
$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft
File: 331420847DB5C548A9C55AF874BB78DFC740DCE3.mft (raw, json)
Hash identifier: CgDHSlH4+zZ0HkMWs8L5P4B3qx/ocvUVVw8XKYxtxvs=
Subject key identifier: 17:98:E3:8C:25:AE:BE:71:DB:75:71:44:50:DF:3E:8D:57:E1:96:70
Authority key identifier: 33:14:20:84:7D:B5:C5:48:A9:C5:5A:F8:74:BB:78:DF:C7:40:DC:E3
Certificate issuer: /CN=652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0
Certificate serial: 2BC7E0068DE032F362C6964515335F2C27912242
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft
Manifest number: 21
Signing time: Wed 05 Nov 2025 06:04:36 +0000
Manifest this update: Wed 05 Nov 2025 05:59:33 +0000
Manifest next update: Thu 06 Nov 2025 09:25:33 +0000
Files and hashes: 1: 331420847DB5C548A9C55AF874BB78DFC740DCE3.crl (hash: AZ+QmLCfO6BscmcQU6bbfeeSiMfcmXCApf2bXvonfaI=)
2: 3133312e3134332e39342e302f32342d3234203d3e203436343735.roa (hash: sovTlBCEuXhvYEcr4uhnb/BJGNtDjFu0ozyvYCplOzg=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.crl
rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 09:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c7:e0:06:8d:e0:32:f3:62:c6:96:45:15:33:5f:2c:27:91:22:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0
Validity
Not Before: Nov 5 05:59:33 2025 GMT
Not After : Nov 6 09:25:33 2025 GMT
Subject: CN=1798E38C25AEBE71DB75714450DF3E8D57E19670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:b2:3c:93:cd:c0:19:b6:65:89:21:d5:7b:
20:1c:a0:a0:34:d6:a0:c7:2c:88:31:54:a8:f2:4a:
9c:c9:90:eb:a5:d8:b0:1f:28:d9:13:88:11:29:28:
15:f8:b1:f3:d7:19:65:98:a4:ee:90:c1:6f:6b:6f:
56:c7:d1:14:5c:c9:5a:7d:ca:d4:a0:56:5c:e0:7b:
4e:36:cd:a6:f4:4b:38:d6:74:51:ac:0d:2a:72:dd:
44:c4:01:02:e1:f7:b0:29:98:24:4c:40:c8:52:09:
b8:f2:fa:d4:06:16:77:37:e2:37:4a:bc:6f:d3:f3:
10:9a:ca:fe:c8:76:dc:e9:dc:93:5b:d7:ac:fc:e2:
c5:6e:0d:d3:59:69:92:95:23:08:36:b7:8e:67:40:
bc:66:bd:7e:c1:67:f1:35:30:52:eb:7c:c2:56:d4:
be:b4:92:11:59:17:ca:03:f7:c5:4f:78:30:81:86:
90:fd:3e:6d:0f:8f:a7:5b:73:bc:47:33:5a:f8:ef:
13:c0:47:c2:35:2b:68:a9:04:34:88:c3:86:65:f8:
b4:2f:0b:73:8f:0a:74:5e:35:03:7a:30:e1:32:65:
0f:e0:e4:09:20:7e:48:38:e5:9f:ef:25:3e:64:5f:
14:6a:16:16:31:fb:36:50:89:0e:9e:47:6f:cd:ef:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:98:E3:8C:25:AE:BE:71:DB:75:71:44:50:DF:3E:8D:57:E1:96:70
X509v3 Authority Key Identifier:
keyid:33:14:20:84:7D:B5:C5:48:A9:C5:5A:F8:74:BB:78:DF:C7:40:DC:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0e:13:04:57:95:58:1c:32:34:9b:32:04:e7:3d:60:7d:02:
9d:05:02:00:be:30:0e:aa:2a:3c:73:ce:c0:9a:9f:ed:e2:db:
18:97:04:31:42:ee:39:59:46:1a:e9:cc:07:fa:98:7e:cf:cd:
f3:b5:4a:75:00:f9:fa:39:7e:25:ba:b3:3a:a7:b7:ab:9b:6c:
57:7b:e8:3b:a1:9d:7c:84:a5:82:1c:96:9b:4c:53:71:1f:01:
4c:40:96:73:d3:33:6f:26:f6:0d:3f:c0:41:ec:fa:d2:1d:30:
c0:d7:de:c6:aa:42:d7:ef:d7:d6:aa:ac:b3:15:aa:9e:c0:0f:
64:92:bd:cc:21:85:1c:4f:71:17:62:81:fd:26:dc:ee:43:c8:
7d:85:52:91:4f:f8:8f:fa:9d:2d:1d:63:04:9d:03:73:78:e7:
9d:1d:37:1b:2a:fa:97:04:34:6f:2e:3c:7c:6d:17:7b:be:44:
6f:48:7b:93:89:a7:33:f0:6c:74:dc:0d:8c:c3:f0:f2:42:6c:
ed:a5:2d:c3:1b:a5:57:7d:44:4a:3d:90:d5:71:b0:e3:fb:7b:
9e:6b:12:20:0f:73:9b:59:b0:74:b7:1c:8f:f5:79:92:dd:2f:
b5:71:69:d6:53:55:d0:05:f7:c0:39:61:5f:e2:e6:e5:96:06:
d5:a7:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:51:10 2025 by rpki-client