$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft File: 60e6a30d-f63a-493d-8227-28d94c142383.mft (raw, json) Hash identifier: oVDV08G9pYt5MImYtazprePMM/OjbcOK/9MIBYmF/Yw= Subject key identifier: 03:C7:FB:C3:0F:D8:D2:DB:66:DA:FE:B2:9F:62:F4:06:24:98:CD:C3 Authority key identifier: 3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43 Certificate issuer: /CN=60e6a30d-f63a-493d-8227-28d94c142383 Certificate serial: 010D0C9F4328584DA27FD737B26133194FB8D3D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft Manifest number: 010D0C9F4328584A253FBDE0907A7B336A3B31C6 Signing time: Sun 26 Apr 2026 13:00:03 +0000 Manifest this update: Sun 26 Apr 2026 13:00:03 +0000 Manifest next update: Wed 29 Apr 2026 13:00:00 +0000 Files and hashes: 1: 60e6a30d-f63a-493d-8227-28d94c142383.crl (hash: /6Lo4x4M3jF91nKhoP7YoJheUKFXG/2smUwo0TuUowM=) 2: a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa (hash: buNKhtrTJxKt2ulgbM1KoFP2EkeZoC6mnl6dEl8c19w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:7f:d7:37:b2:61:33:19:4f:b8:d3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e6a30d-f63a-493d-8227-28d94c142383 Validity Not Before: Apr 26 13:00:03 2026 GMT Not After : Apr 29 13:00:00 2026 GMT Subject: CN=7af5d639-1ba2-4bcf-bc57-7bab59dc4c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:93:9c:46:12:b8:ae:91:65:8e:97:e0:14: 53:e5:95:38:65:16:4e:75:a4:e2:60:4a:43:4f:7e: a6:74:3c:ef:49:af:da:95:bd:18:16:9a:d4:38:76: f0:00:9a:1e:a2:a5:ba:de:2e:30:7b:0a:03:fc:54: e0:2b:00:da:79:09:85:3a:08:52:36:33:63:05:04: 39:db:45:73:12:97:7f:c4:43:62:77:c0:6c:31:7e: 90:c7:ca:2e:13:bd:07:7a:28:19:85:d5:f3:6c:45: e9:d7:c6:56:00:07:99:17:62:b1:71:c7:1c:5a:c7: cb:ef:36:4c:52:68:14:18:bf:f6:2d:d1:d7:ff:fd: 66:bd:6b:5e:1f:6e:b2:57:f7:8c:8c:a2:f3:ba:f5: 38:09:9a:35:7e:62:2b:f8:17:35:64:2b:82:b2:03: 8b:44:d4:93:bb:67:ac:f0:67:6a:90:6d:76:d0:ab: fa:ec:a3:e3:ed:3a:2f:11:85:dd:7e:07:df:d4:c7: 2a:29:b8:76:12:7d:ab:e3:3e:bb:59:34:81:78:0e: 00:9b:66:d8:23:50:14:c6:80:ef:a2:e4:26:2f:e8: 23:aa:ca:aa:ec:0a:17:cf:1e:07:8f:2d:93:7f:1e: 8b:e6:c2:38:d5:5a:34:26:5a:58:8e:1f:1e:18:35: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C7:FB:C3:0F:D8:D2:DB:66:DA:FE:B2:9F:62:F4:06:24:98:CD:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl X509v3 Authority Key Identifier: keyid:3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:25:15:60:d6:2c:4c:c7:73:c1:08:18:0b:31:a4:19:99:c2: 9b:05:a1:e7:3b:c3:0a:22:14:ab:05:3f:ef:e6:c6:b3:b8:cd: 61:e0:f6:ac:4a:23:3a:fb:0d:3e:e6:da:00:0f:c5:46:cc:b7: e4:14:d5:0e:24:47:f1:5c:78:87:fa:aa:4b:b1:39:e3:bd:76: 25:f5:ed:d3:40:07:a5:0c:50:95:b5:0d:e7:99:9c:34:bf:ad: 01:66:47:49:07:1c:b2:5d:d2:aa:78:4d:95:b8:9f:08:7f:1e: c7:c5:6b:21:c5:e1:0c:dc:3f:1d:70:6d:d9:b2:c7:11:da:75: f0:8c:9e:08:e7:c6:34:34:bb:4b:5a:ba:b9:4b:c1:10:ef:f2: df:f9:17:18:4f:88:57:b9:e3:64:81:34:e5:4e:8d:6e:59:03: 93:e1:36:e2:2b:db:96:31:ea:e7:84:b4:52:1a:f8:37:a5:6c: fa:5c:04:ea:76:63:a6:38:ee:60:e2:a8:f4:66:5e:ac:65:81: 7a:6a:34:a0:5c:f7:bd:89:d4:1b:be:2e:6d:65:f6:ba:5a:a8: 10:6e:a9:e9:dd:f0:71:fa:e5:17:f0:f8:31:57:f1:9a:00:ff: 6e:62:a7:ef:59:49:1b:e1:b3:ab:42:34:26:3d:b8:d3:06:be: ed:1d:c2:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2if9c3smEzGU+409AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBlNmEzMGQtZjYzYS00OTNkLTgyMjctMjhkOTRjMTQy MzgzMB4XDTI2MDQyNjEzMDAwM1oXDTI2MDQyOTEzMDAwMFowLzEtMCsGA1UEAxMk N2FmNWQ2MzktMWJhMi00YmNmLWJjNTctN2JhYjU5ZGM0YzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPCTnEYSuK6RZY6X4BRT5ZU4ZRZOdaTiYEpD T36mdDzvSa/alb0YFprUOHbwAJoeoqW63i4wewoD/FTgKwDaeQmFOghSNjNjBQQ5 20VzEpd/xENid8BsMX6Qx8ouE70HeigZhdXzbEXp18ZWAAeZF2KxccccWsfL7zZM UmgUGL/2LdHX//1mvWteH26yV/eMjKLzuvU4CZo1fmIr+Bc1ZCuCsgOLRNSTu2es 8GdqkG120Kv67KPj7TovEYXdfgff1McqKbh2En2r4z67WTSBeA4Am2bYI1AUxoDv ouQmL+gjqsqq7AoXzx4Hjy2Tfx6L5sI41Vo0JlpYjh8eGDXMXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAPH+8MP2NLbZtr+sp9i9AYkmM3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MGU2 YTMwZC1mNjNhLTQ5M2QtODIyNy0yOGQ5NGMxNDIzODMvNjBlNmEzMGQtZjYzYS00 OTNkLTgyMjctMjhkOTRjMTQyMzgzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjBlNmEzMGQtZjYzYS00OTNkLTgy MjctMjhkOTRjMTQyMzgzLzYwZTZhMzBkLWY2M2EtNDkzZC04MjI3LTI4ZDk0YzE0 MjM4My5jcmwwHwYDVR0jBBgwFoAUPyCnLjA8pOKQPlYPDjtbnt5d/0MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MGU2YTMwZC1mNjNhLTQ5M2QtODIyNy0yOGQ5 NGMxNDIzODMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGJRVg1ixMx3PBCBgLMaQZ mcKbBaHnO8MKIhSrBT/v5sazuM1h4PasSiM6+w0+5toAD8VGzLfkFNUOJEfxXHiH +qpLsTnjvXYl9e3TQAelDFCVtQ3nmZw0v60BZkdJBxyyXdKqeE2VuJ8Ifx7HxWsh xeEM3D8dcG3ZsscR2nXwjJ4I58Y0NLtLWrq5S8EQ7/Lf+RcYT4hXueNkgTTlTo1u WQOT4TbiK9uWMernhLRSGvg3pWz6XATqdmOmOO5g4qj0Zl6sZYF6ajSgXPe9idQb vi5tZfa6WqgQbqnp3fBx+uUX8PgxV/GaAP9uYqfvWUkb4bOrQjQmPbjTBr7tHcJG -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:17 2026 by rpki-client