
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft
File: b5a35588-73da-4090-8511-b646a21aaabf.mft (raw, json)
Hash identifier: BtxKtORVvGTS2MZ9xqSHSzZZVtnwt7WDKO/ZkC5oko4=
Subject key identifier: 5A:98:49:E4:4A:6B:9A:1A:39:D1:5E:C6:83:D7:96:27:2D:0C:4D:89
Authority key identifier: 22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22
Certificate issuer: /CN=b5a35588-73da-4090-8511-b646a21aaabf
Certificate serial: 010D0C9F4328584D4ACAD9268CF02BD43C1F9C00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft
Manifest number: 010D0C9F4328584C711C656BDA157CC884C9884F
Signing time: Thu 26 Mar 2026 03:00:04 +0000
Manifest this update: Thu 26 Mar 2026 03:00:04 +0000
Manifest next update: Sun 29 Mar 2026 03:00:00 +0000
Files and hashes: 1: b09624de-0f56-32a0-b988-2e9dd543c200.roa (hash: WQP4EPnlpTAuQq725DSHQLD/qasq6u0uGok6U933lNI=)
2: b5a35588-73da-4090-8511-b646a21aaabf.crl (hash: gjJkjU9RUKNp0aNCpr1EKFQ57ChFl8QC6LYyOlyTiwE=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:ca:d9:26:8c:f0:2b:d4:3c:1f:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a35588-73da-4090-8511-b646a21aaabf
Validity
Not Before: Mar 26 03:00:04 2026 GMT
Not After : Mar 29 03:00:00 2026 GMT
Subject: CN=2bc2d33e-706c-4f30-a7e9-9cfd67e509a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:ac:c4:c9:8a:cb:47:42:a3:aa:dc:63:8c:
1c:e1:c1:45:33:15:df:55:05:44:46:08:98:75:77:
86:bc:09:78:16:2e:83:b7:74:5e:b3:1f:76:32:ff:
8d:0c:8b:21:f8:32:0b:09:fc:51:be:d3:2c:6f:6a:
29:e8:5f:f2:a7:36:9a:dc:9e:51:f5:87:b9:46:97:
28:8e:55:0c:a4:48:aa:23:2c:14:80:8f:9c:16:e3:
f8:29:e5:d0:35:3d:f9:9e:b7:1b:1f:6a:92:29:a0:
2c:c9:30:97:92:62:00:3b:48:27:e1:5c:7d:72:dc:
ed:f7:fe:0e:d7:17:04:e7:87:3b:85:cb:96:00:37:
2f:70:9b:fa:e1:bd:23:0c:69:9b:65:92:d9:53:4c:
3b:16:79:f3:7e:fb:ff:80:05:f6:ff:e5:8c:f6:c7:
f2:98:8e:d8:57:53:d5:d2:4f:10:e6:54:56:9b:01:
bb:6b:31:05:ea:ad:ba:d0:d0:35:1e:ba:7a:80:ec:
38:8f:2f:da:37:ee:45:45:da:6c:d8:96:aa:3f:9c:
33:b9:5b:b6:3b:04:97:93:5b:09:4b:7e:d7:4d:f9:
8a:4b:a3:c4:c2:5a:50:59:36:73:34:c8:bd:fc:3f:
68:d3:5c:22:7d:a7:2f:62:b6:3b:a8:3e:40:2a:10:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:49:E4:4A:6B:9A:1A:39:D1:5E:C6:83:D7:96:27:2D:0C:4D:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl
X509v3 Authority Key Identifier:
keyid:22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:d1:8a:e1:6a:63:ad:0a:8f:f7:d5:f0:05:48:77:4f:50:a6:
32:48:26:44:ca:29:a5:3f:a7:14:a7:9e:91:1c:6a:33:20:b4:
00:99:c7:4a:e7:29:00:5c:ad:13:ae:db:51:05:77:ce:20:28:
ef:2f:a3:c6:42:cc:15:ff:9a:2a:d3:99:43:a9:b9:bd:60:09:
b9:4c:ed:43:67:52:64:de:b5:6b:35:6a:fb:fa:68:7c:d8:3c:
dd:6e:28:2a:b4:2d:72:66:6c:b8:5d:7a:ce:49:f1:52:1d:94:
95:40:7a:df:9a:a3:22:77:19:b9:e0:11:30:66:f9:42:ab:41:
26:1d:da:57:79:d5:64:35:05:eb:9b:50:1e:67:9f:a4:b2:94:
68:3f:6d:38:c0:58:44:56:84:7b:86:20:eb:36:e1:bb:38:8a:
47:db:17:b9:7a:06:8a:da:35:31:93:c7:99:4f:48:6f:82:fb:
19:b0:be:3b:88:9a:68:53:1e:b3:06:53:ec:81:e5:5d:42:ad:
3d:b0:af:ca:8e:09:49:76:4b:ec:6d:e5:46:f4:97:bf:84:b6:
11:1b:c6:ef:d7:15:2b:6d:6b:29:12:96:7d:66:15:fc:21:2f:
28:b2:4b:69:8d:95:53:47:9a:ea:66:56:4e:ed:4e:50:c2:6d:
e9:4c:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:32 2026 by rpki-client