
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft
File: cff1a08e-9692-475a-9b04-916530111389.mft (raw, json)
Hash identifier: a2AsVKn3a+MTBvI76fFcy6nVxRvimemylv2DonvouHI=
Subject key identifier: 13:2A:39:EC:B6:89:6B:79:E7:4F:FE:58:B1:42:02:10:3D:FD:EA:D3
Authority key identifier: FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1
Certificate issuer: /CN=cff1a08e-9692-475a-9b04-916530111389
Certificate serial: 010D0C9F4328584D8176C307B18E867371D42000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft
Manifest number: 010D0C9F4328584CDA11893013BD4807BFFB1283
Signing time: Tue 14 Apr 2026 17:00:03 +0000
Manifest this update: Tue 14 Apr 2026 17:00:03 +0000
Manifest next update: Fri 17 Apr 2026 17:00:00 +0000
Files and hashes: 1: 5143d672-ddfc-34fe-972f-167664e29a5f.roa (hash: Nnu56oJWSCMJxZklRHM6cKCzv/1s6nl61EQOcIw6U7Q=)
2: cff1a08e-9692-475a-9b04-916530111389.crl (hash: Rw/fyxtxgI/iSuuqYCjp9KuzWXHaYsYSvqGhPYPPr7E=)
3: f23fd077-50eb-3af5-a740-69612230d97d.asa (hash: f1SXgASUEByx4lHVTIsX2MEYvJoA3xjhHkAhlPyPVAg=)
4: f71ddcd1-bad1-3544-96ec-1a572beee366.roa (hash: G9nmtK2YezYgGZJ77o7PrBy0B96fJR5D7zkN1mOU/+4=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:76:c3:07:b1:8e:86:73:71:d4:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff1a08e-9692-475a-9b04-916530111389
Validity
Not Before: Apr 14 17:00:03 2026 GMT
Not After : Apr 17 17:00:00 2026 GMT
Subject: CN=67e8011f-d3df-47f3-b1e7-9794d14caeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:ff:1a:85:fc:5e:bd:69:fd:c3:1e:57:b2:
6a:e1:9a:ed:40:6a:19:97:f4:b6:32:23:6c:99:d8:
90:14:be:62:a2:3a:82:07:aa:d4:e5:bf:e3:03:ac:
f6:db:06:f0:24:69:ce:c7:a2:97:31:83:d5:7b:2c:
3d:72:0b:54:1e:0a:1a:1b:ef:79:53:fe:53:8c:43:
87:8a:2a:13:a2:df:d2:39:a7:81:c3:66:0a:17:cb:
e6:2d:1f:f3:29:29:12:a0:9a:9c:f4:0e:10:b2:43:
fc:16:db:49:80:1d:f9:b5:3a:60:8b:fa:50:5d:56:
71:b7:ac:ee:ab:ad:c9:63:88:9f:1d:f0:af:76:a1:
67:95:ef:cd:81:8c:2b:d1:e2:46:4d:f7:da:16:3a:
19:26:26:5e:e0:1a:9f:5d:df:44:e8:7f:81:28:6d:
66:83:3e:70:10:ce:47:d4:f5:75:cb:7f:29:43:2a:
41:b5:13:6a:c9:d9:d8:50:3d:c0:ee:9b:39:03:97:
e1:64:65:fa:91:f2:33:4f:86:c0:d1:20:fc:5c:6b:
4a:0b:6e:23:c8:8d:36:cc:31:8b:ed:0d:53:8b:79:
f7:06:55:6e:e9:9f:16:ae:92:d7:3b:cf:3e:af:d2:
e0:e3:55:fd:aa:4e:bf:79:20:db:b7:e5:95:a5:8f:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2A:39:EC:B6:89:6B:79:E7:4F:FE:58:B1:42:02:10:3D:FD:EA:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.crl
X509v3 Authority Key Identifier:
keyid:FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:66:7d:76:23:3d:fd:e7:a4:56:a5:4a:5f:fe:ba:49:b9:f3:
80:e0:ea:c5:81:0b:70:75:c7:13:0d:52:c3:3c:b7:de:f8:fd:
8e:f0:8b:f4:3f:d2:c5:ef:3f:ee:d5:6e:4b:1f:e1:a9:1e:e3:
f6:f8:12:77:f1:c2:ef:28:51:34:44:50:ec:ac:3b:a5:c1:70:
f8:50:aa:07:bf:c4:dc:2c:6f:43:e1:39:5d:e5:58:68:b8:49:
1e:c1:db:08:b4:9d:cc:75:eb:7a:73:42:be:b5:ec:a1:42:36:
54:4d:b3:f7:52:c6:78:26:ba:75:79:3d:2b:26:55:ce:9d:1b:
aa:bf:b9:67:6f:d1:d8:91:c5:e5:fe:81:43:83:0c:71:18:cd:
05:99:ac:13:e3:75:35:cd:bd:00:23:44:7c:f9:01:d7:ac:ea:
ec:31:9e:29:fe:84:ce:61:11:91:ca:6b:9e:9a:9b:91:76:64:
02:ac:fd:6b:21:f7:23:f7:56:c5:6d:b7:d6:29:ea:f8:2a:df:
d1:7f:02:61:8d:eb:fb:ae:cb:eb:b3:08:dd:54:f2:2b:a0:e1:
ff:50:af:51:9c:1d:df:81:b0:e7:1c:59:89:69:8b:24:dd:c9:
56:6d:1a:fb:45:7d:34:9e:a8:3d:e0:63:fa:7e:ca:68:7a:fc:
92:e3:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 08:33:26 2026 by rpki-client