$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: oLmlkCAg4qN33CL5woYLUOms0n4Jj309/ySy2nJsx3g= Subject key identifier: 31:2F:4D:81:16:A8:1B:F6:70:42:D6:A3:AE:C6:4E:B1:10:73:E1:FA Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F43285845F46B9799AB5B23975E4F8600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3183 Signing time: Wed 22 May 2024 07:00:04 +0000 Manifest this update: Wed 22 May 2024 07:00:04 +0000 Manifest next update: Sat 25 May 2024 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: EHn5ZSABLtn2kzT3WH1wrb8YCROevn/DUfH5LMS+5kc=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: dSFMmWZ0DINFmP4zCXfl4KASMVSiZbD4oyod4FRTQoA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f4:6b:97:99:ab:5b:23:97:5e:4f:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: May 22 07:00:04 2024 GMT Not After : May 25 07:00:00 2024 GMT Subject: CN=3f5727f3-e51b-46b3-9ca2-80db9baf1ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:be:ea:51:33:c0:d3:b6:e3:25:f6:cb:0c: 70:f1:ee:70:bf:07:80:c1:c1:f1:e9:08:bb:06:ec: 6a:9d:b4:74:e6:6d:84:55:e2:dc:89:b0:35:3b:19: 8f:25:22:4a:c4:91:43:80:b9:6f:0b:77:51:d4:28: 5f:4d:4a:69:6b:01:d7:e7:2c:5c:9f:a1:d2:02:03: 4c:cb:bc:6e:44:50:df:bd:ba:6c:ae:59:df:a6:df: b3:02:73:9d:5e:17:73:da:72:91:a9:6f:1c:2d:17: a6:bf:70:ef:9e:17:f7:b2:66:d0:98:a8:73:58:9b: b4:a5:10:4b:91:97:3f:91:22:5c:b8:d8:c6:b9:d7: 6d:99:3f:16:c9:f9:00:16:cf:a4:05:f4:ed:ff:d3: ab:16:9b:4f:fa:5e:ff:32:7b:fb:cc:dc:43:a3:c0: 48:12:b6:16:03:e5:0d:90:d8:0f:fe:48:10:3d:d2: d9:e5:f3:16:00:c9:30:bf:53:e7:fd:58:9e:f8:7a: 86:b2:74:7d:c7:38:7d:9d:39:9e:6a:88:31:78:ed: db:0a:91:1f:da:ea:06:0b:28:b6:32:af:45:28:c7: 4f:ef:d0:a9:3c:84:dc:e2:e6:c7:af:12:53:42:00: 2f:6c:fe:c4:90:12:ac:1a:2a:83:cd:ad:82:74:e6: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2F:4D:81:16:A8:1B:F6:70:42:D6:A3:AE:C6:4E:B1:10:73:E1:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:21:99:b0:3e:36:d4:27:e8:62:fb:13:41:62:5c:2d:53:16: 51:9d:4e:81:0c:cf:7b:5a:c8:34:37:7d:90:3b:0e:97:a6:cb: c2:41:13:65:64:5f:60:3f:b4:a3:4b:56:73:29:66:cb:0e:69: 3b:cb:13:d2:3b:ad:09:6a:e5:af:45:d2:35:4f:44:ac:b0:bc: bc:80:41:19:f3:6e:65:bd:d7:d5:0b:bf:39:26:e5:88:b1:11: f6:e3:dd:30:14:c6:29:8c:4b:bd:dc:5c:77:ce:c7:53:83:57: 87:14:98:07:3c:0f:1e:28:e5:ca:d2:cc:71:f3:c9:48:cd:b8: 7e:8e:84:53:7d:97:0d:8e:df:b4:11:16:58:2a:8a:c3:28:f8: 09:34:da:da:b4:a7:55:4e:e3:f2:ec:e3:cf:1c:8e:db:5d:65: 93:fc:19:1d:92:6d:77:a7:17:9d:80:bb:d7:a0:4c:6c:6b:f2: 61:2e:c2:2c:2f:f0:ea:c7:aa:57:72:45:d6:4a:88:96:b5:eb: 2f:64:0e:26:93:68:43:fd:83:0f:7d:d5:64:8e:a4:59:19:b6: f6:03:a9:e9:fb:7c:5f:d7:4c:16:d7:13:46:a1:63:3a:10:51: 2e:5d:98:05:37:8a:97:15:0f:c3:a9:1b:38:aa:8c:6d:11:cf: ac:47:0e:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEX0a5eZq1sjl15PhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI0MDUyMjA3MDAwNFoXDTI0MDUyNTA3MDAwMFowLzEtMCsGA1UEAxMk M2Y1NzI3ZjMtZTUxYi00NmIzLTljYTItODBkYjliYWYxYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqy+6lEzwNO24yX2ywxw8e5wvweAwcHx6Qi7 BuxqnbR05m2EVeLcibA1OxmPJSJKxJFDgLlvC3dR1ChfTUppawHX5yxcn6HSAgNM y7xuRFDfvbpsrlnfpt+zAnOdXhdz2nKRqW8cLRemv3Dvnhf3smbQmKhzWJu0pRBL kZc/kSJcuNjGuddtmT8WyfkAFs+kBfTt/9OrFptP+l7/Mnv7zNxDo8BIErYWA+UN kNgP/kgQPdLZ5fMWAMkwv1Pn/Vie+HqGsnR9xzh9nTmeaogxeO3bCpEf2uoGCyi2 Mq9FKMdP79CpPITc4ubHrxJTQgAvbP7EkBKsGiqDza2CdOarTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDEvTYEWqBv2cELWo67GTrEQc+H6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPIZmwPjbUJ+hi+xNBYlwt UxZRnU6BDM97Wsg0N32QOw6XpsvCQRNlZF9gP7SjS1ZzKWbLDmk7yxPSO60JauWv RdI1T0SssLy8gEEZ825lvdfVC785JuWIsRH2490wFMYpjEu93Fx3zsdTg1eHFJgH PA8eKOXK0sxx88lIzbh+joRTfZcNjt+0ERZYKorDKPgJNNratKdVTuPy7OPPHI7b XWWT/Bkdkm13pxedgLvXoExsa/JhLsIsL/Dqx6pXckXWSoiWtesvZA4mk2hD/YMP fdVkjqRZGbb2A6np+3xf10wW1xNGoWM6EFEuXZgFN4qXFQ/DqRs4qoxtEc+sRw7j -----END CERTIFICATE-----Generated at Thu May 23 01:44:47 2024 by rpki-client on console-fra.rpki-client.org