
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
File: 0ec17157-66de-4aab-85e7-28af4de430e2.mft (raw, json)
Hash identifier: UTduRJYYVQNjoPOiCWDzKWlbZDt80X9+HO3ZZyPzJYM=
Subject key identifier: 48:95:27:C2:54:A5:8D:D5:92:9C:A5:9C:66:1A:58:61:3A:F6:F2:89
Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2
Certificate serial: 010D0C9F4328584D8A3025EA7154CA05F9D64800
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
Manifest number: 010D0C9F43285843A8B9A7EBB23BFBB59BA716A0
Signing time: Fri 17 Apr 2026 20:00:03 +0000
Manifest this update: Fri 17 Apr 2026 20:00:03 +0000
Manifest next update: Mon 20 Apr 2026 20:00:00 +0000
Files and hashes: 1: 0ec17157-66de-4aab-85e7-28af4de430e2.crl (hash: fEApUagP3x/yMRimHiJSW++iWUcLO99HBlSfzBs8d34=)
2: d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer (hash: Hn3prJrqHNDvNCFR4gMuVawpaxQFzcCtOIK4vGwbc0U=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:30:25:ea:71:54:ca:05:f9:d6:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2
Validity
Not Before: Apr 17 20:00:03 2026 GMT
Not After : Apr 20 20:00:00 2026 GMT
Subject: CN=aaa874a1-aebd-4d28-abdc-0f5a9f874a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:d5:f6:d4:8d:0a:b3:66:b4:7d:6b:62:65:
ad:c5:83:b3:04:1e:73:82:4a:73:d2:e1:8d:85:86:
11:23:1e:81:d9:13:cf:c2:e3:5d:e5:5a:b2:c6:2d:
16:f5:ef:1e:61:7e:64:37:99:3f:de:e8:55:2b:ee:
9b:da:ca:9e:05:bc:3c:b1:d0:ff:58:92:ad:31:2b:
bf:38:27:33:eb:df:9b:bd:a6:e6:05:3b:4a:b3:ec:
85:5c:03:44:dc:a0:25:36:5a:96:27:06:39:cd:78:
a6:14:0b:ff:d5:6e:01:dd:c8:14:cf:01:cf:75:9a:
fd:dd:aa:1e:b0:76:b4:c3:dd:38:69:f5:a5:55:a7:
2a:df:1d:be:24:96:ee:6f:dd:a2:1a:a1:eb:8f:af:
53:c7:b1:6b:da:8b:6a:d1:07:da:ee:e5:74:7b:a2:
95:6c:9c:de:ee:6f:b8:d0:81:09:9b:2a:b1:e9:fc:
e0:43:f9:51:f1:f8:5a:aa:43:cb:76:62:a1:d4:e8:
6b:50:49:bb:25:b5:ce:c9:0a:8f:ab:ed:70:2e:49:
ac:0f:4b:8b:39:5c:a1:71:45:74:fc:40:6a:8e:aa:
84:93:40:ac:80:ec:45:34:6f:74:cb:f9:96:d1:38:
53:a5:4b:09:7f:d6:9a:22:4d:62:10:9c:2a:c1:1a:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:27:C2:54:A5:8D:D5:92:9C:A5:9C:66:1A:58:61:3A:F6:F2:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
X509v3 Authority Key Identifier:
keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1b:3c:43:cb:a1:74:0c:a0:3a:fe:32:af:87:59:4a:67:7f:
9e:ef:0c:10:6f:35:5b:c3:b6:c5:0a:f7:d3:86:a0:f3:22:99:
4d:6f:9b:92:ea:59:09:9b:c6:9c:d3:c9:53:ad:44:5a:ef:1b:
48:47:cc:e8:fd:d6:a4:69:25:94:fe:67:7f:27:c0:f7:45:62:
da:65:09:3b:20:36:76:49:6c:8c:a9:99:fb:ea:c6:d1:9b:af:
88:20:c5:4d:06:0f:53:cb:bd:0d:62:d8:0a:f4:40:d7:06:ef:
25:a3:cf:55:0e:43:d2:0a:91:dd:3c:b0:c4:21:ce:d0:60:8b:
b8:be:13:bb:21:07:b1:d7:df:57:64:1d:06:48:da:88:64:f9:
ca:e3:63:8f:2d:e7:ff:bd:17:25:94:73:7b:33:4d:0a:2d:b0:
98:6d:88:28:5c:99:5c:13:80:8d:0d:be:cd:66:3f:f5:16:72:
b1:04:af:12:73:38:1d:15:4d:76:ba:47:b3:90:49:32:f9:0b:
e6:aa:ba:36:98:61:62:8f:e6:19:fc:4f:f4:54:5d:61:59:a9:
1e:97:ef:e2:51:64:c5:8a:1c:47:03:5d:bd:89:95:94:d7:1b:
d6:a7:c5:64:b6:66:a6:a6:87:43:bf:9f:59:79:44:61:9a:4a:
68:bf:f1:a8
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2KMCXqcVTKBfnWSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz
MGUyMB4XDTI2MDQxNzIwMDAwM1oXDTI2MDQyMDIwMDAwMFowLzEtMCsGA1UEAxMk
YWFhODc0YTEtYWViZC00ZDI4LWFiZGMtMGY1YTlmODc0YTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FDV9tSNCrNmtH1rYmWtxYOzBB5zgkpz0uGN
hYYRIx6B2RPPwuNd5Vqyxi0W9e8eYX5kN5k/3uhVK+6b2sqeBbw8sdD/WJKtMSu/
OCcz69+bvabmBTtKs+yFXANE3KAlNlqWJwY5zXimFAv/1W4B3cgUzwHPdZr93aoe
sHa0w904afWlVacq3x2+JJbub92iGqHrj69Tx7Fr2otq0Qfa7uV0e6KVbJze7m+4
0IEJmyqx6fzgQ/lR8fhaqkPLdmKh1OhrUEm7JbXOyQqPq+1wLkmsD0uLOVyhcUV0
/EBqjqqEk0CsgOxFNG90y/mW0ThTpUsJf9aaIk1iEJwqwRqd6wIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFEiVJ8JUpY3VkpylnGYaWGE69vKJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMx
NzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcxNTctNjZkZS00
YWFiLTg1ZTctMjhhZjRkZTQzMGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGVjMTcxNTctNjZkZS00YWFiLTg1
ZTctMjhhZjRkZTQzMGUyLzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0
MzBlMi5jcmwwHwYDVR0jBBgwFoAUy1R9vySHpXGysMeIlpnnOSA/cmMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFm
NGRlNDMwZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/GzxDy6F0DKA6/jKvh1lK
Z3+e7wwQbzVbw7bFCvfThqDzIplNb5uS6lkJm8ac08lTrURa7xtIR8zo/dakaSWU
/md/J8D3RWLaZQk7IDZ2SWyMqZn76sbRm6+IIMVNBg9Ty70NYtgK9EDXBu8lo89V
DkPSCpHdPLDEIc7QYIu4vhO7IQex199XZB0GSNqIZPnK42OPLef/vRcllHN7M00K
LbCYbYgoXJlcE4CNDb7NZj/1FnKxBK8SczgdFU12ukezkEky+Qvmqro2mGFij+YZ
/E/0VF1hWakel+/iUWTFihxHA129iZWU1xvWp8VktmampodDv59ZeURhmkpov/Go
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:59:26 2026 by rpki-client