
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json)
Hash identifier: J9FcB2ZrCDj+0trKK/2mXCC8Z3kp1MSZF1BXUuL1uPc=
Subject key identifier: 97:DF:7E:8D:5B:D1:44:68:1A:2D:55:CF:D7:BB:F1:FF:2B:3E:33:DB
Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97
Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0
Certificate serial: 010D0C9F4328584D4A718FC58D83C7D2E973D380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
Manifest number: 010D0C9F43285849CD228DC17836374947BEDA87
Signing time: Thu 26 Mar 2026 00:00:09 +0000
Manifest this update: Thu 26 Mar 2026 00:00:09 +0000
Manifest next update: Sun 29 Mar 2026 00:00:00 +0000
Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: ux/nSs2zhIbe7flkXDGjFHnXd99gDWKFrY1YTImxoYU=)
2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: n8fyd0T8gIkJ5PFKWzWf0rtTmbnO5PqWYR+h5KjJ1NU=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:71:8f:c5:8d:83:c7:d2:e9:73:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0
Validity
Not Before: Mar 26 00:00:09 2026 GMT
Not After : Mar 29 00:00:00 2026 GMT
Subject: CN=94128f5d-a682-451a-9add-d3cc6a06167f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:63:85:d6:79:dd:a3:8e:ee:b4:2c:eb:2a:
a0:5a:35:91:b0:cd:e3:3c:bb:b2:a5:43:61:56:98:
43:48:ef:0b:2d:15:81:b4:8b:d5:f9:43:fa:a6:e8:
83:2b:40:04:6e:05:8e:b8:75:d4:2b:40:5b:4f:c0:
3a:60:78:65:b5:a8:48:b2:3c:51:d8:9f:d8:8a:2e:
59:9d:a1:2d:0a:cb:75:a2:98:29:f0:75:bf:bb:ff:
9b:be:3f:e6:20:65:05:ff:13:77:ec:c9:6c:8c:12:
e1:1b:da:c4:3e:d3:c1:0e:34:ef:4e:a1:47:db:22:
51:8a:1c:99:7f:82:7b:65:b6:c8:06:f5:34:12:b0:
1b:82:82:43:48:0c:fa:25:84:45:2f:97:21:9a:31:
4c:09:39:79:0d:e1:19:2f:71:30:14:db:3d:99:e2:
a5:52:2c:02:ea:3a:9e:6d:52:fc:7d:a6:20:70:a3:
13:49:c9:85:f2:f5:4e:cd:74:0a:81:ab:46:94:bb:
2d:38:b1:f0:1b:18:58:ba:31:06:12:5f:0a:d6:79:
f7:f3:97:5d:ba:f0:79:c8:56:f2:7c:a2:ba:de:0d:
9a:21:65:b3:bc:59:59:4e:45:b8:9d:c4:a6:67:97:
da:be:33:02:4c:be:04:4a:e2:dc:a3:0f:ab:99:58:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DF:7E:8D:5B:D1:44:68:1A:2D:55:CF:D7:BB:F1:FF:2B:3E:33:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl
X509v3 Authority Key Identifier:
keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:84:7f:21:e1:ac:d5:d6:a5:3b:fc:1a:fb:24:b7:76:3f:bc:
4e:17:30:0a:8d:e3:b5:95:22:08:63:e5:de:a5:e5:03:f5:96:
89:7b:5a:40:21:c1:f9:76:84:db:5a:0a:b8:2b:d7:4a:d1:5e:
5f:e6:c0:71:0c:8c:ee:77:e8:58:a8:7f:e0:e5:9b:30:b5:b4:
41:6e:e4:f5:db:15:b5:5a:58:c0:b1:b5:02:f1:1c:c3:14:a3:
c6:6d:36:41:a2:64:e4:07:64:f0:7b:7f:a7:59:a0:97:40:60:
9b:2a:16:b6:4f:af:46:47:da:b7:35:57:78:33:30:7c:21:c0:
ce:eb:aa:cf:48:4f:ec:cd:19:87:c6:5d:70:88:3b:97:9c:8f:
d7:ec:fd:d8:54:22:1f:b5:da:98:6b:49:26:2a:92:f7:9e:76:
92:41:52:13:34:d0:e7:7f:d7:c6:1e:3a:13:a9:2c:c2:07:d6:
84:3f:22:e5:bd:66:01:30:64:b5:b9:10:64:13:91:64:35:27:
4f:34:ff:70:eb:d3:49:9c:4b:53:75:cf:aa:f1:65:bc:09:b8:
6a:fe:48:25:58:89:cc:dc:4b:d3:f0:b9:9e:60:c4:64:bb:8a:
e0:11:e6:cc:cd:a9:e6:b5:7f:63:91:bb:08:d3:7e:da:8a:ec:
21:81:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:24 2026 by rpki-client