
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft
File: 85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft (raw, json)
Hash identifier: WHqYo3Nvji9lr1Ee78+Yk5ko9IuK3dzX9VjsxaWJpQk=
Subject key identifier: CC:F6:17:2A:0E:12:2A:8F:D8:73:E9:14:5A:47:5D:7D:A7:B5:8A:E8
Authority key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F
Certificate issuer: /CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c
Certificate serial: 010D0C9F4328584DCFDD793870A71C37C3440E80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft
Manifest number: 010D0C9F4328584A073AE6AF97B0EAF2D0F397E8
Signing time: Tue 12 May 2026 19:00:03 +0000
Manifest this update: Tue 12 May 2026 19:00:03 +0000
Manifest next update: Thu 14 May 2026 19:00:00 +0000
Files and hashes: 1: 19040811-4eb3-3658-9b7f-629d4f5813cd.roa (hash: Bfh761V1+eZ3MlY++DPFb2+PktuZWxct3m2FtWKIjtM=)
2: 4813c162-1bde-3df9-8e1c-20feca6a82e1.roa (hash: gwrtauUaXkrPfVWGLUP+t0zDVa6X6QyN44okeEIMv2w=)
3: 85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl (hash: gaQhS5q+ouRz/8rTIS99OnUWW0DJjU1e8Qg8MpTmOHE=)
4: cddbbd1a-6a14-3c42-8f1a-c63c17e27973.roa (hash: XidpkAo7/NfGHB8QXI43GA4wrnAYdXyy2Y4oUfrjVBo=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:dd:79:38:70:a7:1c:37:c3:44:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c
Validity
Not Before: May 12 19:00:03 2026 GMT
Not After : May 14 19:00:00 2026 GMT
Subject: CN=eb9031b1-b9cd-4bed-8b26-fea7f31c3e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:29:c7:e8:f5:08:2a:ad:1a:2d:82:56:0b:
1e:d0:c8:05:09:95:82:c0:a3:b6:53:c6:69:d2:20:
1b:a4:47:46:8e:bb:db:b5:f8:4a:3f:fc:ef:7e:fc:
72:06:33:65:39:86:ae:d6:67:96:29:1d:d6:ea:f6:
84:3f:c4:88:84:36:6e:db:63:fd:95:4c:cc:16:f2:
53:7c:c2:fa:a7:2c:b8:e4:af:b6:58:8d:a4:76:47:
3c:72:a4:53:8a:4a:a5:25:da:70:57:20:67:5c:04:
b5:fd:f4:1f:8b:7d:60:f1:15:86:41:37:d5:23:54:
de:50:0e:50:c5:87:59:bf:95:aa:4d:f7:25:5f:98:
4d:40:a9:e3:bd:d5:47:a1:e1:c9:45:f4:63:a4:e1:
59:09:40:02:71:3f:0e:75:d8:e5:e3:c0:1c:c4:e3:
b0:a0:7c:fc:61:59:4a:e3:65:18:2c:ef:95:69:c1:
41:0c:30:6f:20:ca:c8:f3:f7:7a:12:5a:df:00:09:
c7:11:ea:39:c4:e0:9c:7a:3a:84:06:4f:20:bb:72:
4c:31:b0:ad:63:35:bf:5e:a2:05:3c:ce:b1:6d:da:
59:d4:15:85:4b:27:15:b2:98:1d:e9:77:e1:42:99:
9f:37:d7:9d:90:81:ba:93:cd:89:7b:b4:c7:c2:4a:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F6:17:2A:0E:12:2A:8F:D8:73:E9:14:5A:47:5D:7D:A7:B5:8A:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl
X509v3 Authority Key Identifier:
keyid:0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:58:d3:01:56:22:10:12:b0:11:b2:ba:64:05:5d:e2:e7:20:
12:51:73:48:7f:7f:48:54:ad:89:94:24:35:91:c2:84:e8:e4:
21:8a:32:b2:4d:b1:81:de:9d:76:77:8e:b8:48:52:30:a4:54:
36:52:bc:fa:89:6a:42:1c:3b:88:4c:8d:a7:bd:c6:e5:74:a9:
0a:51:2d:ef:2d:53:d0:a8:cc:d8:0d:36:f9:6a:22:05:3d:59:
d4:8a:6a:39:7d:92:88:23:66:02:fd:d2:ab:84:5d:ab:e5:d9:
ce:42:89:bf:79:86:02:7b:4f:a4:0b:78:e7:36:07:db:38:21:
18:dd:cf:aa:88:b8:52:d9:d0:4d:63:62:ab:f9:c0:85:03:eb:
82:d4:60:d4:17:b6:93:f4:56:0d:d0:11:65:7b:6b:2d:02:7f:
9f:b8:77:b5:e6:e2:f2:55:16:9b:45:fc:6a:ac:f0:d6:8e:95:
4f:9d:2a:89:4f:e0:df:a3:ee:bc:33:ca:2c:b0:d6:87:5e:c4:
1d:99:12:f1:c6:a8:ee:38:2c:0f:07:06:51:80:e0:6f:ca:21:
03:41:84:48:79:cc:06:b8:fb:c2:50:43:c3:bf:9f:3e:83:69:
49:17:02:51:da:1f:e0:03:bf:bb:3d:cb:f9:e0:46:9e:6f:bd:
eb:8c:b5:ea
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE3P3Xk4cKccN8NEDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODViMmRlNzMtMWQ0Mi00NTk1LThjYjEtOWU4MmQ4NzNl
ZTFjMB4XDTI2MDUxMjE5MDAwM1oXDTI2MDUxNDE5MDAwMFowLzEtMCsGA1UEAxMk
ZWI5MDMxYjEtYjljZC00YmVkLThiMjYtZmVhN2YzMWMzZTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUEpx+j1CCqtGi2CVgse0MgFCZWCwKO2U8Zp
0iAbpEdGjrvbtfhKP/zvfvxyBjNlOYau1meWKR3W6vaEP8SIhDZu22P9lUzMFvJT
fML6pyy45K+2WI2kdkc8cqRTikqlJdpwVyBnXAS1/fQfi31g8RWGQTfVI1TeUA5Q
xYdZv5WqTfclX5hNQKnjvdVHoeHJRfRjpOFZCUACcT8Oddjl48AcxOOwoHz8YVlK
42UYLO+VacFBDDBvIMrI8/d6ElrfAAnHEeo5xOCcejqEBk8gu3JMMbCtYzW/XqIF
PM6xbdpZ1BWFSycVspgd6XfhQpmfN9edkIG6k82Je7THwkp8TwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFMz2FyoOEiqP2HPpFFpHXX2ntYroMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWIy
ZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgyZDg3M2VlMWMvODViMmRlNzMtMWQ0Mi00
NTk1LThjYjEtOWU4MmQ4NzNlZTFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODViMmRlNzMtMWQ0Mi00NTk1LThj
YjEtOWU4MmQ4NzNlZTFjLzg1YjJkZTczLTFkNDItNDU5NS04Y2IxLTllODJkODcz
ZWUxYy5jcmwwHwYDVR0jBBgwFoAUDZZu5jXUDNAQcPj1eFHCR/T2DC8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWIyZGU3My0xZDQyLTQ1OTUtOGNiMS05ZTgy
ZDg3M2VlMWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOWNMBViIQErARsrpkBV3i
5yASUXNIf39IVK2JlCQ1kcKE6OQhijKyTbGB3p12d464SFIwpFQ2Urz6iWpCHDuI
TI2nvcbldKkKUS3vLVPQqMzYDTb5aiIFPVnUimo5fZKII2YC/dKrhF2r5dnOQom/
eYYCe0+kC3jnNgfbOCEY3c+qiLhS2dBNY2Kr+cCFA+uC1GDUF7aT9FYN0BFle2st
An+fuHe15uLyVRabRfxqrPDWjpVPnSqJT+Dfo+68M8ossNaHXsQdmRLxxqjuOCwP
BwZRgOBvyiEDQYRIecwGuPvCUEPDv58+g2lJFwJR2h/gA7+7Pcv54Eaeb73rjLXq
-----END CERTIFICATE-----
Generated at Wed May 13 11:45:06 2026 by rpki-client