$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft File: 5a431902-5d61-4220-a913-af4f21f3413d.mft (raw, json) Hash identifier: 5ZXpvUOceUoG4qsWiq6TxbvbWrEjQiLm2zMzC0oEgx4= Subject key identifier: CA:0B:00:BB:D3:1F:49:FA:66:12:C5:29:2F:09:92:10:69:96:94:27 Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F43285847F3E3B32FBDAFB0CDA49442F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft Manifest number: 010D0C9F43285843F099CC092612B2DA80AD1999 Signing time: Thu 21 Nov 2024 12:00:07 +0000 Manifest this update: Thu 21 Nov 2024 12:00:07 +0000 Manifest next update: Sun 24 Nov 2024 12:00:00 +0000 Files and hashes: 1: 5a431902-5d61-4220-a913-af4f21f3413d.crl (hash: Pu4+N3XS1p0xjVC5pckzK4rwcIKC8U4QTraclTMsjkU=) 2: 81971457-da63-315b-a46b-b1f35234d76e.roa (hash: Y/TfxoVoLeGU1P/FsMpNrAVGH+Aj9badAa7m0f6aWFw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:e3:b3:2f:bd:af:b0:cd:a4:94:42:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Nov 21 12:00:07 2024 GMT Not After : Nov 24 12:00:00 2024 GMT Subject: CN=9e9c1611-fc31-40ca-bc48-315a55886f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:2d:db:8b:60:fd:9e:c7:e5:1b:41:39:0e: 78:e0:ef:31:04:a5:6a:9b:7a:bb:75:9c:da:e9:70: 8b:8c:ab:4c:08:87:20:2e:cf:ee:21:ba:fd:50:51: fc:d6:55:04:7a:68:37:4e:fa:59:88:a2:48:f3:3c: 41:bb:fc:5e:ba:90:1d:b4:ab:57:62:78:e8:bb:63: e1:b4:3f:03:e4:88:27:85:3d:7a:1f:a8:c6:da:29: 70:cb:a7:ad:ea:2b:44:38:0e:80:fb:26:4a:43:65: fa:25:a3:7a:22:fe:8c:6d:45:29:45:b0:4a:62:19: 89:e2:82:5a:cf:6f:7f:e5:55:cc:18:c4:e2:fd:94: 04:ad:aa:91:61:f8:a4:bc:17:5a:63:91:72:33:c2: bd:26:13:a3:30:d0:7e:7e:57:83:50:d6:e0:87:c1: 4e:aa:05:cd:3b:e9:57:f0:d8:3f:e7:8a:40:7b:4c: 0b:a6:2e:63:5e:02:90:93:11:92:77:56:b4:9b:0d: 4a:11:e6:88:5f:24:3a:24:8e:67:37:58:5c:2a:95: 1a:67:3e:b7:b9:ba:ce:bf:3e:60:fc:98:df:4a:24: 45:f0:85:17:87:ee:c2:d7:ee:ba:51:4a:a6:38:4c: 07:82:bd:6d:9f:ec:30:e1:17:4c:8a:e1:bc:64:f9: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0B:00:BB:D3:1F:49:FA:66:12:C5:29:2F:09:92:10:69:96:94:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:59:d3:00:32:75:22:62:e3:49:70:05:53:9a:57:ad:df:0e: 3b:c6:85:1b:80:29:94:f0:da:23:6a:b6:5a:8e:29:d7:92:db: e1:2c:07:9a:ce:49:ab:93:a7:21:0e:be:59:24:1f:a4:5a:50: 10:c1:c6:bc:71:2e:77:5f:ab:7f:18:c7:79:67:ae:68:ce:32: b1:53:c5:6d:17:83:1d:df:09:8b:c7:c9:31:ea:f9:3f:c0:6d: a4:79:01:13:69:0f:e4:3d:1f:c3:a3:49:12:fe:d0:d9:f2:4a: 3e:65:73:00:6e:70:6a:3d:f3:b4:57:c9:32:2f:bc:35:7a:e9: a4:3e:34:0d:6b:d4:c1:3f:63:0a:3c:ca:b3:5f:a5:fe:ea:49: 47:bb:8d:1c:80:f1:d6:0b:33:25:47:08:78:6f:c7:80:b3:12: ce:48:a7:9c:71:ed:5a:12:66:86:3c:bb:51:51:7f:a0:cc:8f: 81:9f:8a:e5:80:72:c9:d4:dc:d4:e8:93:05:71:cf:94:55:6e: 5c:d9:87:d6:1d:f1:8a:a1:cb:18:42:58:08:54:f0:e7:c1:9d: 0f:e4:6d:99:3a:1c:05:4b:b4:61:15:7f:aa:ce:72:08:2b:59: 82:f1:b9:10:a8:b2:cc:bf:8f:7e:80:22:af:27:11:d3:db:22: 8a:14:08:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEfz47Mvva+wzaSUQvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI0MTEyMTEyMDAwN1oXDTI0MTEyNDEyMDAwMFowLzEtMCsGA1UEAxMk OWU5YzE2MTEtZmMzMS00MGNhLWJjNDgtMzE1YTU1ODg2ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaot24tg/Z7H5RtBOQ544O8xBKVqm3q7dZza 6XCLjKtMCIcgLs/uIbr9UFH81lUEemg3TvpZiKJI8zxBu/xeupAdtKtXYnjou2Ph tD8D5IgnhT16H6jG2ilwy6et6itEOA6A+yZKQ2X6JaN6Iv6MbUUpRbBKYhmJ4oJa z29/5VXMGMTi/ZQEraqRYfikvBdaY5FyM8K9JhOjMNB+fleDUNbgh8FOqgXNO+lX 8Ng/54pAe0wLpi5jXgKQkxGSd1a0mw1KEeaIXyQ6JI5nN1hcKpUaZz63ubrOvz5g /JjfSiRF8IUXh+7C1+66UUqmOEwHgr1tn+ww4RdMiuG8ZPncPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMoLALvTH0n6ZhLFKS8JkhBplpQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvNWE0MzE5MDItNWQ2MS00 MjIwLWE5MTMtYWY0ZjIxZjM0MTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwWdMAMnUiYuNJcAVTmlet 3w47xoUbgCmU8NojarZajinXktvhLAeazkmrk6chDr5ZJB+kWlAQwca8cS53X6t/ GMd5Z65ozjKxU8VtF4Md3wmLx8kx6vk/wG2keQETaQ/kPR/Do0kS/tDZ8ko+ZXMA bnBqPfO0V8kyL7w1eumkPjQNa9TBP2MKPMqzX6X+6klHu40cgPHWCzMlRwh4b8eA sxLOSKecce1aEmaGPLtRUX+gzI+Bn4rlgHLJ1NzU6JMFcc+UVW5c2YfWHfGKocsY QlgIVPDnwZ0P5G2ZOhwFS7RhFX+qznIIK1mC8bkQqLLMv49+gCKvJxHT2yKKFAjJ -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:14 2024 by rpki-client on console-ams.rpki-client.org