
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft
File: 4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft (raw, json)
Hash identifier: Rd/89JKxJ9MwVdlz5BBHp8t3ZX/UHZbiixIYp1qcD2Y=
Subject key identifier: AA:4E:3F:79:9D:D6:42:C0:05:31:AB:EB:FC:61:89:A7:35:C2:E7:FC
Authority key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
Certificate issuer: /CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Certificate serial: 010D0C9F4328584BBFA551A41CADFE0D1FBD4080
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft
Manifest number: 010D0C9F4328584073A858D1143247BE7AC4973B
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Thu 06 Nov 2025 14:00:00 +0000
Files and hashes: 1: 1a082d99-dd96-34e7-891e-59aab4062033.roa (hash: cKlk+WwgbqJhauO7xq0tXtIopz3f+NM8qEXKJ5tl+OY=)
2: 4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl (hash: 1sECi1DaPTiyLTdQLn0T3LqUc3Ax3Q2rCQuqryZqrBk=)
3: 79699404-4fe2-372f-8cbe-8ec5373ec0b8.roa (hash: MUeCK8HHMbRPkyHf1NS41vO73vXEweV8L1B6w1sSuvE=)
4: 8f853da6-5e39-39b8-aef0-7c61c02dc15b.roa (hash: aij79k7e99GYIgAbYJU/lifcenVC608nMz13mkC8tPs=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:a5:51:a4:1c:ad:fe:0d:1f:bd:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 6 14:00:00 2025 GMT
Subject: CN=8095aa97-0308-4abf-af51-9e331ad9e2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:2d:9f:21:a6:fc:27:ca:5d:e1:98:87:ad:
9b:06:6c:9f:ea:ec:c0:0b:ec:09:ab:f8:3b:4e:dc:
90:fc:d7:01:69:67:a4:cc:16:2a:d3:ae:4a:c6:01:
5c:fb:bb:81:ad:5f:f2:65:2a:9f:07:d6:91:9d:d7:
e3:86:c0:31:c5:84:ed:47:f5:4d:14:19:8f:5a:99:
f7:c1:47:6b:62:89:4e:6c:81:8f:46:fb:8d:11:44:
83:98:f2:4a:d6:b7:5e:cd:3b:ef:73:86:81:2a:2d:
df:59:44:9f:82:02:2a:78:34:57:fc:12:55:f5:38:
65:8f:26:d0:1d:ee:d3:c6:73:15:c6:00:cc:bf:3b:
de:1e:91:50:be:ed:ef:81:38:f6:4f:0c:83:3c:75:
74:b8:64:fb:52:93:77:04:31:fc:60:34:99:62:51:
f0:9e:fd:27:a2:cd:cd:f4:e7:c8:0a:0f:cc:e4:52:
b0:b3:5f:3f:6b:9a:06:9b:d8:a0:5c:17:dc:ab:c4:
12:cc:c8:0b:6c:d0:9c:99:30:63:07:f4:99:1c:7a:
26:c8:36:73:06:0f:c7:cf:71:b9:49:22:28:a4:19:
c7:63:4a:33:ca:c7:c4:e4:c0:d9:26:d3:95:4a:ac:
51:dd:e7:e8:4b:8c:63:5c:a5:36:05:7f:3b:de:14:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:3F:79:9D:D6:42:C0:05:31:AB:EB:FC:61:89:A7:35:C2:E7:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.crl
X509v3 Authority Key Identifier:
keyid:D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c0:e3:2b:5c:43:58:44:84:11:7d:ce:92:5e:10:bc:92:78:
c0:e5:63:3c:8f:3c:b4:60:4f:d8:32:4a:51:2c:14:53:54:84:
a2:aa:18:a6:5f:90:62:62:70:19:4d:4d:89:9e:b3:74:02:02:
d8:06:f9:c1:cc:19:57:74:d9:24:0e:37:c8:41:6f:19:d4:c3:
66:7c:ce:9a:c7:74:63:82:70:42:e7:3d:1c:de:b5:e1:7c:86:
09:79:ab:0e:70:0b:bb:a1:cc:78:2d:76:7f:e8:c9:90:56:7d:
b2:25:79:5d:d8:8b:71:7b:bd:7c:1b:0d:76:d3:c4:9a:be:93:
47:e6:3e:3e:d1:5e:22:9b:33:52:74:65:31:fe:00:6d:69:ae:
14:c4:14:e5:6b:ec:c5:ca:c1:d5:b7:93:df:13:17:08:46:fb:
0b:09:60:86:fa:a7:98:89:c9:f0:99:2c:9e:09:10:f1:46:7e:
50:b7:e6:1f:c6:ae:e5:65:76:2a:1f:96:d8:49:ab:50:2a:a1:
74:74:87:fa:10:fb:2f:df:21:46:09:9b:5f:a5:d4:ab:09:78:
43:11:8a:8d:2e:3c:85:a6:8b:98:21:51:cd:03:a6:17:15:dd:
ab:69:2b:46:8c:95:88:74:7a:85:51:88:11:bf:77:8c:83:7b:
d2:3b:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:23:01 2025 by rpki-client