
$ rpki-client -vvvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
File: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft (raw, json)
Hash identifier: nOzEyxbUydsz95u+uCRebvNBDMRffaUAl0miqGIk9h4=
Subject key identifier: 84:CD:45:52:AA:40:F4:27:47:59:DC:CA:C6:EF:8F:8A:47:8B:8F:B2
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Certificate issuer: /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial: 4BC570EAC414C579122D9AB0D134351179024D9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
Manifest number: 024D
Signing time: Thu 05 Nov 2026 12:09:46 +0000
Manifest this update: Thu 05 Nov 2026 12:04:46 +0000
Manifest next update: Fri 06 Nov 2026 13:07:46 +0000
Files and hashes: 1: 3136352e3134302e32372e302f32342d3234203d3e20333937363330.roa (hash: 8Y5YaE15v1RYZl+9JziTsQUhHQyIXMCeP8MLnS3/bGM=)
2: DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl (hash: juRuc0Ss3q6zxYcMdk8OD5023vPfGIUnrjyi6pzBWvw=)
3: 3136352e3134302e32372e302f32342d3234203d3e203634323637.roa (hash: mBpMZRqA+M1/2QICKQg1IZo1Jr3sbm99OsHu/PLGEos=)
4: 3136352e3134302e32372e302f32342d3234203d3e203534323532.roa (hash: tEvWwOLW/xIMVWUZLbw1EkqAqKGWjuJd7ysb+4PNQ/I=)
5: 3136352e3134302e32352e302f32342d3234203d3e2036303739.roa (hash: 1xwUbX6vsIqWCN2+cEYDhgZLIRwOro7g3fzJdK8K3Xo=)
6: 3136352e3134302e32362e302f32342d3234203d3e203231373433.roa (hash: g9/b5dDRA0b9ag/fFEOU/I0RgQhx6ZVjJSFP9Jxzxqk=)
7: 3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa (hash: nbRrPJ2RnV0VXIp6/TpKXkI2RYXGsFFYIwlzDz5fg9I=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 13:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c5:70:ea:c4:14:c5:79:12:2d:9a:b0:d1:34:35:11:79:02:4d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Validity
Not Before: Nov 5 12:04:46 2026 GMT
Not After : Nov 6 13:07:46 2026 GMT
Subject: CN=84CD4552AA40F4274759DCCAC6EF8F8A478B8FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:e2:a1:e6:ea:da:5d:b9:96:bb:f7:12:65:
e6:59:fe:0d:25:cc:b3:b7:e3:f9:a8:08:26:a2:b0:
f7:b3:45:b6:b9:70:32:e8:ba:98:be:7d:b2:68:26:
f5:1a:b3:33:73:d4:a7:f7:f7:fc:54:72:ef:bc:34:
92:ce:b6:02:b3:4b:46:71:98:b0:07:4b:46:71:28:
3c:4e:5f:29:e1:7d:41:8e:86:ce:32:9c:a0:67:01:
80:12:53:1d:f3:c0:d5:23:0a:ef:38:47:5a:9a:a1:
16:a0:c7:d3:2f:47:87:ad:cc:2b:07:e2:09:03:f8:
ac:d2:d6:9a:08:96:fd:d1:65:b7:07:b7:c8:e9:8c:
38:d1:05:96:95:2d:76:62:4e:ec:90:2f:e6:14:9a:
e3:b1:e9:4c:93:c2:b4:35:55:c7:20:3a:6f:b4:f0:
8c:20:bc:43:0c:3a:16:44:19:b1:fd:6a:37:fa:d2:
62:71:a1:20:f6:b1:bf:78:7c:89:cb:32:d2:71:d3:
8c:dc:ed:9a:31:e4:75:6b:76:5c:cb:9f:02:48:a4:
86:81:9c:80:19:03:f3:4c:6c:c8:9b:90:b2:c5:e7:
1b:84:05:ea:9c:5e:f5:ec:8a:31:94:89:1e:9f:6d:
63:87:ba:33:95:50:fa:8a:75:16:02:de:68:4f:62:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CD:45:52:AA:40:F4:27:47:59:DC:CA:C6:EF:8F:8A:47:8B:8F:B2
X509v3 Authority Key Identifier:
keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:20:1e:b5:ef:8c:d0:c3:d1:71:6c:d1:a1:6d:fa:1c:75:12:
7e:23:d5:b1:bc:a2:79:56:af:11:17:e8:06:c4:42:23:e9:33:
86:46:67:ec:89:5c:4d:72:df:72:58:b9:50:0c:75:0a:31:7e:
2a:12:2f:af:d4:65:0a:05:e5:9c:80:6c:fc:4b:c6:f8:7b:9b:
20:35:90:04:23:68:23:4a:81:2b:3c:26:f0:b8:0c:4e:ff:2e:
80:40:be:a3:21:46:a3:c4:68:2b:af:64:1f:9f:d0:5c:dd:c6:
5b:85:d9:b8:10:52:da:40:55:b6:c2:96:6f:b0:35:59:a4:27:
1e:81:47:1a:53:42:e3:75:6c:e6:2f:4e:d2:b2:ca:55:c8:bd:
49:3f:e0:12:73:1f:0b:b9:e4:f2:91:2f:dd:b8:73:b3:f8:f8:
73:78:dd:75:77:2e:47:eb:58:7b:03:cf:f5:3e:e5:c5:47:e5:
f2:6d:66:28:05:b2:fb:f4:e4:a9:0b:04:73:73:88:02:2c:f0:
a8:4b:a4:27:e3:4e:48:32:a5:0d:e5:78:7a:58:29:e0:da:3f:
95:f1:bb:34:34:9e:1d:c5:f6:9f:bb:e1:d4:f1:ee:67:34:e2:
5c:a9:39:ee:c9:bd:29:b4:ce:22:db:88:80:50:8c:4f:c1:5d:
7e:14:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:53:40 2026 by rpki-client