$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: vot7auu1ZjsL/KECEkZW4/x93EnnOV1MStMIx9AttBk= Subject key identifier: 12:20:C5:54:6D:BC:FA:78:44:D5:0A:47:E9:93:E5:3B:BF:24:C7:69 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F43285845F094EA50AF1A6208DE5477C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D160632 Signing time: Mon 20 May 2024 22:00:05 +0000 Manifest this update: Mon 20 May 2024 22:00:05 +0000 Manifest next update: Wed 22 May 2024 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: 8TICgLb6+Mtx51H/vsEoKMZZr/re9y3GrB9jBe4ANKY=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: qja8XEhudSwNWanVX4ahTxAkDTYg5OuBTeUHB4mNAJA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f0:94:ea:50:af:1a:62:08:de:54:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: May 20 22:00:05 2024 GMT Not After : May 22 22:00:00 2024 GMT Subject: CN=aa56fa3d-5d72-438d-b5b9-162dfdcb0b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:25:8a:e5:ea:31:a2:3b:f7:9c:70:81:74:28: 72:57:49:3a:9b:9e:99:84:48:77:bc:c1:52:99:0a: 11:24:fa:e8:43:5a:e0:cb:e7:95:05:a4:dd:50:ec: a0:b8:6a:3a:ee:dc:e7:f3:30:3b:44:8e:d9:36:a1: da:4e:5b:29:b5:5f:62:3a:4e:2a:1b:a6:3b:9e:4a: 81:2d:00:bd:63:d9:6a:b5:26:6a:b4:d2:bc:b3:71: be:e4:6f:ea:cb:95:fe:39:2e:3b:91:b6:92:43:c4: 18:40:cf:0e:7f:6c:77:4f:c9:8c:f7:8e:09:a4:3d: e4:25:a6:0f:0e:d1:a4:a9:9e:dc:0f:6e:f8:38:8d: 62:f4:32:13:39:d5:f7:b2:be:03:91:d3:b8:30:30: 9f:34:1d:47:e5:1f:ad:35:db:f7:74:cb:51:f3:a2: 7b:33:ff:4a:aa:b3:3e:df:0e:48:2a:28:87:1b:50: 14:4c:1f:a7:25:7c:18:30:1d:a2:15:54:b1:e7:db: 83:81:fd:49:88:24:ec:8c:40:79:44:ce:54:f5:46: 79:e4:c8:4d:33:e3:91:2d:dd:97:8e:43:f0:ab:df: eb:4d:4a:af:be:cd:7f:0e:fa:47:b6:de:1d:46:61: 64:fe:0b:7e:60:6b:b1:8f:53:11:6a:91:f9:67:0b: 31:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:20:C5:54:6D:BC:FA:78:44:D5:0A:47:E9:93:E5:3B:BF:24:C7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d5:2b:59:e2:f8:1f:66:fb:77:24:17:a5:6a:8f:3d:b3:b5: 41:e4:38:e4:c6:94:6e:42:de:8b:2f:8e:31:38:a6:f3:f4:6f: e8:ad:b7:11:22:39:89:1f:cb:8a:9b:54:e6:31:ab:a3:4a:62: cb:5a:4b:f8:65:37:fe:0d:bc:92:5e:ec:a7:94:06:bf:5a:a6: 63:fc:e9:a2:d7:a4:08:d7:04:71:06:e0:d4:45:7d:c8:63:5a: 25:90:bb:bb:66:dc:9d:fe:c1:46:5b:9b:af:6e:1e:00:57:e3: 59:a5:c1:3e:d2:b9:02:64:78:c4:08:e1:69:74:ba:97:91:bd: 0e:79:d9:6c:6d:a4:7b:e9:33:ca:8b:78:b8:5e:6a:f2:18:d8: c4:01:59:51:42:25:39:5f:fb:d3:c0:31:bb:8c:8e:2a:84:ff: aa:88:0a:cf:a3:4a:36:58:10:e3:ef:85:d5:02:68:9f:c8:c6: b2:c8:9e:a4:b7:21:c8:e8:32:a6:a6:18:9a:e9:fd:53:db:b2: 4d:81:65:8e:e3:15:a4:d8:a1:45:f8:fe:15:7c:12:dd:19:4a: 58:a3:05:6a:bc:23:18:7c:25:b4:5b:38:43:24:83:0c:73:d9: fa:37:b6:37:5c:61:2b:05:b4:22:36:e8:31:de:90:ec:9e:a2: 23:a5:d9:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEXwlOpQrxpiCN5Ud8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI0MDUyMDIyMDAwNVoXDTI0MDUyMjIyMDAwMFowLzEtMCsGA1UEAxMk YWE1NmZhM2QtNWQ3Mi00MzhkLWI1YjktMTYyZGZkY2IwYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCWK5eoxojv3nHCBdChyV0k6m56ZhEh3vMFS mQoRJProQ1rgy+eVBaTdUOyguGo67tzn8zA7RI7ZNqHaTlsptV9iOk4qG6Y7nkqB LQC9Y9lqtSZqtNK8s3G+5G/qy5X+OS47kbaSQ8QYQM8Of2x3T8mM944JpD3kJaYP DtGkqZ7cD274OI1i9DITOdX3sr4DkdO4MDCfNB1H5R+tNdv3dMtR86J7M/9KqrM+ 3w5IKiiHG1AUTB+nJXwYMB2iFVSx59uDgf1JiCTsjEB5RM5U9UZ55MhNM+ORLd2X jkPwq9/rTUqvvs1/DvpHtt4dRmFk/gt+YGuxj1MRapH5ZwsxiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBIgxVRtvPp4RNUKR+mT5Tu/JMdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAN1StZ4vgfZvt3JBelao89 s7VB5DjkxpRuQt6LL44xOKbz9G/orbcRIjmJH8uKm1TmMaujSmLLWkv4ZTf+DbyS XuynlAa/WqZj/Omi16QI1wRxBuDURX3IY1olkLu7Ztyd/sFGW5uvbh4AV+NZpcE+ 0rkCZHjECOFpdLqXkb0OedlsbaR76TPKi3i4XmryGNjEAVlRQiU5X/vTwDG7jI4q hP+qiArPo0o2WBDj74XVAmifyMayyJ6ktyHI6DKmphia6f1T27JNgWWO4xWk2KFF +P4VfBLdGUpYowVqvCMYfCW0WzhDJIMMc9n6N7Y3XGErBbQiNugx3pDsnqIjpdlA -----END CERTIFICATE-----Generated at Tue May 21 16:40:07 2024 by rpki-client on console-ams.rpki-client.org