
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft
File: af3da563-8689-4ebd-a553-31a2f310113a.mft (raw, json)
Hash identifier: 5vSXlw8C13biuDUfcxRZS3l0CYzeXYTabj9wHz7yhEo=
Subject key identifier: 9E:BD:2F:6A:32:AD:90:CE:CA:FF:A6:6B:4C:3D:D3:7E:21:A9:FD:A7
Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0
Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a
Certificate serial: 010D0C9F4328584DEB8CC072EC8220D02784E580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft
Manifest number: 010D0C9F4328584A9ADDC7444D916DA79CBF4441
Signing time: Fri 22 May 2026 17:00:03 +0000
Manifest this update: Fri 22 May 2026 17:00:03 +0000
Manifest next update: Mon 25 May 2026 17:00:00 +0000
Files and hashes: 1: 50ec3321-1821-394a-b233-3c10916fd9ab.roa (hash: wbqzvXbShsYT6yopSMTupEzcRRzBIwRJBN9EIvpQb/8=)
2: 76f67f84-6693-3a33-8bf2-2b4e5d536b3d.roa (hash: F1/eb4pri4Lw6m8dEUR3Kxr7YbY5kdSpzgwmxdNJ6K4=)
3: a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa (hash: NdR+7F4nDbUwjchka1mWf3U1V1/O2r6KrlQ+Hw9gq4g=)
4: af3da563-8689-4ebd-a553-31a2f310113a.crl (hash: dXdPl71HedqDgFq8wwMALy4Jhs+43bpSCZ/+Gotu5Nk=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:eb:8c:c0:72:ec:82:20:d0:27:84:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a
Validity
Not Before: May 22 17:00:03 2026 GMT
Not After : May 25 17:00:00 2026 GMT
Subject: CN=376ffb1a-5ec1-43e6-ba0e-481ae4f95cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:16:8e:b6:a9:9c:c1:97:f3:29:2d:80:ee:
58:b0:e4:45:e8:2a:bf:a7:b5:54:b0:23:14:ee:90:
43:95:ac:55:32:16:cc:36:d2:95:13:d9:da:8d:0e:
82:6f:38:1c:3a:06:31:6b:28:81:a0:7f:72:29:ca:
15:af:dc:d0:e3:c0:22:ee:f4:2b:d8:92:c2:00:ef:
ac:20:03:06:40:8b:b4:50:e7:40:4f:55:c6:20:88:
bd:98:b9:5c:c9:e0:48:7f:40:94:29:63:15:18:c6:
5a:2b:fe:a6:48:35:87:b9:2d:21:73:dc:c7:96:d0:
83:26:9b:a5:6e:9d:da:cd:39:bf:db:0f:eb:0c:c3:
fe:5f:07:31:a7:28:5e:b0:1c:b7:fc:de:91:d4:77:
3b:de:8f:4d:de:94:86:16:04:ed:95:58:f1:a3:c8:
d1:8d:18:cc:88:2a:2f:5a:05:92:43:07:9a:d5:6b:
d2:7e:52:02:f8:bf:cf:5f:84:b0:1e:65:e6:0a:1f:
b9:f8:25:8b:c4:48:f0:50:94:14:11:f7:2b:1a:8f:
34:7d:ac:e7:cd:7c:c4:31:cb:e5:d1:8b:2f:e8:a2:
ad:2a:86:d9:1e:ea:03:6d:96:ac:88:90:cb:36:b4:
60:6f:f6:3f:10:2f:a3:26:d3:67:fe:a4:79:20:8f:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BD:2F:6A:32:AD:90:CE:CA:FF:A6:6B:4C:3D:D3:7E:21:A9:FD:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl
X509v3 Authority Key Identifier:
keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:49:60:ab:c3:ae:5f:cd:d9:20:e6:2d:53:0b:f0:51:0a:1b:
80:b2:55:5e:1a:b4:04:ef:49:49:bf:a8:39:6e:e2:08:da:c6:
31:33:12:c0:94:6d:e1:83:2c:b6:29:e6:0b:67:d8:f7:8f:d7:
f7:f8:a0:a0:a6:c1:7b:34:d9:c9:ce:52:f3:88:d0:ee:f0:cd:
a5:31:d1:a6:83:f6:5c:5f:2a:ce:76:ec:b2:8e:a3:30:f4:88:
f2:fa:48:e4:67:d9:e4:d9:8e:16:bf:99:f7:8d:84:2a:be:22:
7a:09:fb:7a:0e:eb:6b:a0:dc:aa:45:f6:f5:42:70:bf:8d:58:
13:91:15:ab:6e:ec:08:2d:c8:8c:ac:e1:ca:b6:95:86:c2:95:
bf:b4:ae:3d:5d:2b:4d:35:4f:54:75:2f:53:25:35:a4:a4:8b:
c4:55:5a:38:7c:0a:6c:eb:ce:e3:a6:42:2f:68:ad:4f:56:f7:
50:fe:c1:e6:2c:57:09:90:b6:78:50:c8:5d:13:11:58:e5:f9:
8c:f5:3d:27:8a:b9:f2:02:51:86:1c:40:16:e0:c1:96:72:6c:
50:bb:66:a7:a6:de:e8:3d:27:a6:f9:8f:5e:9c:bb:e4:74:e4:
e0:bc:f6:f6:55:fc:e3:49:9a:84:cf:68:d7:20:79:c3:70:32:
c3:23:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:30:21 2026 by rpki-client