
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft
File: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft (raw, json)
Hash identifier: jPAavGdoBzrDIPkhIuiAqwR70rpqmoWZ78qngLwPKA8=
Subject key identifier: BA:DE:81:5A:76:01:50:17:64:B0:A0:44:0A:89:B6:92:14:33:10:FD
Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
Certificate serial: 010D0C9F4328584D285D7496116F7B5FD2EC5280
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft
Manifest number: 010D0C9F4328584073A8229E05ED3D48888CE353
Signing time: Fri 13 Mar 2026 19:02:08 +0000
Manifest this update: Fri 13 Mar 2026 19:02:08 +0000
Manifest next update: Sun 15 Mar 2026 19:00:00 +0000
Files and hashes: 1: 079ec49d-80c7-36fb-a80a-15036883ce48.roa (hash: d7peY0kRQbyjSfnZb8jA4ArxII88AUB+qsi2jT8fLLI=)
2: 11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (hash: xB2+uCo7ev+JpilsUU/PwftY3a+MSRIAyFFjzNJWoqY=)
3: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl (hash: Etzy/gtWbVZHH4ljstUmaDfZ4zMhFQJFp82ImPLJRP4=)
4: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (hash: X73sgv0YGT55yoPW+GIUam1GIj9DY18uQWhXdKyrguQ=)
5: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (hash: rkJ7MuZnNyUEnw2eBRCTaT+HRSMCbN4IFKYG5hg8GTQ=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 15 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:28:5d:74:96:11:6f:7b:5f:d2:ec:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e
Validity
Not Before: Mar 13 19:02:08 2026 GMT
Not After : Mar 15 19:00:00 2026 GMT
Subject: CN=a2f10c29-73fe-45dd-8d1e-975d4f4c79ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:2e:a3:10:b6:4a:90:a7:44:f0:3c:a6:ef:
47:f5:ef:94:e6:e0:4e:13:4b:56:cc:7f:c3:91:a1:
0a:1a:ce:eb:43:89:ca:63:f6:c0:64:f1:40:d7:ab:
91:91:1a:89:05:7b:d7:73:16:6d:f6:14:74:c3:36:
9e:0f:1b:53:c2:cc:ed:83:dd:68:01:b3:f8:be:cf:
a4:56:27:b7:38:c8:5b:37:2b:2f:26:ef:b4:b9:1a:
8d:0d:f8:db:c1:97:3f:79:2f:6f:37:fb:55:89:b6:
38:34:a4:3c:08:e8:13:e1:38:55:a2:3c:27:dd:80:
ed:10:c8:d0:11:58:09:e6:c1:3f:ed:8c:f3:b2:19:
52:91:3b:94:6b:4e:bc:09:47:d8:b4:1c:8e:1c:d0:
b5:57:2e:ad:ef:a5:e9:e7:06:13:c1:fc:13:28:fd:
7c:7e:31:cf:72:0f:7e:b1:32:ec:77:cc:f1:19:72:
eb:54:83:24:e2:98:7b:46:ab:10:12:8b:d3:44:44:
99:d8:e8:4f:2f:83:6a:c1:93:11:e1:07:6a:62:f1:
17:ce:bd:fa:91:9f:cd:25:87:cf:4f:a8:de:3d:80:
68:33:b9:94:3e:ad:fe:48:66:05:ab:16:a1:d6:21:
88:d8:b1:db:5d:23:7d:ee:53:94:88:f1:29:20:6c:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DE:81:5A:76:01:50:17:64:B0:A0:44:0A:89:B6:92:14:33:10:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl
X509v3 Authority Key Identifier:
keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:8e:15:40:cb:56:f8:40:c9:a3:fb:20:c3:9f:91:4a:04:67:
cc:69:ff:99:d2:a0:55:b7:41:f6:c5:e5:de:86:c5:a4:e1:f7:
e8:b7:8c:f8:4f:05:b0:ff:97:e2:b2:a1:5f:65:a6:89:7b:d2:
08:e0:f2:1c:21:24:fa:11:1d:dd:f7:67:24:e4:6e:ab:f1:de:
29:72:53:6e:94:f5:d3:5d:f1:c8:5d:03:6a:7e:4c:05:4f:93:
a0:8e:f0:6a:66:3c:57:46:b1:3e:aa:21:1b:18:46:c6:ee:b5:
6c:4e:83:4b:b1:a0:93:91:87:dc:8f:1f:81:a2:ac:40:01:b2:
74:b7:38:82:8d:cb:ff:ab:04:44:14:3a:5e:b3:36:22:f9:e7:
b7:eb:33:6a:19:c5:1c:65:9a:b4:a8:8e:6b:c7:b7:c7:50:46:
f2:d9:84:c7:5f:d5:98:47:43:33:bd:c8:42:b0:0b:db:05:63:
fc:6f:27:e6:59:99:80:78:1d:39:ef:b8:c0:67:06:02:82:41:
f5:55:00:8f:54:34:11:83:ad:48:d5:88:62:b8:81:98:35:86:
73:41:2a:8c:37:1a:32:82:c9:9b:23:08:63:ab:82:6d:1f:e5:
d7:6f:27:2f:d0:3c:ff:59:6d:26:92:8c:c1:2a:13:71:5b:2f:
ed:fc:62:b1
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE0oXXSWEW97X9LsUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm
ODllMB4XDTI2MDMxMzE5MDIwOFoXDTI2MDMxNTE5MDAwMFowLzEtMCsGA1UEAxMk
YTJmMTBjMjktNzNmZS00NWRkLThkMWUtOTc1ZDRmNGM3OWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy8uoxC2SpCnRPA8pu9H9e+U5uBOE0tWzH/D
kaEKGs7rQ4nKY/bAZPFA16uRkRqJBXvXcxZt9hR0wzaeDxtTwsztg91oAbP4vs+k
Vie3OMhbNysvJu+0uRqNDfjbwZc/eS9vN/tVibY4NKQ8COgT4ThVojwn3YDtEMjQ
EVgJ5sE/7YzzshlSkTuUa068CUfYtByOHNC1Vy6t76Xp5wYTwfwTKP18fjHPcg9+
sTLsd8zxGXLrVIMk4ph7RqsQEovTRESZ2OhPL4NqwZMR4QdqYvEXzr36kZ/NJYfP
T6jePYBoM7mUPq3+SGYFqxah1iGI2LHbXSN97lOUiPEpIGwmFwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFLregVp2AVAXZLCgRAqJtpIUMxD9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh
NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvM2Q5YTRjMzUtNTRjMS00
MjdjLThmNmUtZWYxYjE2NDRmODllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm
NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0
Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi
MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCajhVAy1b4QMmj+yDDn5FK
BGfMaf+Z0qBVt0H2xeXehsWk4ffot4z4TwWw/5fisqFfZaaJe9II4PIcIST6ER3d
92ck5G6r8d4pclNulPXTXfHIXQNqfkwFT5OgjvBqZjxXRrE+qiEbGEbG7rVsToNL
saCTkYfcjx+BoqxAAbJ0tziCjcv/qwREFDpeszYi+ee36zNqGcUcZZq0qI5rx7fH
UEby2YTHX9WYR0MzvchCsAvbBWP8byfmWZmAeB0577jAZwYCgkH1VQCPVDQRg61I
1YhiuIGYNYZzQSqMNxoygsmbIwhjq4JtH+XXbycv0Dz/WW0mkozBKhNxWy/t/GKx
-----END CERTIFICATE-----
Generated at Sat Mar 14 18:04:02 2026 by rpki-client