
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.mft
File: 588408ab-7c90-4aa1-8bc3-00b989e7f082.mft (raw, json)
Hash identifier: 4VUte0XVgQTjOl5i7scCEPlRR5Ol3HahPwwEzfpZXWg=
Subject key identifier: EE:7A:10:02:4A:01:48:EA:E0:B7:29:9E:CD:2F:F3:3F:33:8A:19:C4
Authority key identifier: 29:8B:CB:C3:FC:85:78:9C:25:28:65:1A:5E:B3:D0:7E:F4:24:89:60
Certificate issuer: /CN=588408ab-7c90-4aa1-8bc3-00b989e7f082
Certificate serial: 010D0C9F4328584BC057FE294FD8B11CB1C7E1C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.mft
Manifest number: 010D0C9F4328584B4DFBB5BD3685EBF1B3490629
Signing time: Tue 04 Nov 2025 20:00:08 +0000
Manifest this update: Tue 04 Nov 2025 20:00:08 +0000
Manifest next update: Thu 06 Nov 2025 20:00:00 +0000
Files and hashes: 1: 588408ab-7c90-4aa1-8bc3-00b989e7f082.crl (hash: leGtgF3pMrsKFs5G6Stek4F4FMA+9pteeUVpDCCrGWk=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:c0:57:fe:29:4f:d8:b1:1c:b1:c7:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588408ab-7c90-4aa1-8bc3-00b989e7f082
Validity
Not Before: Nov 4 20:00:08 2025 GMT
Not After : Nov 6 20:00:00 2025 GMT
Subject: CN=ba5f1f38-0afb-4706-a485-0d4badfe20e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:13:24:4d:36:43:cc:5e:d7:3f:d5:66:d8:
a6:d9:a1:8a:3b:e9:0f:65:4d:93:88:06:7a:0c:3e:
3b:5b:55:a3:75:76:88:81:1c:e1:d6:00:76:04:9b:
c5:56:a4:7d:05:47:6f:e0:0c:4d:46:79:31:92:96:
c6:6a:a8:31:77:41:8e:fc:53:8b:ec:bf:c4:4c:66:
7a:eb:5f:f3:4a:01:16:20:ff:10:14:5b:a5:b8:3b:
34:d9:19:2a:e5:b9:a7:64:d0:83:3d:00:96:31:ca:
c0:b1:92:bc:70:ec:82:d7:25:22:81:ae:22:fc:59:
79:8e:ca:f2:5e:07:0b:84:3c:6f:93:b2:bc:65:82:
8d:92:38:28:5c:be:95:30:b1:41:c4:d3:cd:f7:a5:
20:24:f3:8f:2d:74:52:9e:00:9d:76:42:00:bc:f5:
e6:72:b5:73:5c:49:f7:a6:5c:3c:b7:0d:9b:8f:8e:
66:6c:11:f3:8e:50:71:61:fc:3a:b8:19:ef:5e:e6:
d3:0e:34:27:16:79:5e:2a:68:dc:69:b8:a7:1b:4b:
e0:72:68:a5:55:2e:c6:c3:c2:ec:61:51:0a:9b:87:
73:80:a5:f5:76:4f:f3:c2:b2:50:62:c9:89:fc:0f:
4e:aa:61:f7:8f:70:c1:23:c7:18:4d:93:72:ae:96:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:10:02:4A:01:48:EA:E0:B7:29:9E:CD:2F:F3:3F:33:8A:19:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082/588408ab-7c90-4aa1-8bc3-00b989e7f082.crl
X509v3 Authority Key Identifier:
keyid:29:8B:CB:C3:FC:85:78:9C:25:28:65:1A:5E:B3:D0:7E:F4:24:89:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/588408ab-7c90-4aa1-8bc3-00b989e7f082.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:72:5b:39:ae:70:9f:05:e1:69:1b:d2:f0:cc:47:8b:6f:41:
1a:42:de:bf:3d:23:10:6e:bc:09:c1:7e:26:ac:12:c3:b5:63:
dc:4f:d7:23:42:25:cc:bc:69:e4:fd:cf:bd:1a:2b:1f:11:26:
72:50:b9:cc:47:ab:82:5c:a1:68:f3:25:f1:83:69:1d:df:c8:
d0:e9:e6:c6:26:51:15:f0:42:41:d8:c2:a4:be:1d:32:48:bc:
d6:f3:a7:a2:61:a6:4d:81:1d:39:26:91:c8:32:6a:db:ab:5f:
de:14:4e:06:76:bb:81:9c:3b:a1:dd:23:9e:0b:9b:94:00:69:
80:02:0c:bc:d4:43:17:9a:cb:5f:ef:b9:3c:a2:37:ba:eb:af:
2f:1b:70:dd:33:97:de:4b:ca:7f:4e:a4:93:ff:13:27:fb:9c:
c2:8a:21:43:e0:a3:e7:44:6a:a1:ea:71:bd:ec:da:0d:60:bf:
33:b8:3b:08:f0:34:2b:bb:cc:d7:cf:d0:fa:7d:7a:63:d3:7f:
e8:f5:21:9a:25:fa:0e:ba:14:1c:73:b0:ef:c0:16:6f:68:20:
3e:7a:77:b4:35:07:e8:55:83:54:d5:8b:22:b0:78:6a:e2:50:
20:a2:1e:fc:de:9e:70:a8:51:92:c4:ea:a8:c4:31:50:ca:81:
b7:ab:e3:9f
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvAV/4pT9ixHLHH4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTg4NDA4YWItN2M5MC00YWExLThiYzMtMDBiOTg5ZTdm
MDgyMB4XDTI1MTEwNDIwMDAwOFoXDTI1MTEwNjIwMDAwMFowLzEtMCsGA1UEAxMk
YmE1ZjFmMzgtMGFmYi00NzA2LWE0ODUtMGQ0YmFkZmUyMGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopwTJE02Q8xe1z/VZtim2aGKO+kPZU2TiAZ6
DD47W1WjdXaIgRzh1gB2BJvFVqR9BUdv4AxNRnkxkpbGaqgxd0GO/FOL7L/ETGZ6
61/zSgEWIP8QFFuluDs02Rkq5bmnZNCDPQCWMcrAsZK8cOyC1yUiga4i/Fl5jsry
XgcLhDxvk7K8ZYKNkjgoXL6VMLFBxNPN96UgJPOPLXRSngCddkIAvPXmcrVzXEn3
plw8tw2bj45mbBHzjlBxYfw6uBnvXubTDjQnFnleKmjcabinG0vgcmilVS7Gw8Ls
YVEKm4dzgKX1dk/zwrJQYsmJ/A9OqmH3j3DBI8cYTZNyrpbbrQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFO56EAJKAUjq4Lcpns0v8z8zihnEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ODg0
MDhhYi03YzkwLTRhYTEtOGJjMy0wMGI5ODllN2YwODIvNTg4NDA4YWItN2M5MC00
YWExLThiYzMtMDBiOTg5ZTdmMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTg4NDA4YWItN2M5MC00YWExLThi
YzMtMDBiOTg5ZTdmMDgyLzU4ODQwOGFiLTdjOTAtNGFhMS04YmMzLTAwYjk4OWU3
ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUKYvLw/yFeJwlKGUaXrPQfvQkiWAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81ODg0MDhhYi03YzkwLTRhYTEtOGJjMy0wMGI5
ODllN2YwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+cls5rnCfBeFpG9LwzEeL
b0EaQt6/PSMQbrwJwX4mrBLDtWPcT9cjQiXMvGnk/c+9GisfESZyULnMR6uCXKFo
8yXxg2kd38jQ6ebGJlEV8EJB2MKkvh0ySLzW86eiYaZNgR05JpHIMmrbq1/eFE4G
druBnDuh3SOeC5uUAGmAAgy81EMXmstf77k8oje6668vG3DdM5feS8p/TqST/xMn
+5zCiiFD4KPnRGqh6nG97NoNYL8zuDsI8DQru8zXz9D6fXpj03/o9SGaJfoOuhQc
c7DvwBZvaCA+ene0NQfoVYNU1YsisHhq4lAgoh783p5wqFGSxOqoxDFQyoG3q+Of
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:11 2025 by rpki-client