$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft File: 99cd086f-b993-42d9-8f47-c65df74d693b.mft (raw, json) Hash identifier: L1P6KJ2XN+P0g/u4OG6KiL+4ZaSZiJUmmz3ooM7GtA8= Subject key identifier: D5:AB:29:83:BB:0B:47:AA:F2:D0:51:16:33:4C:1D:AC:43:AA:D3:E5 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F43285845BB12CA98EE1611C7834718C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft Manifest number: 010D0C9F4328584073A821EFFDC032F582708A06 Signing time: Wed 01 May 2024 18:00:04 +0000 Manifest this update: Wed 01 May 2024 18:00:04 +0000 Manifest next update: Sat 04 May 2024 18:00:00 +0000 Files and hashes: 1: 2601eed2-c3ed-3736-ab5b-4fa61277dc83.roa (hash: dZTwWnzEuiTuLK4If/n+h586yzXTjPRjNJRKRq4h7sw=) 2: 5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa (hash: 5stAhaEq5NcHKtR1Jh3H8qZkaLc0lfwYDmKGi7Mficg=) 3: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (hash: H4VcAihL11cXhtg9ekklbYOiYy7Ea7IrsZuCvJq3/UQ=) 4: 99cd086f-b993-42d9-8f47-c65df74d693b.crl (hash: T1k45/hD0To0zjkAxwS4hiN0sqw5SawBGyI5t0KAHc0=) 5: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (hash: qwQekhUPoiM43WgZoWdSLWKLKrYm99+zXv4YS+PwHyA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bb:12:ca:98:ee:16:11:c7:83:47:18:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: May 1 18:00:04 2024 GMT Not After : May 4 18:00:00 2024 GMT Subject: CN=679de37b-a302-4679-9a70-681db5188414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:a2:4a:d6:06:3b:0d:eb:86:72:65:4f:d7: 0b:cb:41:af:b8:f5:7a:03:cd:3b:cc:43:9e:d7:ce: a4:9f:c1:50:86:31:12:89:d4:cf:a6:11:8f:e7:ca: 10:5e:44:3d:26:96:2d:e3:a7:b4:60:f7:8d:95:ec: f3:ed:2b:fa:b8:ef:7d:c1:8f:d6:9b:60:ae:1f:c7: 2d:66:37:0c:5a:c7:ff:b6:24:00:17:1f:c9:12:b6: f2:79:99:0c:fd:e3:19:5b:0c:cc:96:71:bb:4d:59: 4f:64:a1:3a:87:67:e5:39:28:d9:ae:75:ae:a2:66: ea:57:e9:06:6b:fc:79:4a:3b:7d:29:bb:54:44:85: 3a:14:55:36:d1:72:f3:4c:e3:b6:71:98:73:b4:5e: 04:3a:5c:eb:8a:b7:89:cc:4e:9c:63:80:02:1e:39: 02:d5:5e:50:71:1b:6f:cd:0d:dd:46:cc:28:4e:3a: df:98:8a:ee:2e:79:0b:cf:ea:f6:b6:c7:7a:7b:15: 89:09:54:11:8d:40:d1:e3:47:01:9e:0e:e7:a9:3b: 42:e7:4b:7c:82:ec:85:81:bd:33:64:ae:c0:94:43: b1:af:64:0d:d0:cf:dd:49:a2:e8:5f:a4:2b:39:29: ce:f4:f9:e6:16:94:f2:47:03:04:ac:4a:64:5f:25: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:29:83:BB:0B:47:AA:F2:D0:51:16:33:4C:1D:AC:43:AA:D3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:77:ab:71:5e:4a:3d:96:b2:cd:ec:39:ab:1a:ce:10:57:c5: f9:ed:31:eb:86:dd:8f:0f:ba:20:01:65:dd:f0:9f:e6:19:37: 75:b9:c1:97:20:80:46:6b:8f:3f:d0:4d:b6:fe:b4:12:90:f4: 2b:09:27:65:ba:fd:a1:d7:b9:2a:d7:7e:d5:10:c6:c2:99:53: 85:d8:28:ea:2b:74:20:fc:d8:5c:29:10:4c:ff:3c:f5:3a:13: 4c:8f:10:91:a4:5c:36:35:59:4c:c0:7c:84:5b:79:97:f2:aa: 19:4c:2f:2c:76:4a:e9:1e:19:d5:1e:20:53:e2:ae:9c:ac:b3: c3:d3:c7:98:52:df:d9:17:b0:61:ec:75:32:87:05:1b:be:8c: 81:48:9a:f6:5e:f1:43:cd:f9:73:e1:ab:0f:68:a3:a5:d0:a1: e2:65:ab:2d:5c:44:b2:3a:ed:28:88:f0:0d:a6:42:d7:f2:5c: c8:18:96:3d:62:ec:7d:17:18:06:5f:b1:6e:4f:bc:4b:cb:0e: 90:5c:e4:89:98:7d:54:70:15:d8:76:cd:79:79:f1:f4:b7:66: 87:7e:53:38:21:20:ed:2b:9c:9a:77:97:89:63:55:28:6a:55: ae:4c:98:89:d1:71:f0:18:74:31:fd:84:e1:66:d9:ec:df:7d: 78:2a:70:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEW7EsqY7hYRx4NHGMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI0MDUwMTE4MDAwNFoXDTI0MDUwNDE4MDAwMFowLzEtMCsGA1UEAxMk Njc5ZGUzN2ItYTMwMi00Njc5LTlhNzAtNjgxZGI1MTg4NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicyiStYGOw3rhnJlT9cLy0GvuPV6A807zEOe 186kn8FQhjESidTPphGP58oQXkQ9JpYt46e0YPeNlezz7Sv6uO99wY/Wm2CuH8ct ZjcMWsf/tiQAFx/JErbyeZkM/eMZWwzMlnG7TVlPZKE6h2flOSjZrnWuombqV+kG a/x5Sjt9KbtURIU6FFU20XLzTOO2cZhztF4EOlzrireJzE6cY4ACHjkC1V5QcRtv zQ3dRswoTjrfmIruLnkLz+r2tsd6exWJCVQRjUDR40cBng7nqTtC50t8guyFgb0z ZK7AlEOxr2QN0M/dSaLoX6QrOSnO9PnmFpTyRwMErEpkXyXBXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNWrKYO7C0eq8tBRFjNMHaxDqtPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOTljZDA4NmYtYjk5My00 MmQ5LThmNDctYzY1ZGY3NGQ2OTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvd6txXko9lrLN7DmrGs4Q V8X57THrht2PD7ogAWXd8J/mGTd1ucGXIIBGa48/0E22/rQSkPQrCSdluv2h17kq 137VEMbCmVOF2CjqK3Qg/NhcKRBM/zz1OhNMjxCRpFw2NVlMwHyEW3mX8qoZTC8s dkrpHhnVHiBT4q6crLPD08eYUt/ZF7Bh7HUyhwUbvoyBSJr2XvFDzflz4asPaKOl 0KHiZastXESyOu0oiPANpkLX8lzIGJY9Yux9FxgGX7FuT7xLyw6QXOSJmH1UcBXY ds15efH0t2aHflM4ISDtK5yad5eJY1UoalWuTJiJ0XHwGHQx/YThZtns3314KnAR -----END CERTIFICATE-----Generated at Thu May 2 04:24:58 2024 by rpki-client on console-fra.rpki-client.org