$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft File: 421cece2-8c18-41dd-a133-74ed29168835.mft (raw, json) Hash identifier: 3EgRCWxPb2Wcr42n0Tt0TvknNJPuPsv+P2cwmhY0jZk= Subject key identifier: 57:9D:A4:10:11:23:2E:6E:96:E7:B7:B3:7B:9F:71:7F:57:B6:E3:0C Authority key identifier: 07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F Certificate issuer: /CN=421cece2-8c18-41dd-a133-74ed29168835 Certificate serial: 010D0C9F43285844264598E66BBC29BAF7DE2A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft Manifest number: 010D0C9F4328584073A82259B3C6039E30B9645A Signing time: Fri 08 Dec 2023 18:00:04 +0000 Manifest this update: Fri 08 Dec 2023 18:00:04 +0000 Manifest next update: Sun 10 Dec 2023 18:00:00 +0000 Files and hashes: 1: 421cece2-8c18-41dd-a133-74ed29168835.crl (hash: quv60Pr2TyRxQcZYoMdCVbH8yCr3DtBt0UWmIHNz0Nc=) 2: bdc1790a-cecc-3ae3-863f-105e516b77ef.roa (hash: hrY33fvoK+PC6PERm5EhhaWEXMkytSrcoCdVswzqCG8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Dec 2023 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:26:45:98:e6:6b:bc:29:ba:f7:de:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421cece2-8c18-41dd-a133-74ed29168835 Validity Not Before: Dec 8 18:00:04 2023 GMT Not After : Dec 10 18:00:00 2023 GMT Subject: CN=c43160b6-d2fb-45fd-83b0-ae6fba67b63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:49:8b:b4:03:13:1e:1d:cd:b6:e8:a5:40:f2: 2e:e7:ce:6e:39:0d:ff:e2:46:29:98:2f:77:f5:6f: b3:b4:ba:7a:15:c1:52:16:cb:3a:2f:e8:bf:ee:43: 9e:ce:da:18:37:31:a2:50:89:17:9a:1f:4e:be:d0: db:5c:7f:ed:06:bd:82:8b:cf:fe:ec:f4:bc:3e:67: c5:de:ae:4c:c0:e6:e2:e0:c6:85:01:93:1e:1b:80: 1d:57:6e:ab:6a:fd:fd:26:2b:5c:c8:1a:45:01:c1: c3:8d:68:fb:a2:f0:c4:ee:79:b5:04:f5:55:c2:63: a2:55:86:fe:5f:a0:74:ea:1c:d6:d2:75:30:fd:27: e5:d0:f7:bd:39:7f:3d:fa:5b:df:28:f1:01:4a:8d: bc:8d:7d:e7:3a:2a:6f:3b:5f:38:fb:f5:f0:8f:3c: c1:e1:d2:9a:ce:1a:c7:69:0c:a8:d2:77:75:90:b9: bb:27:64:ab:e6:c7:ff:0f:b0:ff:48:bc:a5:7b:6b: 87:7f:79:fd:e8:23:c4:48:70:a5:b7:b4:82:f2:7e: 8b:52:15:23:48:28:18:1f:39:3a:87:e1:94:47:56: 3a:0e:9d:33:d9:43:32:7e:2e:38:c2:7b:c0:e7:2a: 9f:0b:9a:48:ad:48:3c:ec:6c:77:54:b1:82:ea:da: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9D:A4:10:11:23:2E:6E:96:E7:B7:B3:7B:9F:71:7F:57:B6:E3:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl X509v3 Authority Key Identifier: keyid:07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:49:e3:bb:c9:2b:e0:6b:76:10:41:14:f1:55:02:75:df:01: 42:7d:91:8b:48:e7:25:ed:00:2d:0e:e8:c2:36:dc:07:b7:ef: 81:68:45:7c:b2:e2:b4:8e:c7:6f:20:9e:b4:63:3a:a0:21:8e: 9e:fb:9b:97:72:bb:d7:34:cf:9a:84:cd:06:db:01:08:4e:54: 7b:ed:c1:c7:42:90:a0:6d:e5:c4:40:be:9b:f3:6c:84:d4:b4: e9:7e:15:2e:df:26:3c:67:2b:c0:de:12:97:fc:04:49:4f:f2: 44:82:68:db:e7:70:c7:55:1d:9b:23:73:12:c7:ec:11:f6:ab: 4a:6c:a8:d4:69:a8:4c:b5:58:65:d0:73:7c:78:fd:d5:d8:6c: ef:14:66:d4:09:3b:86:33:bc:be:ad:b5:a0:e1:31:80:0a:75: de:37:ed:f6:a3:6d:17:12:75:c4:73:c8:d0:ac:34:78:99:df: 9b:4f:fc:2c:f1:ef:87:0c:20:11:5e:ee:45:bd:90:e5:ce:30: 8d:39:2f:ec:a4:ab:1e:13:07:49:de:e1:41:d3:69:62:35:5d: d9:5e:07:b1:80:76:3c:d5:40:19:bc:9f:84:f8:81:27:a5:70: 6c:7c:a6:9a:4c:fa:b6:af:5e:01:7f:de:65:df:c9:f2:e6:6c: eb:43:0b:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEQmRZjma7wpuvfeKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIxY2VjZTItOGMxOC00MWRkLWExMzMtNzRlZDI5MTY4 ODM1MB4XDTIzMTIwODE4MDAwNFoXDTIzMTIxMDE4MDAwMFowLzEtMCsGA1UEAxMk YzQzMTYwYjYtZDJmYi00NWZkLTgzYjAtYWU2ZmJhNjdiNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUmLtAMTHh3NtuilQPIu585uOQ3/4kYpmC93 9W+ztLp6FcFSFss6L+i/7kOeztoYNzGiUIkXmh9OvtDbXH/tBr2Ci8/+7PS8PmfF 3q5MwObi4MaFAZMeG4AdV26rav39JitcyBpFAcHDjWj7ovDE7nm1BPVVwmOiVYb+ X6B06hzW0nUw/Sfl0Pe9OX89+lvfKPEBSo28jX3nOipvO184+/XwjzzB4dKazhrH aQyo0nd1kLm7J2Sr5sf/D7D/SLyle2uHf3n96CPESHClt7SC8n6LUhUjSCgYHzk6 h+GUR1Y6Dp0z2UMyfi44wnvA5yqfC5pIrUg87Gx3VLGC6tokCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFedpBARIy5ulue3s3ufcX9XtuMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjFj ZWNlMi04YzE4LTQxZGQtYTEzMy03NGVkMjkxNjg4MzUvNDIxY2VjZTItOGMxOC00 MWRkLWExMzMtNzRlZDI5MTY4ODM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIxY2VjZTItOGMxOC00MWRkLWEx MzMtNzRlZDI5MTY4ODM1LzQyMWNlY2UyLThjMTgtNDFkZC1hMTMzLTc0ZWQyOTE2 ODgzNS5jcmwwHwYDVR0jBBgwFoAUB4ln0mgAeHIU4HXWwkESchA+DQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjFjZWNlMi04YzE4LTQxZGQtYTEzMy03NGVk MjkxNjg4MzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwSeO7ySvga3YQQRTxVQJ1 3wFCfZGLSOcl7QAtDujCNtwHt++BaEV8suK0jsdvIJ60YzqgIY6e+5uXcrvXNM+a hM0G2wEITlR77cHHQpCgbeXEQL6b82yE1LTpfhUu3yY8ZyvA3hKX/ARJT/JEgmjb 53DHVR2bI3MSx+wR9qtKbKjUaahMtVhl0HN8eP3V2GzvFGbUCTuGM7y+rbWg4TGA CnXeN+32o20XEnXEc8jQrDR4md+bT/ws8e+HDCARXu5FvZDlzjCNOS/spKseEwdJ 3uFB02liNV3ZXgexgHY81UAZvJ+E+IEnpXBsfKaaTPq2r14Bf95l38ny5mzrQwsN -----END CERTIFICATE-----Generated at Fri Dec 8 18:32:17 2023 by rpki-client on console-ams.rpki-client.org