
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
File: D327C608C1E856F6C078976E505559945A23DAD8.mft (raw, json)
Hash identifier: Mqz969JUiKWy8BgQrQ7E3gwNLXUSJ4AADAnjZj+hu+o=
Subject key identifier: 1E:90:69:CC:68:8D:1F:80:DD:9D:B8:7E:BB:A2:0A:63:E8:2E:16:19
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial: 5FE39AC287B32663E22E34FDD0B22098892D87D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
Manifest number: 02A2
Signing time: Wed 25 Mar 2026 16:46:52 +0000
Manifest this update: Wed 25 Mar 2026 16:41:52 +0000
Manifest next update: Thu 26 Mar 2026 20:42:52 +0000
Files and hashes: 1: D327C608C1E856F6C078976E505559945A23DAD8.crl (hash: eK0jUwvoS2mGcy/XcV06Tq374dX7YHTl34h7/dlVcSU=)
2: 323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa (hash: ykNCo19bJfTCz/j/3+v0aCVBJsJYkyozJ//8j29aLHs=)
3: 323630323a663937653a323a3a2f34382d3438203d3e203131333538.roa (hash: hcFkxMOszuVllAjOn7und9q8jGlyvWMGLqYfS62JyPo=)
4: 3136382e3135312e3235352e302f32342d3234203d3e203131333538.roa (hash: QmetJg8pfaiIC1DlvNxsjLcA+cylajpUuDdWPVb3v4s=)
5: 323630323a663937653a3a2f34382d3438203d3e203131333538.roa (hash: PYmUh0DPdfor91w86kKAJ0srigIzOicL+nGaA0JLowM=)
6: 32332e3138362e3138342e302f32342d3234203d3e203131333538.roa (hash: +f3DZsqGG7g9SBdDu+I2V/Nqh4EqJPfm11R+C+dCuxE=)
7: 323630323a663937653a6666663a3a2f34382d3438203d3e203131333538.roa (hash: LcQ2o7pvUmom+wcSFYOFuqM1AyGviwBrpzdXZl0GSlw=)
8: AS11358.asa (hash: 8CpHXUqAXKMdINOfIneAQtXlmPx4uljyr8/adh8eh3w=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 20:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e3:9a:c2:87:b3:26:63:e2:2e:34:fd:d0:b2:20:98:89:2d:87:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Validity
Not Before: Mar 25 16:41:52 2026 GMT
Not After : Mar 26 20:42:52 2026 GMT
Subject: CN=1E9069CC688D1F80DD9DB87EBBA20A63E82E1619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5f:a0:6a:4b:54:85:33:06:9d:40:c7:82:2b:
fa:f0:23:4f:fe:ee:ff:3c:aa:f4:71:6c:49:71:cd:
4e:23:f8:0f:d5:fa:11:e7:bc:b5:55:36:c1:32:78:
5d:f5:e9:db:3d:39:2e:c4:52:9b:6d:52:31:23:71:
f4:4f:97:4e:0f:c7:19:0c:b7:4e:17:1e:38:44:b9:
81:66:85:80:b8:7e:25:de:e7:a1:0e:0f:10:41:84:
31:72:a5:fa:ed:ff:95:2f:29:29:26:52:69:89:85:
90:9c:21:42:60:80:9c:e1:21:8f:3c:aa:cc:b4:86:
4e:b4:a3:e5:7d:a5:7f:44:83:20:2e:14:13:b0:2d:
61:a0:1d:a9:f3:b7:06:22:43:c3:2a:b4:45:61:5d:
c2:64:68:4b:89:7d:35:57:cc:5e:50:11:f3:e7:de:
6d:a9:c6:58:67:9c:76:11:54:89:52:ba:8c:4a:78:
29:ef:0a:8e:2a:3a:7e:87:35:af:2a:94:74:95:46:
eb:3c:1a:fc:8b:a1:8a:94:14:41:28:e5:8e:bc:d8:
bb:06:be:64:c8:a7:2c:2c:ea:81:3d:0b:7d:f3:e3:
e4:a3:7f:d2:c1:b2:56:05:57:52:44:e7:8c:6d:49:
9b:7b:ee:d5:57:24:5f:1b:47:ae:c9:22:92:9b:b4:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:90:69:CC:68:8D:1F:80:DD:9D:B8:7E:BB:A2:0A:63:E8:2E:16:19
X509v3 Authority Key Identifier:
keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:65:ab:3d:f9:d5:52:a6:a0:dc:1a:08:05:a0:0d:a3:47:
6a:70:c8:03:ec:32:11:47:fa:f2:b9:3c:2b:1e:85:59:b9:b4:
39:fd:e6:26:30:f4:06:45:cc:b5:2e:94:bf:b1:9f:c3:e6:22:
87:7c:3c:99:87:b1:7e:e3:a0:19:77:e2:8c:a9:88:03:98:2a:
c0:8c:94:46:3e:70:65:ca:fa:2a:5a:34:77:09:86:a3:8e:99:
54:a0:25:86:e1:c1:56:53:cd:7d:1f:c5:33:41:ca:b8:b4:06:
d8:c8:cf:33:29:28:34:13:fb:a8:e9:f8:e2:e1:49:70:a3:57:
51:e4:71:83:15:60:f8:3f:53:eb:86:87:d6:ee:71:6e:f8:b5:
32:28:11:f6:9c:e5:64:94:ec:08:b7:2a:69:6e:3c:97:17:1b:
3e:c9:4a:a5:cc:c3:6f:f5:9c:24:37:3b:23:a4:f5:90:71:5f:
a6:11:91:71:82:43:ec:e7:23:37:e5:12:2c:58:c0:30:ba:90:
56:fc:3f:26:40:1e:4c:93:d3:57:64:db:17:51:5a:85:35:9d:
b2:44:31:a1:13:b9:d7:b8:e4:11:1d:85:ff:5a:09:4c:97:d2:
ca:91:4c:0f:60:ba:8f:5a:ea:71:cf:55:d7:99:04:95:9a:00:
22:a3:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:11 2026 by rpki-client