$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft File: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft (raw, json) Hash identifier: DwjQdYY8H4MbLAw248rGrMjB9lJAoPmCzbw4D8SANU4= Subject key identifier: 03:B5:8D:48:D5:8F:81:18:87:B1:B5:B4:18:E1:BC:79:EB:97:2D:B2 Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 Certificate issuer: /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Certificate serial: 72B9CAEF450848B9FEE1425FD51AB5C503D2AFD2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer Subject info access: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft Manifest number: 52 Signing time: Sun 10 Aug 2025 15:24:03 +0000 Manifest this update: Sun 10 Aug 2025 15:19:03 +0000 Manifest next update: Mon 11 Aug 2025 15:54:03 +0000 Files and hashes: 1: 323630323a663633333a3a2f34302d313238203d3e2030.roa (hash: Gm4KC4yKfvUQGJIav09rOCnI6G67sL4yLr2b6lVR5jE=) 2: 323630323a663633333a3a2f34382d3438203d3e203332353931.roa (hash: nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=) 3: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl (hash: l6AZNHcODLsdQxhtNZCeMdQsVDA8dX7ivz34ZMnYEeQ=) 4: AS32591.asa (hash: jPFYj/1kozNrsSDc+ajpDpFIhmwjdkNt/m65RzoGG3g=) 5: 32332e3134302e35322e302f32342d3234203d3e203332353931.roa (hash: oZRtVcSi4lYHDLHNFVp6cKh6gXIDWw99wQ2eImbTS0Y=) Validation: OK Signature path: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 15:54:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b9:ca:ef:45:08:48:b9:fe:e1:42:5f:d5:1a:b5:c5:03:d2:af:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Validity Not Before: Aug 10 15:19:03 2025 GMT Not After : Aug 11 15:54:03 2025 GMT Subject: CN=03B58D48D58F811887B1B5B418E1BC79EB972DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:97:3b:48:fd:99:df:65:55:f0:44:da:25:ab: 46:00:ce:8a:de:29:48:a2:b1:80:c7:13:25:ce:de: 01:55:b0:c5:3a:ec:97:78:91:5c:7e:c1:9c:14:1d: 8b:bd:d2:b4:f7:9e:89:26:e7:9e:e8:95:f7:fc:93: 3b:d9:74:0d:63:41:fc:71:59:2e:20:6e:21:1b:50: 5c:07:55:c9:8a:71:79:1b:94:14:32:c8:54:3e:2e: a2:7b:fd:df:46:51:40:a4:db:7f:0a:84:1d:b4:b1: e6:3a:92:d6:41:30:7b:ef:ef:f2:4a:75:8b:78:11: df:f2:3a:b3:64:c6:93:d5:ba:66:d1:ee:5c:8a:b7: 14:49:69:62:d4:06:b2:68:24:e9:ea:82:df:6b:ee: ca:3e:43:05:46:eb:0c:b9:2f:96:85:5b:bd:33:d3: a4:e0:0b:30:c9:af:9c:1a:fd:d7:5d:8e:56:48:12: 6e:fd:16:b9:90:99:f8:bf:cf:53:71:e1:52:bb:c7: f0:42:32:30:6a:44:65:42:35:8e:77:c1:44:7e:fe: c4:55:49:6e:09:0d:0e:b7:db:c2:92:de:fb:e6:5a: 63:ac:45:0a:92:6b:08:a4:bb:40:01:b9:67:f3:06: d3:a8:81:9d:18:bd:fc:37:fa:90:b2:e3:50:92:0b: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B5:8D:48:D5:8F:81:18:87:B1:B5:B4:18:E1:BC:79:EB:97:2D:B2 X509v3 Authority Key Identifier: keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ea:83:02:a9:8d:e4:fc:4a:99:c3:98:9e:f6:fb:2c:a1:8a: 48:fb:20:8f:43:76:72:45:63:15:a5:51:8a:30:8d:a7:88:db: 0f:76:5a:4b:f5:f7:3d:fe:f7:d2:ce:2e:09:f2:86:1a:85:8e: 46:92:fa:d7:84:4a:cc:72:5a:4b:59:77:74:bf:56:a4:9e:74: f2:ef:ea:2d:3e:25:17:74:d3:20:35:a9:9d:14:39:ce:99:3c: f7:68:0a:ef:34:95:62:f3:dd:ff:ba:ef:06:68:3c:b3:03:d5: ab:7a:6f:a1:e2:fe:c7:19:08:ff:76:74:ac:03:f8:0a:2d:ae: 5a:fb:7a:87:08:77:d9:ed:22:f1:c4:38:c5:01:8d:21:2a:82: 2d:d7:f6:b4:e5:ea:c0:89:12:d2:59:e0:47:d2:5d:87:72:08: 0c:37:0b:20:bb:a4:4d:cd:c0:a7:86:3e:16:ac:22:5a:11:b0: e5:cd:9d:a7:0a:2f:9a:b4:61:63:f3:83:2d:f2:74:cd:cb:08: 57:18:8c:45:43:87:81:c2:4b:18:2f:76:ca:b4:86:a0:3b:6b: 74:87:95:86:76:2c:96:77:49:8a:5b:2b:98:00:89:08:de:34: 60:8c:a3:18:57:76:d0:96:3e:41:6a:3e:14:3f:1f:3d:45:fb: 60:1b:2a:ac -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUcrnK70UISLn+4UJf1Rq1xQPSr9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzBhMzA4ZTg3MTY2ZDU3MzM1OTAyN2FmOTk3NWE0MTZk NWEzZjE3NmU0NGY0NWM5MzIwHhcNMjUwODEwMTUxOTAzWhcNMjUwODExMTU1NDAz WjAzMTEwLwYDVQQDEygwM0I1OEQ0OEQ1OEY4MTE4ODdCMUI1QjQxOEUxQkM3OUVC OTcyREIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Jc7SP2Z32VV 8ETaJatGAM6K3ilIorGAxxMlzt4BVbDFOuyXeJFcfsGcFB2LvdK0956JJuee6JX3 /JM72XQNY0H8cVkuIG4hG1BcB1XJinF5G5QUMshUPi6ie/3fRlFApNt/CoQdtLHm OpLWQTB77+/ySnWLeBHf8jqzZMaT1bpm0e5circUSWli1AayaCTp6oLfa+7KPkMF RusMuS+WhVu9M9Ok4Aswya+cGv3XXY5WSBJu/Ra5kJn4v89TceFSu8fwQjIwakRl QjWOd8FEfv7EVUluCQ0Ot9vCkt775lpjrEUKkmsIpLtAAbln8wbTqIGdGL38N/qQ suNQkguU3QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFAO1jUjVj4EYh7G1tBjhvHnr ly2yMB8GA1UdIwQYMBaAFAuJAEijo5W8H6SWXS3Vft19keLgMA4GA1UdDwEB/wQE AwIHgDBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5jYW5vcHMu b3JnL3JlcG8vQ2FuT3BzLVBBU1MvMC8wQjg5MDA0OEEzQTM5NUJDMUZBNDk2NUQy REQ1N0VERDdEOTFFMkUwLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUF BzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQy OC0xY2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDgyYTRkMDYtY2VkOC00ODUx LTgwYjItNjBkM2RhMTFmZDZmLzMwYTMwOGU4NzE2NmQ1NzMzNTkwMjdhZjk5NzVh NDE2ZDVhM2YxNzZlNDRmNDVjOTMyLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYB BQUHMAuGXHJzeW5jOi8vcnBraS1yZXBvLmNhbm9wcy5vcmcvcmVwby9DYW5PcHMt UEFTUy8wLzBCODkwMDQ4QTNBMzk1QkMxRkE0OTY1RDJERDU3RUREN0Q5MUUyRTAu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAg6oMCqY3k/EqZw5ie9vssoYpI+yCPQ3ZyRWMVpVGKMI2niNsP dlpL9fc9/vfSzi4J8oYahY5GkvrXhErMclpLWXd0v1aknnTy7+otPiUXdNMgNamd FDnOmTz3aArvNJVi893/uu8GaDyzA9Wrem+h4v7HGQj/dnSsA/gKLa5a+3qHCHfZ 7SLxxDjFAY0hKoIt1/a05erAiRLSWeBH0l2HcggMNwsgu6RNzcCnhj4WrCJaEbDl zZ2nCi+atGFj84Mt8nTNywhXGIxFQ4eBwksYL3bKtIagO2t0h5WGdiyWd0mKWyuY AIkI3jRgjKMYV3bQlj5Baj4UPx89RftgGyqs -----END CERTIFICATE-----Generated at Sun Aug 10 21:00:04 2025 by rpki-client