$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft File: 1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft (raw, json) Hash identifier: HCiNq7Zfl6wfATM2eaytguRJIzRnWqTWCiWG+Bo6N7k= Subject key identifier: 63:90:5A:BE:66:83:DF:A4:F8:A8:E1:B5:00:C5:89:0F:0E:38:2C:38 Authority key identifier: F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22 Certificate issuer: /CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a Certificate serial: 010D0C9F4328584602BA5A671A8D148B2582E880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft Manifest number: 010D0C9F432858447ECA0B95F79DC7543233C00D Signing time: Mon 27 May 2024 10:00:04 +0000 Manifest this update: Mon 27 May 2024 10:00:04 +0000 Manifest next update: Wed 29 May 2024 10:00:00 +0000 Files and hashes: 1: 1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl (hash: oBrCM84ZsPfENQqYCFv/v8xB6g0qHMMeGAYWBYCXyEI=) 2: 2226bca6-8a5e-37c2-8da3-d2833e0a82fa.roa (hash: UfjUhezQQ9dct5OGpsvcgct6AHxYAtDQTshWw2/T2uw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 May 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:02:ba:5a:67:1a:8d:14:8b:25:82:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1126b6ac-3585-401f-b2a8-1c0c1dbe489a Validity Not Before: May 27 10:00:04 2024 GMT Not After : May 29 10:00:00 2024 GMT Subject: CN=82ebe7a9-558e-41c4-aa6a-c2a0aa16ae9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:26:e1:7c:f7:ec:9e:64:3f:b3:33:68:5d:e6: b2:82:c9:74:d7:a2:cc:b9:31:c7:b0:e1:a4:17:7e: 8f:aa:07:fa:67:02:4e:db:25:18:12:f9:4b:7b:2d: 05:d2:75:84:d5:f3:c5:4a:7f:dd:56:b7:a2:95:00: 18:43:00:24:54:88:48:6e:ee:c4:36:50:01:fd:7b: fe:40:c7:d8:3a:a8:7f:3d:e3:a7:de:e7:0a:8b:43: a6:bd:01:24:6f:f7:d0:81:62:ed:53:cc:8f:b9:04: b3:61:03:26:b3:c0:aa:d7:83:66:af:87:2c:ee:53: 74:ee:9d:8e:75:b4:37:85:d2:b8:e3:3a:bb:cb:c2: 8e:60:26:23:f1:af:db:34:1d:30:b8:e0:f4:f1:4b: 82:95:c1:0f:ac:19:74:92:ea:9e:19:59:28:c1:c2: cd:e0:a9:3f:6a:f9:76:a5:d8:4a:f4:d1:57:3b:c2: 7f:8a:9a:97:77:3c:5e:e5:ad:7b:af:5d:cf:fa:ff: a0:bb:0c:9f:b8:90:75:73:7e:d6:67:a3:9c:e2:10: 96:e7:d7:88:23:2a:70:35:36:95:58:03:44:5e:0a: 03:19:47:18:70:82:ad:00:a4:60:59:00:6e:d3:78: bf:9a:ed:ec:57:cc:b4:39:f6:b3:31:70:93:c0:81: 84:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:90:5A:BE:66:83:DF:A4:F8:A8:E1:B5:00:C5:89:0F:0E:38:2C:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.crl X509v3 Authority Key Identifier: keyid:F1:69:9E:0E:11:E6:9C:30:DF:7F:B4:BE:D1:37:14:4F:B9:D5:D7:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1126b6ac-3585-401f-b2a8-1c0c1dbe489a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3b:9f:9d:b1:ab:5a:90:ca:59:ed:78:d9:eb:2b:a2:20:c9: 2d:94:e0:62:40:15:82:28:a1:91:6b:7d:5c:23:95:91:bb:62: e5:f1:ae:72:09:c5:79:1f:3d:73:06:80:88:20:cd:ed:85:4c: f6:22:ec:fc:81:17:70:34:3f:50:bf:13:bd:03:d8:be:f7:94: cb:ca:92:bd:c8:48:47:76:7d:4b:74:9c:ce:a9:21:d1:98:e6: 54:85:21:a2:36:c6:70:c0:5f:7b:58:3e:90:d0:74:1a:31:22: 02:9e:67:4b:1b:a8:04:b2:37:10:b5:d0:ec:a7:ba:a0:ee:fa: b4:02:be:79:53:b8:5b:71:fe:72:4e:c5:65:40:09:82:1e:74: ae:3b:5a:00:94:8b:f2:82:a3:3a:bb:68:89:04:f4:a6:e1:fb: 59:67:d9:6c:c4:cf:04:c0:d9:d5:2c:03:0c:ac:2d:e3:66:81: 0c:7d:e5:7c:86:5f:ec:27:ec:01:09:a3:25:9a:41:fe:d6:e5: 1c:7b:18:99:94:21:11:46:e2:90:46:71:e4:ff:8b:d7:6f:79: f0:76:3a:ae:ca:73:65:fe:17:83:dc:f5:ce:31:8f:65:04:10: 1b:4a:85:3f:2a:c1:be:9c:0a:83:58:5e:b4:1b:16:0f:a1:bb: 6f:b1:57:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEYCulpnGo0UiyWC6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTEyNmI2YWMtMzU4NS00MDFmLWIyYTgtMWMwYzFkYmU0 ODlhMB4XDTI0MDUyNzEwMDAwNFoXDTI0MDUyOTEwMDAwMFowLzEtMCsGA1UEAxMk ODJlYmU3YTktNTU4ZS00MWM0LWFhNmEtYzJhMGFhMTZhZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCbhfPfsnmQ/szNoXeaygsl016LMuTHHsOGk F36Pqgf6ZwJO2yUYEvlLey0F0nWE1fPFSn/dVreilQAYQwAkVIhIbu7ENlAB/Xv+ QMfYOqh/PeOn3ucKi0OmvQEkb/fQgWLtU8yPuQSzYQMms8Cq14Nmr4cs7lN07p2O dbQ3hdK44zq7y8KOYCYj8a/bNB0wuOD08UuClcEPrBl0kuqeGVkowcLN4Kk/avl2 pdhK9NFXO8J/ipqXdzxe5a17r13P+v+guwyfuJB1c37WZ6Oc4hCW59eIIypwNTaV WANEXgoDGUcYcIKtAKRgWQBu03i/mu3sV8y0OfazMXCTwIGEmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGOQWr5mg9+k+KjhtQDFiQ8OOCw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMTI2 YjZhYy0zNTg1LTQwMWYtYjJhOC0xYzBjMWRiZTQ4OWEvMTEyNmI2YWMtMzU4NS00 MDFmLWIyYTgtMWMwYzFkYmU0ODlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTEyNmI2YWMtMzU4NS00MDFmLWIy YTgtMWMwYzFkYmU0ODlhLzExMjZiNmFjLTM1ODUtNDAxZi1iMmE4LTFjMGMxZGJl NDg5YS5jcmwwHwYDVR0jBBgwFoAU8WmeDhHmnDDff7S+0TcUT7nV1yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMTI2YjZhYy0zNTg1LTQwMWYtYjJhOC0xYzBj MWRiZTQ4OWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChO5+dsatakMpZ7XjZ6yui IMktlOBiQBWCKKGRa31cI5WRu2Ll8a5yCcV5Hz1zBoCIIM3thUz2Iuz8gRdwND9Q vxO9A9i+95TLypK9yEhHdn1LdJzOqSHRmOZUhSGiNsZwwF97WD6Q0HQaMSICnmdL G6gEsjcQtdDsp7qg7vq0Ar55U7hbcf5yTsVlQAmCHnSuO1oAlIvygqM6u2iJBPSm 4ftZZ9lsxM8EwNnVLAMMrC3jZoEMfeV8hl/sJ+wBCaMlmkH+1uUcexiZlCERRuKQ RnHk/4vXb3nwdjquynNl/heD3PXOMY9lBBAbSoU/KsG+nAqDWF60GxYPobtvsVct -----END CERTIFICATE-----