$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: Rz+pbA+ibEZw37anKnkwU9iFTEa+Axhxm0oNX1x+MXA= Subject key identifier: A5:FF:70:47:BB:F6:6B:D4:AA:73:50:B9:04:C8:76:F7:4C:98:17:06 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F43285845F6A161F83220FBB1DC723680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BE784 Signing time: Thu 23 May 2024 02:00:04 +0000 Manifest this update: Thu 23 May 2024 02:00:04 +0000 Manifest next update: Sat 25 May 2024 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: 2MNCKsc0GXNTIa+kaewIVOxFqUBvf0gip7QncZzKcaQ=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: WL5ema6gyw809k30hkb7Lyz99XShkrGpH6qMbKlNEBA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f6:a1:61:f8:32:20:fb:b1:dc:72:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: May 23 02:00:04 2024 GMT Not After : May 25 02:00:00 2024 GMT Subject: CN=784e7762-fd6f-4255-adb2-d168f622dff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4c:c9:da:1f:61:aa:6c:93:40:39:dd:44:8c: ac:72:75:80:34:69:2c:33:b7:23:1d:9a:2b:b2:89: 06:97:c1:33:83:c7:f0:bd:7c:58:fe:3f:ee:73:03: 3c:5f:fb:9e:3f:f4:4f:93:be:96:34:1f:4c:fc:47: 2e:13:74:b8:97:ca:5a:bf:8e:db:9f:24:a1:f9:e6: 4f:6b:47:cd:8e:a5:8b:0d:54:e4:aa:fe:06:07:af: 41:ab:30:ac:eb:12:fb:b0:df:d2:55:11:a7:44:57: 8e:97:22:04:d2:c3:14:8b:d0:53:12:6c:50:ad:87: a2:65:df:a5:54:8e:4a:41:ec:10:a4:27:04:cf:9c: 68:96:a3:8b:87:df:7f:a5:92:9a:19:bd:da:1a:0c: ef:74:f9:7f:b4:b0:72:ce:39:66:fa:ef:2d:d2:1a: c2:a4:28:be:0a:cd:18:d2:8b:e3:f1:27:50:cc:2c: c7:43:62:55:d5:b8:aa:47:ca:99:31:73:76:ec:d4: 11:e5:1c:c3:84:ca:70:3b:4a:83:a8:2f:96:e1:78: ce:9c:57:cf:99:5c:3d:ed:33:5f:3b:df:83:a0:0c: 2e:2a:2f:14:10:bb:4c:b1:c4:d7:bf:5a:88:13:3d: 74:d6:9d:cb:1c:f3:df:52:d2:ac:43:71:bf:cd:d0: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FF:70:47:BB:F6:6B:D4:AA:73:50:B9:04:C8:76:F7:4C:98:17:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:45:1f:cf:a5:04:7d:7b:06:97:32:a9:06:df:b8:50:73:46: ae:2f:d0:16:06:73:10:75:e3:9e:2a:2e:a8:23:75:37:a6:d1: da:56:a3:51:ce:4d:2b:d0:ff:58:13:45:25:e6:cc:5d:26:e8: 2a:72:21:43:14:18:86:02:84:43:43:52:3b:ee:21:3d:5a:06: b3:46:6c:2f:ff:7c:04:10:d2:14:4e:46:03:81:b5:55:52:62: b5:77:49:b9:99:5c:23:29:8a:58:83:c8:9b:2c:c2:69:fe:ef: b4:0e:de:83:2f:53:ae:87:e9:30:fa:05:b6:10:07:c8:43:e1: 27:7a:97:2e:f6:e5:91:ef:68:35:67:0e:9d:cb:a6:79:7d:8a: 5b:db:f3:97:74:32:6d:b7:e2:b8:e5:a0:d0:7a:8b:f8:04:b8: 53:8a:12:cd:59:88:38:b2:4f:d0:86:db:94:6f:98:68:53:0b: 2f:12:99:6c:ab:c4:0e:4f:4f:1c:b8:be:3f:fc:c4:66:98:8a: 59:35:49:50:e5:89:bc:52:79:aa:e1:63:60:e4:c1:fe:5f:22: 79:0d:ea:a9:9c:ee:dc:2a:79:5b:71:2b:32:8d:ad:db:d4:6f: 15:54:36:67:09:92:1b:ee:5c:fa:cd:eb:b7:5f:ce:06:48:00: 9b:00:41:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEX2oWH4MiD7sdxyNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI0MDUyMzAyMDAwNFoXDTI0MDUyNTAyMDAwMFowLzEtMCsGA1UEAxMk Nzg0ZTc3NjItZmQ2Zi00MjU1LWFkYjItZDE2OGY2MjJkZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEzJ2h9hqmyTQDndRIyscnWANGksM7cjHZor sokGl8Ezg8fwvXxY/j/ucwM8X/ueP/RPk76WNB9M/EcuE3S4l8pav47bnySh+eZP a0fNjqWLDVTkqv4GB69BqzCs6xL7sN/SVRGnRFeOlyIE0sMUi9BTEmxQrYeiZd+l VI5KQewQpCcEz5xolqOLh99/pZKaGb3aGgzvdPl/tLByzjlm+u8t0hrCpCi+Cs0Y 0ovj8SdQzCzHQ2JV1biqR8qZMXN27NQR5RzDhMpwO0qDqC+W4XjOnFfPmVw97TNf O9+DoAwuKi8UELtMscTXv1qIEz101p3LHPPfUtKsQ3G/zdA6EQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKX/cEe79mvUqnNQuQTIdvdMmBcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgRR/PpQR9ewaXMqkG37hQ c0auL9AWBnMQdeOeKi6oI3U3ptHaVqNRzk0r0P9YE0Ul5sxdJugqciFDFBiGAoRD Q1I77iE9WgazRmwv/3wEENIUTkYDgbVVUmK1d0m5mVwjKYpYg8ibLMJp/u+0Dt6D L1Ouh+kw+gW2EAfIQ+Enepcu9uWR72g1Zw6dy6Z5fYpb2/OXdDJtt+K45aDQeov4 BLhTihLNWYg4sk/QhtuUb5hoUwsvEplsq8QOT08cuL4//MRmmIpZNUlQ5Ym8Unmq 4WNg5MH+XyJ5DeqpnO7cKnlbcSsyja3b1G8VVDZnCZIb7lz6zeu3X84GSACbAEFp -----END CERTIFICATE-----Generated at Thu May 23 04:28:40 2024 by rpki-client on console-ams.rpki-client.org