$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft File: 2d64a9b2-da39-490b-a76e-0928cd57270b.mft (raw, json) Hash identifier: T1cK8YSEq6u73BtYQXrBqHajhaCkrDRBSd0a2+T39ao= Subject key identifier: FA:44:DC:0D:DA:87:E1:55:AB:23:F3:25:2A:02:76:7E:A5:20:C0:92 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F43285847F3C5EC7A8F21CD0AF7BE0080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft Manifest number: 010D0C9F4328584073A84EEE88D6A99E0FAD9752 Signing time: Thu 21 Nov 2024 11:00:06 +0000 Manifest this update: Thu 21 Nov 2024 11:00:06 +0000 Manifest next update: Sat 23 Nov 2024 11:00:00 +0000 Files and hashes: 1: 2d64a9b2-da39-490b-a76e-0928cd57270b.crl (hash: U0tZAjPl2eDUl7W2GPfze2CFvDw+eRB4D9uVLJoLyx4=) 2: 43d9c709-1869-3602-ba60-82f81826def9.roa (hash: En03BztO/Vx2X/eKAQA14/6ko1FOt6YPVpoqAlxWl1E=) 3: 567a0c7b-3f86-31ea-8791-f3940e306bd1.roa (hash: iDKf5CmB7FbK5pKRGDyy83LMDLTz52RYruHTpQoxY6c=) 4: f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa (hash: joKnt9zqLhPkDqt2j7jTN+PHeHrqK4E0NuKPWV2Ptyw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:c5:ec:7a:8f:21:cd:0a:f7:be:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: Nov 21 11:00:06 2024 GMT Not After : Nov 23 11:00:00 2024 GMT Subject: CN=afd4ed0c-47f4-4c52-a344-c2aa44fcdbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:de:f7:cb:39:ad:22:b7:23:d0:8e:17:39: 6c:74:55:62:99:90:37:8c:ec:26:0e:d4:fb:d2:d8: 64:63:6c:be:0a:14:5f:77:cb:42:67:bc:ee:c0:6e: 74:f1:d1:49:59:9f:e8:d9:1e:48:f6:12:94:69:1d: c4:65:7c:45:01:00:da:d7:c1:c0:f2:c3:bd:3c:82: 67:e3:91:75:fb:25:a0:40:c1:f7:c8:ba:4d:71:2c: bd:07:db:20:98:de:51:21:16:57:5c:2e:2b:02:37: 75:dd:82:76:6f:d9:a9:37:d1:6a:5e:8b:a5:5f:74: fd:a2:a5:d8:c0:7f:c4:2c:f5:06:a4:3d:1b:b2:6b: c7:3b:c6:45:40:4d:65:2e:1c:7f:c4:da:eb:c3:8c: 24:4e:6e:00:b0:de:1a:5f:d5:50:43:c0:4d:b7:c7: 7c:3e:ad:90:d2:52:30:ed:8a:07:5b:34:b9:5d:e5: e4:ae:e9:2b:00:4d:61:27:34:59:e1:4b:85:bb:7a: 27:15:f2:fd:fa:9f:c3:4d:93:32:c0:0b:bb:c8:ec: 8b:51:07:ae:a3:df:4a:b9:4b:6c:eb:5c:60:75:04: e4:97:f8:8e:27:7e:82:38:0f:8b:1e:2a:fb:5b:6a: da:a9:ac:cb:f8:21:f6:11:ff:ab:21:ca:b2:df:0d: d7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:44:DC:0D:DA:87:E1:55:AB:23:F3:25:2A:02:76:7E:A5:20:C0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:82:1d:47:42:4e:54:37:6d:07:26:0e:f4:63:19:c7:d2:b3: 70:87:9c:b1:b7:73:01:b2:85:77:2f:01:08:02:07:fe:12:e9: 46:a4:9d:7b:13:f1:d7:dc:bc:a3:3e:03:60:52:c1:3f:ce:59: b5:ae:f9:9f:6c:db:07:24:6b:13:5d:6b:01:34:cc:1e:f9:59: 63:b3:e5:97:17:29:4c:fc:02:93:12:c3:62:50:e0:9f:02:4c: 57:27:a4:e8:97:41:42:35:9a:cf:e9:47:bd:28:83:73:64:16: be:09:85:5c:19:37:e4:80:c9:e9:33:14:1c:a5:23:13:1c:aa: 0a:ad:4c:94:b6:d6:21:49:31:f9:fa:a5:53:f5:04:7b:21:af: ad:92:ed:af:ca:48:f2:6a:8a:f1:61:67:73:ee:69:cf:cc:0e: 37:03:bb:af:64:e3:9f:29:8d:4d:a6:ac:a7:0d:a1:47:6a:e6: 1b:9d:25:9b:09:c1:3a:e1:a8:58:1c:8d:3d:23:17:cd:e0:cd: 81:3c:8f:bf:da:eb:eb:3b:b4:7f:e0:48:8b:8e:24:17:3f:be: ae:b9:ec:ef:16:7e:d6:8e:5d:bc:51:67:85:86:aa:8c:f9:3e: 06:23:32:86:8e:e1:2e:80:78:3a:8f:d6:41:1a:0f:55:3f:9d: ae:8d:20:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEfzxex6jyHNCve+AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI0MTEyMTExMDAwNloXDTI0MTEyMzExMDAwMFowLzEtMCsGA1UEAxMk YWZkNGVkMGMtNDdmNC00YzUyLWEzNDQtYzJhYTQ0ZmNkYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU7e98s5rSK3I9COFzlsdFVimZA3jOwmDtT7 0thkY2y+ChRfd8tCZ7zuwG508dFJWZ/o2R5I9hKUaR3EZXxFAQDa18HA8sO9PIJn 45F1+yWgQMH3yLpNcSy9B9sgmN5RIRZXXC4rAjd13YJ2b9mpN9FqXoulX3T9oqXY wH/ELPUGpD0bsmvHO8ZFQE1lLhx/xNrrw4wkTm4AsN4aX9VQQ8BNt8d8Pq2Q0lIw 7YoHWzS5XeXkrukrAE1hJzRZ4UuFu3onFfL9+p/DTZMywAu7yOyLUQeuo99KuUts 61xgdQTkl/iOJ36COA+LHir7W2raqazL+CH2Ef+rIcqy3w3XRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPpE3A3ah+FVqyPzJSoCdn6lIMCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvMmQ2NGE5YjItZGEzOS00 OTBiLWE3NmUtMDkyOGNkNTcyNzBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjgh1HQk5UN20HJg70YxnH 0rNwh5yxt3MBsoV3LwEIAgf+EulGpJ17E/HX3LyjPgNgUsE/zlm1rvmfbNsHJGsT XWsBNMwe+Vljs+WXFylM/AKTEsNiUOCfAkxXJ6Tol0FCNZrP6Ue9KINzZBa+CYVc GTfkgMnpMxQcpSMTHKoKrUyUttYhSTH5+qVT9QR7Ia+tku2vykjyaorxYWdz7mnP zA43A7uvZOOfKY1NpqynDaFHauYbnSWbCcE64ahYHI09IxfN4M2BPI+/2uvrO7R/ 4EiLjiQXP76uuezvFn7Wjl28UWeFhqqM+T4GIzKGjuEugHg6j9ZBGg9VP52ujSBy -----END CERTIFICATE-----Generated at Thu Nov 21 21:07:42 2024 by rpki-client on console-fra.rpki-client.org