$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: cU63hDRjFkKv7SdcGdvXJgRkjIHDVmuGnvV/d59pTCM= Subject key identifier: 3E:68:6A:38:B1:8E:77:2D:92:C6:8A:94:16:91:E4:1D:73:B6:EF:D9 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F43285845F78F9D457B8365B666C05380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026A86 Signing time: Thu 23 May 2024 10:00:05 +0000 Manifest this update: Thu 23 May 2024 10:00:05 +0000 Manifest next update: Sat 25 May 2024 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: f4FuH36FJLHdYhnsQcwmtT37XEhCC5j8JRLvAev+kRs=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: 42O5135oO28vjNHgBHxzrJf1nPenJ5K0lpnbCS9HKCk=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: +eEztznYU/YcdCm7uQqpuJD+qdhye2wsAEFsvvGGqzI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f7:8f:9d:45:7b:83:65:b6:66:c0:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: May 23 10:00:05 2024 GMT Not After : May 25 10:00:00 2024 GMT Subject: CN=9d4edbb0-c92e-45b0-b3e5-020035335ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:5a:1c:08:98:4d:42:41:d0:0a:aa:72:36: bc:1e:b7:47:23:a5:4e:7e:fc:65:51:3c:0d:12:7e: 36:ca:2b:43:68:9b:04:ca:47:69:34:9c:38:49:76: 41:56:10:b2:c9:a1:50:b8:ca:53:72:d5:3c:90:2f: be:24:5d:20:0c:6f:99:72:71:a8:b9:87:44:0d:34: aa:79:ef:11:b5:bf:42:84:0d:ba:5e:59:74:07:f9: 26:76:79:1a:c8:e9:66:dc:6c:d3:90:c7:a0:59:af: 91:85:08:6b:66:ce:6c:29:2a:b6:3f:1e:2f:a8:a8: 67:8e:b4:1a:83:70:60:a2:53:b9:27:ca:1e:70:95: 6e:60:7b:d5:73:03:ef:a6:44:fb:3b:74:53:17:ab: 46:11:a6:af:6c:c1:85:e7:db:3c:93:d4:7a:88:9a: d7:6e:37:0b:19:f8:97:d1:49:d2:8a:23:c8:f4:8f: 40:c4:1f:aa:57:07:e2:4a:f6:c9:5b:ad:b9:2d:fd: 9b:cc:30:11:5a:62:f1:f4:06:50:1f:cd:03:cc:41: 2a:79:24:db:e5:96:6a:2f:66:74:3d:4a:55:2d:17: 23:38:e8:64:f0:25:83:6e:46:5f:76:b6:27:fa:a5: fe:e4:11:18:2d:a3:92:b3:f6:90:63:66:ba:42:5e: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:68:6A:38:B1:8E:77:2D:92:C6:8A:94:16:91:E4:1D:73:B6:EF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:95:c6:9d:8c:ca:95:98:f6:f6:3e:db:bb:b1:5c:88:76:c3: 9d:b2:bb:2e:e9:ef:ac:df:99:59:8a:cd:8e:48:6f:c1:25:24: 50:6b:09:40:40:f9:b4:42:cc:92:d0:db:69:2d:ae:ab:27:ab: 64:b5:cb:db:d0:14:ba:1b:41:af:a1:96:b8:b5:4b:9f:dc:73: 6e:11:c3:17:d0:1e:1d:b6:ac:a0:5f:d5:1c:01:10:ee:13:d5: 69:f0:a2:74:44:a5:13:63:17:94:52:92:15:82:2b:93:3e:5a: 46:06:59:d7:4e:4c:58:6b:5b:c8:e3:be:64:fa:2f:28:b8:44: 45:53:56:c2:fa:de:fb:51:54:fe:4c:ca:0e:7d:1e:3b:25:e0: c0:9a:8d:d5:44:1c:58:11:ce:01:4e:cb:94:7d:45:ec:08:ae: 39:7f:e9:6b:25:60:ec:72:f9:5c:61:d0:64:77:96:e9:cf:e5: ac:cc:4e:10:61:2a:26:d1:e8:6b:f1:6f:cd:00:9f:f8:9e:ef: ef:2e:67:d1:72:2f:e8:1f:e7:d3:f7:3d:08:22:9b:a6:5c:5d: ba:8d:c5:d6:f6:a7:ee:04:ba:bc:3e:df:3d:9b:ca:fc:b3:26: 57:22:f9:1c:d5:b2:90:76:36:3e:c1:e3:81:e5:34:91:1d:2d: fd:54:9e:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEX3j51Fe4NltmbAU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI0MDUyMzEwMDAwNVoXDTI0MDUyNTEwMDAwMFowLzEtMCsGA1UEAxMk OWQ0ZWRiYjAtYzkyZS00NWIwLWIzZTUtMDIwMDM1MzM1ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5VaHAiYTUJB0Aqqcja8HrdHI6VOfvxlUTwN En42yitDaJsEykdpNJw4SXZBVhCyyaFQuMpTctU8kC++JF0gDG+ZcnGouYdEDTSq ee8Rtb9ChA26Xll0B/kmdnkayOlm3GzTkMegWa+RhQhrZs5sKSq2Px4vqKhnjrQa g3BgolO5J8oecJVuYHvVcwPvpkT7O3RTF6tGEaavbMGF59s8k9R6iJrXbjcLGfiX 0UnSiiPI9I9AxB+qVwfiSvbJW625Lf2bzDARWmLx9AZQH80DzEEqeSTb5ZZqL2Z0 PUpVLRcjOOhk8CWDbkZfdrYn+qX+5BEYLaOSs/aQY2a6Ql6HjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD5oajixjnctksaKlBaR5B1ztu/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAilcadjMqVmPb2Ptu7sVyI dsOdsrsu6e+s35lZis2OSG/BJSRQawlAQPm0QsyS0NtpLa6rJ6tktcvb0BS6G0Gv oZa4tUuf3HNuEcMX0B4dtqygX9UcARDuE9Vp8KJ0RKUTYxeUUpIVgiuTPlpGBlnX TkxYa1vI475k+i8ouERFU1bC+t77UVT+TMoOfR47JeDAmo3VRBxYEc4BTsuUfUXs CK45f+lrJWDscvlcYdBkd5bpz+WszE4QYSom0ehr8W/NAJ/4nu/vLmfRci/oH+fT 9z0IIpumXF26jcXW9qfuBLq8Pt89m8r8syZXIvkc1bKQdjY+weOB5TSRHS39VJ5v -----END CERTIFICATE-----Generated at Fri May 24 02:52:04 2024 by rpki-client on console-ams.rpki-client.org