
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
File: b2456e11-ca83-4345-8884-0becc0831fb7.mft (raw, json)
Hash identifier: ZVnVc4HncrFgUI/dQJq262QXX8CQSMhXJZAH8Ycg3G0=
Subject key identifier: 22:02:C9:6A:F4:3D:6D:F5:12:47:6E:A9:14:6B:23:8B:D9:78:95:3A
Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15
Certificate issuer: /CN=b2456e11-ca83-4345-8884-0becc0831fb7
Certificate serial: 010D0C9F4328584D05B274A309F751D8B9422180
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
Manifest number: 010D0C9F4328584073A84ABECBFF88BF3156022F
Signing time: Sun 01 Mar 2026 09:00:08 +0000
Manifest this update: Sun 01 Mar 2026 09:00:08 +0000
Manifest next update: Wed 04 Mar 2026 09:00:00 +0000
Files and hashes: 1: 0ea31230-a310-3723-8781-993a54e89d70.roa (hash: Tkzih1Bo8C0xGVTOquyhR/ftrjxOTI8f9lTkiZf7L8Y=)
2: 34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa (hash: v+I5YUGtN6yP7J2pKfCQJXy9MuJU622EE4An/RFdIIE=)
3: 875a6dd8-0332-3d39-b999-634a325db39c.roa (hash: H0X+z1EhmTcNjAgfznfsXPMVNapMDfPMABfdRR+uZm0=)
4: b2456e11-ca83-4345-8884-0becc0831fb7.crl (hash: oPGY3fa0bywg2pExtpOQK21EmJDtXjwsNlheU4zmxzU=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:05:b2:74:a3:09:f7:51:d8:b9:42:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7
Validity
Not Before: Mar 1 09:00:08 2026 GMT
Not After : Mar 4 09:00:00 2026 GMT
Subject: CN=721bc9cc-a7d3-4976-b85c-82fdbff5c941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:8b:c6:23:a5:0b:d7:fd:64:10:4d:f0:f7:
1e:e5:e0:2e:d3:dd:6f:64:64:7f:de:80:b2:19:56:
9d:ec:51:1b:7a:78:c0:79:ff:e3:c5:8d:88:52:c0:
1f:72:a7:03:f7:8f:aa:ae:35:3d:2e:6a:6f:bc:5f:
aa:5d:a2:08:f1:93:9a:b7:2e:25:f3:79:b7:88:65:
fc:0e:1b:0e:02:bc:15:7d:3c:66:94:4e:63:76:51:
0f:13:82:72:ed:e3:05:ed:67:d4:50:39:49:df:f0:
48:6d:8c:bc:cc:a2:10:ff:38:a6:c0:96:02:b7:af:
03:d1:89:2d:89:de:2a:de:fb:8d:59:2b:23:e8:5c:
cb:b1:3b:99:4d:0e:2b:02:ec:05:20:6d:86:47:27:
6e:37:08:a5:29:45:49:89:84:80:7e:09:e8:b5:7c:
26:f3:d8:64:fb:70:34:04:2c:99:c0:18:a2:ae:51:
8d:99:ae:2f:44:22:f4:1d:9a:cf:3a:ae:1a:6e:c3:
3c:ee:90:fd:d9:67:cf:3b:65:bc:ca:67:63:e9:80:
e7:c2:10:90:c5:ae:fc:46:93:ce:6f:1b:6a:7d:c6:
ac:b0:65:41:4f:a9:35:ef:c3:2f:bd:bb:51:7c:b9:
ec:8a:32:b7:bf:b9:b8:9c:58:4e:1f:3e:5d:85:73:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:C9:6A:F4:3D:6D:F5:12:47:6E:A9:14:6B:23:8B:D9:78:95:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl
X509v3 Authority Key Identifier:
keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:83:b1:db:10:ad:99:53:8c:5c:16:86:97:ef:2a:fb:e0:9f:
36:44:34:77:c8:f3:ae:40:75:95:8c:8d:d2:0e:50:62:54:eb:
2a:b5:f7:d6:df:f6:88:76:79:53:bc:b2:f8:fb:6d:e0:07:bf:
09:bf:31:0a:ad:8d:22:7c:6e:aa:db:32:27:cd:40:d1:b3:05:
24:80:00:8c:1d:a5:b8:90:36:5d:c2:f3:3b:55:6a:7e:3b:6c:
e0:13:12:fa:ab:6a:40:4b:59:36:86:b6:9b:d3:67:5b:da:32:
92:4b:1a:14:95:39:31:cb:27:aa:90:11:c0:25:93:ca:df:d7:
a3:0d:7d:f6:13:e4:e6:15:ed:46:0c:68:87:66:7a:e2:97:5d:
55:fd:2e:a1:44:d4:0c:f6:ad:6e:40:56:cc:ac:f5:9f:04:8d:
f0:69:62:ed:9a:60:b6:d8:8c:f9:6a:f3:ec:95:8e:0c:99:54:
39:a5:45:6b:a1:f4:b6:b5:8e:75:c1:3f:5b:0b:40:fc:65:89:
b1:ad:e5:ea:32:28:b5:9b:33:43:df:93:6d:51:25:3c:a9:7c:
11:bc:34:4c:a7:f7:a9:82:da:af:fc:e3:a7:7e:9f:1e:b3:5a:
e2:21:aa:9e:86:a4:58:ac:5a:c2:d3:20:42:cb:2b:6c:b1:b1:
6d:84:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:16 2026 by rpki-client