$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft File: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json) Hash identifier: C75iVBkck45p+4GKr/3Ic+WOhMkfnHarfp0Val3gBz0= Subject key identifier: D2:C3:8C:A5:71:0B:07:C3:B0:F9:D2:5F:7D:71:FA:1C:6C:10:C3:A6 Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 Certificate issuer: /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Certificate serial: 010D0C9F43285845F59560E07780F96631A4D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft Manifest number: 010D0C9F43285844D615D248DD853730ADA3F86D Signing time: Wed 22 May 2024 17:00:04 +0000 Manifest this update: Wed 22 May 2024 17:00:04 +0000 Manifest next update: Fri 24 May 2024 17:00:00 +0000 Files and hashes: 1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: DD30zsNBLqsl02SO+XUAgnNasAuArLuuOOPlVGWbyhE=) 2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: jqPmNovTNdp9XRELczV2pZGce0PD2+3r1RhH9dNOZYo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f5:95:60:e0:77:80:f9:66:31:a4:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7 Validity Not Before: May 22 17:00:04 2024 GMT Not After : May 24 17:00:00 2024 GMT Subject: CN=f2560b0d-6514-46cb-933a-4983239f2832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:69:8d:de:17:6e:8f:65:13:26:83:ae:6b: 5b:47:3a:32:2b:aa:8a:2a:94:fd:ee:b7:69:77:d8: bc:b3:87:78:9a:45:2f:7a:cf:07:34:08:17:00:6f: ba:43:fd:3c:fe:3f:56:7d:36:55:60:16:df:06:d1: af:a7:3a:0f:d6:76:08:9f:bb:e4:dc:ad:dd:da:dc: d4:b2:1d:66:63:21:18:f4:b4:3b:7a:5f:74:2c:dc: 39:c6:8a:c2:02:e4:4d:8c:33:2e:3d:58:5d:80:e4: 94:59:c2:06:45:3f:4c:4d:50:5a:ca:c8:90:d9:6c: 9e:80:69:d8:0a:df:51:3d:c1:82:ba:9e:42:eb:bc: 86:29:8b:c9:39:ea:81:41:f3:a9:f7:40:0d:07:56: 1e:58:fd:a6:5b:9e:3f:8c:c5:0d:b2:56:57:0b:97: d1:d1:46:48:7f:50:68:8f:e5:91:ba:b8:e3:a7:35: a0:46:25:a6:c9:12:02:16:a5:e4:59:f7:19:8a:be: 28:98:10:67:6c:fd:5d:30:9f:ff:52:87:d6:b6:4e: 0a:3e:a2:1b:8e:d5:e5:83:9b:b2:c2:8a:c5:30:e2: 1b:44:bd:3c:4d:01:78:5b:6b:92:5e:c9:43:b1:88: 52:b8:73:61:b3:84:76:a3:d7:66:23:a5:33:59:0b: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C3:8C:A5:71:0B:07:C3:B0:F9:D2:5F:7D:71:FA:1C:6C:10:C3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl X509v3 Authority Key Identifier: keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a3:6e:cc:18:9f:b1:4a:24:fb:ad:d6:0d:fb:67:8c:00:5b: 65:14:61:91:f0:2d:55:74:e1:42:b1:21:7a:06:39:f2:8b:65: be:01:0b:5d:dc:49:2c:2e:11:59:42:10:cc:a3:55:4c:cf:74: 7e:e3:0a:1f:52:34:66:10:04:a5:5a:0c:f6:93:93:52:bc:dd: 82:20:d1:09:8a:ed:a0:bc:9c:14:60:ec:75:81:50:ca:d6:27: a0:be:f5:c5:76:66:3d:5d:59:5c:55:f5:11:17:8a:3a:f7:3b: 1f:56:96:2c:d3:21:09:c8:31:38:c2:18:39:e6:af:f7:91:6b: 1d:4d:9c:c8:70:f6:a9:46:e2:89:0a:f0:1e:99:d1:c1:0a:1a: e2:94:06:29:22:68:19:e7:10:4a:da:f0:06:dd:7d:72:91:e9: 5a:c3:47:4d:86:0f:3e:df:90:cb:b3:d9:a1:5b:84:00:c3:cc: 8f:b7:be:f6:d7:f0:03:a1:90:18:81:dc:e0:88:02:ed:0d:9d: a1:70:7a:62:dd:22:8f:71:8c:d3:c8:fd:2c:cf:1a:2e:ad:26: 5b:6e:be:5d:c1:ac:2c:3b:9e:43:9d:60:93:0c:82:2d:9d:88: b3:4c:e3:da:e6:63:77:13:c1:d7:bc:ca:13:51:95:77:b5:c7: 03:24:c4:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEX1lWDgd4D5ZjGk1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVk NWQ3MB4XDTI0MDUyMjE3MDAwNFoXDTI0MDUyNDE3MDAwMFowLzEtMCsGA1UEAxMk ZjI1NjBiMGQtNjUxNC00NmNiLTkzM2EtNDk4MzIzOWYyODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTNpjd4Xbo9lEyaDrmtbRzoyK6qKKpT97rdp d9i8s4d4mkUves8HNAgXAG+6Q/08/j9WfTZVYBbfBtGvpzoP1nYIn7vk3K3d2tzU sh1mYyEY9LQ7el90LNw5xorCAuRNjDMuPVhdgOSUWcIGRT9MTVBaysiQ2WyegGnY Ct9RPcGCup5C67yGKYvJOeqBQfOp90ANB1YeWP2mW54/jMUNslZXC5fR0UZIf1Bo j+WRurjjpzWgRiWmyRICFqXkWfcZir4omBBnbP1dMJ//UofWtk4KPqIbjtXlg5uy worFMOIbRL08TQF4W2uSXslDsYhSuHNhs4R2o9dmI6UzWQs2tQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNLDjKVxCwfDsPnSX31x+hxsEMOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZjJk Mzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvM2YyZDM3OGQtMjBlMS00 YjVmLTg1YjktZThjNGNiYTVkNWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2YyZDM3OGQtMjBlMS00YjVmLTg1 YjktZThjNGNiYTVkNWQ3LzNmMmQzNzhkLTIwZTEtNGI1Zi04NWI5LWU4YzRjYmE1 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUCqqSCDMPCs7IDjlpf+GFY9FJSlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0 Y2JhNWQ1ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGo27MGJ+xSiT7rdYN+2eM AFtlFGGR8C1VdOFCsSF6Bjnyi2W+AQtd3EksLhFZQhDMo1VMz3R+4wofUjRmEASl Wgz2k5NSvN2CINEJiu2gvJwUYOx1gVDK1iegvvXFdmY9XVlcVfURF4o69zsfVpYs 0yEJyDE4whg55q/3kWsdTZzIcPapRuKJCvAemdHBChrilAYpImgZ5xBK2vAG3X1y kelaw0dNhg8+35DLs9mhW4QAw8yPt7721/ADoZAYgdzgiALtDZ2hcHpi3SKPcYzT yP0szxourSZbbr5dwawsO55DnWCTDIItnYizTOPa5mN3E8HXvMoTUZV3tccDJMQk -----END CERTIFICATE-----Generated at Wed May 22 20:11:49 2024 by rpki-client on console-ams.rpki-client.org