
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft
File: b5a35588-73da-4090-8511-b646a21aaabf.mft (raw, json)
Hash identifier: PXf5BygDUt2eyXkxX/02JjtKjF9HiGIyEThTGqVTvjs=
Subject key identifier: 2C:F8:65:2F:6A:33:3A:F4:8D:56:02:8C:0B:D6:92:B5:36:8B:97:99
Authority key identifier: 22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22
Certificate issuer: /CN=b5a35588-73da-4090-8511-b646a21aaabf
Certificate serial: 010D0C9F4328584F7783F8CC6339E46B48E60A40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft
Manifest number: 010D0C9F4328584C711C656BDA157CC884C9891D
Signing time: Sun 11 Oct 2026 13:02:24 +0000
Manifest this update: Sun 11 Oct 2026 13:02:24 +0000
Manifest next update: Tue 13 Oct 2026 03:00:00 +0000
Files and hashes: 1: b09624de-0f56-32a0-b988-2e9dd543c200.roa (hash: oAHGeGSsn93A03sSTnoqIns+kZLlWE1Sz5fwwpmmVTQ=)
2: b5a35588-73da-4090-8511-b646a21aaabf.crl (hash: 6JWqowAT49D8pAcV0xOmsXdh2G0sCV0g+qzgiuET+pM=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:83:f8:cc:63:39:e4:6b:48:e6:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a35588-73da-4090-8511-b646a21aaabf
Validity
Not Before: Oct 11 13:02:24 2026 GMT
Not After : Oct 13 03:00:00 2026 GMT
Subject: CN=3290bc76-582e-4929-9c63-c7b7a8bd4a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:4b:13:62:74:34:d1:b7:59:80:2d:7c:7c:
86:41:b2:5d:49:30:c8:f0:b2:99:99:62:04:4b:52:
ab:13:02:85:14:ef:54:e9:52:6c:6e:07:0c:3c:49:
20:0a:75:94:97:69:fe:a8:9d:c9:8c:bb:5e:53:bd:
db:20:54:a1:59:71:ec:80:04:56:97:00:4c:9e:2b:
38:3d:80:52:84:6b:10:14:95:07:aa:57:6e:78:cf:
30:b1:59:73:b3:fa:1e:a4:fd:b0:d0:0c:b1:32:c4:
ad:dc:b0:c7:61:18:ce:2d:cc:89:76:64:13:9e:85:
a6:fa:95:a6:9f:58:59:95:aa:60:71:81:97:b2:4d:
b9:72:18:81:85:51:a1:cd:6d:86:ef:3f:d8:48:38:
d3:92:65:a0:31:15:e8:40:69:31:53:0e:86:4c:fa:
1e:ba:71:8c:df:b5:64:28:b7:b3:f9:16:bb:d1:62:
54:8b:f6:06:a8:73:84:cf:a2:9b:6f:cc:77:77:b6:
a5:0e:db:c1:01:a4:e8:32:2b:88:a6:e7:a1:92:f4:
d4:12:3c:e3:1f:28:7a:f7:95:e0:22:b5:6f:a6:bf:
b2:c5:85:6b:fd:fb:86:a7:ce:d1:c9:e1:ce:83:67:
2e:66:a2:b8:51:1c:fc:d1:e4:28:9f:f5:31:f5:2d:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:65:2F:6A:33:3A:F4:8D:56:02:8C:0B:D6:92:B5:36:8B:97:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl
X509v3 Authority Key Identifier:
keyid:22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:f6:bc:5f:34:ea:4a:21:89:ce:e1:e2:60:8f:90:53:e8:cd:
e5:1f:a9:e0:d4:fb:54:d9:c5:84:2f:1a:d5:b4:4a:8a:cc:94:
be:c7:7a:6e:96:37:23:3d:20:b0:0c:67:07:0d:73:24:6f:f9:
33:c2:cd:51:81:d1:7b:9b:0f:4c:41:53:7c:b1:cc:bb:d7:b1:
01:2f:c0:71:f5:ff:eb:96:10:69:5a:b3:53:a4:91:cd:dd:de:
f8:d7:59:df:fb:61:64:28:e2:46:f3:41:49:b5:8b:e4:2d:51:
67:46:8e:59:5d:61:c4:04:4e:49:eb:45:86:0a:87:02:ce:fe:
a1:3c:46:03:17:f3:f0:e5:f9:d2:4b:57:bb:5d:94:16:70:16:
b8:ea:55:a7:6c:35:28:54:07:a4:69:d2:63:a1:8f:9d:a1:38:
cf:2d:3b:1e:f3:29:42:a3:e0:38:2d:a7:c5:36:25:e4:6c:1d:
26:90:08:ab:ff:ea:1f:c1:59:1a:ce:9e:c3:b3:22:1d:9f:f5:
63:cc:9f:54:a3:23:06:6a:7c:d1:c9:85:3b:8a:98:13:e3:44:
c7:e6:2f:10:16:19:5b:ff:93:76:23:62:75:1a:d4:e5:bf:0d:
ff:6d:6c:c9:69:c9:b7:b4:54:09:39:bf:d6:91:70:9b:21:58:
17:45:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:29:44 2026 by rpki-client