
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
File: 1d639366-c044-456e-b8c8-0de04a543a0c.mft (raw, json)
Hash identifier: +FJ4/ur8HtNDItrMQA9uf8bhNC0bOJO0r1Uc9Kk1jHg=
Subject key identifier: 76:50:D4:8A:65:9E:9C:AD:E9:7B:78:A5:A1:8D:FD:DE:B9:A3:3B:58
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial: 010D0C9F4328584DD7C666600857698292E3C800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
Manifest number: 010D0C9F4328584299821793FE16C6935AF7ED1C
Signing time: Fri 15 May 2026 15:00:03 +0000
Manifest this update: Fri 15 May 2026 15:00:03 +0000
Manifest next update: Sun 17 May 2026 15:00:00 +0000
Files and hashes: 1: 00177cdd-fd61-301a-9c96-8f476bc62fb5.roa (hash: k9zemIFEFGIZuP780JsS0po/UJYBGptM4maiiduPdrE=)
2: 0c201fcb-96dc-3f35-9dc5-9b234eb320ad.roa (hash: YHwDZcGma/gS1ljrJDY0NxOLI9ut8QhdKcJcWmjuth4=)
3: 0ca3a45b-9baa-33f5-9b43-044bf21b70dd.roa (hash: zWJ2DgCAv4VvoohxOfbL33PTWjtYuilOFr/bG3ghqt0=)
4: 0d56a114-a262-3149-ae18-dd6becf95266.roa (hash: IK3sizO97KVfUCKJAmVtXzHqa4pXbXdiBKWO3OLIsnE=)
5: 0d758ae1-58b0-3646-ba88-3d0811f79226.roa (hash: H/sDUmZXiA0GF+1ov0vbvIJwll9YWwvA0U1x4wZlF5M=)
6: 126e6211-b10e-34d5-84e6-013c27a19202.roa (hash: jwMtisPyiGI2uO4Rw5Z1cyjuGlWZPqK6TvRjq8ND+HY=)
7: 1b166864-6f5a-3661-9e33-e8fbcebda55e.roa (hash: A8QSEdqPhEpHUBzea8bfWo5V81+l7JKjS5O5yCr7CoA=)
8: 1d639366-c044-456e-b8c8-0de04a543a0c.crl (hash: GJtJp1g6tfukA+z4wEBa+n/ZaCfyUzXTJWb75eITZxI=)
9: 237eab70-580a-3b80-8b65-d28d1535e406.roa (hash: wOVu9QOvF1Hbc76ItZ2aIL5j40rnaffvLWG8ZNo8fic=)
10: 2a09d5aa-ff44-364e-8546-bc3f9845a726.roa (hash: L5jaYcLNGYPrbu9GqQibN9ukdkpnKxbdiBkhGH8p/pg=)
11: 2c998f78-e91f-34b3-b1fb-62f532bbc284.roa (hash: Qjvzxa34ISPF9DCSzfZPTNFGuf0dtC+fm7Xuzwq3dJQ=)
12: 2de5309f-2941-3cb8-9d7b-3d214fc87564.roa (hash: LHEagNl+uzkt5WZ8DUzPSmBMSK7xsYCdheO310nlj9E=)
13: 2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa (hash: wigawSfEqblV6x/h56lEttODNbBnkiU+CPUBW0MzJP4=)
14: 2f38b7d1-b1ed-3703-9281-2bace1cc3dd0.roa (hash: 9way6WIEZAtcn0SbZl5o2DKH1KV9TdBZAfG3BRlRDGk=)
15: 424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa (hash: OOaVPZzvNQOd6YJeKlECywswY7Pi6scLhy5gAk1x6dU=)
16: 4580b119-4270-3a2c-be49-ead5b0bd8d29.roa (hash: LUMTNMkmTZxgVut7D9zcoKSRKJpBOQyL5ac/3uL2eoU=)
17: 510283b1-9ffc-38f8-ae15-b597e8af0bee.roa (hash: PBQachvNXvD4O9cvxIzb0iwm9Jg+XDR2yofifvJ6DGk=)
18: 54b9a941-ecc1-334c-a3d2-848854fb9b1f.roa (hash: eAvlpM083p7gdBNCTO9W4pvoVWHA7pWhOdAEXKsTrb4=)
19: 662f8067-dc81-3eb0-90f1-da7de228add8.roa (hash: V5I1vht6c8Bv/Rm9Rs7vWU76KRw8jGgRp927MKJLNjk=)
20: 663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa (hash: IBblCRQUbrzPayBVieerSXMVuO+bO6rqOpsMltOasus=)
21: 6752ba81-5480-36b8-ac6b-3a15656070f0.roa (hash: XtQ8WiWMqkoimyovC2BLkxGagISGVaXCcOSXvoCrW4k=)
22: 6a5ba6e7-8f84-31a1-b3e1-46fc5767987a.roa (hash: XE1Xcwz/sQD4gRQAg9cHT/RJ0NbavfRtFbo6xqX1ys0=)
23: 7112a2d1-bb6b-3d78-b06e-d6ec546c1183.roa (hash: YYMd5iHAtXxUDtuz1h2hSsX4TY7GaVKhcg45D7vBXK0=)
24: 72490e2b-d9c4-3ddd-a82a-8ec002bfb10e.roa (hash: bGFk63mhpOAa5E+ohx6tAFpDhWkweVS13ZqvG6it+Dk=)
25: 8b1d10f2-d762-3535-82e1-19a0a82b5df4.roa (hash: k9iDyAZQ5Ut7XYo+vnXGq4lTMq2iMSrELrTlThZh2s4=)
26: 8c1da890-5067-3c19-a42d-346ff7ca305f.roa (hash: 1Qt4EjlcznrNM9DWp80R4J+F8Q0Ce5JudsTM9sEXQRg=)
27: 8d3b1f86-1cb4-3f65-a31c-fdb3f834efb9.roa (hash: uX/vHlzg8+1FHXyr7orByZ+dBkJnke5BKk1GE8Jko6Q=)
28: 94d5354a-2fe8-3a8a-94d5-9d83d6728ddd.roa (hash: D4Ui7DYUY/yUvrPzyhayf2c6/kmMOmXUyWOwWJPUt5E=)
29: 9adfee51-ef16-3c8f-b5c0-0ac8a28d32f0.roa (hash: aW6iTNtS2G35N0yBkZcTz78K01jjDxh5eJbzesk8V1s=)
30: ad32cf5c-d6cb-3a07-9d6e-fe68b6d0eef9.roa (hash: O4s8BXchoBM9SRGfAyVY5p7Kpqk/UT+AgSgF9Foqpok=)
31: c36929a8-3c26-3a68-9bf7-172634b41cdc.roa (hash: OOUd9Oz1XMajNhAMdxydc0VOoBZ+jkTweHmH5bM/xlw=)
32: cf95393a-e1bd-30c6-a79d-4619c61ec4ff.roa (hash: cMPJW7ch1q4mhJd+2N1YjWl3kf/jAHSc4M+fZhwE5DY=)
33: d13f9f99-e597-3904-ba20-da0c91f2c353.roa (hash: RAqSAFBcHRG4DHtdZL8yRwGonxCb6GVFrHrex59tr44=)
34: d6762437-7c75-3adc-aeda-ae84b9be1dac.roa (hash: u4CTYtvOk2IjsfhEmBbwTO4DeWUBS7XogtCdL44j3Gk=)
35: ddcaa9e3-5d8d-3969-8188-845f5c5402a6.roa (hash: 2Bfk0gxvJuAxbtW2M+wneQC4cguQE1ESHYF6dZAEW/k=)
36: e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa (hash: v6j3l1A+Hjra0oDzA8S4AQIVS1vCNeveNaj4nRU1Zkk=)
37: f037a158-16f2-361a-8db7-14ace1d91987.roa (hash: sf+EOoLVvOEyU1tjpWT8g2Vs0J8epQFeCrhyFMJV/qA=)
38: f059a905-6054-39d3-9bf9-1b9bc055f28c.roa (hash: sL3af4fCkkjwNYAIsiqcQc0eVcxoQnvtshyJqA3B77w=)
39: f06f6331-9f55-3d81-87e7-143969a59833.roa (hash: SiVkTgJFi2GqOzpQ3X/BN/pUmRLaqT3g0/9fWMuuUsY=)
40: f0ed1296-8f5a-337f-9532-eb824262b9c5.roa (hash: 33luRdioh8FInjtE9eMeoUieKrn/9JlTulOKWj89apk=)
41: f24c412e-45d6-37b0-8bf3-7513d294c7f8.roa (hash: JGNbuRHv9FMmSuxIKTIPQtmss+DnrevMseTiEv1dHSY=)
42: f29d764e-b7e6-3e39-8c12-114a58b0b298.roa (hash: ElDLrCH4g4DTc9fVcsB2EankHtmSq2UG2UenKMlXp2M=)
43: f670fa0a-c221-3b1c-bd47-9821b1a8e9d0.roa (hash: JPZPvfYFwuv6VjeZIOU6AS05wwT3apJzBVRzirSkGJ4=)
44: f6e14782-6ec0-3395-953a-c847d910ff01.roa (hash: nSZ0hx7mo2+Raz+58NyZwGqz3fkMtWQ9PUEnUXLwPls=)
45: f733cfa9-bfc6-388e-9b34-c1b5ccbd3f94.roa (hash: qJvw57GWoLRuJR3CNGaJOWMijnFxuw63gJjiVQsM1nU=)
46: f73fce6c-36be-32ce-a7c5-47174ce97ee2.roa (hash: XWxIJpkc7Zxz2ku6vXx8m91kXQq3VhiLjUhgkSrOGrM=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 17 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d7:c6:66:60:08:57:69:82:92:e3:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
Validity
Not Before: May 15 15:00:03 2026 GMT
Not After : May 17 15:00:00 2026 GMT
Subject: CN=abd83b99-7950-489a-b23c-78291581b926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:34:42:c5:d6:bb:51:76:9a:91:bc:b8:88:
f3:30:78:9d:75:02:3b:52:8f:d1:96:63:ea:fc:6b:
f5:38:18:c2:ec:ba:cd:60:69:90:6b:95:a5:fd:3e:
41:36:d3:b7:d4:82:8d:0b:b6:83:b8:6b:27:46:02:
75:00:b2:b9:b3:08:20:3e:63:ab:1e:97:83:dd:e3:
8b:ca:89:b0:9d:61:11:ea:77:7f:50:79:74:fd:65:
e1:97:62:b7:11:98:8e:a2:f1:ef:c9:44:e1:0e:d8:
68:c2:53:6a:36:cb:16:ed:89:c2:68:f8:a6:97:76:
40:ff:14:ce:e9:ee:43:bf:46:78:c6:5b:fc:61:9e:
89:5a:00:28:b3:c4:71:c5:b9:50:de:c3:3a:d8:a4:
28:06:4e:c8:a0:cc:99:19:8d:24:4b:6e:45:33:8b:
53:47:77:7a:c3:c0:51:ad:8a:08:64:66:8c:25:1a:
70:cb:c4:a4:ac:cf:fb:f1:fd:35:0e:84:4f:dc:47:
19:f2:c5:c4:a4:3d:4a:9f:dc:e7:97:ca:09:32:6a:
bc:8b:c2:7e:b1:d0:18:21:36:8c:68:93:b5:de:5b:
f0:d1:ae:fc:74:92:7e:7c:20:e0:24:9e:fe:2d:fd:
36:be:25:20:18:9b:37:c1:03:65:1b:8f:d2:7a:30:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:50:D4:8A:65:9E:9C:AD:E9:7B:78:A5:A1:8D:FD:DE:B9:A3:3B:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
X509v3 Authority Key Identifier:
keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:65:8c:f7:89:7d:ae:93:ed:56:aa:c5:5c:0f:02:f3:94:04:
54:92:4d:0f:af:33:8c:a9:ab:ea:74:12:50:e1:69:09:7d:00:
fc:3b:10:2f:28:4c:96:76:b9:ac:57:6a:1c:18:b4:cd:f2:67:
94:fe:b5:90:4a:cf:2e:7c:92:e6:26:f7:8f:9e:c2:66:46:9e:
24:12:6f:0e:d4:f5:fa:5a:70:43:c0:2e:77:03:6d:c0:9a:72:
98:16:e3:88:5e:16:80:dc:38:24:62:4c:fb:13:75:d4:de:c3:
63:b3:9a:74:c2:9b:21:11:e4:09:2c:1e:59:84:48:b4:3b:b7:
54:31:1f:e2:bb:83:f1:9c:8b:98:06:35:b0:3d:83:7c:5a:7e:
79:16:ba:2f:77:4a:b7:f4:5d:c3:66:19:75:a0:a6:ef:96:40:
01:f8:c7:3e:50:42:4c:3e:bd:b9:2b:df:1d:9a:f5:d9:eb:26:
8a:59:6a:b9:00:20:1c:4c:48:40:6e:e5:98:fb:b5:3f:27:83:
64:06:de:5b:88:c1:ea:71:25:d0:5a:db:b1:d9:75:dc:90:e4:
86:b8:fa:69:a8:f5:6c:c6:c0:06:c5:3a:b8:0a:55:d5:3f:71:
fd:c1:64:f3:31:f8:9a:02:4c:e1:b3:a8:4e:da:a2:a4:19:f5:
16:5d:c8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:35:55 2026 by rpki-client