
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
File: 3b9b8028-72e5-488e-971c-54bd1e51f064.mft (raw, json)
Hash identifier: eXankdf9KmkN1lb2Q0FEauJ5tPjHNih5hyk4UlpCy04=
Subject key identifier: 8C:8F:94:B0:2B:AD:6E:73:34:FF:29:1C:2C:B1:99:C2:F4:AE:20:B7
Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD
Certificate issuer: /CN=3b9b8028-72e5-488e-971c-54bd1e51f064
Certificate serial: 010D0C9F4328584D49DC9E345D31E8011A083500
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
Manifest number: 010D0C9F4328584A528A8A7AC4CF3AECDE07A897
Signing time: Wed 25 Mar 2026 19:00:04 +0000
Manifest this update: Wed 25 Mar 2026 19:00:04 +0000
Manifest next update: Sat 28 Mar 2026 19:00:00 +0000
Files and hashes: 1: 31dea251-a914-3cdf-bb34-ea459b59f5b7.roa (hash: QVUQrxHSPTbWojYG+aeHpI8ns30LIjkmVr9Cx3SupCI=)
2: 3b9b8028-72e5-488e-971c-54bd1e51f064.crl (hash: FyZVqL6stY+eVoerQ0FHCXRwHW6kjt9t5goORjF54MU=)
3: 69651a7a-33cd-341a-9ff0-30c6489996d5.roa (hash: u7C3imds6wSENZSO6Ugdvto5e2g0yKgRLmrjaB/ZKa0=)
4: d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (hash: Ht+nmjyKyhPz8JXCEahwh/5awWsbMR2ZQGWKk8WL+ps=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:dc:9e:34:5d:31:e8:01:1a:08:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064
Validity
Not Before: Mar 25 19:00:04 2026 GMT
Not After : Mar 28 19:00:00 2026 GMT
Subject: CN=ff10a79f-f94d-45a7-b1dc-da77b3690ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:de:9f:df:78:a1:e8:76:27:07:f2:63:49:
b9:2c:fb:39:b2:44:4e:ee:d1:cf:c3:67:bc:a0:a8:
3f:5a:0d:72:b4:db:2f:d6:2f:43:85:32:e9:a9:2b:
3e:8a:17:ef:8f:83:4b:ff:73:fb:e6:66:31:0d:c0:
96:e3:f0:5e:c6:ba:72:60:5c:5d:15:71:85:7c:dc:
89:18:e6:7b:03:22:d8:26:cb:d1:3e:8a:ca:8d:cf:
78:71:6e:bc:6b:4c:bf:33:72:5f:11:5e:0e:3d:5e:
f9:3a:bb:00:15:15:3d:22:0b:30:9c:a3:26:c5:62:
55:f1:d2:42:90:e5:7f:2b:8d:eb:10:c7:a3:0c:08:
ec:9b:52:98:f7:38:e3:11:2e:37:48:d9:e8:15:5d:
95:c6:f7:3e:cc:b3:2a:2d:79:83:d6:92:d9:03:94:
dd:31:17:11:19:30:71:62:5c:fc:50:71:93:7a:32:
d8:91:a2:d4:44:09:ae:1d:bd:4a:bf:20:6f:7d:a8:
56:23:ed:f6:3b:ef:d4:5d:fa:d2:c4:8e:e1:3b:bc:
32:9c:4f:87:b2:8b:4f:f7:9e:cd:19:48:9c:e3:93:
27:bf:d3:b8:21:9c:66:23:94:40:5a:de:2e:d2:ff:
ad:93:49:5e:18:1b:60:31:ae:36:18:e8:54:50:6f:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:94:B0:2B:AD:6E:73:34:FF:29:1C:2C:B1:99:C2:F4:AE:20:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl
X509v3 Authority Key Identifier:
keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:cf:46:30:ba:57:26:1a:0f:12:47:55:21:5e:13:64:fb:69:
74:2d:21:9b:25:70:84:c6:e5:fe:b5:7d:58:bd:c0:f3:46:52:
de:1d:4f:e2:15:57:e7:37:22:13:d8:4f:90:1f:dc:ef:02:4b:
94:2c:8b:4a:86:83:94:11:d7:3e:ad:54:95:fa:9b:46:75:4a:
4c:c3:72:e8:ed:20:3e:24:d2:b1:f6:fb:fa:31:61:6f:53:19:
bc:cb:1f:98:cd:6a:e6:f8:14:52:56:ee:04:fa:5e:f1:9b:64:
0a:da:00:4f:a9:a9:99:f3:50:3d:10:70:2d:ee:bb:29:22:3e:
47:9a:ce:37:4d:a3:34:db:50:c0:7f:11:de:92:64:f1:24:ed:
08:df:9e:0f:4f:29:b0:61:19:ce:15:25:34:7a:e0:b5:7f:cf:
69:5f:5e:5a:0c:0d:27:3d:22:22:49:01:20:80:bf:06:fa:a5:
fa:ff:8e:e4:93:e0:db:83:57:84:0c:28:65:12:e4:14:7f:20:
f9:71:a3:2b:33:96:aa:fe:72:ea:95:76:fe:36:70:58:74:cb:
a7:f4:0b:96:5a:17:bb:37:e2:37:0b:0a:b6:dc:33:ed:90:87:
b1:e4:54:7e:c2:77:46:5a:84:74:63:12:b8:83:73:f9:2e:00:
15:78:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:49 2026 by rpki-client