-40e2-b93c-daa51c45791e.crl (hash: btuo5UjdRSPm2mjo0ikB7gvXTymGnL5NPbowGDp8n3U=) 4: 7241d360-8b98-3868-8cc3-308a2527d3e0.roa (hash: 7XaYCFfrH6O1tX8Aaw61JB408+yr1QMx1tERW6mIJfE=) 5: 81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa (hash: goF06SuQCrJ2bA2bb/A3K6cx+bgF6ZJf5LqIbDkfzmo=) 6: b9adabc2-fc08-39d4-aaca-584aaef77c91.roa (hash: SeZve11ZGOjhojXMca+VWRmFgx+pgt4Pc1oMrVN4yEo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:95:87:15:f9:6b:93:9c:bc:6c:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Oct 20 21:00:08 2025 GMT Not After : Oct 23 21:00:00 2025 GMT Subject: CN=8aea28d1-c25c-4fbf-8e6e-5ccc1cb889ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:21:a5:9b:33:b1:90:7d:1e:d8:27:50:c8: cc:69:e7:a8:46:0e:f0:c0:eb:17:7b:24:f6:7f:65: c1:c2:2e:23:a5:8c:82:2e:da:a7:31:68:da:4d:57: 02:a6:6e:0f:ec:80:98:9c:fc:fc:16:91:64:62:c8: d8:16:23:7e:61:9d:f1:e6:b2:78:ba:bf:eb:75:a8: c0:45:5d:a4:bd:dd:41:51:49:7d:8e:16:d0:47:f2: 8c:fb:c9:6c:70:f2:0f:ba:eb:d8:10:c9:42:ad:fc: ae:9d:a8:63:8d:b7:78:b9:52:93:99:10:e8:49:ba: d6:cb:c4:b8:0c:db:46:d2:43:a1:62:8a:bd:68:70: 5d:b0:f4:2c:b5:d1:dd:ed:29:39:58:9f:49:67:70: 24:ca:00:69:90:ea:ec:a9:99:0e:88:ac:bd:d8:9f: 73:cd:69:6b:ec:69:5d:f8:35:b3:9c:f4:b1:a3:ab: 46:84:97:11:d2:ec:0f:4f:c2:09:cf:d1:a0:5f:fd: 57:92:be:df:6d:79:5f:0f:ec:2b:34:29:a4:5e:3b: 63:66:9f:1a:23:49:b7:a2:e3:fe:4d:a9:de:62:e3: b1:b2:c9:8e:b4:e7:ab:38:8a:3b:14:0a:6d:51:77: 5f:67:79:34:50:70:aa:0d:1e:fc:25:ee:b9:7e:40: 2c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:44:14:41:F5:CD:75:72:2A:C0:EF:E0:1B:4F:6D:73:DA:4F:9C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3d:d1:62:56:7a:52:31:92:72:aa:18:3f:24:d8:8b:ac:f6: eb:13:0a:58:ae:7a:d3:d9:3a:e7:d7:c4:0e:48:01:ec:c8:ba: 61:fc:f5:81:a4:65:b8:e9:0d:24:bc:0b:51:3f:83:ea:32:2d: a3:f0:76:57:06:d0:7b:c2:01:d4:4a:e1:0d:f4:6a:8d:09:55: e0:11:0d:bd:d5:7b:91:47:f8:83:34:13:d8:37:38:74:53:e2: 58:99:81:98:3b:bd:d0:2f:7c:2f:7f:3a:de:34:b5:d6:0b:e7: 66:62:6d:97:6d:a9:45:d6:e1:b7:66:d9:90:7e:13:5c:ab:01: df:5e:07:85:4a:f3:e2:48:89:e5:19:5b:ec:62:c1:13:03:3b: b4:1a:e2:db:ed:1e:11:db:bb:62:51:4a:3f:ad:42:78:62:37: c5:eb:81:a8:eb:1d:7a:bc:22:39:bc:fb:d3:95:e1:e1:12:78: 7c:23:52:9c:59:89:20:50:d3:01:1c:b6:31:10:06:d2:c8:da: 3c:6a:d4:43:b6:7d:29:75:86:51:80:7e:21:12:ab:c1:18:dd: 28:d6:23:46:97:da:fe:90:68:d0:ed:93:b6:d4:14:2b:51:3d: ba:7d:df:0e:2f:a5:4f:0f:c6:7e:83:95:ce:c0:6b:9b:0d:56: db:10:3e:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuWlYcV+WuTnLxsV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI1MTAyMDIxMDAwOFoXDTI1MTAyMzIxMDAwMFowLzEtMCsGA1UEAxMk OGFlYTI4ZDEtYzI1Yy00ZmJmLThlNmUtNWNjYzFjYjg4OWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIkhpZszsZB9HtgnUMjMaeeoRg7wwOsXeyT2 f2XBwi4jpYyCLtqnMWjaTVcCpm4P7ICYnPz8FpFkYsjYFiN+YZ3x5rJ4ur/rdajA RV2kvd1BUUl9jhbQR/KM+8lscPIPuuvYEMlCrfyunahjjbd4uVKTmRDoSbrWy8S4 DNtG0kOhYoq9aHBdsPQstdHd7Sk5WJ9JZ3AkygBpkOrsqZkOiKy92J9zzWlr7Gld +DWznPSxo6tGhJcR0uwPT8IJz9GgX/1Xkr7fbXlfD+wrNCmkXjtjZp8aI0m3ouP+ TaneYuOxssmOtOerOIo7FAptUXdfZ3k0UHCqDR78Je65fkAspQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIJEFEH1zXVyKsDv4BtPbXPaT5wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNjBhZjMxOWUtMGM3NC00 MGUyLWI5M2MtZGFhNTFjNDU3OTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuPdFiVnpSMZJyqhg/JNiL rPbrEwpYrnrT2Trn18QOSAHsyLph/PWBpGW46Q0kvAtRP4PqMi2j8HZXBtB7wgHU SuEN9GqNCVXgEQ291XuRR/iDNBPYNzh0U+JYmYGYO73QL3wvfzreNLXWC+dmYm2X balF1uG3ZtmQfhNcqwHfXgeFSvPiSInlGVvsYsETAzu0GuLb7R4R27tiUUo/rUJ4 YjfF64Go6x16vCI5vPvTleHhEnh8I1KcWYkgUNMBHLYxEAbSyNo8atRDtn0pdYZR gH4hEqvBGN0o1iNGl9r+kGjQ7ZO21BQrUT26fd8OL6VPD8Z+g5XOwGubDVbbED4T -----END CERTIFICATE-----Generated at Tue Oct 21 15:18:59 2025 by rpki-client