$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft File: 60af319e-0c74-40e2-b93c-daa51c45791e.mft (raw, json) Hash identifier: JpeQ0aLNQfNJDtul4ABcNd+DAanePgDJGYqz85N/B4g= Subject key identifier: F1:BD:83:59:AF:75:30:D4:38:F9:3B:88:EA:73:67:5B:BC:FA:24:89 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F4328584D4A18396E5A78C57763150E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft Manifest number: 010D0C9F43285844FAD1DEDA63DD5B41DF68F8A4 Signing time: Wed 25 Mar 2026 21:00:09 +0000 Manifest this update: Wed 25 Mar 2026 21:00:09 +0000 Manifest next update: Sat 28 Mar 2026 21:00:00 +0000 Files and hashes: 1: 4df6fcae-809c-334c-948c-a1db49d80779.roa (hash: WNPz7j+Gib7Oo+zTDO6AdEceLvjOqXJETUNbTtTL94s=) 2: 5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa (hash: ZkiT+uvgCoNlq5BuDlC3WWHsBqpLSg34HX7ecSU5nVU=) 3: 60af319e-0c74-40e2-b93c-daa51c45791e.crl (hash: rMx1OS5GkSV8KZlrjX09WobVYN364hxsiJaYuFncb4k=) 4: 7241d360-8b98-3868-8cc3-308a2527d3e0.roa (hash: NOYxgXEziIHRrjbbwZDI/qY9wdtpBPJPbQS215lGq/8=) 5: 81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa (hash: DgiTP4HFiGdVHKT2Wit+/MV/bNJFWTqlfqQCubf9K4E=) 6: b9adabc2-fc08-39d4-aaca-584aaef77c91.roa (hash: sOWjfqhkebu4w/nH1JnGlovajFbTdgZ/0Ta5dckyQTU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:18:39:6e:5a:78:c5:77:63:15:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Mar 25 21:00:09 2026 GMT Not After : Mar 28 21:00:00 2026 GMT Subject: CN=cead0f28-67ae-4aa0-80ce-d12c8912808f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:8b:18:22:6e:5e:23:b0:56:e6:2c:50:ae: 6b:98:82:60:26:49:db:54:7e:95:72:c0:6d:da:f9: fc:0b:4c:aa:e4:6c:99:b6:41:6c:7a:53:13:26:a1: d6:89:71:cd:96:8c:c1:91:b4:d8:c3:cf:5c:2d:4c: 31:8d:c0:99:de:6a:dd:f5:67:81:63:df:67:5f:30: 32:ed:1b:c0:c5:e6:01:d6:e3:09:4c:95:a3:04:c2: 4f:35:3e:51:95:a9:40:04:1d:2e:7b:a4:37:52:aa: 68:31:55:fd:85:ae:51:fc:c5:67:20:23:de:98:33: 6b:35:99:52:30:d9:c0:b3:0a:99:46:33:1e:5b:23: 2c:be:f1:b7:10:dc:ac:7f:2a:36:8a:c8:e0:4e:57: 6f:74:4f:49:f3:c4:4f:87:c7:a9:ec:16:ba:47:e5: 8a:60:43:1c:0a:2e:89:13:17:8b:f6:ba:14:9c:ba: 92:10:e2:ee:99:d3:72:23:53:dd:32:5d:c5:48:0c: d8:87:5b:05:b2:9c:12:11:bf:26:b1:db:e4:19:2d: 46:5d:4d:f1:66:3a:2b:77:ef:02:d7:1f:f8:1d:35: 84:7d:68:4a:97:fe:10:ea:32:50:cc:64:cc:28:79: c4:3d:0a:9f:17:b7:2b:b4:53:e6:51:76:e6:b7:9c: 6f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BD:83:59:AF:75:30:D4:38:F9:3B:88:EA:73:67:5B:BC:FA:24:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:d7:27:c9:9d:6f:d9:88:6d:70:28:61:b7:61:85:cb:5f:b7: a9:03:83:db:12:e5:5d:18:bb:61:35:c6:d7:a7:24:c1:cf:7c: 4c:8b:c7:7e:84:69:b6:61:56:14:79:75:95:fb:0d:e5:68:a4: 34:2b:7e:b5:c0:43:72:ed:27:da:3f:ee:83:21:35:9d:54:de: d5:a9:d0:0e:f1:b7:62:dc:f3:ac:b6:8d:4f:05:85:de:12:3d: 1b:b4:3a:b0:d9:da:f4:63:41:a2:6c:96:83:26:df:a1:fa:94: 1d:e9:2f:f7:3b:d5:75:11:0f:62:62:37:4c:ab:e9:29:6f:11: c0:b2:7d:2a:0b:ce:4a:c0:9a:fe:a3:74:c4:ba:2a:c7:ce:b9: 40:dc:dd:3b:c7:76:07:e8:4b:c2:7a:8e:83:64:f4:35:3e:62: b8:14:d4:23:82:df:4e:95:d1:61:e3:b5:55:24:d3:e0:e0:b5: bb:f4:11:29:97:52:d0:72:ab:c6:a0:08:93:87:3c:ce:21:90: 50:cd:93:92:b8:c9:25:7d:e0:44:25:05:5e:10:71:08:2b:37: 1b:0b:80:72:7c:a0:0f:1e:ed:91:8c:53:ea:f9:b5:2c:39:d7: 1b:66:c0:15:5a:c5:55:45:93:4e:59:e7:c5:a1:c8:ed:b6:11: 56:5c:7b:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KGDluWnjFd2MVDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI2MDMyNTIxMDAwOVoXDTI2MDMyODIxMDAwMFowLzEtMCsGA1UEAxMk Y2VhZDBmMjgtNjdhZS00YWEwLTgwY2UtZDEyYzg5MTI4MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJSLGCJuXiOwVuYsUK5rmIJgJknbVH6VcsBt 2vn8C0yq5GyZtkFselMTJqHWiXHNlozBkbTYw89cLUwxjcCZ3mrd9WeBY99nXzAy 7RvAxeYB1uMJTJWjBMJPNT5RlalABB0ue6Q3UqpoMVX9ha5R/MVnICPemDNrNZlS MNnAswqZRjMeWyMsvvG3ENysfyo2isjgTldvdE9J88RPh8ep7Ba6R+WKYEMcCi6J ExeL9roUnLqSEOLumdNyI1PdMl3FSAzYh1sFspwSEb8msdvkGS1GXU3xZjord+8C 1x/4HTWEfWhKl/4Q6jJQzGTMKHnEPQqfF7crtFPmUXbmt5xvnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPG9g1mvdTDUOPk7iOpzZ1u8+iSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNjBhZjMxOWUtMGM3NC00 MGUyLWI5M2MtZGFhNTFjNDU3OTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCg1yfJnW/ZiG1wKGG3YYXL X7epA4PbEuVdGLthNcbXpyTBz3xMi8d+hGm2YVYUeXWV+w3laKQ0K361wENy7Sfa P+6DITWdVN7VqdAO8bdi3POsto1PBYXeEj0btDqw2dr0Y0GibJaDJt+h+pQd6S/3 O9V1EQ9iYjdMq+kpbxHAsn0qC85KwJr+o3TEuirHzrlA3N07x3YH6EvCeo6DZPQ1 PmK4FNQjgt9OldFh47VVJNPg4LW79BEpl1LQcqvGoAiThzzOIZBQzZOSuMklfeBE JQVeEHEIKzcbC4ByfKAPHu2RjFPq+bUsOdcbZsAVWsVVRZNOWefFocjtthFWXHvO -----END CERTIFICATE-----Generated at Thu Mar 26 00:13:02 2026 by rpki-client