$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: ggZu1v3FfhR4a9GqmkipbwpC71xQBr8fLfYHOWp6RT0= Subject key identifier: 4F:A8:96:B4:88:C0:5B:42:94:7A:19:A5:06:E8:A8:EB:DC:77:87:37 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F43285845DF5DB0050466DA048299CF38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B749D Signing time: Tue 14 May 2024 18:00:04 +0000 Manifest this update: Tue 14 May 2024 18:00:04 +0000 Manifest next update: Thu 16 May 2024 18:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: yVzIZ8WtiyuwUuA9loXFCW7LQkAGAojsEwGCZ3ERC9E=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: jD+Qphf8qMYV/BzWUDE04ZTaTmCNS23H5SpFlmfnMck=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:df:5d:b0:05:04:66:da:04:82:99:cf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: May 14 18:00:04 2024 GMT Not After : May 16 18:00:00 2024 GMT Subject: CN=514bea31-d165-41d4-87d5-0e84e19c6589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:61:18:ce:e4:6a:f4:67:14:62:d9:79:37:ae: db:f8:79:d6:e1:ad:9f:73:4b:54:3e:03:b4:6e:88: d3:2a:cf:96:a9:4c:5b:e6:30:cd:45:a2:ce:ff:7d: 74:a1:75:ff:39:72:5b:18:c0:12:ac:0b:a8:0f:b9: 4e:cd:0d:56:30:ad:bc:7f:d6:93:ed:30:be:f4:ca: 2f:04:60:f3:c8:c1:e4:f8:ce:ad:bb:5e:2e:a0:3c: 2c:4d:02:ef:5a:6c:b1:b3:bc:4c:35:ed:29:e8:5d: 05:c4:dd:97:0d:3d:18:1c:a7:03:1f:0f:a9:29:f9: 7e:01:4c:ca:5b:1a:46:18:ca:f7:97:26:d7:21:53: 27:3a:d7:38:d9:0f:a3:0e:3e:71:2b:9d:22:6b:e4: 1c:ef:83:23:51:05:5c:81:6c:1d:af:d4:60:cf:42: 2e:9e:b7:80:40:b7:20:60:e3:a5:a6:47:33:66:77: 90:d4:f6:b0:e5:67:f5:de:0d:56:13:1e:f6:14:63: 21:4f:0d:f2:32:ff:4f:9d:9e:29:40:38:03:0e:cb: df:13:d7:6c:d8:94:03:ff:10:65:3b:27:c2:a3:bd: d8:35:ae:4d:e2:7c:4c:de:91:b7:4b:09:1a:9f:e9: 04:1e:6c:1a:7a:f4:35:0b:43:b6:f3:3d:4c:87:be: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A8:96:B4:88:C0:5B:42:94:7A:19:A5:06:E8:A8:EB:DC:77:87:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:54:36:ca:01:e4:73:ca:22:0e:23:b5:8c:3e:3a:11:cc:01: b0:7f:c8:cf:f2:10:ce:54:f0:dd:64:f9:25:c5:2c:12:b6:66: 93:b5:4b:8b:28:1b:c9:18:6e:cf:e5:57:a2:e5:b5:cc:eb:a9: ee:83:ae:96:6e:e8:38:5a:4c:91:93:d7:21:21:d9:f1:f9:ad: 89:8f:86:aa:69:1e:d1:db:c7:14:57:71:4b:f1:58:f5:fa:87: ba:cd:12:94:a8:22:5b:63:ec:c7:99:cc:d3:59:7a:6d:f8:dd: 21:93:5b:ab:47:e0:94:5f:a5:19:3d:3d:9f:0f:24:22:e3:07: d8:c5:1b:9e:33:5a:54:15:6a:e3:b7:62:98:b1:ff:53:96:8c: f8:1a:26:eb:78:9e:8e:4c:2b:90:aa:bb:36:51:42:26:92:b9: 4d:44:53:bb:84:8b:37:9f:21:d8:a5:ae:74:15:b4:ef:41:96: 55:33:55:1f:e2:8c:5b:64:f4:fc:74:9b:35:6c:21:ca:6a:bf: 5e:c5:ae:fc:ec:6b:82:c8:d1:1c:8f:24:05:b5:ce:c1:52:ca: 6a:e7:df:10:d1:d1:9c:58:3b:80:d1:a4:63:b4:6e:02:90:af: 56:1c:63:62:ef:5f:6d:ff:55:f6:05:91:a8:2e:a1:55:a0:55: f1:12:cb:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEXfXbAFBGbaBIKZzzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI0MDUxNDE4MDAwNFoXDTI0MDUxNjE4MDAwMFowLzEtMCsGA1UEAxMk NTE0YmVhMzEtZDE2NS00MWQ0LTg3ZDUtMGU4NGUxOWM2NTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGEYzuRq9GcUYtl5N67b+HnW4a2fc0tUPgO0 bojTKs+WqUxb5jDNRaLO/310oXX/OXJbGMASrAuoD7lOzQ1WMK28f9aT7TC+9Mov BGDzyMHk+M6tu14uoDwsTQLvWmyxs7xMNe0p6F0FxN2XDT0YHKcDHw+pKfl+AUzK WxpGGMr3lybXIVMnOtc42Q+jDj5xK50ia+Qc74MjUQVcgWwdr9Rgz0IunreAQLcg YOOlpkczZneQ1Paw5Wf13g1WEx72FGMhTw3yMv9PnZ4pQDgDDsvfE9ds2JQD/xBl OyfCo73YNa5N4nxM3pG3Swkan+kEHmwaevQ1C0O28z1Mh75c+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE+olrSIwFtClHoZpQboqOvcd4c3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOVDbKAeRzyiIOI7WMPjoR zAGwf8jP8hDOVPDdZPklxSwStmaTtUuLKBvJGG7P5Vei5bXM66nug66Wbug4WkyR k9chIdnx+a2Jj4aqaR7R28cUV3FL8Vj1+oe6zRKUqCJbY+zHmczTWXpt+N0hk1ur R+CUX6UZPT2fDyQi4wfYxRueM1pUFWrjt2KYsf9Tloz4GibreJ6OTCuQqrs2UUIm krlNRFO7hIs3nyHYpa50FbTvQZZVM1Uf4oxbZPT8dJs1bCHKar9exa787GuCyNEc jyQFtc7BUspq598Q0dGcWDuA0aRjtG4CkK9WHGNi719t/1X2BZGoLqFVoFXxEssy -----END CERTIFICATE-----Generated at Wed May 15 15:09:10 2024 by rpki-client on console-fra.rpki-client.org