
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft
File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json)
Hash identifier: Iie4A9TWjzVLtdSkYUqiFiOm4LRCBSWTMjOpDqNmhsM=
Subject key identifier: 94:36:A3:1F:18:EC:36:D9:F0:F8:DB:4B:46:0B:97:21:84:10:57:16
Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35
Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae
Certificate serial: 010D0C9F4328584BBED4DE82A24B2995DA3E2BC0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft
Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA1A5
Signing time: Tue 04 Nov 2025 07:00:09 +0000
Manifest this update: Tue 04 Nov 2025 07:00:09 +0000
Manifest next update: Thu 06 Nov 2025 07:00:00 +0000
Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: LprQpzEECX+liWqilk9BrMHjerkbBN2z+kCpe43yrxE=)
2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: YOPIAP9M3QnL9vkDsrBvzxiagMzIO5nJt4NR/B12uFE=)
3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: GR/NucCTRnLsJxtrZCw9Xx8iyC2TjcV9CAWdqpYhkNg=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:d4:de:82:a2:4b:29:95:da:3e:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae
Validity
Not Before: Nov 4 07:00:09 2025 GMT
Not After : Nov 6 07:00:00 2025 GMT
Subject: CN=5a28beb3-4c1e-4e1d-af10-11fd8af1fd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:7d:f3:d4:a9:7c:b8:5f:0f:2e:2f:68:ff:
3a:c8:c1:bc:4c:93:71:25:1b:47:b6:81:84:5e:31:
43:aa:4d:f2:8a:98:05:eb:36:03:09:e7:f1:c8:fd:
df:4b:b3:ba:9c:7c:20:f1:a3:b8:81:96:96:5d:a0:
12:1c:f9:39:1b:29:32:f5:6f:bc:5c:bf:82:98:e3:
a3:f0:60:4b:20:4f:0b:07:8e:90:ca:16:14:81:45:
fd:cd:18:c9:e8:80:c9:9b:d0:84:04:c9:aa:a0:10:
52:5c:2f:ac:c0:33:85:d5:ed:52:29:b2:22:2f:65:
88:9d:88:9b:67:f7:11:4d:19:76:88:23:d0:a0:30:
fe:ba:23:30:12:93:d6:da:fd:7a:73:f7:de:3d:d4:
7f:49:2e:6b:f9:c4:81:c1:19:b1:96:89:95:44:d0:
11:04:9d:c1:a6:27:29:4a:f3:a2:2d:14:25:f8:1f:
6b:9d:50:ee:51:a2:f1:ca:c3:ad:c9:f6:bd:d9:63:
4b:d4:17:2a:f3:05:76:03:b3:3f:f7:1a:bc:c9:ab:
fb:52:44:82:d4:45:1d:de:1d:94:ba:f9:45:41:ca:
64:1b:44:40:d0:e5:0c:3d:e3:e1:37:08:67:9b:54:
4a:b7:57:7a:d8:00:6c:62:ea:aa:35:27:11:f9:78:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:36:A3:1F:18:EC:36:D9:F0:F8:DB:4B:46:0B:97:21:84:10:57:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl
X509v3 Authority Key Identifier:
keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:e8:08:79:23:cb:05:63:12:b9:67:4c:bc:94:b7:a5:a9:22:
a0:5b:0a:3a:0e:57:12:2c:88:b6:24:ca:0d:bc:35:1e:66:f0:
76:cc:67:96:34:5f:f8:70:18:33:59:35:69:3d:41:00:36:c5:
43:23:23:9a:6a:ff:ce:19:b1:e4:0f:fe:5e:68:13:c2:2f:71:
19:53:d9:2c:89:ec:3e:ce:ff:bf:95:3c:63:38:81:5b:4d:85:
91:24:a5:7e:a9:cd:7f:b6:a6:a2:1b:6a:61:d4:0d:eb:08:41:
22:d8:c1:10:b9:3c:9b:d2:f2:42:0d:f1:87:84:e3:43:be:b0:
b2:77:99:bb:06:6a:d8:4c:01:b8:bf:54:96:7e:2f:e4:5c:e3:
69:61:c6:2d:fa:26:f0:a3:f5:b0:70:34:e4:35:d2:d3:f9:ff:
4b:ca:6e:a6:92:1e:d0:1e:b4:3f:d2:4c:6a:0a:19:22:02:bc:
03:85:14:29:df:49:8d:3e:c7:31:c8:19:63:15:05:07:e4:10:
e7:e0:bc:ee:b8:a6:c4:3c:71:04:8c:2e:f6:4d:f1:d3:7a:ec:
60:14:ee:53:f6:13:78:f6:4b:b8:6f:e6:f4:16:b6:46:e5:92:
77:92:8d:c8:76:66:73:e5:ef:f6:71:e6:f3:7f:63:82:e4:5e:
24:ca:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:31:58 2025 by rpki-client