$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft File: 5a81d94a-3591-433e-8f6e-da4b9078552b.mft (raw, json) Hash identifier: hBmDIM5YG/ReQ7r9PZ8CAB4S4IMxFB+W3Q2Usb4oILQ= Subject key identifier: ED:0F:6E:92:C6:6B:22:DD:37:02:FC:D6:57:88:71:EE:E8:CD:2D:FD Authority key identifier: 55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 Certificate issuer: /CN=5a81d94a-3591-433e-8f6e-da4b9078552b Certificate serial: 010D0C9F43285848562F856EE436ABD501B36C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft Manifest number: 010D0C9F43285848562F8573C59705F64E791801 Signing time: Thu 26 Dec 2024 17:02:07 +0000 Manifest this update: Thu 26 Dec 2024 17:02:07 +0000 Manifest next update: Sun 29 Dec 2024 17:00:00 +0000 Files and hashes: 1: 5a81d94a-3591-433e-8f6e-da4b9078552b.crl (hash: RGAHBPKWwPK/DAjeVNdFIgTHjEgxXVdg8gUIUZ7LNfE=) 2: c33d26d8-c45c-3c30-ba5c-1caa386069d5.roa (hash: wd177GNQBncoIVNgUvvUW7ilUIJcwGYCeDT3q3iEpYs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:56:2f:85:6e:e4:36:ab:d5:01:b3:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a81d94a-3591-433e-8f6e-da4b9078552b Validity Not Before: Dec 26 17:02:07 2024 GMT Not After : Dec 29 17:00:00 2024 GMT Subject: CN=e29e8ea8-a1ee-4c71-95b5-53c324bf6930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:90:c7:85:0d:40:0a:b2:43:78:48:86:02: 0d:7d:19:d9:6f:00:56:26:59:ca:4f:2d:e9:de:93: 09:02:4a:57:0f:8e:4f:65:fd:ca:54:6d:ec:b4:bd: 1b:80:33:47:02:56:c3:c2:72:d7:4b:e5:81:22:b3: 24:a2:b3:46:f4:6e:8f:37:99:c9:da:b0:0c:6b:0c: a8:da:88:35:84:71:64:ba:5f:45:41:2f:3e:d2:ed: f1:59:f9:12:0a:d2:82:e3:01:0f:b3:7e:9c:15:97: e1:78:c9:99:0c:e3:50:fd:fd:d0:21:fd:4a:37:5e: 3d:2a:4e:e1:3e:ee:ce:40:63:68:42:fd:4c:28:c2: aa:1d:98:e5:e7:92:db:e9:f7:40:6c:a5:ab:b5:c1: f9:84:b7:b3:bf:8c:08:e4:21:70:fc:b9:a1:1c:c0: a7:32:cb:43:78:42:51:69:8a:a6:da:4d:05:ae:c4: cb:74:61:5c:aa:c6:0f:22:40:fb:01:da:47:dd:bf: 90:aa:f2:fa:11:71:e2:56:f1:e1:67:05:8e:93:47: 8b:5e:e5:c9:ac:02:74:62:93:17:e1:85:cc:95:df: 04:bc:c2:1b:93:14:71:a0:e0:1d:5b:fa:cd:6a:e3: c2:47:bb:e9:2c:59:cd:d1:50:05:eb:bf:e7:94:e3: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0F:6E:92:C6:6B:22:DD:37:02:FC:D6:57:88:71:EE:E8:CD:2D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl X509v3 Authority Key Identifier: keyid:55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f7:0e:76:2b:a6:c2:3d:a2:30:74:37:1e:a3:c2:ae:12:be: ae:91:f4:f7:5a:a6:f7:03:67:91:dd:02:3c:25:9a:d7:a6:0b: e4:fe:64:f0:45:4b:4d:43:62:ac:6f:87:08:9c:57:82:89:dd: 5f:4a:93:40:a1:b0:e3:d2:28:78:f7:3e:5c:06:b0:6e:8b:a3: 5e:c9:21:a2:ae:67:7c:96:4a:bd:b5:8c:3b:94:84:a5:4b:b5: e3:59:5d:50:44:72:97:6d:04:9e:12:2b:8c:69:c4:20:86:84: 59:46:87:30:12:f6:17:25:c4:bc:1b:ec:9c:d7:8e:f8:86:3f: 1a:dc:34:e2:52:cb:1a:d9:be:e2:be:ef:c3:d8:4c:43:23:35: 59:25:88:1b:b1:cb:15:ac:c3:78:ee:2d:f0:8a:a6:a4:40:fb: 96:49:cd:06:dd:38:25:93:02:14:a6:54:55:1b:f5:bd:d0:bf: 21:d7:24:2e:6c:27:b4:d9:5b:ee:90:43:98:c6:6d:f7:29:8a: dc:9e:61:be:8a:0a:d7:03:f8:aa:3e:f1:9d:81:04:1c:6b:64: c3:9a:8c:d8:f0:a6:cc:99:5f:ec:51:60:9a:ae:73:37:26:00: be:6d:ab:70:14:5b:9e:ac:6a:44:67:17:7d:40:3c:78:81:61: 04:cf:f2:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEhWL4Vu5Dar1QGzbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4MWQ5NGEtMzU5MS00MzNlLThmNmUtZGE0YjkwNzg1 NTJiMB4XDTI0MTIyNjE3MDIwN1oXDTI0MTIyOTE3MDAwMFowLzEtMCsGA1UEAxMk ZTI5ZThlYTgtYTFlZS00YzcxLTk1YjUtNTNjMzI0YmY2OTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRSQx4UNQAqyQ3hIhgINfRnZbwBWJlnKTy3p 3pMJAkpXD45PZf3KVG3stL0bgDNHAlbDwnLXS+WBIrMkorNG9G6PN5nJ2rAMawyo 2og1hHFkul9FQS8+0u3xWfkSCtKC4wEPs36cFZfheMmZDONQ/f3QIf1KN149Kk7h Pu7OQGNoQv1MKMKqHZjl55Lb6fdAbKWrtcH5hLezv4wI5CFw/LmhHMCnMstDeEJR aYqm2k0FrsTLdGFcqsYPIkD7AdpH3b+QqvL6EXHiVvHhZwWOk0eLXuXJrAJ0YpMX 4YXMld8EvMIbkxRxoOAdW/rNauPCR7vpLFnN0VAF67/nlONWhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO0PbpLGayLdNwL81leIce7ozS39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTgx ZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRiOTA3ODU1MmIvNWE4MWQ5NGEtMzU5MS00 MzNlLThmNmUtZGE0YjkwNzg1NTJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE4MWQ5NGEtMzU5MS00MzNlLThm NmUtZGE0YjkwNzg1NTJiLzVhODFkOTRhLTM1OTEtNDMzZS04ZjZlLWRhNGI5MDc4 NTUyYi5jcmwwHwYDVR0jBBgwFoAUVatwEk3UD10eljH1VS5u8EgioakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTgxZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRi OTA3ODU1MmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA69w52K6bCPaIwdDceo8Ku Er6ukfT3Wqb3A2eR3QI8JZrXpgvk/mTwRUtNQ2Ksb4cInFeCid1fSpNAobDj0ih4 9z5cBrBui6NeySGirmd8lkq9tYw7lISlS7XjWV1QRHKXbQSeEiuMacQghoRZRocw EvYXJcS8G+yc1474hj8a3DTiUssa2b7ivu/D2ExDIzVZJYgbscsVrMN47i3wiqak QPuWSc0G3TglkwIUplRVG/W90L8h1yQubCe02VvukEOYxm33KYrcnmG+igrXA/iq PvGdgQQca2TDmozY8KbMmV/sUWCarnM3JgC+batwFFuerGpEZxd9QDx4gWEEz/LB -----END CERTIFICATE-----Generated at Fri Dec 27 23:45:11 2024 by rpki-client on console-fra.rpki-client.org