
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft
File: 3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft (raw, json)
Hash identifier: 7a2wXHA39zQS8ca1TjyfhSx21FmzpPyWDszmEC5M6b0=
Subject key identifier: CB:9E:E1:2E:44:EC:98:A5:75:60:40:43:6C:8E:0F:EA:8B:FC:2F:14
Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0
Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71
Certificate serial: 010D0C9F4328584D878338CDC58521A4D9789A00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft
Manifest number: 010D0C9F4328584073A82A8A058C862C47E38A6E
Signing time: Thu 16 Apr 2026 21:00:03 +0000
Manifest this update: Thu 16 Apr 2026 21:00:03 +0000
Manifest next update: Sat 18 Apr 2026 21:00:00 +0000
Files and hashes: 1: 2feed830-0e4a-3f68-b470-863b018e6b9f.roa (hash: 4qisfSqZA/1wJjvj+/7Ni3js6R1q4FZilyKPwMnlnNk=)
2: 3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa (hash: mPsYw4W7PkGuADWJyztS69NTZHCWzqiM+CyKhkOVOes=)
3: 3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl (hash: TqJhnsUfup1FF4oL+rlPiVQW/AKIDV5mc7NPOk9tsyQ=)
4: f912ae62-732c-3124-96ce-77eea87e00a5.roa (hash: 0DR0qeSQBc+orQp700M0fqOxF2QvfkAkDsKbwsdYuho=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:87:83:38:cd:c5:85:21:a4:d9:78:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71
Validity
Not Before: Apr 16 21:00:03 2026 GMT
Not After : Apr 18 21:00:00 2026 GMT
Subject: CN=0d1e2a96-ba3a-45e9-b245-cdea1001f4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:88:ae:44:ae:31:6b:75:fd:96:97:3f:85:
7b:31:c2:8e:bc:10:e1:dc:cf:a2:cb:38:4e:60:c9:
f9:00:2e:98:9e:5e:84:b7:95:a5:78:6b:c9:92:60:
fa:5d:31:48:da:ad:28:65:c0:c4:bd:03:41:00:48:
56:0d:b1:8a:f2:28:98:fa:a8:b5:b5:8b:8c:9c:c3:
2f:c7:f9:a9:0d:ab:28:f6:a3:05:43:ba:80:28:ab:
1f:ba:5a:fe:9f:c3:a2:f6:71:4c:e6:b9:62:b9:43:
97:eb:83:a3:6e:fc:b0:c9:c4:5d:d0:42:22:6d:85:
61:d8:50:72:5b:53:8c:25:78:38:2b:f5:8c:6a:04:
d0:6d:d9:4c:b0:95:5b:7e:c8:7c:9a:34:e5:03:c8:
a7:d9:45:36:d0:12:9d:f2:89:24:e0:cf:73:f4:1e:
1f:56:84:b2:8b:a6:51:82:44:52:3c:95:c9:b3:5d:
9a:e1:e3:05:e0:24:0b:47:48:17:e7:98:81:08:2e:
8b:5b:0d:39:c0:c8:7b:74:31:72:e5:a6:74:e5:47:
f3:31:11:56:a6:1b:7e:06:71:b8:63:bc:ae:5d:8d:
07:51:ae:ae:fb:f8:1a:3c:83:29:95:b5:32:b1:24:
5b:f9:7a:c9:39:ed:30:56:f0:72:eb:d7:44:d2:d1:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9E:E1:2E:44:EC:98:A5:75:60:40:43:6C:8E:0F:EA:8B:FC:2F:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl
X509v3 Authority Key Identifier:
keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:ab:4f:a2:a9:81:e9:30:77:11:0f:05:54:f1:b7:3c:eb:12:
23:dc:2e:f9:f6:31:11:3c:d2:d7:eb:92:b8:87:40:b5:13:bd:
e7:1a:60:05:2f:54:79:cc:c0:34:15:d5:f7:8f:25:62:d1:14:
0f:73:98:b7:bb:57:1f:ec:36:cd:0d:3f:8f:89:38:f6:53:09:
ed:04:56:17:50:9a:7b:95:5e:21:8b:95:f4:ee:fc:07:19:6e:
57:7d:76:86:ac:7b:e8:49:d0:6c:18:52:d2:8c:5f:b4:58:15:
7b:47:38:8f:29:4f:5a:8d:dd:6f:ba:05:1c:62:76:9a:6a:6d:
11:d1:8b:a9:7f:12:5b:14:db:f1:f3:7c:38:a4:78:a7:bd:dc:
d6:78:a8:68:fe:4d:a7:cf:1e:ac:33:a8:b1:1a:e9:8a:e3:de:
66:5b:99:f5:9e:62:e6:54:49:99:06:51:30:87:49:fa:20:2c:
e7:77:5d:dd:ff:82:8a:1a:de:54:88:1a:41:f1:a6:11:c0:ca:
ac:a4:83:9a:9a:1a:d9:fc:6f:04:de:bd:34:71:2e:38:da:81:
3c:6a:56:0c:13:3a:c2:f2:82:8c:58:a1:eb:ae:c4:5a:dc:bb:
7a:17:51:a1:7a:85:54:eb:e4:0f:1a:7d:2a:53:e1:01:8c:c2:
75:b7:23:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:31 2026 by rpki-client