
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
File: 8ce84fb2-c539-46e7-8212-12b9730afeba.mft (raw, json)
Hash identifier: z5qeiJWFgrttrfw2hBQDki/tvYQQpRUTFDkfutCF9Y8=
Subject key identifier: 09:B8:6E:B6:39:6E:86:E7:60:F2:F1:BA:8E:BD:01:46:B0:12:C9:CA
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial: 010D0C9F4328584BB7F7EF1341B95C3C32333000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
Manifest number: 010D0C9F4328584073A81E43F6C3346BB6CAD4C0
Signing time: Sat 01 Nov 2025 20:00:08 +0000
Manifest this update: Sat 01 Nov 2025 20:00:08 +0000
Manifest next update: Mon 03 Nov 2025 20:00:00 +0000
Files and hashes: 1: 3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa (hash: Z4jlgRlvrCwh0RUkG77xMCTqZLrbpO2nElw83muiZik=)
2: 7750dbea-23be-30cb-a5c2-247a4b108e61.roa (hash: rYkAW/OeCs/hRT+F/E5VnYcOAuMRiIvqb36wHAweZVo=)
3: 8ce84fb2-c539-46e7-8212-12b9730afeba.crl (hash: In84D1ShXevV0+IaEgXN7VzZ+DjBFiIxoGhWVbBWLMY=)
4: e65cd8da-dfed-3bf8-831a-62b853f3c844.roa (hash: 6ITKXBcellPOT9XPmsi2TeBprRE3uZW0CZ2Fa4TV9Xs=)
5: efecd37b-b85c-330f-a2a8-5abf025d13d8.roa (hash: wxgddHQfGgbO+gsjnk0/dFPrvFbLNBSIv1lJCClwRe8=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 03 Nov 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:b7:f7:ef:13:41:b9:5c:3c:32:33:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Validity
Not Before: Nov 1 20:00:08 2025 GMT
Not After : Nov 3 20:00:00 2025 GMT
Subject: CN=c1a44389-3897-46c4-aee4-1061c2af0c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:38:9b:b9:a7:30:dc:1f:dc:cf:28:7a:ca:
f0:ed:ab:d9:b2:29:e2:b2:14:27:f4:0d:b5:9e:86:
cc:dd:db:4b:34:55:30:7a:e2:7b:c7:f9:8c:c4:49:
12:83:2b:0d:9d:75:7f:41:7e:eb:45:74:69:f7:82:
f9:23:36:60:61:4a:51:c9:04:3a:ee:ab:b0:0d:27:
73:79:50:a5:c4:d1:20:c8:09:80:1a:d3:57:08:5d:
a4:8a:47:1e:3e:cc:f9:ae:23:13:96:88:a5:29:12:
60:4e:5d:1b:c7:da:47:31:8d:17:b1:3a:17:c0:6f:
b6:06:54:5f:87:4d:85:54:f1:3e:34:3a:a8:ab:52:
64:64:31:7e:9a:db:8e:5e:aa:27:d4:3f:fc:f7:95:
9b:66:d1:44:e5:2b:e7:37:88:64:46:20:07:23:32:
be:28:d9:d3:33:4c:60:6e:f6:05:38:cf:3e:40:f1:
e1:f3:41:19:e1:ae:7e:fa:b8:50:ff:10:d3:37:1d:
61:03:16:28:f3:f4:08:2c:1b:e1:d5:20:e9:dd:2d:
1b:ae:13:cc:4b:9c:4d:10:97:61:00:d9:7d:d2:56:
84:92:29:cd:84:a5:c9:b6:f3:19:a5:af:64:13:6a:
3a:24:90:36:69:ad:9a:87:90:b2:8f:28:37:40:a4:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B8:6E:B6:39:6E:86:E7:60:F2:F1:BA:8E:BD:01:46:B0:12:C9:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
X509v3 Authority Key Identifier:
keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:0c:bc:44:e5:e5:ee:39:33:3f:bf:93:bd:74:ab:d5:ec:e2:
fe:a7:d6:c5:5c:3b:1f:37:79:60:0c:43:b7:ba:93:8f:21:2f:
74:4e:7a:ef:69:92:f7:b3:33:f4:8d:14:9b:e1:17:b9:52:f4:
ed:06:9b:11:ab:10:1a:22:78:97:f7:3d:77:b9:75:6a:df:1d:
bf:9c:36:51:fa:0d:89:0a:df:bc:f5:06:da:b9:5e:67:74:b0:
7d:cf:bc:8d:62:c8:33:c8:ab:83:8f:1e:df:be:ee:7b:35:50:
5c:d6:8f:1d:fd:39:29:20:70:f0:40:0a:64:29:51:a0:d5:7d:
d8:41:14:61:21:95:22:36:b1:d3:f3:ae:a6:09:df:97:a6:dd:
4c:b0:4e:2e:fd:11:78:4d:cb:e9:f8:b3:6e:79:43:e4:c4:ca:
57:d5:10:b1:96:7b:5d:d6:ef:31:d3:20:dc:8d:1c:bd:aa:f4:
83:30:0a:3d:c8:9a:a7:e6:1f:51:39:e6:c3:1d:b0:aa:fa:98:
17:f9:3f:4d:8b:90:5f:7b:72:27:bc:04:4c:d5:f7:d0:02:79:
e6:03:87:de:31:3d:4c:fb:e5:92:1d:a7:90:e1:64:8c:4d:5c:
f5:09:30:f4:bc:e9:e4:33:32:61:28:40:01:98:eb:c2:e9:9b:
43:d7:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 16:35:43 2025 by rpki-client