$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft File: 60e6a30d-f63a-493d-8227-28d94c142383.mft (raw, json) Hash identifier: O7qGk5OR6Q+tccuSyEos2lnoU8zQnmhdL+NMTrT5i1w= Subject key identifier: EC:58:32:6F:2D:3C:9D:B2:A1:91:77:A3:17:CF:7A:5D:7A:96:CA:04 Authority key identifier: 3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43 Certificate issuer: /CN=60e6a30d-f63a-493d-8227-28d94c142383 Certificate serial: 010D0C9F4328584AEB5B8D8D64906363D8F0B040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft Manifest number: 010D0C9F4328584A253FBDE0907A7B336A3B30C7 Signing time: Wed 20 Aug 2025 13:00:08 +0000 Manifest this update: Wed 20 Aug 2025 13:00:08 +0000 Manifest next update: Fri 22 Aug 2025 13:00:00 +0000 Files and hashes: 1: 60e6a30d-f63a-493d-8227-28d94c142383.crl (hash: f+bW5jAiIxBXA2wfsgYOghd+zWo0DiBSN37yoxTaO+o=) 2: a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa (hash: k4yNoC4nH21JeGStTGRJfZ44C9uRFRhhKZuhoZYW/7M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:8d:8d:64:90:63:63:d8:f0:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e6a30d-f63a-493d-8227-28d94c142383 Validity Not Before: Aug 20 13:00:08 2025 GMT Not After : Aug 22 13:00:00 2025 GMT Subject: CN=a8779e44-f869-4dda-a29a-4c75ca4e37b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:e4:24:63:77:de:a7:cd:f4:78:c9:90:42: 29:46:0d:8c:ac:18:92:ef:9a:72:e5:2e:2d:b4:29: c5:46:9f:00:88:ad:74:7c:a5:0e:f1:82:55:3a:8d: bd:f2:b7:6d:f8:80:c3:75:49:98:b4:c8:cd:34:ec: 31:e1:68:15:8c:57:db:d7:8a:ba:8c:08:35:b8:0f: 85:0f:62:2f:74:36:cd:74:52:59:f5:4e:ee:d3:79: 1d:57:e1:b2:6c:b7:ec:8d:34:4e:2a:3f:ae:20:97: b2:79:62:81:20:17:3c:45:a5:ea:b3:06:ea:89:c5: b8:7c:d1:06:90:65:58:56:7f:c6:3d:40:4e:be:ab: cc:dd:fc:15:66:63:59:b4:56:32:a3:15:ad:66:7d: 10:bc:08:2f:0a:3c:89:5c:d0:e5:a4:0b:0b:c9:ce: 83:5e:b4:e7:fe:44:e9:cc:0f:f0:9b:2c:1e:a8:64: 03:a2:4d:4d:2a:43:f2:95:60:d5:50:02:b3:cc:ec: 20:8e:b1:4d:78:63:06:a4:61:0b:5b:f3:4a:7f:0b: 6e:54:37:bf:ce:67:ed:2e:ab:d4:a0:87:86:0e:47: dc:0d:99:c7:f1:a5:0a:23:86:56:1f:49:5d:61:4c: fa:21:45:4f:f3:3f:e7:0c:9e:72:f4:4e:99:52:34: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:58:32:6F:2D:3C:9D:B2:A1:91:77:A3:17:CF:7A:5D:7A:96:CA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl X509v3 Authority Key Identifier: keyid:3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:d9:92:9a:5e:d1:33:86:b0:2b:d7:f6:72:78:f1:f4:d5:25: e9:55:ae:f3:78:51:c1:f7:95:a7:82:21:38:c2:77:a6:2f:83: 1c:77:c4:a0:b1:4b:71:9e:2a:71:4d:16:8f:c9:c1:b4:1f:8b: 1f:a4:94:b9:9a:cb:21:45:5d:ec:a2:46:c2:f3:70:a2:fe:79: 0c:b7:8c:37:05:c3:ba:74:0c:2d:09:e2:54:1a:e3:2e:36:76: 17:d2:95:66:5d:55:11:13:d9:90:c4:98:0a:1c:69:df:13:74: 87:30:81:6b:52:fd:58:d2:6a:9d:a9:da:c3:47:02:88:47:bc: b2:f1:62:f4:d9:68:43:55:18:8d:bf:59:a1:ac:0b:7b:34:ef: 57:d6:64:42:f7:c5:5a:e3:7d:84:30:ed:cf:03:82:d2:5d:c9: ff:70:a3:e1:ac:7b:88:39:28:63:0e:e9:7a:b5:74:98:4d:96: be:ca:6e:e2:3a:bf:fe:fe:1c:49:31:e7:a3:36:8e:cb:ba:0d: c6:9f:ae:bb:e5:cc:a7:69:88:4d:83:80:30:6e:58:47:7b:aa: db:8a:e3:1a:b6:cf:a5:c9:7b:43:ef:a3:9e:10:93:17:29:89: e5:79:cd:af:a4:d2:15:c8:70:1e:5e:23:af:28:7d:0e:93:cb: cb:7f:d0:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrW42NZJBjY9jwsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBlNmEzMGQtZjYzYS00OTNkLTgyMjctMjhkOTRjMTQy MzgzMB4XDTI1MDgyMDEzMDAwOFoXDTI1MDgyMjEzMDAwMFowLzEtMCsGA1UEAxMk YTg3NzllNDQtZjg2OS00ZGRhLWEyOWEtNGM3NWNhNGUzN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6/kJGN33qfN9HjJkEIpRg2MrBiS75py5S4t tCnFRp8AiK10fKUO8YJVOo298rdt+IDDdUmYtMjNNOwx4WgVjFfb14q6jAg1uA+F D2IvdDbNdFJZ9U7u03kdV+GybLfsjTROKj+uIJeyeWKBIBc8RaXqswbqicW4fNEG kGVYVn/GPUBOvqvM3fwVZmNZtFYyoxWtZn0QvAgvCjyJXNDlpAsLyc6DXrTn/kTp zA/wmyweqGQDok1NKkPylWDVUAKzzOwgjrFNeGMGpGELW/NKfwtuVDe/zmftLqvU oIeGDkfcDZnH8aUKI4ZWH0ldYUz6IUVP8z/nDJ5y9E6ZUjSoWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOxYMm8tPJ2yoZF3oxfPel16lsoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MGU2 YTMwZC1mNjNhLTQ5M2QtODIyNy0yOGQ5NGMxNDIzODMvNjBlNmEzMGQtZjYzYS00 OTNkLTgyMjctMjhkOTRjMTQyMzgzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjBlNmEzMGQtZjYzYS00OTNkLTgy MjctMjhkOTRjMTQyMzgzLzYwZTZhMzBkLWY2M2EtNDkzZC04MjI3LTI4ZDk0YzE0 MjM4My5jcmwwHwYDVR0jBBgwFoAUPyCnLjA8pOKQPlYPDjtbnt5d/0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MGU2YTMwZC1mNjNhLTQ5M2QtODIyNy0yOGQ5 NGMxNDIzODMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCg2ZKaXtEzhrAr1/ZyePH0 1SXpVa7zeFHB95WngiE4wnemL4Mcd8SgsUtxnipxTRaPycG0H4sfpJS5msshRV3s okbC83Ci/nkMt4w3BcO6dAwtCeJUGuMuNnYX0pVmXVURE9mQxJgKHGnfE3SHMIFr Uv1Y0mqdqdrDRwKIR7yy8WL02WhDVRiNv1mhrAt7NO9X1mRC98Va432EMO3PA4LS Xcn/cKPhrHuIOShjDul6tXSYTZa+ym7iOr/+/hxJMeejNo7Lug3Gn6675cynaYhN g4AwblhHe6rbiuMats+lyXtD76OeEJMXKYnlec2vpNIVyHAeXiOvKH0Ok8vLf9CL -----END CERTIFICATE-----Generated at Wed Aug 20 17:26:48 2025 by rpki-client