
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json)
Hash identifier: xOw7OU4xnGeAKxV876flFXO6kZkVV2GuhsOBInxjTv8=
Subject key identifier: D1:C8:E8:E3:80:A0:DD:71:74:17:1D:F5:FF:5C:AE:7E:D6:2A:6A:C5
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial: 010D0C9F4328584D4AAD1D96F20EA6A24135B940
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337A59
Signing time: Thu 26 Mar 2026 02:00:09 +0000
Manifest this update: Thu 26 Mar 2026 02:00:09 +0000
Manifest next update: Sat 28 Mar 2026 02:00:00 +0000
Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: 4+LDLGdZzBRhLwZVa2xZTZYnWEhRgU3b4vMKTe0TD9E=)
2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: EB2LWe+1WD39PSjs8qyH3cT1b6F92AbWWjUA+TOk25o=)
3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: +KDHYs216+AMFKtiRgdZ2AusNh+82tcFWznJUbC8h5w=)
4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: X5H56wCb54eyPhgVf26tVICvXkywU3s4OFWmShVgH8o=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:ad:1d:96:f2:0e:a6:a2:41:35:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Validity
Not Before: Mar 26 02:00:09 2026 GMT
Not After : Mar 28 02:00:00 2026 GMT
Subject: CN=64e822ff-addd-4479-9d60-d2f5522610dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:ee:1c:67:1b:1d:3a:29:60:f1:58:cb:55:
34:a1:67:ea:09:78:a4:bd:13:ee:03:77:38:d6:2c:
fa:10:52:1e:68:16:4f:f7:aa:78:55:ca:59:24:d6:
8f:cf:c3:08:f4:d1:6f:66:00:2d:df:6b:fa:f3:c9:
a5:79:5e:e0:85:6f:ef:17:33:84:fc:79:2f:7f:42:
13:ef:1a:0b:60:9f:d3:79:84:a1:c9:4c:9e:5b:ea:
67:d5:bb:56:34:db:65:22:86:db:90:eb:38:14:36:
2f:b8:8f:21:44:3c:4e:b5:9c:d7:8f:3f:d5:35:ee:
0e:d5:60:77:59:9a:98:d3:96:47:12:c2:4c:d8:e1:
19:f1:30:10:6a:78:7e:97:c0:51:ce:2f:29:dd:f9:
61:13:42:ea:23:cd:b3:b0:fd:b2:f7:7a:bb:67:d4:
e7:98:14:2e:34:43:a0:d0:39:d9:56:da:09:a0:80:
5b:ab:b5:6f:66:9d:8d:a9:ff:26:80:84:ce:28:21:
13:c2:78:8a:0a:76:54:28:a6:17:41:d6:85:e9:3a:
58:98:b0:ba:f8:fd:cc:79:38:ce:0f:8e:8f:ba:29:
b4:fe:93:ae:eb:1d:c8:71:77:7e:20:b5:2e:6b:80:
6b:5e:7f:15:4b:c9:62:53:2a:a4:2f:0e:d3:8c:fd:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C8:E8:E3:80:A0:DD:71:74:17:1D:F5:FF:5C:AE:7E:D6:2A:6A:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
X509v3 Authority Key Identifier:
keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:21:32:94:50:45:33:ac:df:0a:75:4c:64:47:1c:f9:00:e0:
0d:f9:83:db:59:f0:6c:0d:f2:b2:15:18:d0:c9:86:15:a6:67:
2d:99:c2:bf:a0:48:e4:35:32:6f:86:1b:ad:2e:59:94:c4:18:
55:0c:17:c2:75:46:ef:54:a1:e0:57:ad:e3:f1:94:16:29:d3:
27:4d:ec:dc:08:3b:cf:8a:18:41:76:7c:a9:17:af:bd:99:69:
30:2a:3c:89:91:0d:7f:f6:36:07:5a:ea:dc:5d:bb:a8:ca:aa:
8f:6e:79:e8:14:09:4d:55:39:af:4d:31:1b:72:ae:da:ba:a1:
0e:ec:b3:24:cd:1a:89:ca:a6:5b:7a:33:04:48:cf:40:6d:07:
f1:01:bc:9f:23:55:01:58:65:81:4b:4d:0c:d0:06:ab:9b:ee:
b4:45:1f:40:97:57:65:2d:be:a5:87:0c:1b:d5:f6:c1:f6:64:
be:90:a6:a6:31:0b:92:49:24:bd:fc:43:68:c2:03:18:cd:09:
a2:5a:c2:de:5d:04:25:99:bb:7f:4c:1c:72:39:7a:ec:55:6d:
0d:49:a6:b0:7f:2f:5f:25:b3:3f:52:97:01:9b:03:42:06:f5:
35:4e:a1:a8:9f:4a:30:e0:8a:45:7b:c0:96:33:20:28:a4:be:
c1:8a:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:09 2026 by rpki-client