
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft
File: 3aeb4dac-8911-4f44-9f24-1f5081193043.mft (raw, json)
Hash identifier: HFhTgC59594Wh63WJhbeWyO4LLWiCT3MMwkEl63q9yA=
Subject key identifier: E1:29:67:E7:8E:AD:89:D1:0F:07:9F:2E:9E:83:DE:A5:A2:0D:B3:76
Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D
Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043
Certificate serial: 010D0C9F4328584D4983474E913EE0771327C680
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft
Manifest number: 010D0C9F4328584733CC76BFA5FFE5884A56043B
Signing time: Wed 25 Mar 2026 16:00:03 +0000
Manifest this update: Wed 25 Mar 2026 16:00:03 +0000
Manifest next update: Sat 28 Mar 2026 16:00:00 +0000
Files and hashes: 1: 3aeb4dac-8911-4f44-9f24-1f5081193043.crl (hash: V89Wa+7sPOGUE4P3ElvTp7KK4YvqXfYJOjzQvytTmlY=)
2: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (hash: CMIpBbcBTn+JEtp5ggGG+28nA4gvAqTd5dTWpOZb1Jo=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:83:47:4e:91:3e:e0:77:13:27:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043
Validity
Not Before: Mar 25 16:00:03 2026 GMT
Not After : Mar 28 16:00:00 2026 GMT
Subject: CN=4d39df16-eeeb-4134-8bd7-b9ee9c3c6f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:12:78:87:12:19:ff:ff:59:42:94:4f:1a:66:
71:d3:95:c6:a6:19:29:6e:06:fc:7e:81:35:4d:69:
a6:f7:81:12:a1:b4:c2:39:8f:7e:8e:a4:e5:08:53:
80:5e:99:a7:eb:a3:6f:ec:7b:3f:d1:82:2c:ce:73:
c0:eb:37:d1:d7:c5:1b:63:57:77:8f:ad:54:0c:99:
e4:aa:f3:3b:60:ec:84:1a:a9:44:c1:47:af:d5:11:
c2:18:20:ab:d9:ef:03:c3:07:ed:32:01:31:51:c1:
cf:3d:dc:32:ad:67:56:17:d4:e0:59:ae:2d:28:b5:
3a:ef:37:71:a5:3a:56:99:c2:f3:79:6b:10:00:a6:
b9:97:55:a5:46:15:1b:f9:e2:52:e3:77:b9:9b:28:
55:bb:1f:b8:20:42:d0:df:4b:c3:19:91:81:c3:e8:
16:28:69:e3:95:e4:35:75:03:4f:ec:53:fc:3a:99:
7d:a7:e6:e4:04:7c:62:3d:9d:b8:15:f9:b2:ae:61:
ce:a8:cb:3f:0b:ad:ea:bc:fa:f5:dc:87:a2:1f:21:
03:62:1a:e4:5e:fa:9f:f4:97:ee:74:4b:54:40:7c:
7d:1a:90:fc:a0:52:f0:e3:39:a2:54:d4:4f:23:32:
67:9f:61:29:77:b2:0a:bb:0b:71:09:76:f9:04:ef:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:67:E7:8E:AD:89:D1:0F:07:9F:2E:9E:83:DE:A5:A2:0D:B3:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl
X509v3 Authority Key Identifier:
keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:ef:2d:97:28:95:b5:c6:12:d2:5e:d9:70:d8:09:a6:03:43:
8d:32:4c:6d:a7:c6:c6:f5:64:70:85:b6:ab:53:bd:90:a1:d7:
16:d0:75:e6:de:80:ea:58:df:b1:61:75:09:37:7e:30:f9:2d:
f8:6b:74:0f:78:99:11:ce:86:d3:b6:13:1f:5d:f1:ed:84:39:
0c:a9:e6:ed:69:0e:ee:43:7d:1f:4c:90:25:67:99:3c:86:eb:
ee:66:ee:d7:0e:d7:56:9b:db:33:e6:10:8e:a2:1f:16:27:07:
fc:6b:16:94:33:34:f6:33:a5:71:ad:85:de:cb:70:dd:79:25:
7e:3a:60:14:d9:df:35:91:81:41:fd:b0:dd:a4:e0:1c:e5:7f:
70:fc:70:d3:90:2b:11:83:35:cd:9e:85:3c:36:a7:50:6f:06:
b4:5a:fc:bf:ba:d4:37:8d:c0:e7:c2:56:eb:58:b9:f7:85:d3:
1b:c0:ea:5e:69:d0:6d:65:5a:a7:c6:00:2a:5b:f6:73:95:10:
9e:85:90:ff:60:fb:b9:60:b1:fd:0f:a8:4e:23:4b:10:a1:3f:
55:e6:77:86:01:64:ae:91:a1:44:b8:f3:57:b6:dc:85:2f:c6:
30:30:45:48:2b:9b:81:b3:08:6a:0a:52:59:97:27:bb:25:f3:
0d:59:29:a5
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1Jg0dOkT7gdxMnxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz
MDQzMB4XDTI2MDMyNTE2MDAwM1oXDTI2MDMyODE2MDAwMFowLzEtMCsGA1UEAxMk
NGQzOWRmMTYtZWVlYi00MTM0LThiZDctYjllZTljM2M2ZjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghJ4hxIZ//9ZQpRPGmZx05XGphkpbgb8foE1
TWmm94ESobTCOY9+jqTlCFOAXpmn66Nv7Hs/0YIsznPA6zfR18UbY1d3j61UDJnk
qvM7YOyEGqlEwUev1RHCGCCr2e8DwwftMgExUcHPPdwyrWdWF9TgWa4tKLU67zdx
pTpWmcLzeWsQAKa5l1WlRhUb+eJS43e5myhVux+4IELQ30vDGZGBw+gWKGnjleQ1
dQNP7FP8Opl9p+bkBHxiPZ24FfmyrmHOqMs/C63qvPr13IeiHyEDYhrkXvqf9Jfu
dEtUQHx9GpD8oFLw4zmiVNRPIzJnn2Epd7IKuwtxCXb5BO/sSwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFOEpZ+eOrYnRDwefLp6D3qWiDbN2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi
NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvM2FlYjRkYWMtODkxMS00
ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm
MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5
MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw
ODExOTMwNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAt7y2XKJW1xhLSXtlw2Amm
A0ONMkxtp8bG9WRwhbarU72QodcW0HXm3oDqWN+xYXUJN34w+S34a3QPeJkRzobT
thMfXfHthDkMqebtaQ7uQ30fTJAlZ5k8huvuZu7XDtdWm9sz5hCOoh8WJwf8axaU
MzT2M6VxrYXey3DdeSV+OmAU2d81kYFB/bDdpOAc5X9w/HDTkCsRgzXNnoU8NqdQ
bwa0Wvy/utQ3jcDnwlbrWLn3hdMbwOpeadBtZVqnxgAqW/ZzlRCehZD/YPu5YLH9
D6hOI0sQoT9V5neGAWSukaFEuPNXttyFL8YwMEVIK5uBswhqClJZlye7JfMNWSml
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:09 2026 by rpki-client