
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
File: aa34647f-3229-480c-9b05-3cf0b00fa173.mft (raw, json)
Hash identifier: 4RM0T4VxYUDkcte79GyUfj7olWWuhKZDe8w2HKpuoG0=
Subject key identifier: 21:69:3C:36:4E:FA:AA:44:2D:C0:7B:73:B4:F3:83:5C:97:C8:E0:64
Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Certificate issuer: /CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Certificate serial: 010D0C9F4328584BC2523B8B7BFFE7DCB744BF00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
Manifest number: 010D0C9F43285849B8591A0A2626962C4503E942
Signing time: Wed 05 Nov 2025 13:00:08 +0000
Manifest this update: Wed 05 Nov 2025 13:00:08 +0000
Manifest next update: Fri 07 Nov 2025 13:00:00 +0000
Files and hashes: 1: aa34647f-3229-480c-9b05-3cf0b00fa173.crl (hash: Ndn2jAylmcxMnXvxajJ4jY1gn35dhTFHgaO4JnuyubY=)
2: c6ed17f1-34cb-3ce9-8d06-e0a16d240510.roa (hash: DM60ccb6RE5CofJQ3v0vpE6r5XWrjeBGsIoaBU61dtY=)
3: eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (hash: qNcEBKfj15mncSGtvWyAHfTezgrG2+3nLDePwwA6+5k=)
4: fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa (hash: g9HNrHm/7uyyMQWhJUSLd09BGNxqvjrtbWNHutWs+7s=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 07 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c2:52:3b:8b:7b:ff:e7:dc:b7:44:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Validity
Not Before: Nov 5 13:00:08 2025 GMT
Not After : Nov 7 13:00:00 2025 GMT
Subject: CN=1f06cf40-a13d-4fa8-823b-81e798442b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:46:0b:18:f0:7e:d1:17:33:4c:0a:8c:0b:
a4:3d:c3:fc:f2:89:65:6f:3e:08:4c:8d:ac:b4:58:
08:4c:14:cc:73:88:d3:20:42:cc:7c:1d:16:ca:76:
27:50:8f:c7:72:eb:4c:f1:f8:d4:e3:92:bd:77:4a:
21:d0:25:cd:44:15:9e:74:b7:95:28:64:00:67:7b:
74:d4:91:f9:63:48:76:d7:fe:e4:09:03:d4:f3:c3:
f9:35:bb:9b:1b:71:42:28:7b:35:07:97:a3:4a:89:
1e:82:3c:1f:a8:8b:57:aa:b7:60:7a:fb:55:e8:ca:
6a:46:03:72:33:de:b0:c5:7a:2e:30:08:e7:10:b9:
80:fd:3c:0c:93:ac:d2:ce:ae:77:a8:f3:e0:e5:22:
3d:76:80:a5:7d:b4:6f:b7:34:18:a4:b5:f6:dc:7b:
ef:d0:12:5d:01:eb:68:a9:9c:22:28:59:71:11:17:
83:5d:69:0a:84:ae:4a:33:be:e8:a3:c1:56:dc:92:
2f:df:57:46:dc:91:3d:d5:9e:c2:b5:e4:39:90:e9:
5a:9f:73:46:59:d0:0a:94:7c:15:dd:76:7d:2a:48:
b2:8f:9b:9b:db:38:ca:b3:ee:21:4e:b9:4c:65:91:
d3:b6:f1:51:2f:6d:7d:b4:12:1b:76:6e:59:7f:7d:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:3C:36:4E:FA:AA:44:2D:C0:7B:73:B4:F3:83:5C:97:C8:E0:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl
X509v3 Authority Key Identifier:
keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ae:db:6d:5d:1d:58:24:44:70:0a:da:c5:02:2a:89:20:ce:
3d:ff:b2:3b:ee:ac:a9:fa:d7:08:9f:48:64:fe:56:3b:11:d8:
4a:e3:4c:e0:d3:ef:16:84:ce:e0:11:85:f2:50:65:0e:17:e9:
bb:f8:9d:cc:07:0d:a0:6a:9a:76:09:d7:75:6e:fa:3a:21:f1:
2c:60:f9:2e:23:bb:3e:0c:30:7c:85:e6:28:a2:f5:b0:13:be:
43:d8:c7:03:fe:07:c1:38:d8:07:3b:16:64:13:5c:b8:e8:e8:
de:16:10:74:be:0f:06:66:79:c7:db:62:90:e3:5d:37:b3:18:
e1:f1:7d:9a:4b:7a:cb:6a:4f:9d:24:e7:27:b1:cb:49:a1:b8:
57:2f:2b:58:40:46:fd:d1:bf:81:ae:84:1e:7f:7c:a2:94:2d:
3f:b9:c8:7a:81:ac:c4:64:e4:a0:b5:36:fc:f8:62:e7:fd:1e:
3c:d9:aa:e1:8d:02:ed:d5:23:0e:83:70:41:de:b7:58:6f:c0:
c4:fa:a9:7a:db:84:b7:22:d9:30:a8:6f:bb:98:7c:32:29:9f:
c6:f5:40:d4:95:3d:5e:24:c3:4a:30:d4:e3:48:c5:1e:d2:7b:
d6:e7:8a:7d:80:85:10:1d:47:a3:67:ff:73:5d:0c:e3:19:c7:
81:38:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:25 2025 by rpki-client