$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.mft File: 60d1709e-04fe-45bd-bf22-78ea6043afe1.mft (raw, json) Hash identifier: y22KT16LwMzVG/9QWD3i6E5j0qafBmItSLq2UyEIreo= Subject key identifier: 35:88:4E:17:14:A4:7A:A0:06:7A:72:2B:EB:BF:C5:29:13:41:79:B3 Authority key identifier: 23:AF:2B:CC:CF:5C:DA:AB:C5:3C:17:1E:14:BC:49:8C:80:44:3F:20 Certificate issuer: /CN=60d1709e-04fe-45bd-bf22-78ea6043afe1 Certificate serial: 010D0C9F4328584B95A73C86E32B70F322AAC700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.mft Manifest number: 010D0C9F4328584B822461DECB1147AFAE4F0788 Signing time: Mon 20 Oct 2025 13:00:03 +0000 Manifest this update: Mon 20 Oct 2025 13:00:03 +0000 Manifest next update: Wed 22 Oct 2025 13:00:00 +0000 Files and hashes: 1: 60d1709e-04fe-45bd-bf22-78ea6043afe1.crl (hash: kFNg9SpbVo/yZLBej9Uc9ze4ZMbXf2mNa30rjTCU13g=) 2: f48e2900-2fea-3065-b439-004e04a6f200.roa (hash: WBvwvpYAMw9df0W0w0j9sKtWq6Lq8mJNtDi8q51u6PM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:3c:86:e3:2b:70:f3:22:aa:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60d1709e-04fe-45bd-bf22-78ea6043afe1 Validity Not Before: Oct 20 13:00:03 2025 GMT Not After : Oct 22 13:00:00 2025 GMT Subject: CN=599735c2-6dd9-40a9-84f9-5e992c4b3af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:a4:56:a1:af:c4:e5:1b:4e:04:6a:25:a7: 08:a5:fb:f1:5f:f3:32:c5:ea:d3:7d:44:0b:21:e1: 4d:cf:48:85:a3:05:f1:97:be:3d:b2:e4:02:1a:48: cc:1c:c5:d5:3f:51:b0:e3:43:48:2e:e6:94:fe:9f: c7:1f:95:19:a3:3a:ad:59:7a:4d:d6:26:85:31:6e: 66:99:21:1e:80:b0:a8:9a:c5:b6:3c:df:4e:fd:98: 5b:76:27:e2:a0:42:2e:4f:62:7b:1f:e3:f9:16:55: ce:02:6d:8a:e3:33:89:20:59:22:f6:a7:0d:41:0e: 32:b8:2f:a3:c7:46:67:94:98:31:d3:ed:35:8c:4b: 7e:b8:b1:f5:a0:4f:4a:bc:9b:3b:a4:19:30:d7:36: 4f:0c:dd:8c:19:f9:42:e3:3d:d1:1f:c2:28:0b:59: 84:f9:0a:09:ab:04:1f:5b:4d:30:bb:40:6f:d7:5d: ce:5a:a0:0e:d9:52:8a:92:db:cf:0c:29:d5:cd:79: ed:fd:4e:af:94:75:c5:1d:70:04:b5:92:f0:22:a9: 07:8d:5b:4e:6b:dc:23:89:f8:b5:52:8f:1a:21:46: bd:a2:ac:71:c6:a7:af:71:3e:c5:0e:66:77:87:4b: 19:dd:99:c8:5a:0e:32:db:8d:e0:e9:61:8f:d5:80: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:88:4E:17:14:A4:7A:A0:06:7A:72:2B:EB:BF:C5:29:13:41:79:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1/60d1709e-04fe-45bd-bf22-78ea6043afe1.crl X509v3 Authority Key Identifier: keyid:23:AF:2B:CC:CF:5C:DA:AB:C5:3C:17:1E:14:BC:49:8C:80:44:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60d1709e-04fe-45bd-bf22-78ea6043afe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c4:24:c0:d4:9a:9c:9e:43:22:1a:5b:ac:25:08:c0:1b:df: e0:34:be:59:51:2a:31:af:38:ea:5e:79:d8:02:94:41:32:44: 3c:31:f0:d0:06:55:82:03:49:0a:27:39:7c:4f:f2:d5:e0:9e: bd:70:fd:0f:a4:96:23:50:ca:29:c2:17:57:8e:e0:ab:bc:b1: 82:2f:20:8f:48:ac:54:2d:8b:66:4f:ce:31:e8:81:e6:23:fb: 60:e7:d6:00:be:4c:c2:ed:a9:59:09:33:62:7c:de:60:c1:ec: 06:cd:b8:08:fe:75:9a:7e:e8:83:0a:8d:82:71:61:1c:3b:41: 5f:76:45:b3:fb:f5:ab:d5:ab:ef:e7:dd:6b:5f:82:45:c1:d0: 75:03:4a:66:cb:ce:14:15:6c:99:a5:c0:ec:61:00:e4:51:5c: a8:1b:b2:17:c8:dc:57:85:f2:1f:74:cd:be:63:53:21:04:9a: be:4a:f0:a1:1e:c5:85:21:78:49:12:8e:17:f2:ba:59:67:11: f6:dc:0a:35:1e:c2:8d:48:63:c8:c4:bb:79:50:4c:53:dc:b2: 46:35:df:e6:6a:12:b5:0a:30:1b:95:27:9f:3b:03:82:5f:4b: b7:da:3b:52:e1:be:27:1f:df:51:af:80:61:e8:eb:80:ac:54: a8:d0:2e:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuVpzyG4ytw8yKqxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBkMTcwOWUtMDRmZS00NWJkLWJmMjItNzhlYTYwNDNh ZmUxMB4XDTI1MTAyMDEzMDAwM1oXDTI1MTAyMjEzMDAwMFowLzEtMCsGA1UEAxMk NTk5NzM1YzItNmRkOS00MGE5LTg0ZjktNWU5OTJjNGIzYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTakVqGvxOUbTgRqJacIpfvxX/MyxerTfUQL IeFNz0iFowXxl749suQCGkjMHMXVP1Gw40NILuaU/p/HH5UZozqtWXpN1iaFMW5m mSEegLComsW2PN9O/ZhbdifioEIuT2J7H+P5FlXOAm2K4zOJIFki9qcNQQ4yuC+j x0ZnlJgx0+01jEt+uLH1oE9KvJs7pBkw1zZPDN2MGflC4z3RH8IoC1mE+QoJqwQf W00wu0Bv113OWqAO2VKKktvPDCnVzXnt/U6vlHXFHXAEtZLwIqkHjVtOa9wjifi1 Uo8aIUa9oqxxxqevcT7FDmZ3h0sZ3ZnIWg4y243g6WGP1YCL/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDWIThcUpHqgBnpyK+u/xSkTQXmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGQx NzA5ZS0wNGZlLTQ1YmQtYmYyMi03OGVhNjA0M2FmZTEvNjBkMTcwOWUtMDRmZS00 NWJkLWJmMjItNzhlYTYwNDNhZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjBkMTcwOWUtMDRmZS00NWJkLWJm MjItNzhlYTYwNDNhZmUxLzYwZDE3MDllLTA0ZmUtNDViZC1iZjIyLTc4ZWE2MDQz YWZlMS5jcmwwHwYDVR0jBBgwFoAUI68rzM9c2qvFPBceFLxJjIBEPyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82MGQxNzA5ZS0wNGZlLTQ1YmQtYmYyMi03OGVh NjA0M2FmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByxCTA1JqcnkMiGlusJQjA G9/gNL5ZUSoxrzjqXnnYApRBMkQ8MfDQBlWCA0kKJzl8T/LV4J69cP0PpJYjUMop whdXjuCrvLGCLyCPSKxULYtmT84x6IHmI/tg59YAvkzC7alZCTNifN5gwewGzbgI /nWafuiDCo2CcWEcO0FfdkWz+/Wr1avv591rX4JFwdB1A0pmy84UFWyZpcDsYQDk UVyoG7IXyNxXhfIfdM2+Y1MhBJq+SvChHsWFIXhJEo4X8rpZZxH23Ao1HsKNSGPI xLt5UExT3LJGNd/mahK1CjAblSefOwOCX0u32jtS4b4nH99Rr4Bh6OuArFSo0C63 -----END CERTIFICATE-----Generated at Mon Oct 20 15:18:33 2025 by rpki-client