
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json)
Hash identifier: jmVAtXTP5OPYrI7IqtAJyzUzHS8r3Xfc4W1tzaKKJHI=
Subject key identifier: AB:89:AF:E3:CC:4F:CA:B0:F3:74:3D:A7:2F:02:04:AC:88:74:96:B9
Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0
Certificate serial: 010D0C9F4328584D4C4DF61271B45C6F30EE4B80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A016B8
Signing time: Thu 26 Mar 2026 16:00:04 +0000
Manifest this update: Thu 26 Mar 2026 16:00:04 +0000
Manifest next update: Sun 29 Mar 2026 16:00:00 +0000
Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: oqByNp0hAVJe3UOtTJfgU5LA6oRkFAirhz7n7cr86jQ=)
2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: 5pGegQdf2haRKgXyUjryYusCBm5WwLO3Peg+cTZxdlQ=)
3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: KXkyaCKfacjxJNU2WbOAvxUFMdIIAThTysYpTgo0ZGU=)
4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: KKt1wnmAB/zsyLlDFjvlSzbHGtJQud9mO/iKDqU3+o8=)
5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: X3wTtPSz6UleM6Ptq4gH2S0sce1qUqJkt/9fmPliYu8=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4c:4d:f6:12:71:b4:5c:6f:30:ee:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0
Validity
Not Before: Mar 26 16:00:04 2026 GMT
Not After : Mar 29 16:00:00 2026 GMT
Subject: CN=87d64676-818b-420e-9a97-ee32de029dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:8d:3b:a6:88:27:5e:0f:3b:dd:71:b4:f1:
03:c7:bb:33:59:c0:31:18:44:8e:37:fb:dc:37:72:
6d:dc:93:bf:62:88:8c:0a:a1:cb:0f:9f:42:1c:35:
09:77:0a:b2:39:ab:3c:7c:fe:4c:fb:dd:c5:ae:79:
16:34:76:68:5a:7d:c3:c4:8b:dc:44:9c:2b:ca:94:
1f:ac:5c:dd:2b:0e:e2:da:30:ca:2b:d0:37:b9:37:
1d:2b:5d:1b:09:3e:4c:7c:8a:98:a9:ab:d1:31:37:
09:5b:be:b3:81:f4:4f:b9:37:85:11:19:b4:e0:b3:
81:0a:24:37:c0:bf:a4:d2:6c:4e:62:c8:10:e4:d5:
8b:ab:b9:62:11:f9:85:ba:5a:04:cd:69:af:cb:b9:
df:0a:b0:05:51:8e:cc:3a:58:a9:d6:68:22:32:54:
d1:2c:37:84:b9:29:b7:57:24:52:c1:d1:88:60:05:
75:f1:fb:4f:c9:e1:dd:74:43:cc:31:9d:e9:dd:a2:
54:8d:d4:6c:2f:fa:98:57:4e:17:1c:33:80:e0:f9:
b1:b4:a6:f8:e8:86:61:84:65:9b:00:86:35:b2:16:
fc:19:ac:f8:b3:aa:1c:46:a4:d7:bb:40:ea:e3:8b:
99:db:19:84:89:ef:2e:e8:e8:69:5d:5b:7f:af:bf:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:AF:E3:CC:4F:CA:B0:F3:74:3D:A7:2F:02:04:AC:88:74:96:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl
X509v3 Authority Key Identifier:
keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:3f:59:41:48:4a:c1:4c:61:5b:77:40:59:30:f1:57:3b:ca:
f2:50:bf:39:50:43:d9:95:e2:67:a0:5e:ad:fb:e9:a4:d4:fc:
91:a1:71:d2:32:7d:88:e5:1a:4d:c8:21:2a:02:91:ea:c6:33:
a1:65:9f:92:86:04:33:1e:1a:e0:95:27:21:a2:8a:f1:b4:fa:
29:6e:ec:01:05:f6:fb:c1:ab:cb:02:4d:83:46:8d:40:ea:cf:
33:0d:07:de:b2:f7:16:9e:5f:76:20:bb:62:85:f6:71:2c:73:
df:5a:6f:23:69:41:1a:3e:26:c3:3d:bd:72:3d:72:fc:e3:b2:
fb:e8:22:05:2d:2a:71:2e:59:c5:e9:4b:16:3d:46:92:7a:b7:
af:ea:03:f7:64:44:0d:20:2a:8d:7e:cd:fe:ac:58:ec:30:9c:
50:f5:73:5a:3e:53:62:12:2c:e1:43:a6:b2:4d:de:f9:39:d2:
8a:f5:0a:dd:66:26:ee:7e:1f:cb:e2:02:57:46:f2:0b:6a:c3:
c1:57:a5:ff:da:68:07:07:a5:6e:23:a0:84:e9:08:62:80:d4:
9e:b3:10:3c:bd:55:67:47:ed:de:77:20:f5:51:d6:e5:20:e9:
07:d5:02:0a:56:64:d1:68:32:9f:4b:63:2b:5e:5d:83:ab:81:
10:cc:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:48 2026 by rpki-client