This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
File: 589c840d-5406-45bd-ac1d-d77b3c5c3780.mft (raw, json)
Hash identifier: p7dIGu2UOeiHFT3GhepeNWX+Fklv/4gkVojIZrll4CY=
Subject key identifier: 1A:3E:7C:EC:4D:90:8E:BF:37:5D:FD:10:47:40:18:F9:1A:E3:EB:16
Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F
Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780
Certificate serial: 010D0C9F4328584C3DF8C6C77A8D3B9598D01C20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
Manifest number: 010D0C9F4328584073A8273D6C0F9AE946A9C63B
Signing time: Fri 19 Dec 2025 20:00:08 +0000
Manifest this update: Fri 19 Dec 2025 20:00:08 +0000
Manifest next update: Sun 21 Dec 2025 20:00:00 +0000
Files and hashes: 1: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (hash: qbW5Oe8ZH8LXRkGL+tJMOyuvkonBqhPduSzgcBMu+QY=)
2: 589c840d-5406-45bd-ac1d-d77b3c5c3780.crl (hash: m9ZzZ1n7iMQ2MSVWpjKGwB6TcK5mf/8J5Za93AavQIg=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:3d:f8:c6:c7:7a:8d:3b:95:98:d0:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780
Validity
Not Before: Dec 19 20:00:08 2025 GMT
Not After : Dec 21 20:00:00 2025 GMT
Subject: CN=2301d9df-60fb-43ca-9f36-aa9f019224cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:c9:5a:ea:72:88:9f:df:59:b2:54:dc:cd:
a0:bf:de:c2:d9:d3:29:92:7f:d1:cb:31:90:f7:6c:
42:5b:23:a9:33:6e:f4:b7:2d:48:3b:70:6e:14:4b:
a6:d0:5a:fd:b8:68:9c:78:77:15:49:d9:74:e2:39:
cd:99:50:d1:94:42:d5:2c:f5:bd:07:a4:3a:03:67:
e2:cf:ea:5e:a2:7a:65:17:0c:93:77:47:60:c7:20:
28:78:7b:33:2e:a1:46:6e:4a:e0:57:b3:8f:2e:ba:
fa:0c:74:3c:47:c4:3c:b7:05:cb:0e:9d:f8:a1:fe:
31:ce:0e:e6:84:fa:0b:c7:1c:32:57:46:79:8e:15:
82:02:2a:7d:15:b3:86:c3:8d:8b:38:7a:7d:f2:ed:
b9:29:47:0a:b5:b6:df:e0:61:4b:55:02:7b:9a:3e:
8f:c0:20:0c:d3:ac:0c:f7:3d:98:d8:7c:79:3a:16:
f2:80:6a:7e:11:cf:52:67:5d:4f:1c:4f:26:87:73:
30:80:99:e6:c2:3c:79:56:51:a6:a9:04:37:be:fc:
66:12:01:b2:e9:9b:56:a9:fc:f6:ad:af:76:b6:3f:
9e:6b:b5:17:ce:34:1f:36:66:5e:6a:3d:f2:30:02:
7c:22:22:32:1b:93:bd:79:dd:45:4f:a6:5f:27:c6:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:7C:EC:4D:90:8E:BF:37:5D:FD:10:47:40:18:F9:1A:E3:EB:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
X509v3 Authority Key Identifier:
keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:ea:0b:ca:9e:41:9f:65:75:9d:dc:e3:a2:de:c6:e7:d7:65:
d1:e8:72:9a:12:03:49:3d:1d:d2:62:9f:68:cd:38:05:e2:7a:
51:b0:40:ea:d3:ad:ba:f4:21:28:87:70:7b:61:26:d5:08:eb:
bc:1d:76:2c:f8:cb:f6:ce:d4:b3:25:71:38:c9:ec:3a:f1:85:
60:99:06:4a:57:f0:f6:bd:1e:7d:79:f9:88:3d:10:a8:8e:6a:
85:02:da:f6:a6:d3:18:0d:f3:fa:f8:60:b9:4e:b7:e9:e1:35:
81:56:9f:00:cd:91:f5:03:4d:c5:c0:0a:1b:67:eb:6f:d5:53:
c2:dd:18:e6:31:b0:bf:3e:b3:33:ec:73:6e:bf:21:20:28:6e:
d0:3d:a7:1a:9d:a0:d6:b1:c6:c8:b2:4c:2d:39:8a:23:e7:d6:
73:71:d8:0f:79:c9:52:2c:73:30:16:f3:9b:f0:07:66:38:51:
42:88:9a:67:31:c3:e2:47:ae:4b:68:8b:55:d2:d3:62:73:ac:
ef:89:0c:0a:ad:8a:51:b7:5f:8c:4e:a4:a3:05:9a:38:42:38:
50:6c:65:cc:e8:41:65:3f:d4:db:23:81:73:21:11:c2:0a:da:
ff:70:68:cd:b5:f3:81:d8:0d:91:98:ae:64:fb:7b:7f:3f:4e:
10:23:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:09:16 2025 by rpki-client