
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft
File: 29cf59bb-49d4-46dc-a312-da9c10dc336e.mft (raw, json)
Hash identifier: jzl7JSgwDqtYzjllxO9Mf8HEkDfRrmr1EstPwkxdGcQ=
Subject key identifier: BE:3E:31:C8:06:B9:A5:BB:52:C1:68:59:3F:3F:92:BD:C5:39:55:39
Authority key identifier: 75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90
Certificate issuer: /CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
Certificate serial: 010D0C9F4328584BC05800700F8C6F4D1AB3B3A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft
Manifest number: 010D0C9F43285840DE274F7AF80AA1B2332D8C83
Signing time: Tue 04 Nov 2025 20:00:08 +0000
Manifest this update: Tue 04 Nov 2025 20:00:08 +0000
Manifest next update: Fri 07 Nov 2025 20:00:00 +0000
Files and hashes: 1: 025f189b-ca85-3020-8e51-403bd292c2d6.roa (hash: 1BbjpFv2TNiLlfJwjxQlHaYYEu+5G5yOCUBQgcVpx9Q=)
2: 29cf59bb-49d4-46dc-a312-da9c10dc336e.crl (hash: ANx7cLJfykp3dWBWQ4+vJe7GWhVGkL7DeooNENHuYIY=)
3: 4f20e63c-cd20-3051-9632-312975732fcb.roa (hash: +o962QjYfKRdXGaqk2kevH2CIZiCFE7qIPEqYc9PGZ4=)
4: 87ccbfe3-8659-3f36-ad24-7412da6698c2.roa (hash: tRIGIssQz+3KJyRNhHwAjD7j5URjKwGhMCgRN/PUBpQ=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c0:58:00:70:0f:8c:6f:4d:1a:b3:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29cf59bb-49d4-46dc-a312-da9c10dc336e
Validity
Not Before: Nov 4 20:00:08 2025 GMT
Not After : Nov 7 20:00:00 2025 GMT
Subject: CN=7790907a-90ed-4e23-88cf-bac44bfda59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:53:3e:21:16:bc:c7:f1:66:65:eb:2f:8b:
18:f8:29:01:ab:ff:9f:95:a5:46:47:65:70:d6:16:
24:55:62:a4:61:54:99:7a:bc:17:f7:f6:36:7c:84:
a1:6b:12:08:3c:4e:3f:6e:13:be:88:ad:af:c6:11:
c1:30:e2:72:6d:8d:da:6f:c8:4a:78:22:5c:dd:1e:
0e:a4:44:fc:57:4a:3d:e3:22:f4:8e:79:b9:19:b2:
63:3c:87:b5:f6:49:a2:fc:cb:bf:54:1b:c4:98:42:
9d:14:3f:50:30:86:b9:5e:da:2d:f5:31:c9:85:2e:
d8:4e:95:01:7c:d2:3f:f3:40:14:7b:b5:4d:02:22:
49:c6:44:73:ec:1f:fc:ae:4f:a3:97:5d:f2:19:1a:
b9:f0:75:01:e8:5d:e9:c4:cc:0d:de:3d:bd:10:29:
16:19:e5:7a:be:01:37:f4:6c:db:73:6e:72:57:77:
f3:8c:b8:a6:ba:28:1b:68:69:08:ae:c9:0f:45:db:
3f:85:73:62:88:35:e3:c3:81:30:f4:51:97:d5:6d:
6a:26:ba:5c:e2:8f:ab:df:71:64:84:a9:68:7c:58:
7d:b0:c5:0d:59:f3:5d:c2:bf:bc:67:3c:a4:80:8d:
49:37:5e:59:9b:17:22:bd:68:74:a6:af:e2:f7:36:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:31:C8:06:B9:A5:BB:52:C1:68:59:3F:3F:92:BD:C5:39:55:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e/29cf59bb-49d4-46dc-a312-da9c10dc336e.crl
X509v3 Authority Key Identifier:
keyid:75:6D:39:EF:55:71:4A:71:37:2C:93:BC:47:6F:1D:A8:BC:34:23:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29cf59bb-49d4-46dc-a312-da9c10dc336e.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:32:e7:32:b2:7c:79:7d:81:b4:ac:33:00:81:9a:20:a9:8e:
dd:8a:4f:12:89:68:0c:e2:35:de:a4:ee:c2:66:76:70:33:d4:
1f:7e:ac:43:94:53:dd:38:46:26:df:1e:f8:82:1c:5a:5c:e4:
2c:72:2f:79:ce:f7:49:23:fa:40:63:0a:23:d4:81:9c:0d:28:
80:e2:71:6e:7f:e1:83:b3:7d:8f:58:24:e1:36:44:09:26:38:
ef:19:a8:0d:10:b1:35:09:1a:45:e5:9c:a0:85:d3:73:e8:db:
17:f6:94:d6:d9:ec:36:82:f2:85:39:84:5f:9a:2b:5c:78:57:
b8:60:61:0d:a4:69:9f:4c:1f:91:66:94:21:3f:67:f5:06:17:
77:45:30:f2:05:31:1d:76:59:9d:4d:b5:67:5e:97:cd:43:9e:
50:82:1f:72:d5:9b:9a:d0:16:f0:8f:d6:6e:c0:d1:90:3e:87:
5c:41:e8:5a:16:44:f1:9b:3d:d5:15:fb:be:5c:f5:cf:ae:c6:
59:a6:69:4d:90:f7:53:1d:83:4f:7b:6d:db:10:bc:13:a7:78:
bc:28:47:ea:75:79:67:d6:38:55:f0:c2:7d:c2:4c:e8:5a:a4:
31:9a:cb:eb:d2:2d:3a:18:1d:43:58:23:e0:9e:db:8c:e6:67:
dc:d0:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:55:51 2025 by rpki-client