Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: Wazi6AutguxyMofPss0GQY30XF/yMWDx5JQkVUPVDlQ=
Subject key identifier: F9:63:DC:0E:0F:D5:C4:B7:82:7D:0B:C6:5D:C3:72:DA:E9:B5:48:30
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 6834FC35FA9999821F0D6402E821DEE063E3BC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: 0195
Signing time: Fri 13 Mar 2026 06:53:33 +0000
Manifest this update: Fri 13 Mar 2026 06:48:33 +0000
Manifest next update: Sat 14 Mar 2026 07:46:33 +0000
Files and hashes: 1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: m9JMYNpgxyYHVGtZ67bSrc5DYh2ggRanag2MoTgXH8A=)
2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:34:fc:35:fa:99:99:82:1f:0d:64:02:e8:21:de:e0:63:e3:bc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Mar 13 06:48:33 2026 GMT
Not After : Mar 14 07:46:33 2026 GMT
Subject: CN=F963DC0E0FD5C4B7827D0BC65DC372DAE9B54830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:81:0c:5f:f1:f6:c3:d0:1a:e6:6f:1b:0e:
f5:14:f3:8d:37:49:85:6a:49:fd:f7:47:a6:7b:50:
26:6b:65:d8:8e:0f:e4:ec:95:0b:f4:0a:72:08:a4:
31:7e:7e:3e:12:aa:59:50:64:ef:df:ba:fb:9d:98:
d5:fb:5a:ea:6e:b8:7c:79:fb:6e:ce:df:c1:71:07:
0a:db:d0:de:5a:e4:ca:56:c1:12:36:57:9c:17:a2:
94:9a:8b:fc:0f:b6:0c:dc:d4:c8:90:5a:ed:9d:a1:
b9:1d:ab:76:58:05:31:0d:4e:cc:fc:7c:9e:45:1e:
68:b6:2d:9d:d7:07:a8:9e:4b:f9:92:2b:69:3e:de:
00:d1:ee:78:75:b6:76:49:42:d2:d5:b7:78:7d:44:
58:d0:f5:f2:a6:2d:ce:d8:0a:51:d9:2c:6a:2d:e2:
d2:0f:6d:ba:00:7a:3b:3f:0a:90:2a:22:12:73:0b:
62:f5:15:86:3c:88:f6:b7:41:9a:bd:95:bc:6a:a3:
be:db:c1:f9:e1:e5:3c:11:c2:3e:3a:15:11:25:e8:
cb:ea:44:1c:a8:4b:60:bb:fd:ae:97:fb:a1:f0:eb:
c8:2b:8d:05:b8:cb:51:f4:94:d2:b4:d4:5c:43:d6:
fd:1d:8c:ba:d9:dc:d7:27:aa:96:cc:b2:02:ae:ac:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:DC:0E:0F:D5:C4:B7:82:7D:0B:C6:5D:C3:72:DA:E9:B5:48:30
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d0:70:93:38:56:79:87:b2:a9:5b:ed:5d:33:6e:ed:aa:95:
3e:22:0b:b6:1c:e7:30:c1:0d:62:7c:1f:a4:9a:fa:36:93:0d:
bb:ed:87:bf:16:9b:24:59:d8:38:2c:55:4f:e8:f2:b6:37:7e:
44:83:16:7f:68:88:41:4c:e7:88:83:78:61:c4:37:9e:fa:f6:
4a:97:00:05:d3:a1:be:3f:44:12:1e:1d:af:0b:f2:40:98:8e:
48:ae:d1:42:69:08:05:a0:88:5b:1c:29:38:65:65:d0:23:9b:
7c:64:98:af:03:6d:97:9b:4a:21:00:12:60:e5:47:06:3b:a0:
42:71:ad:4b:25:a2:39:4d:45:05:6c:a3:4e:d1:62:a4:b9:b1:
a0:3e:8b:fb:13:3e:19:c5:17:e6:34:af:b4:9b:eb:24:63:ba:
2e:2a:dd:9e:a4:8b:70:ac:00:70:cc:2d:c5:8e:4e:12:2a:4f:
22:5c:3e:ba:73:8b:3c:6c:f7:d0:61:0a:6d:a2:c0:5c:c8:76:
f2:e5:5b:f2:a9:c6:c1:59:e1:e4:05:e0:49:5c:a6:bc:de:6e:
69:8a:29:d3:9e:6d:c3:1a:3d:73:d0:3e:26:63:b0:11:0b:a0:
33:9e:fe:c1:f1:68:b8:9d:1a:94:79:64:27:f9:00:e2:ba:82:
44:53:29:0c
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUaDT8NfqZmYIfDWQC6CHe4GPjvCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzFkYzI1Yzc4MGU3YTI0ODE3MTM5ZDk4MGEyOGE5Nzgx
ZmE2YTQ5MzAeFw0yNjAzMTMwNjQ4MzNaFw0yNjAzMTQwNzQ2MzNaMDMxMTAvBgNV
BAMTKEY5NjNEQzBFMEZENUM0Qjc4MjdEMEJDNjVEQzM3MkRBRTlCNTQ4MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUoEMX/H2w9Aa5m8bDvUU8403
SYVqSf33R6Z7UCZrZdiOD+TslQv0CnIIpDF+fj4SqllQZO/fuvudmNX7WupuuHx5
+27O38FxBwrb0N5a5MpWwRI2V5wXopSai/wPtgzc1MiQWu2dobkdq3ZYBTENTsz8
fJ5FHmi2LZ3XB6ieS/mSK2k+3gDR7nh1tnZJQtLVt3h9RFjQ9fKmLc7YClHZLGot
4tIPbboAejs/CpAqIhJzC2L1FYY8iPa3QZq9lbxqo77bwfnh5TwRwj46FREl6Mvq
RByoS2C7/a6X+6Hw68grjQW4y1H0lNK01FxD1v0djLrZ3NcnqpbMsgKurCxbAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU+WPcDg/VxLeCfQvGXcNy2um1SDAwHwYDVR0j
BBgwFoAUwdwlx4DnokgXE52YCiipeB+mpJMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMi9DMURDMjVDNzgw
RTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvd2R3bHg0RG5va2dYRTUyWUNpaXBlQi1tcEpNLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv
Mi9DMURDMjVDNzgwRTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAg9BwkzhWeYeyqVvtXTNu7aqVPiILthznMMENYnwfpJr6NpMNu+2Hvxab
JFnYOCxVT+jytjd+RIMWf2iIQUzniIN4YcQ3nvr2SpcABdOhvj9EEh4drwvyQJiO
SK7RQmkIBaCIWxwpOGVl0CObfGSYrwNtl5tKIQASYOVHBjugQnGtSyWiOU1FBWyj
TtFipLmxoD6L+xM+GcUX5jSvtJvrJGO6LirdnqSLcKwAcMwtxY5OEipPIlw+unOL
PGz30GEKbaLAXMh28uVb8qnGwVnh5AXgSVymvN5uaYop055twxo9c9A+JmOwEQug
M57+wfFouJ0alHlkJ/kA4rqCRFMpDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:07:54 2026 by rpki-client