Manifest
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
File: arin-rpki-ta.mft (raw, json)
Hash identifier: nxPamfnpiqJCZp3FzAjhcEldZTqVzO8CiSgiBasXgxQ=
Subject key identifier: F9:2A:99:BD:DA:23:F2:6D:7D:62:7B:E1:0F:37:22:2A:6D:57:05:1F
Authority key identifier: 13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
Certificate issuer: /CN=arin-rpki-ta
Certificate serial: 010D0C9F4328584EF47E6075EB2C139361C60F70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
Manifest number: 010D0C9F4328584EF47E6075EB2C139361C60F71
Signing time: Tue 25 Aug 2026 14:40:23 +0000
Manifest this update: Tue 25 Aug 2026 14:40:23 +0000
Manifest next update: Sun 25 Apr 2027 14:40:23 +0000
Files and hashes: 1: 5e4a23ea-e80a-403e-b08c-2171da2157d3.cer (hash: JnGpfywDmoTS5K3wL/vcEzryGLVYZew+pveCWTXUg4Q=)
2: arin-rpki-ta.crl (hash: /L7QCEPxbYzLzZlbqql2jce1mqOS2/1kzMKoy2WCCpY=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 25 Apr 2027 14:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f4:7e:60:75:eb:2c:13:93:61:c6:0f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=arin-rpki-ta
Validity
Not Before: Aug 25 14:40:23 2026 GMT
Not After : Apr 25 14:40:23 2027 GMT
Subject: CN=71bf03c6-8a7b-4dcd-ba3d-3164c92a3232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:31:8d:09:71:bb:43:e7:3d:4f:80:19:ba:
98:47:21:db:6f:df:97:c8:56:d6:90:9e:b1:30:41:
a7:79:bc:62:d5:e0:51:99:30:ac:7b:1c:dc:6c:00:
f5:6a:12:0d:61:e5:11:2f:ae:37:2b:16:c8:79:58:
95:5d:65:33:ea:07:88:30:56:cc:fe:74:e5:ac:d6:
50:67:5a:71:8b:3a:2a:9a:c9:32:7f:97:92:75:be:
63:c8:af:b9:3c:4e:2a:3f:dd:d6:f8:53:dc:ea:10:
13:c7:8e:5c:3e:cd:6f:b3:ac:f6:8b:aa:7b:01:53:
ee:fe:56:39:d0:87:ba:32:e3:85:79:49:eb:72:8f:
a5:1b:ea:c1:81:d8:4a:5f:ed:fa:73:48:bd:8f:5c:
08:6a:4c:81:85:98:9c:3c:61:2c:83:c9:3d:e8:e7:
6a:41:b7:26:a2:d7:ad:37:a9:65:75:45:80:4f:a7:
e1:e7:82:cb:9f:50:53:1c:95:de:19:f6:11:89:11:
81:4d:f2:48:0b:64:5d:8b:fb:63:82:f0:c3:98:af:
c0:38:0c:00:f9:71:8e:a5:a3:82:6d:1b:0d:52:3c:
b0:7e:2a:db:a6:52:86:91:ad:d0:49:e3:76:01:59:
63:fd:53:b9:34:80:2c:8a:79:19:40:42:f7:5e:0a:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:99:BD:DA:23:F2:6D:7D:62:7B:E1:0F:37:22:2A:6D:57:05:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
X509v3 Authority Key Identifier:
keyid:13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:01:b2:78:e4:3c:27:ab:1d:0d:cc:9a:b6:eb:57:97:03:91:
87:5a:5b:79:6b:b7:20:c9:3e:95:0a:74:48:df:38:e7:f1:84:
d0:6f:dd:c0:f6:2c:03:c3:0c:b1:02:52:3c:01:d5:b0:19:00:
c6:d1:7a:dc:cf:b3:2c:f9:09:23:2d:ae:50:72:0a:6f:c0:fd:
3d:32:58:80:bb:2b:bb:54:b9:04:64:83:d6:b8:0d:e4:ef:0a:
96:01:2d:d9:d0:0d:c1:1e:9e:86:c8:a6:42:8a:0e:6e:d7:ca:
bd:c3:18:ef:96:21:50:e5:8f:8f:80:64:73:a7:45:a2:20:07:
6e:26:24:c3:f4:9b:90:23:5a:ac:07:9b:7f:33:c7:dd:0b:e7:
e8:f4:8c:50:3a:b1:68:ae:89:7d:5e:8b:e9:88:23:4d:c9:09:
4f:f1:ba:c6:7b:a4:d4:36:37:51:99:6a:12:bf:45:78:c2:55:
26:ca:80:29:7e:11:2b:a1:9f:4a:1f:8b:5f:f1:81:bb:4a:15:
79:99:af:04:65:81:cf:21:46:36:c2:5a:25:22:a0:c6:7d:99:
eb:8d:9f:66:df:cd:69:14:26:7d:3e:6f:7a:de:26:cc:1a:bc:
60:df:d4:d9:80:00:13:b3:cd:0c:20:b0:91:9b:38:5d:6f:69:
3b:16:51:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:41:09 2026 by rpki-client