$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft File: 60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft (raw, json) Hash identifier: 9aF2IcAVtlJV/tKB74lmsTe6LAvgzvFKkw3bE3tXkYk= Subject key identifier: AA:ED:59:4D:A2:30:94:48:EB:F5:9E:A9:43:B5:8B:17:8F:3E:5F:C1 Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Certificate serial: 010D0C9F4328584F425A37F2A08CFED0E097ABA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft Manifest number: 010D0C9F4328584473CDF5AF4422B6CA6B9E9BAB Signing time: Tue 22 Sep 2026 12:00:24 +0000 Manifest this update: Tue 22 Sep 2026 12:00:24 +0000 Manifest next update: Thu 24 Sep 2026 12:00:00 +0000 Files and hashes: 1: 211da43d-fda4-33b5-9961-187f3563b2d9.roa (hash: uzJVtGyFFbNMUw31FAb/xmZCn2MF6QJI2cumYovaMAA=) 2: 29b0398c-c9db-3fd7-96a4-f8ada4c9108e.roa (hash: 3OgHXOm3QOenziUpG92ztAVRWl+XMa2IN8IXQchKFAA=) 3: 5688d85a-c7fa-30b4-851c-65ced22445bf.roa (hash: pC8I38Ko1rYjnVCET/1kyFe0C5HlgPydMeOkEQL5HlU=) 4: 60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl (hash: KG97VfSM6QBNVEDNSgY8gVJHHsln03u3mAF92zJH8Mc=) 5: 90aad0e9-e036-34da-9fbd-e2d5187f87e6.roa (hash: 1srWNA9K/Wirkx6rwBFI1r6EMBR9A1Y313LFUIXO88U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:5a:37:f2:a0:8c:fe:d0:e0:97:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c Validity Not Before: Sep 22 12:00:24 2026 GMT Not After : Sep 24 12:00:00 2026 GMT Subject: CN=877c1958-fc3b-4b8c-a78c-c275f58b96ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:a8:1a:44:7c:c7:29:18:cc:61:9b:15:b8: 06:4e:20:3a:de:6a:f0:49:7d:bb:6c:96:39:20:6b: e4:21:b1:05:6c:17:27:cd:4a:fb:da:03:77:46:41: 24:eb:2e:8d:10:df:7a:c9:64:b6:2a:78:b9:38:92: 57:f1:06:ed:ac:e1:4a:d6:f1:1f:16:f1:82:2d:68: f8:ae:78:39:b6:d7:df:6b:ec:07:93:cf:96:84:92: 74:09:b2:29:b4:d2:02:44:72:b9:91:a7:78:ff:a3: 82:e5:9f:26:81:cd:1e:b7:e1:80:9e:1f:92:fd:07: dd:4f:d1:72:b0:37:cf:12:5f:c2:02:df:33:a0:b5: 6e:32:db:70:ac:f4:29:c1:d5:fc:e6:40:4a:7c:04: ad:e2:1f:b2:99:bd:45:ae:fe:df:bb:8f:5e:a8:42: 28:e4:bc:1d:26:6c:6b:8b:6a:03:cd:dd:49:3f:b0: 33:b0:33:08:ab:53:b7:c5:f5:b7:4c:7f:30:95:6a: ee:90:af:ff:6e:45:2b:9b:e4:9d:90:91:6f:d1:ff: 6b:e6:5a:1a:61:9f:1d:2a:c9:5d:7d:de:79:33:ef: e9:cb:60:83:9d:72:f5:87:ab:1f:60:b1:6f:e4:32: 5c:42:f7:27:04:db:9c:b1:4b:26:6f:da:f7:79:9c: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:59:4D:A2:30:94:48:EB:F5:9E:A9:43:B5:8B:17:8F:3E:5F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl X509v3 Authority Key Identifier: keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f1:ef:89:54:fb:29:8b:3a:2e:37:b7:f7:47:d1:e5:5d:fc: 24:5c:da:f7:07:77:2d:fd:8f:db:2e:2a:8f:70:c8:8b:d0:46: 3f:82:d8:60:c8:f7:b1:6d:2a:cd:cc:c3:65:48:72:5e:4f:9f: 51:51:b3:79:70:97:b9:ea:d5:52:d0:5d:17:03:4a:ad:14:2f: e1:6f:f8:10:94:45:f5:a2:b9:d9:1c:af:16:34:9b:61:7b:c1: e1:6a:e6:bd:39:d6:f2:c7:af:ff:0f:e2:77:d8:fb:92:93:2a: 5e:fa:d0:b0:1b:2e:a0:b4:ab:17:46:9c:59:95:7e:5d:f7:b6: 8c:7b:e3:ab:9f:8a:13:2b:eb:93:01:b9:30:ee:7a:1e:06:33: 5f:62:08:07:69:80:3b:ef:35:f3:63:a1:84:22:2e:c8:65:23: 27:18:48:03:98:9b:a7:d7:73:99:b0:90:c6:2a:8f:5c:b9:ea: 79:d4:ab:4a:f6:39:8c:30:59:92:8b:61:94:74:55:d3:a5:d9: 34:4e:94:a6:08:59:62:68:1d:fb:91:01:9c:50:88:61:5e:e4: 61:94:cb:f0:a5:4d:88:35:a7:ce:a2:05:fa:18:24:35:38:36: 80:2d:9c:c7:52:b7:83:cd:94:e0:56:a0:85:a3:3f:15:4d:10: 84:dc:1c:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE9CWjfyoIz+0OCXq6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1 ZTVjMB4XDTI2MDkyMjEyMDAyNFoXDTI2MDkyNDEyMDAwMFowLzEtMCsGA1UEAxMk ODc3YzE5NTgtZmMzYi00YjhjLWE3OGMtYzI3NWY1OGI5NmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfmoGkR8xykYzGGbFbgGTiA63mrwSX27bJY5 IGvkIbEFbBcnzUr72gN3RkEk6y6NEN96yWS2Kni5OJJX8QbtrOFK1vEfFvGCLWj4 rng5ttffa+wHk8+WhJJ0CbIptNICRHK5kad4/6OC5Z8mgc0et+GAnh+S/QfdT9Fy sDfPEl/CAt8zoLVuMttwrPQpwdX85kBKfASt4h+ymb1Frv7fu49eqEIo5LwdJmxr i2oDzd1JP7AzsDMIq1O3xfW3TH8wlWrukK//bkUrm+SdkJFv0f9r5loaYZ8dKsld fd55M+/py2CDnXL1h6sfYLFv5DJcQvcnBNucsUsmb9r3eZxpTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKrtWU2iMJRI6/WeqUO1ixePPl/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvNjBmZDljODctOWRjOC00 OGMyLTljN2QtZTcyNDEyYTM1ZTVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0 MTJhMzVlNWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB48e+JVPspizouN7f3R9Hl XfwkXNr3B3ct/Y/bLiqPcMiL0EY/gthgyPexbSrNzMNlSHJeT59RUbN5cJe56tVS 0F0XA0qtFC/hb/gQlEX1ornZHK8WNJthe8Hhaua9Odbyx6//D+J32PuSkype+tCw Gy6gtKsXRpxZlX5d97aMe+Orn4oTK+uTAbkw7noeBjNfYggHaYA77zXzY6GEIi7I ZSMnGEgDmJun13OZsJDGKo9cuep51KtK9jmMMFmSi2GUdFXTpdk0TpSmCFliaB37 kQGcUIhhXuRhlMvwpU2INafOogX6GCQ1ODaALZzHUreDzZTgVqCFoz8VTRCE3BwU -----END CERTIFICATE-----Generated at Tue Sep 22 22:22:25 2026 by rpki-client