$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft File: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft (raw, json) Hash identifier: g3Ql+5PykfsH9Eiy3bl1pkm8gAx5BhKA/bO4uK/amGU= Subject key identifier: 33:3F:A1:0C:47:A6:BD:F4:C1:59:31:AA:A6:D5:1C:8D:7D:BE:0E:1A Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F43285847F566D621F76ED7DF52450900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft Manifest number: 010D0C9F4328584073A8338FE8C46476050B203F Signing time: Fri 22 Nov 2024 01:00:08 +0000 Manifest this update: Fri 22 Nov 2024 01:00:08 +0000 Manifest next update: Mon 25 Nov 2024 01:00:00 +0000 Files and hashes: 1: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl (hash: WyCd3zACQClK21P09u3m9VsnsNaRzjkjdWDc1erg8kQ=) 2: af0a8e4a-42b9-3667-8ce3-865564983774.roa (hash: ZsSF45t4kcDxk0FKILejZyGhp6AVPqQVfF5EMeOWPj0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f5:66:d6:21:f7:6e:d7:df:52:45:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Nov 22 01:00:08 2024 GMT Not After : Nov 25 01:00:00 2024 GMT Subject: CN=bc749c89-75dd-4207-b986-685e134f0a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:91:94:6e:34:41:0f:95:e4:2c:fb:7c:a7:c4: 1c:b0:bd:db:9e:fb:72:51:b2:85:d7:d9:c2:fb:e5: 74:b4:35:d6:d3:6a:eb:f1:03:19:3f:28:47:99:41: 03:4d:2f:97:03:8f:e3:11:c0:35:ee:da:9d:b0:c3: f0:2e:ee:1d:aa:6b:91:35:ea:07:45:69:94:0e:0e: 04:09:67:da:5c:a5:fd:59:04:9a:18:34:de:8b:c2: 28:46:83:e5:c3:f5:34:9f:d7:75:07:b8:56:82:43: c7:b2:32:ec:fb:a9:a4:92:ce:99:0f:4b:51:be:41: 68:23:05:ae:b3:cd:26:81:57:26:e1:7e:32:39:22: fa:b9:67:29:e7:a4:64:77:72:40:1d:97:4c:cc:dc: 17:89:68:25:d5:df:f7:3d:e8:a3:50:6d:12:5f:92: 20:dc:1a:cf:43:0c:9b:31:82:57:30:9a:11:98:1b: 86:e6:2d:bd:84:42:67:fe:93:ff:d7:6b:99:fe:06: 58:aa:66:a5:6f:6b:85:25:5f:8a:ad:47:15:c0:23: 72:6e:79:18:d6:cf:a4:4e:ab:da:6d:88:27:2d:21: d7:03:ed:58:55:da:cf:d0:12:7e:3a:2e:89:6f:4e: 44:25:30:9a:35:a1:4c:4c:c5:3b:dc:61:92:60:f2: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3F:A1:0C:47:A6:BD:F4:C1:59:31:AA:A6:D5:1C:8D:7D:BE:0E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3c:b6:29:a6:44:ff:a0:03:19:46:14:3a:df:a2:84:0b:23: 2c:3f:f9:27:65:10:f4:53:a6:08:26:04:1f:a1:a0:f2:a6:63: 44:f9:98:73:87:da:5a:0f:61:d8:b2:a9:f2:3d:96:0e:f0:e9: 3d:b9:cf:56:06:c5:cb:a8:2b:12:ca:cd:a0:ea:f8:3e:13:ed: 03:e1:6c:12:98:06:95:57:4e:c2:8e:1b:26:4d:02:bb:2e:c4: fd:7a:f7:88:e2:ee:f2:14:a2:3a:86:88:90:c7:59:57:a1:35: fd:10:50:40:5f:c8:5b:14:e9:d9:46:91:33:df:77:17:d4:f5: af:e1:93:75:3b:55:3d:b8:9c:fe:ca:fd:52:d5:90:8d:3b:19: f3:f0:ee:dc:ee:73:dd:39:f3:11:a0:d5:c7:cb:94:a5:72:c8: af:59:44:3f:7d:a3:60:1f:5b:b7:61:9a:88:77:7e:e6:cc:87: 10:71:e0:6a:d8:06:90:21:81:a7:c8:34:2c:24:eb:dd:0a:fe: 71:70:01:5a:8f:5c:2e:d0:7a:f2:46:61:fc:08:f7:40:9c:01: 0b:9d:31:93:03:98:b8:7b:e4:31:70:c4:ef:32:fc:9f:08:82: a9:90:86:d4:b2:02:fe:24:e9:58:18:a7:a9:af:98:90:f3:85: 80:12:e8:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEf1ZtYh927X31JFCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI0MTEyMjAxMDAwOFoXDTI0MTEyNTAxMDAwMFowLzEtMCsGA1UEAxMk YmM3NDljODktNzVkZC00MjA3LWI5ODYtNjg1ZTEzNGYwYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJGUbjRBD5XkLPt8p8QcsL3bnvtyUbKF19nC ++V0tDXW02rr8QMZPyhHmUEDTS+XA4/jEcA17tqdsMPwLu4dqmuRNeoHRWmUDg4E CWfaXKX9WQSaGDTei8IoRoPlw/U0n9d1B7hWgkPHsjLs+6mkks6ZD0tRvkFoIwWu s80mgVcm4X4yOSL6uWcp56Rkd3JAHZdMzNwXiWgl1d/3PeijUG0SX5Ig3BrPQwyb MYJXMJoRmBuG5i29hEJn/pP/12uZ/gZYqmalb2uFJV+KrUcVwCNybnkY1s+kTqva bYgnLSHXA+1YVdrP0BJ+Oi6Jb05EJTCaNaFMTMU73GGSYPJ1WwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDM/oQxHpr30wVkxqqbVHI19vg4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvNjRhNjAwOWQtMTJiOC00 YjM0LTk1ZjktZDI2MTgwZDhiZjRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYPLYppkT/oAMZRhQ636KE CyMsP/knZRD0U6YIJgQfoaDypmNE+Zhzh9paD2HYsqnyPZYO8Ok9uc9WBsXLqCsS ys2g6vg+E+0D4WwSmAaVV07CjhsmTQK7LsT9eveI4u7yFKI6hoiQx1lXoTX9EFBA X8hbFOnZRpEz33cX1PWv4ZN1O1U9uJz+yv1S1ZCNOxnz8O7c7nPdOfMRoNXHy5Sl csivWUQ/faNgH1u3YZqId37mzIcQceBq2AaQIYGnyDQsJOvdCv5xcAFaj1wu0Hry RmH8CPdAnAELnTGTA5i4e+QxcMTvMvyfCIKpkIbUsgL+JOlYGKepr5iQ84WAEuj4 -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:36 2024 by rpki-client on console-ams.rpki-client.org