$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft File: 38a96a9a-6257-4a63-a149-21f6ad67ae15.mft (raw, json) Hash identifier: QJoESqc+OPnlJ45tH+/WQyLjv9oZGp07nMFkSwgJk0g= Subject key identifier: C3:27:B2:AE:A1:3E:47:F3:65:53:32:1C:04:C0:18:0E:7F:D1:10:57 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F43285845A81CE492451EAAAF4FB2C5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft Manifest number: 010D0C9F4328584073A82F4C20B1986E476CB8E7 Signing time: Wed 24 Apr 2024 23:00:04 +0000 Manifest this update: Wed 24 Apr 2024 23:00:04 +0000 Manifest next update: Fri 26 Apr 2024 23:00:00 +0000 Files and hashes: 1: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (hash: 6KYDyXCuEr2OpDyw3llLJSLVpXy2NSbp7DWv8oWpV2U=) 2: 38a96a9a-6257-4a63-a149-21f6ad67ae15.crl (hash: DmTtUg4kO16GNFXKhkt72jXv/rwPgUSk9oksU41Hyp8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a8:1c:e4:92:45:1e:aa:af:4f:b2:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Apr 24 23:00:04 2024 GMT Not After : Apr 26 23:00:00 2024 GMT Subject: CN=3a9daf94-f200-4d9d-a0e8-2603d3863217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:66:c5:5e:62:4c:55:12:d1:fd:2e:58:68: d5:da:83:18:36:0c:db:14:25:95:6f:b6:34:03:9b: a9:ef:e5:9f:2c:63:62:98:67:81:1c:2d:2c:44:6d: a8:71:eb:96:4a:4d:43:c6:4d:fc:9e:62:19:ec:4c: e5:e5:ef:92:3a:f8:f4:56:82:92:e2:5f:fc:70:84: 58:dc:1b:03:e8:a3:37:c4:92:d0:80:d8:da:b0:37: f7:96:47:fa:d4:ab:bc:55:8d:38:9d:d9:c5:d0:5f: 17:df:0b:29:d2:d3:a1:bd:21:cf:49:cf:f3:68:fe: a1:82:b9:e5:9f:1d:0f:a1:95:7b:9b:02:d2:32:38: 29:12:c9:ba:f1:de:a6:e5:3e:ed:2e:6a:58:5f:65: cd:f4:0f:4d:3c:90:d5:df:a2:31:db:2b:bf:2d:85: 64:41:0b:84:0c:70:5d:05:1e:77:30:e5:77:90:bc: 41:e4:bc:5e:f2:67:5a:aa:09:be:fc:24:b4:4d:9d: f4:5e:41:79:ed:c5:6f:d5:fa:6f:31:b0:42:26:2e: 28:b4:fb:da:59:0c:17:bb:88:a4:09:17:56:2b:66: 85:e5:84:00:82:03:04:8a:d3:63:93:38:ba:52:a8: 13:ed:cb:46:e9:41:12:6a:00:96:1d:59:02:96:1f: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:27:B2:AE:A1:3E:47:F3:65:53:32:1C:04:C0:18:0E:7F:D1:10:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:64:c9:74:59:07:e1:b8:c0:a3:af:07:8f:a4:a2:bd:15:57: 5c:e0:75:e0:7e:72:75:d8:94:f1:e4:6e:f3:21:96:db:56:14: 89:c7:30:53:a1:fa:df:c7:9e:ad:2d:67:49:b0:83:0f:99:24: 8d:8d:c3:74:02:f5:5d:19:8d:86:7e:2f:e6:8b:43:63:ae:1b: 1f:e4:3a:3d:9e:51:cf:1f:b5:2e:42:f4:43:52:b6:6d:b2:3e: a5:01:7f:f9:44:f6:d2:c0:d7:0f:2d:ba:85:7c:d5:4a:59:7f: 8f:6e:a4:e0:1d:07:f6:bb:02:56:b1:09:6e:68:30:01:9a:70: 57:03:7b:47:84:9a:20:59:db:34:86:bf:81:b4:f0:ce:3e:19: 1b:92:c6:a7:0e:2b:1a:90:36:73:0a:2d:50:fd:e1:f4:35:b1: d6:f8:af:01:d6:8d:cb:31:f3:17:e5:7a:df:42:5a:f8:d1:f7: 72:27:b4:be:b7:3c:cb:2c:1d:9a:a5:f2:75:b0:3d:07:2b:d0: b3:72:f5:53:3c:5b:74:ed:5d:c4:30:34:59:f4:99:32:bd:1d: 25:da:e0:ca:24:ea:40:78:51:e7:4e:0e:f7:56:bf:f3:6a:2b: b2:9e:5a:4d:30:5c:4f:b3:80:83:99:83:2a:8a:19:92:09:37: 8a:3d:84:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEWoHOSSRR6qr0+yxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI0MDQyNDIzMDAwNFoXDTI0MDQyNjIzMDAwMFowLzEtMCsGA1UEAxMk M2E5ZGFmOTQtZjIwMC00ZDlkLWEwZTgtMjYwM2QzODYzMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArapmxV5iTFUS0f0uWGjV2oMYNgzbFCWVb7Y0 A5up7+WfLGNimGeBHC0sRG2oceuWSk1Dxk38nmIZ7Ezl5e+SOvj0VoKS4l/8cIRY 3BsD6KM3xJLQgNjasDf3lkf61Ku8VY04ndnF0F8X3wsp0tOhvSHPSc/zaP6hgrnl nx0PoZV7mwLSMjgpEsm68d6m5T7tLmpYX2XN9A9NPJDV36Ix2yu/LYVkQQuEDHBd BR53MOV3kLxB5Lxe8mdaqgm+/CS0TZ30XkF57cVv1fpvMbBCJi4otPvaWQwXu4ik CRdWK2aF5YQAggMEitNjkzi6UqgT7ctG6UESagCWHVkClh8ExwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMMnsq6hPkfzZVMyHATAGA5/0RBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMzhhOTZhOWEtNjI1Ny00 YTYzLWExNDktMjFmNmFkNjdhZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNZMl0WQfhuMCjrwePpKK9 FVdc4HXgfnJ12JTx5G7zIZbbVhSJxzBTofrfx56tLWdJsIMPmSSNjcN0AvVdGY2G fi/mi0Njrhsf5Do9nlHPH7UuQvRDUrZtsj6lAX/5RPbSwNcPLbqFfNVKWX+PbqTg HQf2uwJWsQluaDABmnBXA3tHhJogWds0hr+BtPDOPhkbksanDisakDZzCi1Q/eH0 NbHW+K8B1o3LMfMX5XrfQlr40fdyJ7S+tzzLLB2apfJ1sD0HK9CzcvVTPFt07V3E MDRZ9JkyvR0l2uDKJOpAeFHnTg73Vr/zaiuynlpNMFxPs4CDmYMqihmSCTeKPYSV -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:14 2024 by rpki-client on console-fra.rpki-client.org