
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft
File: 589a84a2-f62d-414f-915d-810c9265e5de.mft (raw, json)
Hash identifier: 0CfsWgSPfMJVrmRz4dsc0h84C14zWZzCNP/GbfAoS+Y=
Subject key identifier: FC:B6:F6:DE:8A:11:F3:A4:29:3B:DA:72:1A:7A:48:5C:0A:26:BF:86
Authority key identifier: 39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59
Certificate issuer: /CN=589a84a2-f62d-414f-915d-810c9265e5de
Certificate serial: 010D0C9F4328584D06475D1ACAA3BC8CE17BDB40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft
Manifest number: 010D0C9F4328584B8AA3359A4801463882BB414A
Signing time: Sun 01 Mar 2026 14:00:09 +0000
Manifest this update: Sun 01 Mar 2026 14:00:09 +0000
Manifest next update: Wed 04 Mar 2026 14:00:00 +0000
Files and hashes: 1: 589a84a2-f62d-414f-915d-810c9265e5de.crl (hash: AAx1RNNT0DiI44dd32s8d7F01bYfu0oXjIPI+8pZU68=)
2: b9b863f4-1e9b-35b6-856e-0def881a13c7.roa (hash: dR8iQgQvCwRpTM/J5b0zegvIiLkVyc1I5xxtUB3ieXo=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:06:47:5d:1a:ca:a3:bc:8c:e1:7b:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589a84a2-f62d-414f-915d-810c9265e5de
Validity
Not Before: Mar 1 14:00:09 2026 GMT
Not After : Mar 4 14:00:00 2026 GMT
Subject: CN=20c0400c-4cd9-48c5-b269-0cb4eeea20ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:44:2c:57:19:24:cf:b5:b8:af:f1:8c:19:
a2:59:d7:f9:81:24:86:ca:4d:ad:a4:71:df:9d:ea:
8d:98:e7:89:7a:7f:23:bd:2a:b9:96:5d:e8:d5:f0:
40:a9:7e:f1:d3:75:56:ba:a3:1a:e0:83:8c:75:22:
77:eb:d6:db:5c:5f:d8:b1:0c:96:72:75:88:eb:05:
70:14:11:e4:90:84:91:09:da:12:42:a3:11:2f:92:
f3:14:24:4b:11:2a:d2:b4:68:3c:2e:96:cf:82:9b:
4b:6c:6e:f3:9d:09:02:10:5a:ec:5a:7b:d0:11:20:
ed:4b:45:8d:35:8d:69:5c:ec:38:84:5f:cf:0d:13:
da:be:3a:c4:f2:ca:e7:36:55:be:77:80:6e:4c:61:
5d:97:76:e5:a1:9b:29:66:fa:02:98:f1:dd:e7:0f:
1b:61:e4:dd:10:59:e5:c7:e4:ad:c4:e2:a2:64:1d:
b8:e2:da:c9:da:42:b6:21:43:b2:66:68:ea:42:32:
4b:2a:23:72:67:61:fe:24:b6:10:0a:fa:e1:17:14:
d3:4a:49:8d:db:71:82:79:f5:20:b7:84:8a:57:12:
8d:2b:03:d3:ff:b3:79:63:f6:be:7b:eb:a9:a0:6f:
84:dc:6c:8c:a0:e8:e5:7d:b9:dd:4b:fe:17:66:71:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B6:F6:DE:8A:11:F3:A4:29:3B:DA:72:1A:7A:48:5C:0A:26:BF:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de/589a84a2-f62d-414f-915d-810c9265e5de.crl
X509v3 Authority Key Identifier:
keyid:39:63:73:7A:44:9C:AE:FF:D4:5A:0B:A5:23:B8:60:43:35:C6:5F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/589a84a2-f62d-414f-915d-810c9265e5de.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:23:b5:e6:98:e8:4e:02:2c:d9:82:43:b2:b8:45:30:8e:d2:
71:d4:d4:71:53:fb:97:1a:77:f1:f8:19:a2:26:65:1f:4d:db:
61:ad:25:4b:d7:32:79:0c:82:90:8f:2d:17:ab:a2:12:62:49:
f0:47:4d:64:fe:8f:74:b4:3b:ea:35:4f:f7:54:78:69:ee:01:
7d:bf:d7:ea:b7:c8:7c:fd:ed:2a:39:17:a8:50:fb:34:dd:ce:
3f:87:33:39:18:dd:f9:4f:38:b9:a7:e4:7a:6a:d1:e5:eb:9f:
e9:e2:e8:c2:80:52:91:25:ed:d2:21:f5:37:9e:0a:9b:9b:a8:
01:a1:e7:ae:4c:60:c4:04:5e:a6:51:f8:0b:e9:b4:2d:93:1c:
9d:73:3a:60:7c:3c:8b:72:43:35:c7:6a:ee:cd:94:42:9b:13:
67:44:b6:ff:0a:fd:fc:c3:19:4b:9d:4c:73:93:14:ea:92:dc:
55:6f:a3:ee:44:7b:e9:ea:0a:0c:d6:b3:87:4d:20:73:04:77:
56:d5:b7:8a:a8:ad:76:8a:39:75:40:6c:2c:63:cc:35:93:7a:
b9:ac:4f:02:7f:b6:ad:52:ef:cb:13:3e:e9:ce:ed:56:8a:a7:
c0:cc:42:c1:a9:c8:89:81:c2:14:38:1a:91:d4:d6:25:e1:c1:
93:93:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:09 2026 by rpki-client