
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft
File: 958d43d9-c341-46e7-b131-b154f01666e6.mft (raw, json)
Hash identifier: LA2hC5u8MSvX55apwJ2ScHwuq8sGHvPZSGoKv0lzZi4=
Subject key identifier: 5E:37:42:BA:AA:B1:33:19:6D:AA:34:A7:0E:FE:CC:C5:ED:FE:D2:A3
Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15
Certificate issuer: /CN=958d43d9-c341-46e7-b131-b154f01666e6
Certificate serial: 010D0C9F4328584D4C8991E774AA2162F93A1340
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft
Manifest number: 010D0C9F4328584BD94681EE9FBA368680781288
Signing time: Thu 26 Mar 2026 18:00:09 +0000
Manifest this update: Thu 26 Mar 2026 18:00:09 +0000
Manifest next update: Sat 28 Mar 2026 18:00:00 +0000
Files and hashes: 1: 958d43d9-c341-46e7-b131-b154f01666e6.crl (hash: Iz93HNxnrEqO4YcB9SGLD48h39PTLe3hHaoAWWNybhA=)
2: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (hash: Z2bPOKjKi+k72vTTqSrWWhOBLkXbjtv47YHqY///Idk=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4c:89:91:e7:74:aa:21:62:f9:3a:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6
Validity
Not Before: Mar 26 18:00:09 2026 GMT
Not After : Mar 28 18:00:00 2026 GMT
Subject: CN=8083dba4-8f48-4966-9cdb-5a4488ebc8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:22:be:5d:a9:41:6d:a1:81:7c:a0:c9:99:af:
48:a0:73:83:17:a6:17:da:d2:e4:03:b0:c7:e4:8e:
b7:7d:54:7b:31:59:ab:ec:62:46:d8:65:38:94:86:
f1:79:0c:a9:01:b0:08:04:dd:5d:57:32:90:e6:9f:
19:13:9b:12:69:80:0f:dc:6e:62:9b:02:56:fe:51:
98:d0:3a:5f:05:e0:18:1b:b9:39:b9:b3:17:14:32:
d6:69:8c:81:0e:4b:78:9e:a6:59:ee:aa:a2:39:76:
41:87:d4:e7:20:bf:91:d1:85:19:55:8b:bb:ca:cc:
4d:a2:55:38:48:62:06:46:f5:ca:06:15:98:f5:9b:
d0:c9:f0:46:1e:ce:0a:44:e0:d5:f1:f7:f8:2a:b8:
83:82:2f:80:2d:b3:f1:30:34:3e:02:29:84:c0:d1:
5e:54:cb:8a:91:ed:1a:b3:b2:49:c0:ad:84:75:4e:
0c:17:91:5c:82:1f:76:08:b6:fd:a2:5a:52:fe:74:
2f:7c:89:8d:b1:b0:9d:78:31:02:a6:5a:4c:e0:4a:
4b:6f:db:71:b0:29:10:0d:61:f0:57:5d:2b:db:4c:
4d:b7:6f:24:af:85:8b:60:bb:8f:10:61:ec:88:89:
cc:86:99:8e:ad:11:f6:09:46:18:b6:4b:53:82:18:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:37:42:BA:AA:B1:33:19:6D:AA:34:A7:0E:FE:CC:C5:ED:FE:D2:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl
X509v3 Authority Key Identifier:
keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:23:02:35:4d:28:e6:9d:38:a5:a8:67:6d:a6:9c:23:a3:13:
83:fc:e7:60:4d:07:60:d4:d3:a3:2a:d5:92:a3:3d:44:d9:6a:
24:05:64:8c:49:58:76:da:47:70:7c:16:f4:6f:d8:22:c4:24:
e7:23:aa:e1:5b:f6:5c:04:a5:a4:99:45:95:73:af:36:df:9e:
22:6b:e4:ac:98:a8:3f:9b:9c:3b:89:2b:d5:10:63:c8:e4:6c:
0c:50:4f:c3:ce:a1:1d:d7:7c:22:14:49:fd:06:0e:60:5e:64:
4b:b4:35:4d:dc:79:69:3b:6a:ce:ee:57:50:2b:54:52:84:c2:
46:dd:35:6f:cb:ac:c2:ee:80:a4:94:1f:05:36:cd:ab:da:e6:
53:b1:1a:b9:97:29:1b:7e:0c:e9:2f:ce:3c:df:ef:6e:2f:ee:
08:38:43:6d:20:97:29:4d:35:7c:26:3b:7e:a1:b0:4b:ea:32:
17:e3:a3:2b:53:b2:f1:64:4a:b3:9e:7a:74:00:9a:3f:a5:ac:
bb:e1:1c:0e:e9:2f:8f:6a:56:6d:de:42:ce:91:1d:c6:63:3a:
11:32:ba:de:2b:43:df:9a:96:37:52:8f:77:c2:2b:bb:65:12:
e3:27:c5:35:79:e3:ad:72:16:36:8e:76:35:5e:98:2b:a1:48:
17:ce:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:57:53 2026 by rpki-client