Manifest
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
File: arin-rpki-ta.mft (raw, json)
Hash identifier: NnnRzY/bqsyvIpxqd6J889SrjhhLPhvBJdsa3FAKsoY=
Subject key identifier: 30:E4:5A:37:D1:16:7A:A5:40:7C:DF:AB:5E:E7:02:69:89:55:A4:1E
Authority key identifier: 13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
Certificate issuer: /CN=arin-rpki-ta
Certificate serial: 010D0C9F4328584AE911B4F700712A87CD3AD280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
Manifest number: 010D0C9F4328584AE911B4F700712A87CD3AD281
Signing time: Tue 19 Aug 2025 17:19:47 +0000
Manifest this update: Tue 19 Aug 2025 17:19:47 +0000
Manifest next update: Sun 19 Apr 2026 17:19:47 +0000
Files and hashes: 1: 5e4a23ea-e80a-403e-b08c-2171da2157d3.cer (hash: fFaEbjhwXVgukNqZxF4lFiZTNcWgRqdkm8Tk5AW50zg=)
2: arin-rpki-ta.crl (hash: gJGaSBrQN5n5lqeRFjX0PizgcJqUDZW4TqBZ3Fqny+o=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 17:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4a:e9:11:b4:f7:00:71:2a:87:cd:3a:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=arin-rpki-ta
Validity
Not Before: Aug 19 17:19:47 2025 GMT
Not After : Apr 19 17:19:47 2026 GMT
Subject: CN=4c2d262b-8942-4394-b7b4-d6a8347315b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:a1:d8:78:08:2b:9c:7c:a3:44:98:d8:0e:
61:96:15:78:cd:ca:7a:57:b5:1f:f5:bf:dd:d3:1c:
a0:a4:3a:74:0c:34:d2:b3:e5:bc:23:07:65:94:eb:
d8:7b:ce:2e:02:98:f8:59:5d:49:e3:f4:65:79:9d:
7a:cc:d8:f5:d3:09:54:e5:3e:cd:54:14:b0:05:48:
b7:36:ac:0b:d2:32:4d:30:71:57:83:6a:75:cd:bc:
12:aa:32:e3:48:73:0b:7d:ad:ca:60:68:43:64:87:
66:61:bc:6d:42:29:26:80:a6:5b:6f:81:2d:88:b5:
98:53:e3:1c:f8:a5:74:c9:9d:82:24:b4:55:5a:be:
c8:ba:2c:7f:32:9e:55:68:44:ba:0c:22:c0:ea:6a:
06:67:5b:52:99:3f:78:e4:7b:c2:82:b4:23:3f:43:
b5:ba:01:0f:c1:59:b0:35:ff:1b:0f:4a:8f:fe:44:
e4:09:b3:d4:59:2a:21:76:5d:19:61:8c:10:c1:35:
3e:4d:95:45:0e:fb:f8:cd:9e:61:6f:e6:cd:22:eb:
96:8e:a1:e2:13:fa:44:e5:a5:70:c3:59:ef:f5:d1:
ab:ad:09:a6:16:f5:49:bf:5b:4a:6e:ab:3b:84:20:
b9:64:26:61:5a:b9:ee:64:c4:8f:2d:3b:ea:1b:7e:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E4:5A:37:D1:16:7A:A5:40:7C:DF:AB:5E:E7:02:69:89:55:A4:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
X509v3 Authority Key Identifier:
keyid:13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d1:de:47:20:d3:2e:b4:a9:3d:94:65:6f:7b:55:3b:3d:13:
56:56:0b:36:13:96:53:4c:07:51:10:dd:d0:a0:8b:4d:56:43:
84:47:b5:9a:60:48:22:e1:00:8d:fa:a1:0d:03:f5:12:39:b6:
c4:c0:1b:3f:a1:c3:74:9b:42:a3:24:46:79:65:0a:5a:bf:20:
5d:40:0a:fc:1c:98:cd:9d:ee:30:1e:4d:ce:75:58:59:6f:f3:
3f:2f:b2:88:19:37:38:dc:53:39:82:f0:de:02:ce:73:f3:4c:
7a:06:e3:a4:dc:ea:21:84:00:36:05:f0:92:27:eb:4e:9c:73:
d0:09:0c:c1:27:d2:7a:c5:36:b6:0e:8c:38:c2:56:57:60:32:
e8:b0:96:d3:de:c7:12:cf:d4:87:58:b7:ff:c0:03:fe:2f:48:
f7:d6:db:e6:e4:03:50:e7:29:fb:a3:23:47:48:5c:4f:04:1d:
ca:b6:8b:47:f7:52:eb:15:78:50:8f:2d:d6:4f:80:91:d6:35:
04:f7:7d:5b:08:93:1a:87:ea:0f:d4:60:d7:71:2c:b3:2d:ba:
6b:13:81:f3:9a:80:14:17:f5:20:5d:b5:89:fb:4e:51:dc:55:
8f:a0:8e:13:79:48:d9:74:14:8f:80:4e:42:d9:0e:cb:2e:54:
95:bd:f5:0e
-----BEGIN CERTIFICATE-----
MIIEtjCCA56gAwIBAgIUAQ0Mn0MoWErpEbT3AHEqh8060oAwDQYJKoZIhvcNAQEL
BQAwFzEVMBMGA1UEAxMMYXJpbi1ycGtpLXRhMB4XDTI1MDgxOTE3MTk0N1oXDTI2
MDQxOTE3MTk0N1owLzEtMCsGA1UEAxMkNGMyZDI2MmItODk0Mi00Mzk0LWI3YjQt
ZDZhODM0NzMxNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreyh
2HgIK5x8o0SY2A5hlhV4zcp6V7Uf9b/d0xygpDp0DDTSs+W8IwdllOvYe84uApj4
WV1J4/RleZ16zNj10wlU5T7NVBSwBUi3NqwL0jJNMHFXg2p1zbwSqjLjSHMLfa3K
YGhDZIdmYbxtQikmgKZbb4EtiLWYU+Mc+KV0yZ2CJLRVWr7Iuix/Mp5VaES6DCLA
6moGZ1tSmT945HvCgrQjP0O1ugEPwVmwNf8bD0qP/kTkCbPUWSohdl0ZYYwQwTU+
TZVFDvv4zZ5hb+bNIuuWjqHiE/pE5aVww1nv9dGrrQmmFvVJv1tKbqs7hCC5ZCZh
WrnuZMSPLTvqG37YmwIDAQABo4IB4DCCAdwwHQYDVR0OBBYEFDDkWjfRFnqlQHzf
q17nAmmJVaQeMFoGCCsGAQUFBwELBE4wTDBKBggrBgEFBQcwC4Y+cnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhL2FyaW4tcnBraS10
YS5tZnQwTwYDVR0fBEgwRjBEoEKgQIY+cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvYXJpbi1ycGtpLXRhL2FyaW4tcnBraS10YS5jcmwwHwYDVR0jBBgw
FoAUE9TyT5qfzZjbNvkwYxgIyI85dLwwDgYDVR0PAQH/BAQDAgeAME0GCCsGAQUF
BwEBBEEwPzA9BggrBgEFBQcwAoYxcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLmNlcjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwVAYDVR0gAQH/BEowSDBG
BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y
ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMNHeRyDT
LrSpPZRlb3tVOz0TVlYLNhOWU0wHURDd0KCLTVZDhEe1mmBIIuEAjfqhDQP1Ejm2
xMAbP6HDdJtCoyRGeWUKWr8gXUAK/ByYzZ3uMB5NznVYWW/zPy+yiBk3ONxTOYLw
3gLOc/NMegbjpNzqIYQANgXwkifrTpxz0AkMwSfSesU2tg6MOMJWV2Ay6LCW097H
Es/Uh1i3/8AD/i9I99bb5uQDUOcp+6MjR0hcTwQdyraLR/dS6xV4UI8t1k+AkdY1
BPd9WwiTGofqD9Rg13Essy26axOB85qAFBf1IF21iftOUdxVj6COE3lI2XQUj4BO
QtkOyy5Ulb31Dg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:10:16 2025 by rpki-client