$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft File: 0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft (raw, json) Hash identifier: czntvlrb7k0604Ff5cUnoOWRMODc11nFtsqYMQ7K7EI= Subject key identifier: 0E:ED:E5:BF:D2:69:9A:8E:D6:21:55:7D:46:26:38:BC:1C:D3:97:C8 Authority key identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 Certificate issuer: /CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a Certificate serial: 010D0C9F43285847F4D1EB5A2BC6297C5D07E140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft Manifest number: 010D0C9F43285842C6C9E02817B8F26EA9F2E165 Signing time: Thu 21 Nov 2024 20:00:06 +0000 Manifest this update: Thu 21 Nov 2024 20:00:06 +0000 Manifest next update: Sat 23 Nov 2024 20:00:00 +0000 Files and hashes: 1: 0f63fd96-8907-4574-8e07-79a8c7fd8c7a.crl (hash: n8vaNyl8/kWRQ6BksvQ4+x0JIH9UR1juIjfY9a/Pv14=) 2: e1c348d1-400a-3695-8d76-c4ba654fc779.roa (hash: HDiOpVbIbERM+w30oIGFS355S+FV26+Sj+0fk+c2W/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f4:d1:eb:5a:2b:c6:29:7c:5d:07:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a Validity Not Before: Nov 21 20:00:06 2024 GMT Not After : Nov 23 20:00:00 2024 GMT Subject: CN=3fffaf52-a590-480c-83b2-13fd454f13fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:9b:04:a1:69:57:45:dc:6b:2a:7c:a3:02: 05:ba:69:4a:3c:05:8f:67:c4:1d:b2:47:71:05:6d: a2:ab:5b:86:17:8d:08:29:26:74:71:6d:b0:0b:fe: d0:fd:53:60:e7:cf:b6:97:c9:31:e0:58:bc:3d:cf: 5a:46:ef:87:e6:26:ba:84:f9:7e:3d:f7:91:14:92: 38:9b:e7:ff:2e:1b:97:08:07:cd:93:46:78:25:0a: 18:fd:0a:dd:50:d5:7d:fe:f7:2f:25:86:36:52:db: 75:34:46:5b:bd:68:d7:ed:da:cf:7b:75:8c:db:21: f9:58:16:f4:16:3c:50:b7:20:5c:57:1d:a1:2e:83: a5:ef:d2:75:3b:ec:02:71:3c:f2:11:35:26:ac:20: e1:a1:10:b6:8c:5b:1f:23:d3:1c:84:f5:f1:f2:d3: 21:7e:db:c4:10:02:31:3b:ca:fb:80:14:de:ab:00: 27:15:ae:48:a4:6d:61:6a:31:7b:42:58:8b:49:8a: 4b:d2:d7:04:b1:06:8d:95:3e:65:9f:c0:ed:29:6f: 3b:09:ad:37:36:84:70:ae:d5:c4:ba:63:8e:6b:43: 06:21:68:d3:14:fa:fd:d6:32:8b:f0:59:e4:0b:64: ce:3a:5b:19:79:e1:6f:f6:44:1a:29:12:60:46:53: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:E5:BF:D2:69:9A:8E:D6:21:55:7D:46:26:38:BC:1C:D3:97:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.crl X509v3 Authority Key Identifier: keyid:57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c8:86:cf:a4:0d:39:90:ed:cb:09:f8:9f:31:87:d8:7e:36: 21:2a:32:df:fd:29:7a:27:99:50:81:4e:d6:56:42:ff:87:20: 96:dc:be:01:67:36:4a:dd:17:f6:8c:ac:c0:50:0b:8c:c1:15: 9f:b2:0a:4e:4f:5b:f6:fd:d2:51:de:ed:5d:52:52:00:40:f6: 4d:52:60:8b:08:58:26:44:84:00:d8:bb:08:14:8d:e6:57:40: d8:f3:1e:09:89:70:c0:63:8b:f1:de:07:96:62:d8:91:79:74: 9c:e5:85:dc:7f:65:57:d5:4e:a8:c1:0a:69:4a:50:81:4a:b1: 6d:00:0e:aa:b0:83:bc:78:d1:d1:91:d7:d7:80:7a:4a:f5:0c: bd:20:c2:97:d4:87:42:60:12:32:48:4d:18:4d:41:ba:8d:05: 4f:53:32:9e:2c:a7:90:f0:b2:2f:3a:ed:24:c7:c6:59:02:fe: 38:07:6a:ba:a5:d3:51:a4:46:d1:5f:d0:e3:76:26:09:29:04: af:1d:ba:df:0b:0e:3f:eb:78:fc:d8:7d:8c:92:4a:f0:85:ee: 4d:5f:63:50:6a:7b:d4:c2:d2:8d:96:3a:95:4c:71:7e:29:54: 2c:b2:34:bc:63:4d:25:57:7d:73:51:58:69:2b:1f:1c:64:8f: de:f8:bb:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEf00etaK8YpfF0H4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY2M2ZkOTYtODkwNy00NTc0LThlMDctNzlhOGM3ZmQ4 YzdhMB4XDTI0MTEyMTIwMDAwNloXDTI0MTEyMzIwMDAwMFowLzEtMCsGA1UEAxMk M2ZmZmFmNTItYTU5MC00ODBjLTgzYjItMTNmZDQ1NGYxM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg2bBKFpV0Xcayp8owIFumlKPAWPZ8Qdskdx BW2iq1uGF40IKSZ0cW2wC/7Q/VNg58+2l8kx4Fi8Pc9aRu+H5ia6hPl+PfeRFJI4 m+f/LhuXCAfNk0Z4JQoY/QrdUNV9/vcvJYY2Utt1NEZbvWjX7drPe3WM2yH5WBb0 FjxQtyBcVx2hLoOl79J1O+wCcTzyETUmrCDhoRC2jFsfI9MchPXx8tMhftvEEAIx O8r7gBTeqwAnFa5IpG1hajF7QliLSYpL0tcEsQaNlT5ln8DtKW87Ca03NoRwrtXE umOOa0MGIWjTFPr91jKL8FnkC2TOOlsZeeFv9kQaKRJgRlNzGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA7t5b/SaZqO1iFVfUYmOLwc05fIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjYz ZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4YzdmZDhjN2EvMGY2M2ZkOTYtODkwNy00 NTc0LThlMDctNzlhOGM3ZmQ4YzdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGY2M2ZkOTYtODkwNy00NTc0LThl MDctNzlhOGM3ZmQ4YzdhLzBmNjNmZDk2LTg5MDctNDU3NC04ZTA3LTc5YThjN2Zk OGM3YS5jcmwwHwYDVR0jBBgwFoAUV3YO0itJrxtVoAn4P8BxiC9D6fUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjYzZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4 YzdmZDhjN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVyIbPpA05kO3LCfifMYfY fjYhKjLf/Sl6J5lQgU7WVkL/hyCW3L4BZzZK3Rf2jKzAUAuMwRWfsgpOT1v2/dJR 3u1dUlIAQPZNUmCLCFgmRIQA2LsIFI3mV0DY8x4JiXDAY4vx3geWYtiReXSc5YXc f2VX1U6owQppSlCBSrFtAA6qsIO8eNHRkdfXgHpK9Qy9IMKX1IdCYBIySE0YTUG6 jQVPUzKeLKeQ8LIvOu0kx8ZZAv44B2q6pdNRpEbRX9DjdiYJKQSvHbrfCw4/63j8 2H2Mkkrwhe5NX2NQanvUwtKNljqVTHF+KVQssjS8Y00lV31zUVhpKx8cZI/e+Ls9 -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org