
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
File: a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft (raw, json)
Hash identifier: LehD4/CKEbpYqZIGfa+0Pojg0asBLZboLp5TAX4m8sE=
Subject key identifier: 9F:DD:BD:35:50:08:3C:66:2D:77:A4:1C:64:D1:A4:4B:43:D7:23:94
Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
Certificate issuer: /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Certificate serial: 010D0C9F4328584D078EDE87DBAF08015FE4F380
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
Manifest number: 010D0C9F432858488115D56E4D1B00B290CDCAF4
Signing time: Mon 02 Mar 2026 01:00:04 +0000
Manifest this update: Mon 02 Mar 2026 01:00:04 +0000
Manifest next update: Wed 04 Mar 2026 01:00:00 +0000
Files and hashes: 1: 8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa (hash: o3yHtxsxDR9MLos2sbWnxcYwFQNEWSFYCuD0FhLa2dk=)
2: a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl (hash: uLt+tIB+alxhx10cbT6uHY5gJnlYpvZw3yARu08Cafc=)
3: efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa (hash: fOZU9QM73YMZH5mmjrCNaBm55H0zjPM5pqc350RJbZU=)
4: f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa (hash: VM/pZYYcZimDWVl/WWcZRghttwJ0vfbKBQxSc2+gPSA=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:07:8e:de:87:db:af:08:01:5f:e4:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Validity
Not Before: Mar 2 01:00:04 2026 GMT
Not After : Mar 4 01:00:00 2026 GMT
Subject: CN=7a15baee-0eeb-4a64-9599-4b441ce894ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:8d:ab:44:94:39:0b:04:2f:f7:0e:85:06:
08:0f:11:e0:e8:6d:0d:0f:3a:83:f0:96:df:43:73:
32:11:ba:6c:c3:14:40:ac:d8:e8:cf:5d:99:c8:08:
f3:18:94:48:7e:b7:08:81:e8:1b:ce:9b:86:e5:85:
4f:dc:bb:aa:b3:4b:c8:eb:f6:f9:b1:2e:3f:49:43:
f6:7c:c7:08:d9:c9:ff:23:7d:b3:da:c4:0f:b4:23:
06:8b:0e:12:ec:04:4f:af:8c:b7:2b:f3:e9:dc:c7:
a2:c3:08:9e:27:ef:c9:14:97:b3:0a:ed:03:dd:66:
36:b6:9d:87:b6:ea:b1:d5:4c:cb:0d:94:a4:85:d0:
ff:09:ec:37:cd:02:1c:17:0f:f2:35:1b:89:12:18:
53:4e:0b:84:e7:48:d4:4d:5a:b5:88:f3:3e:e2:4d:
1d:ff:eb:f8:90:86:3b:2f:00:c6:2b:cd:d1:de:5d:
46:b8:cc:d9:23:f1:53:d4:20:58:2f:f9:3d:09:f3:
5a:a2:b5:24:59:5e:0c:95:4f:ab:74:ed:15:71:6e:
89:45:04:63:54:90:73:a6:77:dd:6f:60:3e:19:5b:
fe:83:94:99:a7:96:0b:a8:e6:66:54:cc:3c:b6:91:
b8:39:81:f7:98:2b:6f:05:31:07:04:5f:fe:12:50:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DD:BD:35:50:08:3C:66:2D:77:A4:1C:64:D1:A4:4B:43:D7:23:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
X509v3 Authority Key Identifier:
keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:cc:26:38:c5:15:7c:61:55:37:67:73:dc:61:05:b0:86:90:
5f:63:49:7d:1d:88:f0:eb:53:2a:16:f2:47:0b:4a:72:49:a3:
25:ca:3e:4a:6e:fe:96:d9:41:b1:46:7c:86:b1:76:d3:aa:5f:
82:cd:76:a1:e3:ff:40:0d:3c:68:74:a3:d8:c7:cf:5c:a8:80:
fc:4a:24:2e:fc:99:57:d4:78:e3:a0:07:2a:aa:67:f4:3f:92:
c1:99:6c:0f:94:69:d8:b2:20:a9:3b:49:c2:88:38:88:db:48:
50:cb:26:9c:48:ed:d5:3c:27:8e:ad:c7:e1:94:66:f4:62:46:
7c:4a:5e:70:ca:8a:90:26:71:da:6f:52:2b:9b:84:bf:de:ae:
a9:6c:00:dc:50:9f:7d:65:0e:57:26:0d:4a:82:02:c5:40:54:
95:0f:91:aa:34:fb:3c:55:be:dc:fb:e7:32:aa:43:99:32:a0:
72:a0:4e:b7:e7:6b:9a:38:c9:e2:0d:3c:10:c0:23:4c:e0:71:
cf:96:0c:44:0c:18:fe:28:bb:63:ce:fc:3a:7b:19:f7:14:c4:
50:25:8a:0c:14:fa:dd:71:cc:98:38:50:24:57:2a:cf:c0:3d:
4d:cc:31:6d:a3:35:0e:8b:44:44:24:35:ba:31:1a:48:68:4f:
4b:6b:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:15 2026 by rpki-client