$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft File: a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft (raw, json) Hash identifier: uLgOX6NrmHl+TkJhndHBzhccNJsHHZ/EfbulntmgGfs= Subject key identifier: CA:17:48:E9:CA:C5:50:99:51:41:25:37:24:34:C3:8F:F2:2E:87:88 Authority key identifier: 95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 Certificate issuer: /CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Certificate serial: 010D0C9F4328584D86D0905ECFE8D0EF9E70CE04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft Manifest number: 010D0C9F4328584073A85A17F676A8EC1A316A4A Signing time: Thu 16 Apr 2026 15:00:03 +0000 Manifest this update: Thu 16 Apr 2026 15:00:03 +0000 Manifest next update: Sun 19 Apr 2026 15:00:00 +0000 Files and hashes: 1: 796a8503-13ba-3800-8978-3da85e63b13a.roa (hash: 19P6xe1RuX9JhmrOUFjFkCoTqKbZ8w+re7IoVRTH3vA=) 2: a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl (hash: QxETCbRHwQqK0qNWng0KG8OF65n0+vm2QtCaiTiBD6U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:d0:90:5e:cf:e8:d0:ef:9e:70:ce:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Validity Not Before: Apr 16 15:00:03 2026 GMT Not After : Apr 19 15:00:00 2026 GMT Subject: CN=09a1f6cb-85aa-42d0-a6cc-997f4a434cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:ae:1e:92:8c:41:b6:4c:d6:91:5a:95:2a: f2:f1:6d:03:06:0d:50:e8:67:a1:48:22:23:c5:0f: 02:32:27:86:e6:2c:9b:f0:6b:e9:90:27:de:a2:7b: e6:4a:0b:52:c7:57:4c:15:ea:be:86:aa:eb:6f:71: e7:9c:f7:68:8b:ac:08:ba:03:04:22:51:e2:be:2d: 9e:e2:d8:16:9b:e0:84:a0:94:f9:52:c3:32:23:d5: c8:ca:28:05:88:fc:24:f0:5b:49:e3:6c:31:ce:28: 05:d8:0b:27:f8:92:89:1e:68:91:0d:f1:df:ff:b2: 78:1b:e4:97:e9:f4:ee:b2:e4:c0:e5:0d:8f:9c:d6: 30:0d:7d:49:4d:73:01:18:7b:0d:cb:16:03:e0:52: b0:cc:20:09:c0:98:b2:98:44:ee:79:cb:0f:24:cf: 3a:54:14:2e:22:5f:c4:ff:18:f5:25:04:21:47:7f: 0d:a7:48:f7:0b:d3:3a:dc:2e:e7:95:e8:66:33:17: 3f:ab:1d:14:78:be:2d:0a:90:20:1b:d3:e0:be:fa: 53:d0:43:e9:7d:f1:87:68:3e:30:f9:7c:47:6d:c7: b6:03:d9:a3:7c:76:d4:09:c7:dc:ac:d2:13:54:06: 31:8e:d7:fe:50:33:a1:65:05:e7:7a:26:94:e8:6c: a4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:17:48:E9:CA:C5:50:99:51:41:25:37:24:34:C3:8F:F2:2E:87:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl X509v3 Authority Key Identifier: keyid:95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:27:65:05:cb:74:ca:1e:90:c2:59:9e:99:92:f6:c4:6d:ea: 13:a6:d7:74:79:21:eb:2a:63:a3:6d:63:61:55:c7:13:8e:96: 60:fd:99:ef:6e:66:29:90:21:1b:38:19:c6:e8:68:49:55:dd: 3b:ee:b0:86:20:fa:90:10:d5:ab:7a:7a:e9:05:93:95:3e:c4: c5:f8:ce:02:65:9c:bf:f3:0b:83:8c:af:dd:6d:fe:c7:76:8a: 6d:60:64:f2:a0:41:40:41:2b:84:41:d2:97:14:da:6b:dc:2c: 2d:a6:8d:f7:83:2e:5e:97:3b:94:82:cb:00:80:3c:47:7b:6c: 02:e8:9e:bd:57:ae:51:5f:bd:31:86:ec:7c:35:a5:92:6c:d3: 83:09:72:c0:8d:ab:d2:d4:d1:22:49:18:4c:33:06:5d:e7:d9: 3a:15:9f:1b:96:8f:07:2b:03:38:c0:30:96:9d:13:ea:d1:08: e9:31:09:1a:af:54:84:3d:b6:df:2a:87:9f:62:bf:56:46:59: a7:44:e0:aa:bb:e9:b7:74:a1:6a:01:14:24:23:a6:b7:36:d4: 81:bc:45:22:4a:e9:a0:a2:73:6b:11:0a:b3:61:7a:d8:60:b4: e3:a5:f4:13:76:ba:d9:fe:c5:a9:e3:d1:74:15:b3:b9:81:61: f2:78:5c:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2G0JBez+jQ755wzgQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYwZmJkMGQtMWUwYS00YjhhLWI0NjctMGI2MTk3ZDhi NWQwMB4XDTI2MDQxNjE1MDAwM1oXDTI2MDQxOTE1MDAwMFowLzEtMCsGA1UEAxMk MDlhMWY2Y2ItODVhYS00MmQwLWE2Y2MtOTk3ZjRhNDM0Y2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjouuHpKMQbZM1pFalSry8W0DBg1Q6GehSCIj xQ8CMieG5iyb8GvpkCfeonvmSgtSx1dMFeq+hqrrb3HnnPdoi6wIugMEIlHivi2e 4tgWm+CEoJT5UsMyI9XIyigFiPwk8FtJ42wxzigF2Asn+JKJHmiRDfHf/7J4G+SX 6fTusuTA5Q2PnNYwDX1JTXMBGHsNyxYD4FKwzCAJwJiymETuecsPJM86VBQuIl/E /xj1JQQhR38Np0j3C9M63C7nlehmMxc/qx0UeL4tCpAgG9PgvvpT0EPpffGHaD4w +XxHbce2A9mjfHbUCcfcrNITVAYxjtf+UDOhZQXneiaU6GykKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMoXSOnKxVCZUUElNyQ0w4/yLoeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBm YmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYxOTdkOGI1ZDAvYTYwZmJkMGQtMWUwYS00 YjhhLWI0NjctMGI2MTk3ZDhiNWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTYwZmJkMGQtMWUwYS00YjhhLWI0 NjctMGI2MTk3ZDhiNWQwL2E2MGZiZDBkLTFlMGEtNGI4YS1iNDY3LTBiNjE5N2Q4 YjVkMC5jcmwwHwYDVR0jBBgwFoAUlQ7z/AkyQbqHL902TDItyhUVPeEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBmYmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYx OTdkOGI1ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWJ2UFy3TKHpDCWZ6ZkvbE beoTptd0eSHrKmOjbWNhVccTjpZg/ZnvbmYpkCEbOBnG6GhJVd077rCGIPqQENWr enrpBZOVPsTF+M4CZZy/8wuDjK/dbf7HdoptYGTyoEFAQSuEQdKXFNpr3Cwtpo33 gy5elzuUgssAgDxHe2wC6J69V65RX70xhux8NaWSbNODCXLAjavS1NEiSRhMMwZd 59k6FZ8blo8HKwM4wDCWnRPq0QjpMQkar1SEPbbfKoefYr9WRlmnROCqu+m3dKFq ARQkI6a3NtSBvEUiSumgonNrEQqzYXrYYLTjpfQTdrrZ/sWp49F0FbO5gWHyeFyk -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:28 2026 by rpki-client