
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
File: cd7304e1-3bc1-43c1-b035-93ee027063db.mft (raw, json)
Hash identifier: r0PpXUutj5ONP6XRow1Ick9nhI2i4uB3ljeNdXfGzWI=
Subject key identifier: 9B:36:B0:5C:B2:E4:C1:B5:79:68:FF:B0:D3:E9:28:2F:C6:0E:45:6E
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Certificate issuer: /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial: 010D0C9F4328584BBF887E9D2C9EA9C2F84C7B10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
Manifest number: 010D0C9F432858415B0D7C3E1166217992E819E6
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Thu 06 Nov 2025 13:00:00 +0000
Files and hashes: 1: 05f41490-eb46-385a-b1c5-c75862aa15d4.roa (hash: sruUAu9etptmN7Uto/vZF+F9WIC08LWkNPEFX2bogZE=)
2: 3ad9037d-cc4e-3a46-981a-715e438d4f71.roa (hash: llJ2WfU9/qnEIO8DxHk5oABfdiuIidqagAkm6PmI3sY=)
3: 843faa0c-cfed-3624-b1d7-29c9a1f2e126.roa (hash: 2PCpHfDo7MKPjxSchuk9dCdRqPw8x63W5AZzDvlv/rk=)
4: cd7304e1-3bc1-43c1-b035-93ee027063db.crl (hash: spm1M7A3aKnFm0x2zIqDSBLu+uv5Jk0ul7g89HvPV9w=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:bf:88:7e:9d:2c:9e:a9:c2:f8:4c:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 6 13:00:00 2025 GMT
Subject: CN=dd186f9b-b639-4194-81a0-f8595e470c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:15:95:d5:dc:fd:cc:ff:c8:a1:56:31:65:
ea:cf:ce:ea:92:bf:35:77:35:d4:ef:42:4e:6e:66:
27:79:a7:d0:72:4c:9d:54:c9:7f:9f:7d:66:fb:83:
25:c7:92:6c:6e:1f:68:e4:e6:ed:19:2b:2d:a6:5d:
1d:58:d7:1f:33:0b:07:ad:28:fd:42:20:35:f5:67:
d5:65:de:e3:c7:5f:16:23:fe:77:e4:70:3f:f4:22:
b3:ba:91:d5:eb:06:8f:d7:b6:66:25:ca:0b:a8:b9:
7f:68:b5:fb:94:41:5d:12:8b:f9:1a:2d:b1:8e:c8:
aa:29:34:d3:5d:fb:b4:f6:05:df:b3:eb:b0:d9:d3:
e6:16:95:dc:74:1e:4a:cc:f0:83:df:5a:3a:4e:09:
51:04:13:47:f5:3d:43:22:68:0b:31:03:8f:5e:3d:
cb:f0:e4:13:0f:0b:20:40:bc:95:45:5c:64:ec:d4:
c2:16:17:18:da:fc:97:07:92:7d:1d:75:e5:a5:8c:
8a:af:c9:4e:fa:88:67:e1:b2:8f:76:e3:71:6e:96:
c3:9d:b4:80:bd:20:20:f1:32:19:dc:09:f8:c9:95:
ee:f0:6b:8b:2a:ee:0c:5a:8a:e7:b9:da:7d:80:b9:
00:cf:ca:82:2d:3a:75:41:b8:2e:8b:4e:47:f0:2f:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:B0:5C:B2:E4:C1:B5:79:68:FF:B0:D3:E9:28:2F:C6:0E:45:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl
X509v3 Authority Key Identifier:
keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:5c:16:62:8e:27:50:b9:d0:19:2f:fb:ec:17:53:59:49:bf:
2c:21:b0:dd:20:af:64:12:2c:91:67:76:71:a6:68:43:2f:a9:
4b:27:2e:f3:92:61:78:97:6e:0b:ef:c4:1a:0d:fc:c0:0c:2b:
a2:25:08:06:8e:d3:4e:3a:0f:c3:39:f9:f8:c8:fd:4a:d0:2f:
42:0c:24:f1:0e:7c:73:89:cc:ee:d7:cd:41:91:3e:de:a2:51:
2d:3e:e6:6a:7d:1e:9c:bc:d4:68:6d:84:6a:bd:49:61:65:ec:
1a:63:1a:e0:48:d8:ea:e1:33:12:6b:f9:16:22:83:13:0a:c2:
24:78:4f:48:f1:ab:13:80:35:56:a1:9c:0a:69:42:36:44:82:
c2:81:c7:37:d2:dd:05:53:17:48:47:32:49:ae:8e:09:83:6a:
2b:fe:57:1c:01:cd:72:33:f4:33:f0:33:66:7c:e5:f3:34:aa:
9f:3e:a2:2a:ac:76:b2:2c:22:42:47:9d:e5:52:1a:e9:18:aa:
d6:77:de:25:c1:b0:01:3d:d5:73:c4:f6:4c:f1:98:df:1a:33:
d7:3f:9d:a9:f4:22:c8:ce:6a:07:0c:38:5b:eb:9a:7f:00:3c:
44:8a:98:04:d7:02:d9:1b:a2:1d:75:54:4c:e2:a6:b2:8d:2b:
4c:2b:fc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:22:17 2025 by rpki-client