
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft
File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json)
Hash identifier: yF2kBPqo/p8pBjofANv0kv3OiTOF9XpZ46J9VCd3LVg=
Subject key identifier: BB:63:47:C5:10:E7:19:79:46:16:4D:3D:AD:37:BF:C7:8E:55:03:11
Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD
Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d
Certificate serial: 010D0C9F4328584D8C83B55753D63488484DE940
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft
Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E3BF
Signing time: Sat 18 Apr 2026 16:00:03 +0000
Manifest this update: Sat 18 Apr 2026 16:00:03 +0000
Manifest next update: Tue 21 Apr 2026 16:00:00 +0000
Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: Nx7avkKq8OI/UnZGQsHsIA+Uti/dqWxXSj3oURrcIr0=)
2: a48abf00-c06c-348f-93b5-677951e2c9f1.roa (hash: jroRXGNXWt8RuNq13eTaJ5TqlXHBcvR7XzBYvGRvtrY=)
3: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: jLBfRlxG+LDpqtzrtgXBGDs4c3LXj7BMoCU5q1BMqbk=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8c:83:b5:57:53:d6:34:88:48:4d:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d
Validity
Not Before: Apr 18 16:00:03 2026 GMT
Not After : Apr 21 16:00:00 2026 GMT
Subject: CN=ff4dd756-8d0c-4dc7-9d1e-671dea3f4faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:18:0b:51:b3:f5:f7:42:c6:fd:ef:9f:39:
97:55:ba:84:02:08:a5:b7:35:49:5d:f8:35:fd:d4:
d3:71:9a:bd:66:18:20:56:dc:ff:ca:e8:ac:60:5f:
92:34:5a:2e:85:49:42:a8:bf:f2:d3:e3:9d:5a:39:
98:9e:fc:9f:9b:16:e6:5d:5d:e5:b5:5e:9a:55:2b:
84:1a:9f:0a:59:56:1a:ed:f3:4d:ab:ec:3a:04:65:
f9:72:f6:0c:48:b6:07:4d:b3:cb:93:55:16:a0:09:
9e:25:ae:e0:89:38:0a:de:bc:8a:93:d3:9e:99:9b:
44:fa:d5:7b:54:c1:dd:11:d2:d3:c8:ba:f0:4f:0f:
4f:0b:9c:c4:27:47:cc:04:38:fd:13:e7:52:f8:70:
a5:c3:80:e2:bc:6d:5a:4e:17:bd:e7:c1:00:15:fa:
57:2c:07:00:5b:cb:bc:50:e1:93:52:d1:f3:a9:84:
1b:8e:07:f5:0f:18:f2:6d:bc:4e:8b:b8:4b:81:52:
e3:15:95:94:fc:79:a6:13:53:7e:18:c9:b8:62:b1:
c4:86:e1:55:b0:01:ce:a9:e6:a6:11:54:09:b7:7e:
da:87:87:ef:4c:c5:17:a5:6f:ac:9b:b7:13:28:ed:
9f:a9:e9:d5:99:bc:9d:65:a6:8e:8e:cb:15:49:89:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:47:C5:10:E7:19:79:46:16:4D:3D:AD:37:BF:C7:8E:55:03:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl
X509v3 Authority Key Identifier:
keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:a8:8d:80:d8:62:8a:53:c2:6a:1b:c9:d2:45:e8:29:dd:db:
f1:7b:9d:ac:56:46:41:09:c5:9f:78:54:7a:fc:ea:c5:3c:c1:
6e:41:9f:a7:50:75:e3:fb:09:b8:ff:d0:12:87:15:f4:ff:1f:
3f:d8:7a:22:98:bd:40:4e:fe:5a:77:71:cc:8c:de:c5:0e:a3:
3d:1f:9f:44:e9:17:77:21:6d:2f:f8:ed:f3:cc:74:8c:10:8a:
f6:d3:8b:80:24:42:28:58:98:ea:3b:c1:95:87:df:41:5c:b2:
ab:8d:6e:a0:55:56:cf:d5:ba:67:ec:d8:41:54:b6:cc:e4:31:
29:52:2b:4b:b5:01:8b:39:52:34:97:ae:7b:d3:47:cd:2e:2b:
b7:76:0b:1d:6c:d2:d9:46:9b:c2:f8:41:cb:2d:70:a2:d6:69:
3a:3d:29:3c:4c:10:5c:a8:57:d2:9e:50:c6:8f:7b:54:73:a2:
ef:6f:4a:6e:ac:8e:ea:d9:c1:fc:5a:9b:6f:74:17:da:c5:3d:
ef:be:11:13:3e:a4:5a:ea:aa:21:49:fb:b7:24:0c:93:48:0c:
1a:5d:cb:c0:e0:89:77:10:83:95:6b:f5:cc:f3:72:27:5f:3d:
8c:2d:6e:f2:fe:f0:2d:4d:b4:e3:5c:63:bc:61:3a:85:f8:68:
fd:a2:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:36:43 2026 by rpki-client