$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft File: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft (raw, json) Hash identifier: xLbhteqVLlAF8FnlnOyNh0xW4ULJPiVFj2zNwzjNnCk= Subject key identifier: 7B:49:D7:37:85:04:B8:CD:20:5B:42:F8:C3:9D:B1:47:97:D3:A2:08 Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F43285847F38A5B946175B042120133C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft Manifest number: 010D0C9F4328584073A84A89B5229808470A31BF Signing time: Thu 21 Nov 2024 09:00:06 +0000 Manifest this update: Thu 21 Nov 2024 09:00:06 +0000 Manifest next update: Sat 23 Nov 2024 09:00:00 +0000 Files and hashes: 1: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl (hash: RBGfKYNFqp6OQkqDseVhNItADBMgui/zTnSArc4cp4Y=) 2: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (hash: y+ws10JYrbcWrhlLLVxkMX0OP3tCfxtO3OTgq/3oDlk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:8a:5b:94:61:75:b0:42:12:01:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: Nov 21 09:00:06 2024 GMT Not After : Nov 23 09:00:00 2024 GMT Subject: CN=de6cb4a8-14e6-4076-a38b-a7cc78c96977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:1b:2e:6b:17:26:42:74:68:5c:a7:be:40: b4:18:b7:69:cc:49:87:d9:ac:1e:f9:6a:76:1c:ab: 74:5c:c3:86:36:65:ba:84:ec:bb:ad:63:e1:43:28: 05:98:ff:05:46:6d:50:6e:87:32:93:94:28:09:95: 94:74:0e:c1:b4:88:ca:01:56:f0:e2:dd:c2:33:08: 87:43:7e:53:2a:96:51:86:29:65:65:5f:98:2e:6a: c3:e0:f4:a3:59:c4:4b:17:cb:96:25:2e:42:8e:0e: 15:a3:1f:92:34:01:2a:d0:1f:2d:32:90:2f:de:32: 40:8f:c0:59:a6:7c:67:66:cd:bd:00:c6:2d:1e:bd: 1c:39:6c:89:73:54:c9:36:3c:78:53:4c:8f:92:1e: 64:12:a7:07:df:47:58:d7:1b:68:0e:6b:24:db:e9: 8d:61:93:11:76:db:f3:10:37:c8:ad:fd:8d:db:6e: f1:3a:ad:9d:60:4b:e2:14:49:4d:2e:1e:f2:b7:48: 56:c1:9b:94:68:8e:2f:88:52:95:47:44:fd:db:9a: 4d:b2:86:52:50:90:dd:80:03:f3:6e:5e:99:d8:50: 42:24:1a:b9:4b:3a:0c:81:3d:3e:59:91:c2:57:28: 04:ed:08:8c:c9:41:5f:fb:2a:5a:c7:0d:9c:37:c5: b7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:D7:37:85:04:B8:CD:20:5B:42:F8:C3:9D:B1:47:97:D3:A2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f2:49:1e:a2:10:2c:61:20:62:44:43:4a:d8:be:f2:f7:66: 26:01:c2:a7:5c:a2:4f:42:0f:76:87:de:3b:37:b1:25:ee:61: 9b:c2:3c:6d:71:36:cf:c1:5b:5c:ac:e4:41:c6:23:44:e0:ba: df:33:5d:9d:b4:54:f9:f9:76:3f:f2:f4:c6:24:2a:92:47:c1: fc:16:83:23:00:ec:c7:c2:3d:fc:8c:ff:90:ad:93:ac:1c:c9: b3:2a:48:93:76:7f:da:b5:9b:38:a0:4e:57:eb:f2:be:28:a9: 7b:94:8a:e0:5f:1a:1e:49:72:73:0b:81:21:88:ad:56:1d:45: 44:cd:f3:37:4f:9f:0c:de:94:4d:5a:ef:c6:98:2a:a1:e7:c9: 54:fb:1b:d2:cb:b5:e9:f0:d9:7a:2c:26:44:05:8f:b5:04:a3: ce:3b:82:33:b4:86:e0:84:12:f9:a7:5c:ec:ba:32:e9:e8:20: 07:02:0a:e2:6d:50:a9:52:36:3e:52:72:2d:26:b5:1b:10:da: a7:2d:bb:39:4c:eb:5f:be:31:cd:d4:08:4d:34:21:6d:b0:e6: 53:8b:b7:f4:5f:2d:dc:24:36:3c:b2:5c:29:5b:40:15:01:b7: ff:5b:4c:61:d2:d8:34:8e:3f:bb:ae:0e:7a:c2:88:b7:f3:8e: 1d:e2:21:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEfziluUYXWwQhIBM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI0MTEyMTA5MDAwNloXDTI0MTEyMzA5MDAwMFowLzEtMCsGA1UEAxMk ZGU2Y2I0YTgtMTRlNi00MDc2LWEzOGItYTdjYzc4Yzk2OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSEbLmsXJkJ0aFynvkC0GLdpzEmH2awe+Wp2 HKt0XMOGNmW6hOy7rWPhQygFmP8FRm1Qbocyk5QoCZWUdA7BtIjKAVbw4t3CMwiH Q35TKpZRhillZV+YLmrD4PSjWcRLF8uWJS5Cjg4Vox+SNAEq0B8tMpAv3jJAj8BZ pnxnZs29AMYtHr0cOWyJc1TJNjx4U0yPkh5kEqcH30dY1xtoDmsk2+mNYZMRdtvz EDfIrf2N227xOq2dYEviFElNLh7yt0hWwZuUaI4viFKVR0T925pNsoZSUJDdgAPz bl6Z2FBCJBq5SzoMgT0+WZHCVygE7QiMyUFf+ypaxw2cN8W3kwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHtJ1zeFBLjNIFtC+MOdsUeX06IIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvOGE5NjYzZDktNDNlOC00 ZGRiLWJlODAtODMxNmNmMDIyYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCM8kkeohAsYSBiRENK2L7y 92YmAcKnXKJPQg92h947N7El7mGbwjxtcTbPwVtcrORBxiNE4LrfM12dtFT5+XY/ 8vTGJCqSR8H8FoMjAOzHwj38jP+QrZOsHMmzKkiTdn/atZs4oE5X6/K+KKl7lIrg XxoeSXJzC4EhiK1WHUVEzfM3T58M3pRNWu/GmCqh58lU+xvSy7Xp8Nl6LCZEBY+1 BKPOO4IztIbghBL5p1zsujLp6CAHAgribVCpUjY+UnItJrUbENqnLbs5TOtfvjHN 1AhNNCFtsOZTi7f0Xy3cJDY8slwpW0AVAbf/W0xh0tg0jj+7rg56woi3844d4iFe -----END CERTIFICATE-----Generated at Thu Nov 21 21:05:36 2024 by rpki-client on console-fra.rpki-client.org