$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft File: 66cf51f2-af3c-4c05-a781-3b923f753475.mft (raw, json) Hash identifier: tKxBoqAMnMuN9OKK+lgJ2H7r5q5s2MXudTFmcuJH1CM= Subject key identifier: 42:05:1B:F9:07:20:EA:A9:72:2C:F7:EB:F5:AB:19:FD:20:44:58:57 Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 Certificate issuer: /CN=66cf51f2-af3c-4c05-a781-3b923f753475 Certificate serial: 010D0C9F43285845BDA1EB29D4FFBF07A30F2B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft Manifest number: 010D0C9F4328584073A81AB5C49D6BF3C2F65689 Signing time: Thu 02 May 2024 16:00:04 +0000 Manifest this update: Thu 02 May 2024 16:00:04 +0000 Manifest next update: Sat 04 May 2024 16:00:00 +0000 Files and hashes: 1: 66cf51f2-af3c-4c05-a781-3b923f753475.crl (hash: tWqHOYOwTqUPDUOVK1LXXBoOSXXnm1byVltyM8PTWEo=) 2: d2e9a628-bb73-378c-9508-2db3fb689656.roa (hash: MHEVIQ3pBEPpWOo30++8Kiv9ghqXgyuN/2bQe3cl+ss=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bd:a1:eb:29:d4:ff:bf:07:a3:0f:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475 Validity Not Before: May 2 16:00:04 2024 GMT Not After : May 4 16:00:00 2024 GMT Subject: CN=9ff019a5-ddf4-42f4-887f-ef43a3d0dbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:69:72:c0:e2:08:48:39:b3:89:66:c0:77:1b: d8:2b:19:8d:68:b1:aa:39:a1:ed:f7:a9:c3:6e:3d: b8:82:99:97:04:20:0a:b6:19:95:70:dc:b5:59:26: 3c:5d:27:37:28:78:1a:3b:66:38:bf:03:84:7b:a4: 48:3b:93:dd:e1:aa:96:99:36:2d:2d:00:51:6d:d3: ee:c8:a4:40:c2:de:a2:db:51:ca:40:14:a1:35:3f: f4:9f:fc:8d:a2:9c:6d:6d:ff:86:7a:6b:41:72:95: 2c:2a:8e:15:0c:35:6c:cd:63:39:c7:21:43:7d:94: 6f:66:f9:45:0d:64:04:4f:06:71:e6:bd:36:eb:91: ce:2d:82:16:7d:dc:31:0f:fb:42:df:c7:67:d9:0e: 5e:d1:32:3a:12:39:62:1d:fe:14:40:00:76:e7:e6: e3:99:e3:85:01:1c:60:f0:09:61:1f:ec:44:4f:4c: 92:fd:c0:e3:a4:57:f5:01:11:db:96:56:91:11:98: cd:d0:ad:6c:82:fd:f2:07:33:d9:00:c7:ac:4b:ec: 7c:5a:aa:09:93:3b:a1:31:b5:27:85:5b:5b:0d:ac: ec:22:77:72:8a:9e:92:43:90:c5:fd:98:4b:15:58: 7f:69:61:eb:6d:91:5e:45:df:cd:b4:41:d6:4b:72: bc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:05:1B:F9:07:20:EA:A9:72:2C:F7:EB:F5:AB:19:FD:20:44:58:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl X509v3 Authority Key Identifier: keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:81:f1:af:e0:58:78:1f:90:b4:d6:57:0e:ea:e5:3e:bb:9d: 73:0a:21:37:4c:d4:cb:43:b7:f9:0c:79:b0:60:b0:f6:db:5b: af:05:21:3d:91:52:eb:91:d9:30:63:88:a3:bf:26:27:6d:28: a4:fe:ff:37:c2:f2:7c:a9:e1:63:bc:c1:ca:c6:cc:27:86:c3: 67:dd:a2:08:fc:e0:f7:1c:c7:20:14:62:2a:4b:09:1b:d1:64: 12:62:b5:7a:87:fd:8a:64:ec:4a:45:b2:7b:7e:86:3d:50:9d: 7c:48:78:e4:2f:c1:ae:13:30:d3:67:1d:ac:04:a4:d4:76:ef: 21:cb:40:35:55:7a:a0:75:6b:c3:08:1f:26:3c:67:fa:a6:20: d1:ca:98:49:b5:68:c3:a7:6b:8a:07:63:da:28:d2:5b:26:86: 5a:70:5c:98:29:e8:1e:1f:b3:6f:d1:72:27:20:79:0d:98:13: a2:12:df:31:29:45:f1:ff:42:8c:97:25:a1:62:22:e7:24:87: 64:84:82:93:13:5d:75:99:4f:7e:b8:94:cd:18:48:e2:5b:8c: e0:90:ab:d5:7f:15:05:81:d0:fd:34:31:14:e1:3c:d7:1a:8e: 38:b2:46:1f:b3:8e:6a:0d:0d:10:d8:6f:7a:47:17:9c:68:fe: db:b4:1c:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEW9oesp1P+/B6MPK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz NDc1MB4XDTI0MDUwMjE2MDAwNFoXDTI0MDUwNDE2MDAwMFowLzEtMCsGA1UEAxMk OWZmMDE5YTUtZGRmNC00MmY0LTg4N2YtZWY0M2EzZDBkYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WlywOIISDmziWbAdxvYKxmNaLGqOaHt96nD bj24gpmXBCAKthmVcNy1WSY8XSc3KHgaO2Y4vwOEe6RIO5Pd4aqWmTYtLQBRbdPu yKRAwt6i21HKQBShNT/0n/yNopxtbf+GemtBcpUsKo4VDDVszWM5xyFDfZRvZvlF DWQETwZx5r0265HOLYIWfdwxD/tC38dn2Q5e0TI6EjliHf4UQAB25+bjmeOFARxg 8AlhH+xET0yS/cDjpFf1ARHbllaREZjN0K1sgv3yBzPZAMesS+x8WqoJkzuhMbUn hVtbDazsIndyip6SQ5DF/ZhLFVh/aWHrbZFeRd/NtEHWS3K8DQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEIFG/kHIOqpciz36/WrGf0gRFhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvNjZjZjUxZjItYWYzYy00 YzA1LWE3ODEtM2I5MjNmNzUzNDc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3 ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1 MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky M2Y3NTM0NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCngfGv4Fh4H5C01lcO6uU+ u51zCiE3TNTLQ7f5DHmwYLD221uvBSE9kVLrkdkwY4ijvyYnbSik/v83wvJ8qeFj vMHKxswnhsNn3aII/OD3HMcgFGIqSwkb0WQSYrV6h/2KZOxKRbJ7foY9UJ18SHjk L8GuEzDTZx2sBKTUdu8hy0A1VXqgdWvDCB8mPGf6piDRyphJtWjDp2uKB2PaKNJb JoZacFyYKegeH7Nv0XInIHkNmBOiEt8xKUXx/0KMlyWhYiLnJIdkhIKTE111mU9+ uJTNGEjiW4zgkKvVfxUFgdD9NDEU4TzXGo44skYfs45qDQ0Q2G96RxecaP7btBw+ -----END CERTIFICATE-----Generated at Fri May 3 03:24:06 2024 by rpki-client on console-ams.rpki-client.org