
$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
File: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft (raw, json)
Hash identifier: Vg673NqvNlQtvasq5h4MJFqjswW7rgB/Ru5uIINTIvk=
Subject key identifier: 95:D3:28:C6:CF:49:F2:8B:10:AB:26:4D:9F:F1:30:3C:5F:5D:EB:EB
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Certificate issuer: /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial: 5641FBB6C75F2ADA46D0CD82AC1419A647978130
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
Manifest number: 0130
Signing time: Tue 07 Apr 2026 15:04:30 +0000
Manifest this update: Tue 07 Apr 2026 14:59:30 +0000
Manifest next update: Wed 08 Apr 2026 17:17:30 +0000
Files and hashes: 1: 3136352e3134302e32372e302f32342d3234203d3e203534323532.roa (hash: i6SllSmn92lyxwCyF/7XFoj1Qnfc6F7BynX/boNBjW8=)
2: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl (hash: o/7L+VrukFHorpRco9Nu3pu5IdtG1nGKK4KAGgGkSDg=)
3: 3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa (hash: /uOm3NZhfzbO8K0EaDwD6+mnAwKqohKi5U32Ftdk/DE=)
4: 3136352e3134302e32372e302f32342d3234203d3e20333937363330.roa (hash: VWmVLcZU2ImmYQc/ehPf9GibjoWjkOhTRarQQdROy/s=)
5: 3136352e3134302e32362e302f32342d3234203d3e2039333034.roa (hash: m8YG6TF6lqdGKUCxRqIp50lszbpJiKuRuDR+ggS0j6M=)
6: 3136352e3134302e32372e302f32342d3234203d3e203634323637.roa (hash: JOe5Bws2Czl2Xfjv8NkbPuCupbQkAHqMlv0J80ZQIuM=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 17:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:41:fb:b6:c7:5f:2a:da:46:d0:cd:82:ac:14:19:a6:47:97:81:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Validity
Not Before: Apr 7 14:59:30 2026 GMT
Not After : Apr 8 17:17:30 2026 GMT
Subject: CN=95D328C6CF49F28B10AB264D9FF1303C5F5DEBEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:8a:7b:ea:28:75:02:2d:36:86:c4:76:76:
19:66:79:66:b6:56:15:f2:de:fc:4d:fa:1c:44:e3:
0d:19:42:f4:f0:79:c6:c9:d7:2b:1f:14:01:a7:c2:
10:e6:80:f4:78:00:79:f3:b9:4b:e1:00:e0:87:df:
83:7b:cc:be:5b:85:c2:1a:96:f7:6a:d5:09:0a:41:
27:ee:0f:4d:d4:14:6a:c7:95:9c:37:61:30:a5:c0:
9c:77:27:23:2e:6e:be:c1:6f:bd:51:ef:d5:fc:10:
ee:70:4a:ca:5d:50:d3:55:9a:ab:a9:62:37:73:58:
b0:da:9b:5e:2f:65:2b:35:42:e9:09:01:df:53:2d:
17:e3:e7:1a:1a:68:5f:db:2a:3d:3f:72:61:d7:85:
18:e0:45:0a:cb:f3:e1:85:17:75:ca:b2:e6:3d:f5:
90:1c:c7:7e:d2:cd:f0:4e:83:98:8b:37:8a:7c:33:
69:3a:55:22:95:1d:9a:a5:ea:e3:15:71:a4:91:25:
97:9a:97:0f:a3:0d:0a:34:ce:8a:fd:d2:79:4c:ef:
7b:8d:6c:e5:db:89:4f:fe:5d:f9:87:08:2b:fa:b3:
26:44:97:7f:8d:0a:ae:53:0b:fa:ea:61:0f:f5:8d:
59:92:4e:01:96:54:dd:e6:20:3e:5d:f7:aa:94:b5:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:28:C6:CF:49:F2:8B:10:AB:26:4D:9F:F1:30:3C:5F:5D:EB:EB
X509v3 Authority Key Identifier:
keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7c:60:b3:b7:e6:00:e6:45:a7:47:5b:fc:50:41:a3:86:c0:
42:48:07:85:73:2e:74:5e:9f:df:b4:c5:fa:7f:88:ca:16:ce:
a9:19:5e:42:84:15:fe:e1:73:6c:5f:eb:74:58:32:48:97:e4:
e7:82:f6:f5:14:30:5d:2c:56:3c:c8:23:19:ec:ec:83:d1:11:
86:3d:be:71:4f:1e:ee:a1:b1:ce:50:d7:3f:be:bd:59:8e:67:
a7:f0:ce:c1:b4:1f:81:f4:dd:73:24:39:10:0b:cf:69:2b:2c:
f5:0d:39:5f:56:b7:b9:5a:74:69:b8:fb:e2:73:09:04:5f:02:
31:8a:94:93:4e:5c:36:c8:eb:50:72:6d:01:1f:da:33:a8:50:
44:13:5a:28:03:5b:50:d1:9b:a2:d3:d8:9f:af:a3:57:ed:bf:
a7:88:85:68:51:cc:04:8c:0a:48:2b:3e:b6:63:8f:95:cc:4e:
30:6b:5f:da:fb:7b:4c:91:03:a9:21:08:f2:f6:b9:b5:64:1f:
cc:95:49:09:ca:65:68:62:66:af:64:d0:9e:0b:89:ed:c2:b2:
aa:bb:5a:85:24:b5:9e:15:fc:c3:01:05:23:89:1c:64:98:6f:
a4:05:41:ca:ea:cc:40:d8:6c:94:08:a6:78:44:b3:f0:95:c9:
32:2c:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:10:48 2026 by rpki-client