This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft
File:                     3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft (raw, json)
Hash identifier:          gzRThNDLDjLKZ20nroxnvFCAjwNhZLFqXZQ6jWKMMk4=
Subject key identifier:   9C:34:A4:68:79:B4:BA:CE:23:E9:62:91:F6:06:E2:2D:15:1E:32:F2
Authority key identifier: D3:CB:84:8B:12:B1:7C:62:9C:0C:E4:54:D3:2F:0D:0B:F0:E8:47:B1
Certificate issuer:       /CN=3f58ad98-0e5e-485d-bd5d-5c620932b6c3
Certificate serial:       010D0C9F4328584B1DF536101E4DE65F10ACDE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft
Manifest number:          010D0C9F43285849490D0FADC3DA076F134F50EB
Signing time:             Sun 07 Sep 2025 16:00:08 +0000
Manifest this update:     Sun 07 Sep 2025 16:00:08 +0000
Manifest next update:     Wed 10 Sep 2025 16:00:00 +0000
Files and hashes:         1: 3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl (hash: Hnptv/uVRt800iIl/AUvyU/BTxsuoFhc1qcCAhS7nws=)
                          2: dc9bc937-e8ce-3bad-acc7-766bfc1c52ea.roa (hash: BUs75gvPnLrH+vAFSl6q89pqxgl/N/f6stPDSMnqG28=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:f5:36:10:1e:4d:e6:5f:10:ac:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f58ad98-0e5e-485d-bd5d-5c620932b6c3
        Validity
            Not Before: Sep  7 16:00:08 2025 GMT
            Not After : Sep 10 16:00:00 2025 GMT
        Subject: CN=94e5779b-d5fd-4363-93b8-8cb0fc687a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:17:72:d0:6d:f7:f9:5f:9a:e9:b8:09:75:
                    c1:60:5e:b9:84:0b:26:49:76:87:6a:42:37:a8:82:
                    a7:78:85:83:87:70:55:29:56:35:79:21:6e:47:85:
                    07:ab:c5:4b:47:4d:fd:76:d9:85:a7:c1:3f:3a:22:
                    aa:de:00:c1:68:fc:a3:a4:27:fb:48:d3:c2:81:ff:
                    0f:71:a1:5d:8a:1b:e7:4c:a0:1c:14:08:8b:f6:bf:
                    04:94:3a:40:e9:3c:a1:1e:fd:43:2f:bc:9e:e0:6f:
                    65:cd:63:22:c9:2a:a5:d5:e4:64:ee:22:c8:36:c2:
                    db:dc:85:ce:8a:e0:6e:79:4e:dc:a5:48:dc:73:5e:
                    3c:88:40:fb:7c:75:4a:11:e8:88:98:07:cf:7f:a3:
                    c6:f9:42:81:75:96:ad:0d:b4:e9:31:68:b4:b6:98:
                    39:cd:60:e5:b3:67:0d:49:b1:e4:c1:46:cd:10:ed:
                    d0:0c:5c:c0:6d:70:4f:c4:15:12:70:04:ca:f2:5b:
                    ce:31:a4:ed:97:58:f7:34:32:d9:1e:ec:7c:71:a6:
                    6e:86:2a:ab:03:63:2b:b9:7f:6c:38:38:28:80:cb:
                    c6:22:6c:ca:67:98:56:7f:ce:b9:ac:43:30:05:15:
                    a0:c5:25:3c:a3:b1:dd:76:b9:92:14:b0:93:2d:56:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:A4:68:79:B4:BA:CE:23:E9:62:91:F6:06:E2:2D:15:1E:32:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CB:84:8B:12:B1:7C:62:9C:0C:E4:54:D3:2F:0D:0B:F0:E8:47:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:da:36:b8:4a:88:c0:8c:58:07:58:64:98:95:44:c6:df:d5:
         4c:b2:70:1e:8d:15:63:76:6d:db:e9:5f:32:cb:f9:96:85:56:
         72:45:0d:72:eb:78:d8:54:38:ea:0b:b4:ca:60:c8:52:a2:99:
         12:3c:ea:d8:c7:9b:75:7e:60:15:95:2c:2d:ef:90:1b:78:5b:
         2f:de:8d:ea:10:f1:87:a9:9b:3c:d4:2d:80:00:da:0a:34:b1:
         36:f5:9a:26:e7:12:21:64:8e:fa:9b:16:cd:3c:b8:79:02:8a:
         5e:26:b8:d6:3e:71:68:06:8e:98:b9:51:f7:a5:00:d6:1a:48:
         f4:b7:60:31:68:fb:c3:74:89:6b:f3:2f:18:05:10:4b:0a:70:
         56:e1:c2:6e:97:a7:a5:25:dc:fc:f3:38:aa:e0:7c:db:e3:8a:
         ec:cc:f5:26:38:de:14:60:ec:8a:78:d1:c0:89:7e:59:69:4e:
         c3:b2:45:a5:f8:30:9a:57:e4:85:b5:32:ef:bf:a0:19:46:39:
         d9:ad:3b:85:b4:62:9c:7e:90:7b:5d:6e:4e:7c:35:fc:de:c2:
         29:8a:cd:e0:21:b8:39:a8:f5:84:ab:64:fc:4f:3c:71:a5:8f:
         14:8b:5e:d3:3c:87:3f:6a:69:12:aa:1f:54:ea:c9:b4:5b:6b:
         9f:b6:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 00:46:51 2025 by rpki-client