
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.mft
File: 21afabbe-bb2d-4271-9e05-6a8f5837e6b5.mft (raw, json)
Hash identifier: hJlLkhfREfTCfvdEaM4SEpfVOG909G+GfvMpRP4+xU0=
Subject key identifier: 19:CD:AF:75:5D:26:86:8D:60:83:91:68:C6:A9:82:DC:26:9F:C3:5A
Authority key identifier: 79:0F:0A:4A:61:5B:C7:32:64:74:81:AF:AE:71:8A:22:8A:2A:51:13
Certificate issuer: /CN=21afabbe-bb2d-4271-9e05-6a8f5837e6b5
Certificate serial: 010D0C9F4328584FB6359C1A31D25C738568B300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.mft
Manifest number: 010D0C9F4328584F9D1B66CEF5DE413776EE380A
Signing time: Tue 03 Nov 2026 00:00:24 +0000
Manifest this update: Tue 03 Nov 2026 00:00:24 +0000
Manifest next update: Thu 05 Nov 2026 00:00:00 +0000
Files and hashes: 1: 19972336-82ac-3772-a9e0-e4be4f6ae218.roa (hash: NKVMaPscP5tD0Bm3Ryk4NIVR1vE8zg2/l50LqZlcY3g=)
2: 21afabbe-bb2d-4271-9e05-6a8f5837e6b5.crl (hash: fNJAaHz86NXj3jVnhyNM5ugZnch/k34X/GuiYjGQyt0=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:b6:35:9c:1a:31:d2:5c:73:85:68:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21afabbe-bb2d-4271-9e05-6a8f5837e6b5
Validity
Not Before: Nov 3 00:00:24 2026 GMT
Not After : Nov 5 00:00:00 2026 GMT
Subject: CN=47865c0d-34e9-468f-a686-f916acdffd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:ef:44:60:c7:af:8e:cb:1a:05:1d:2c:fa:
94:ff:c8:60:1a:c5:be:03:f7:fa:1d:d5:77:29:c3:
1c:22:e6:9d:3e:e9:81:bd:ca:55:7f:cb:c3:d2:df:
6c:5e:2d:7c:38:e0:a5:53:fe:91:f2:3d:7b:8b:97:
f5:ca:e9:cb:00:4d:bb:1e:0d:8c:a8:42:dd:93:e1:
75:5b:1e:cc:1e:1d:67:31:41:58:b9:17:1e:e1:98:
54:0e:83:fd:78:bc:7f:d8:6a:66:82:00:b4:90:d4:
4c:85:74:16:6f:6d:82:b5:04:9c:26:40:75:8d:2b:
ba:01:5d:79:40:68:0a:56:5a:95:56:4f:b0:92:9a:
5d:b2:ff:e8:9c:27:a6:54:2b:b4:9c:da:2e:81:fd:
af:61:93:a0:fd:83:53:5f:5f:6c:ef:0c:ac:a0:55:
79:8d:fc:12:cb:e5:6e:fa:ef:95:a5:91:b4:99:60:
6a:9b:a9:bc:2c:1c:c5:71:e7:a7:7f:23:ff:00:6e:
31:cd:74:8a:b4:1b:0c:c3:00:40:2b:79:87:7f:7e:
59:65:f3:a0:c5:fa:58:c9:17:1b:98:c0:f7:6d:99:
df:af:8b:03:5d:37:63:f7:df:c4:ac:97:ab:73:7a:
fe:cb:49:15:9d:87:66:f6:34:04:49:0d:a4:e0:f1:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CD:AF:75:5D:26:86:8D:60:83:91:68:C6:A9:82:DC:26:9F:C3:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.crl
X509v3 Authority Key Identifier:
keyid:79:0F:0A:4A:61:5B:C7:32:64:74:81:AF:AE:71:8A:22:8A:2A:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21afabbe-bb2d-4271-9e05-6a8f5837e6b5.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:2e:eb:1b:f4:fc:da:16:63:37:32:a1:e3:bc:6b:9b:a1:21:
c3:48:68:79:36:c7:2d:eb:bf:f1:c9:cf:12:58:23:e8:3d:ad:
a3:31:9f:ed:ee:e1:9b:4e:1f:38:46:6d:dc:85:86:31:47:45:
d3:2d:ba:e8:89:21:8a:4c:d3:97:e8:eb:dc:d6:a8:a6:ab:78:
40:75:27:89:d7:c1:0b:b3:90:e2:9d:49:18:7e:6a:da:48:8e:
27:74:66:2a:55:1f:e7:18:7f:30:c7:d3:cb:24:f2:80:aa:ba:
e4:5a:d3:71:d5:22:9d:b3:89:43:63:44:a1:ef:e9:97:d6:66:
06:dd:44:b5:e5:b5:6c:b3:23:a1:b6:2f:26:ac:35:15:df:01:
3d:fe:68:81:92:0c:7b:9e:b7:d2:4c:c6:f2:06:16:c0:21:96:
b8:18:96:93:f4:4c:30:e0:77:f2:49:aa:32:4b:c7:c8:ee:fb:
29:33:10:a6:78:7b:d7:39:6a:f2:e3:8d:32:86:e5:13:a7:bf:
5f:ec:59:91:3d:bb:79:a0:68:a4:ef:1e:8a:1f:47:25:b5:34:
50:11:ae:1f:63:b5:bb:80:3b:b9:51:58:1b:1d:48:dd:e8:44:
81:1c:b9:9d:ed:b7:06:06:78:31:95:fd:3a:17:73:37:5a:16:
88:9e:7b:77
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE+2NZwaMdJcc4VoswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFhZmFiYmUtYmIyZC00MjcxLTllMDUtNmE4ZjU4Mzdl
NmI1MB4XDTI2MTEwMzAwMDAyNFoXDTI2MTEwNTAwMDAwMFowLzEtMCsGA1UEAxMk
NDc4NjVjMGQtMzRlOS00NjhmLWE2ODYtZjkxNmFjZGZmZDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVzvRGDHr47LGgUdLPqU/8hgGsW+A/f6HdV3
KcMcIuadPumBvcpVf8vD0t9sXi18OOClU/6R8j17i5f1yunLAE27Hg2MqELdk+F1
Wx7MHh1nMUFYuRce4ZhUDoP9eLx/2GpmggC0kNRMhXQWb22CtQScJkB1jSu6AV15
QGgKVlqVVk+wkppdsv/onCemVCu0nNougf2vYZOg/YNTX19s7wysoFV5jfwSy+Vu
+u+VpZG0mWBqm6m8LBzFceenfyP/AG4xzXSKtBsMwwBAK3mHf35ZZfOgxfpYyRcb
mMD3bZnfr4sDXTdj99/ErJerc3r+y0kVnYdm9jQESQ2k4PGnEQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFBnNr3VdJoaNYIORaMapgtwmn8NaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yMWFm
YWJiZS1iYjJkLTQyNzEtOWUwNS02YThmNTgzN2U2YjUvMjFhZmFiYmUtYmIyZC00
MjcxLTllMDUtNmE4ZjU4MzdlNmI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMjFhZmFiYmUtYmIyZC00MjcxLTll
MDUtNmE4ZjU4MzdlNmI1LzIxYWZhYmJlLWJiMmQtNDI3MS05ZTA1LTZhOGY1ODM3
ZTZiNS5jcmwwHwYDVR0jBBgwFoAUeQ8KSmFbxzJkdIGvrnGKIooqURMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8yMWFmYWJiZS1iYjJkLTQyNzEtOWUwNS02YThm
NTgzN2U2YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdLusb9PzaFmM3MqHjvGub
oSHDSGh5Nsct67/xyc8SWCPoPa2jMZ/t7uGbTh84Rm3chYYxR0XTLbroiSGKTNOX
6Ovc1qimq3hAdSeJ18ELs5DinUkYfmraSI4ndGYqVR/nGH8wx9PLJPKAqrrkWtNx
1SKds4lDY0Sh7+mX1mYG3US15bVssyOhti8mrDUV3wE9/miBkgx7nrfSTMbyBhbA
IZa4GJaT9Eww4HfySaoyS8fI7vspMxCmeHvXOWry440yhuUTp79f7FmRPbt5oGik
7x6KH0cltTRQEa4fY7W7gDu5UVgbHUjd6ESBHLmd7bcGBngxlf06F3M3WhaInnt3
-----END CERTIFICATE-----
Generated at Tue Nov 3 08:16:31 2026 by rpki-client