
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
File: 33c78d60-34eb-4fed-8e25-925b95a30c8e.mft (raw, json)
Hash identifier: DKOPOS5ky3hkhPr4pKkgguprpHnF1YmC9+wVaqZejbg=
Subject key identifier: C9:6E:4B:44:95:FE:A2:EA:F8:C0:7F:D4:FE:FD:07:C4:0C:79:FB:1C
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F4328584BBFC3100C47A9A00428530300
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
Manifest number: 010D0C9F432858467B5CA7EDE1E555E58476422C
Signing time: Tue 04 Nov 2025 15:00:03 +0000
Manifest this update: Tue 04 Nov 2025 15:00:03 +0000
Manifest next update: Thu 06 Nov 2025 15:00:00 +0000
Files and hashes: 1: 33c78d60-34eb-4fed-8e25-925b95a30c8e.crl (hash: q8iMd0XowOhvHo1kYW/MfSYx0RKP2mLigcgWVoUe1uk=)
2: 38442203-0a23-3c40-8941-6f49f8a5fb72.roa (hash: kLeynUFXt5ya8n/tPFJcqzU+fj1mI1l8edxVAyd/ePU=)
3: 6c7472b0-6d12-33be-a9f9-85e26dc54729.roa (hash: YBn3TQJXlYKLHy2G5EbwybgfzDamRNqKwjSbuFp/+hw=)
4: 9f72c271-f1f1-38c0-b9d4-ae2deadaf80c.roa (hash: 5yyo2bpIbSTpsbVGcOWwYbVZAoJH8SpMuGipDgi/TSM=)
5: af56c26b-429b-351b-b947-c8b53bdd868c.roa (hash: Zhy86Dz4mwGRP6JhcjMzcHF82pLWNBuF/uMjyGXeXOo=)
6: b9fe9136-6711-31b6-a248-652d58c6a9e1.roa (hash: QQvPeEM59Odp/AW6nwg+l/eoK7ZNz4SwfSGTbvgi5M4=)
7: c47e0337-491b-3e57-a6f9-0040b1fabe11.roa (hash: SdPpbso1KbznZPXdq509CXPx/7yj0MWIQfDNchW9dic=)
8: d97ee865-1f02-3f65-9877-a6064187b157.roa (hash: j+j4nDN2yQIvpt0X+fBWxQ4X6UR10ercYvo0bPwPufw=)
9: e604780b-4bf4-362f-9661-294a2090b35c.roa (hash: Mb3ya/Ocimxl3NY2LFH/MdbUtV9MiZN9hOhSev6J2FU=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:c3:10:0c:47:a9:a0:04:28:53:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Nov 4 15:00:03 2025 GMT
Not After : Nov 6 15:00:00 2025 GMT
Subject: CN=e2d312f6-1e2a-4c72-913f-d47e63045ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:d0:c8:99:ec:72:1f:2b:4e:41:da:bc:86:
b1:75:df:52:e1:6d:03:df:c1:a0:9e:fa:c5:ca:58:
91:9b:3d:cc:56:9f:06:17:29:72:88:10:5f:57:d6:
a1:68:9d:4d:78:06:ce:dc:5c:7d:fb:69:5d:27:28:
1f:be:d4:83:96:ac:e4:a6:db:c9:ea:71:9e:ee:2e:
8f:c6:45:7e:e2:61:00:4b:15:c4:9a:ba:94:ff:36:
4c:80:55:00:26:46:25:98:8d:d0:c0:82:0e:f5:0f:
5c:03:8b:43:69:4a:70:a8:5c:dd:b1:19:59:ec:e0:
56:8b:0d:03:e8:e2:1a:67:83:27:80:23:47:ae:90:
c0:c6:05:3a:c1:e5:0e:96:ca:2a:8d:3c:ed:8c:f0:
6e:98:5d:ba:59:06:bb:6a:a8:7a:aa:f2:74:a0:82:
be:a3:3d:68:fd:cc:f7:6b:4f:12:37:d0:f0:3d:1e:
bc:28:0d:01:11:d1:16:f7:61:f5:d4:34:bd:33:f9:
4a:5a:9d:e8:81:20:a0:d8:34:a5:80:3c:90:ea:e8:
f7:05:f5:c5:bd:7e:71:03:26:4b:b2:7a:5e:2b:1f:
ae:2c:e8:c1:15:62:bf:52:2c:82:88:09:68:90:45:
2b:fe:57:28:cc:4a:de:1b:ea:b5:01:a0:b3:c3:13:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:4B:44:95:FE:A2:EA:F8:C0:7F:D4:FE:FD:07:C4:0C:79:FB:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a2:ba:a0:10:65:db:4b:f3:56:2d:1f:4c:85:dd:57:ce:80:
78:de:44:6f:3a:32:09:0e:28:1a:5c:8c:7f:ca:9c:9c:5d:74:
ba:f8:d1:c5:9f:58:c0:77:c5:24:7d:94:3a:6f:57:52:f2:51:
88:5f:76:42:e9:05:01:a2:c6:c3:69:c3:4c:e6:fe:79:1f:4a:
ce:c3:20:f6:00:41:48:57:4e:17:c5:b1:dc:f2:53:51:49:64:
2f:bc:82:a0:41:13:e5:8b:a3:90:45:7a:fa:83:5f:23:da:d4:
94:11:35:49:f3:25:9d:36:3d:bd:fb:51:89:b0:cf:59:17:11:
4f:22:fb:71:82:4f:ed:52:6b:f8:8a:3b:76:6a:dd:f7:27:79:
70:50:ab:50:ad:9f:20:a9:bd:a7:b2:ee:d5:46:0c:bf:16:cd:
a9:ae:9c:10:7b:9d:77:ab:28:18:9e:0d:4a:fc:71:60:ad:9d:
8d:8b:69:9c:46:e1:07:67:27:ef:67:ad:40:58:9c:25:3d:aa:
0f:e4:e3:f8:2e:bd:20:2c:b0:db:93:11:de:31:72:64:7e:9b:
5c:56:65:01:05:62:64:66:d0:7d:09:3c:e5:ed:21:75:ea:48:
ea:c2:eb:18:5c:b3:ae:cd:a8:7f:02:5f:2a:d7:8b:ae:49:3f:
b9:f2:67:56
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEu/wxAMR6mgBChTAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw
YzhlMB4XDTI1MTEwNDE1MDAwM1oXDTI1MTEwNjE1MDAwMFowLzEtMCsGA1UEAxMk
ZTJkMzEyZjYtMWUyYS00YzcyLTkxM2YtZDQ3ZTYzMDQ1ZWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gHQyJnsch8rTkHavIaxdd9S4W0D38GgnvrF
yliRmz3MVp8GFylyiBBfV9ahaJ1NeAbO3Fx9+2ldJygfvtSDlqzkptvJ6nGe7i6P
xkV+4mEASxXEmrqU/zZMgFUAJkYlmI3QwIIO9Q9cA4tDaUpwqFzdsRlZ7OBWiw0D
6OIaZ4MngCNHrpDAxgU6weUOlsoqjTztjPBumF26WQa7aqh6qvJ0oIK+oz1o/cz3
a08SN9DwPR68KA0BEdEW92H11DS9M/lKWp3ogSCg2DSlgDyQ6uj3BfXFvX5xAyZL
snpeKx+uLOjBFWK/UiyCiAlokEUr/lcozEreG+q1AaCzwxOuBwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFMluS0SV/qLq+MB/1P79B8QMefscMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3
OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMzNjNzhkNjAtMzRlYi00
ZmVkLThlMjUtOTI1Yjk1YTMwYzhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl
MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz
MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi
OTVhMzBjOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvorqgEGXbS/NWLR9Mhd1X
zoB43kRvOjIJDigaXIx/ypycXXS6+NHFn1jAd8UkfZQ6b1dS8lGIX3ZC6QUBosbD
acNM5v55H0rOwyD2AEFIV04XxbHc8lNRSWQvvIKgQRPli6OQRXr6g18j2tSUETVJ
8yWdNj29+1GJsM9ZFxFPIvtxgk/tUmv4ijt2at33J3lwUKtQrZ8gqb2nsu7VRgy/
Fs2prpwQe513qygYng1K/HFgrZ2Ni2mcRuEHZyfvZ61AWJwlPaoP5OP4Lr0gLLDb
kxHeMXJkfptcVmUBBWJkZtB9CTzl7SF16kjqwusYXLOuzah/Al8q14uuST+58mdW
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:54:52 2025 by rpki-client