
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft
File: 252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json)
Hash identifier: 0Wlb+S/KAc2qdNQNqlQ19tWxnxkjkpLFnVW9FBnknYc=
Subject key identifier: DD:D2:25:F9:14:BE:40:35:22:E3:9A:76:F8:06:63:DE:1D:0E:1D:65
Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0
Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae
Certificate serial: 010D0C9F4328584D6B0380CB0DF579D07A8B7D00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft
Manifest number: 010D0C9F4328584AAE4DC59D07CE7A5E6AC02F82
Signing time: Mon 06 Apr 2026 16:00:03 +0000
Manifest this update: Mon 06 Apr 2026 16:00:03 +0000
Manifest next update: Wed 08 Apr 2026 16:00:00 +0000
Files and hashes: 1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: wfREFDRWHW3RnPOBj7hrtpnnftvcoHAIHO9EJuMter4=)
2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: TqOI7y/KYDiQZSnzFG5x7/UKcl45QJ0JHR8ORyMM3Jk=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6b:03:80:cb:0d:f5:79:d0:7a:8b:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae
Validity
Not Before: Apr 6 16:00:03 2026 GMT
Not After : Apr 8 16:00:00 2026 GMT
Subject: CN=1d0cec62-b197-4d5e-beaf-23d4342f079a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:1e:85:00:2c:48:2b:6c:17:42:2e:1d:f4:
c5:ae:22:d9:97:c3:91:8c:0a:af:0d:52:6e:8f:41:
2e:84:ae:d0:a5:df:38:f8:c3:26:34:c1:54:10:35:
91:e5:3a:e4:db:dd:93:98:67:f2:73:ab:e5:35:30:
a8:bd:27:d7:7f:32:94:f1:7f:e5:15:ad:17:e8:28:
d7:80:82:1d:c4:f8:8c:fe:75:04:41:2b:1b:5e:0c:
af:c3:af:88:20:44:6f:9f:55:a1:a1:20:a4:ef:c9:
ac:ec:a8:b6:99:76:d3:73:48:5c:90:c5:a1:c9:85:
36:c8:7d:90:17:93:a8:a1:99:9e:31:96:15:ae:64:
e6:26:0d:38:df:df:f7:8b:16:4a:3c:49:c0:02:6c:
6f:1e:5b:05:d7:25:f8:c0:12:97:e4:f3:da:dc:ce:
34:44:3e:9a:0b:48:cc:fc:bf:c5:4f:b9:b1:30:d3:
0c:48:b8:b9:69:15:77:b8:76:93:48:12:a8:4c:12:
f0:f5:e8:53:c8:73:e0:32:c5:3e:34:e5:d4:41:33:
78:99:48:ab:5c:e2:45:77:35:38:35:e1:2e:b0:28:
75:d8:c7:dd:ac:dd:2f:86:e7:9b:31:38:f1:b9:49:
07:10:d4:fd:3b:04:3d:af:ab:3e:1f:41:33:07:0b:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:25:F9:14:BE:40:35:22:E3:9A:76:F8:06:63:DE:1D:0E:1D:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl
X509v3 Authority Key Identifier:
keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:10:db:57:08:2d:64:39:9c:25:ce:bd:dd:59:93:7e:05:b8:
bf:fe:fb:d1:23:f5:9d:bd:35:5c:9c:72:b5:fa:a9:a0:69:22:
cf:43:56:09:84:b1:22:84:a7:c8:bb:56:a1:3b:c1:56:10:91:
03:94:a4:b3:aa:49:e7:f1:d7:d2:04:59:90:19:db:c6:2a:ce:
27:99:6c:71:b4:b2:e6:8a:1d:a1:84:e3:fa:3d:51:63:b6:48:
f3:ed:e5:61:f5:9f:ab:0e:6c:b7:1a:ac:53:c2:25:42:b4:09:
4d:bb:c0:e8:89:e4:87:5f:f3:84:2f:0c:fd:4f:a5:12:c3:ac:
0e:45:77:c1:5f:2a:cc:2f:4b:01:58:94:bd:0e:b6:8b:09:70:
71:8c:5d:50:28:f3:70:78:02:3a:48:77:01:d5:49:0d:68:36:
d4:62:70:d6:69:67:5e:e3:4b:ca:fb:31:58:bb:02:42:58:9b:
35:ac:0b:5c:31:84:15:42:56:15:a1:7b:d7:56:8c:41:47:0f:
35:c4:a9:b5:51:a5:1c:99:74:9a:3b:18:1b:08:91:fc:64:a9:
ce:73:af:7f:e6:e1:42:b8:d1:be:ae:9d:75:b0:bf:01:88:f3:
4a:2a:8e:11:3c:55:68:96:4a:28:9f:df:b7:8c:eb:3c:6f:7d:
5d:85:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 15:07:20 2026 by rpki-client