$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft File: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft (raw, json) Hash identifier: ODjXuekdYXj6BJz/mMFOeYoBotanzgkjKSn/yjh87V0= Subject key identifier: E4:18:45:59:5B:44:49:A9:4F:88:EB:8E:55:D1:86:1E:10:BD:F6:9D Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 Certificate issuer: /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Certificate serial: 0BDEDF212F97E09862E917C384785EF4C666A554 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer Subject info access: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft Manifest number: 0E Signing time: Fri 20 Jun 2025 14:47:17 +0000 Manifest this update: Fri 20 Jun 2025 14:42:17 +0000 Manifest next update: Sat 21 Jun 2025 17:32:17 +0000 Files and hashes: 1: 323630323a663633333a3a2f34302d313238203d3e2030.roa (hash: Gm4KC4yKfvUQGJIav09rOCnI6G67sL4yLr2b6lVR5jE=) 2: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl (hash: x0uOeOdtbI6w9LR0H+T5jft7+yoRC1VREZVS+aEtPaY=) 3: 323630323a663633333a3a2f34382d3438203d3e203332353931.roa (hash: nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=) 4: AS32591.asa (hash: jPFYj/1kozNrsSDc+ajpDpFIhmwjdkNt/m65RzoGG3g=) 5: 32332e3134302e35322e302f32342d3234203d3e203332353931.roa (hash: oZRtVcSi4lYHDLHNFVp6cKh6gXIDWw99wQ2eImbTS0Y=) Validation: OK Signature path: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 17:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:de:df:21:2f:97:e0:98:62:e9:17:c3:84:78:5e:f4:c6:66:a5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Validity Not Before: Jun 20 14:42:17 2025 GMT Not After : Jun 21 17:32:17 2025 GMT Subject: CN=E41845595B4449A94F88EB8E55D1861E10BDF69D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:83:f3:2f:05:9c:9f:ab:03:0b:19:e6:fa: a0:1e:b0:db:41:28:50:0a:96:2b:99:9b:b2:2c:54: dd:c7:52:08:37:7d:43:d4:d7:3d:e5:83:f6:cc:96: 5d:48:f2:00:68:13:e1:b1:b3:02:b1:d4:36:f0:e6: 95:78:b3:a4:0c:da:7e:9a:33:fc:6b:7e:6a:97:db: 33:8d:a3:54:d9:02:c5:fa:40:f0:ed:45:ff:c6:6e: e9:46:6d:92:cf:d2:ac:90:b9:b2:9e:32:1e:be:c1: f1:c9:97:40:04:7d:20:06:d8:4c:cb:6d:62:4c:15: 0f:75:b6:3d:e4:b3:a8:8f:19:f6:f9:23:5a:d9:02: 90:8a:2c:f4:20:71:33:73:29:e2:fa:50:9f:fa:7c: 58:6f:9f:a3:52:d0:f4:54:96:da:60:e9:7f:0c:4e: af:38:90:77:43:ed:4c:30:04:bc:b1:b4:a7:1f:ff: 6b:e8:f7:e3:fe:f0:99:3b:2b:1d:ec:9e:ce:d9:73: 9a:c2:a5:f7:39:56:47:52:70:ca:d2:32:3d:30:f7: 19:14:fc:25:03:a3:57:6c:ac:69:3c:5d:51:bd:09: 84:0f:69:b9:7e:86:56:d8:c8:08:19:de:54:a8:b3: 19:b6:19:50:68:2d:c1:6c:9d:18:a6:f8:04:23:1c: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:18:45:59:5B:44:49:A9:4F:88:EB:8E:55:D1:86:1E:10:BD:F6:9D X509v3 Authority Key Identifier: keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4e:0c:7b:d5:9b:77:92:7d:65:99:24:c6:66:6f:40:36:a3: 05:48:ca:1e:17:1d:5d:31:f1:b6:83:18:31:ed:6f:00:b4:e6: f2:cc:47:36:9d:73:08:5b:c5:89:35:44:84:a7:ee:d7:e0:5d: 1d:26:f2:a2:c0:a4:f0:7f:4b:ac:43:91:fd:20:17:b6:c1:b1: d7:6a:33:d2:4e:de:14:22:38:66:27:06:85:f3:42:86:15:8a: 32:cd:f9:81:cd:ee:53:f1:ea:b3:94:c4:0b:66:f4:66:d4:72: b4:ff:25:cf:9c:c1:6c:e3:05:33:6f:f1:54:a1:cc:1f:e9:42: e4:05:5a:bd:fc:b9:32:f5:aa:90:93:74:00:7f:61:ab:05:39: 2a:23:a6:0c:94:98:40:85:a8:79:85:2c:54:23:c1:d5:f1:5f: 27:1a:cb:dd:db:7b:80:be:87:b8:45:7d:de:8a:42:33:01:e0: e8:55:93:03:c6:0e:64:93:26:f3:68:96:15:41:dc:74:8f:5e: 5c:57:b3:03:84:e5:54:e8:46:dc:58:7f:7c:c5:0d:ac:f5:c8: ba:97:05:6e:d5:8a:81:5a:27:b5:99:49:88:73:c3:54:53:50: 5a:d2:79:9c:8e:94:11:8e:d0:11:c7:f2:c9:a5:27:db:ce:bf: 1b:02:f2:16 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUC97fIS+X4Jhi6RfDhHhe9MZmpVQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzBhMzA4ZTg3MTY2ZDU3MzM1OTAyN2FmOTk3NWE0MTZk NWEzZjE3NmU0NGY0NWM5MzIwHhcNMjUwNjIwMTQ0MjE3WhcNMjUwNjIxMTczMjE3 WjAzMTEwLwYDVQQDEyhFNDE4NDU1OTVCNDQ0OUE5NEY4OEVCOEU1NUQxODYxRTEw QkRGNjlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmSD8y8FnJ+r AwsZ5vqgHrDbQShQCpYrmZuyLFTdx1IIN31D1Nc95YP2zJZdSPIAaBPhsbMCsdQ2 8OaVeLOkDNp+mjP8a35ql9szjaNU2QLF+kDw7UX/xm7pRm2Sz9KskLmynjIevsHx yZdABH0gBthMy21iTBUPdbY95LOojxn2+SNa2QKQiiz0IHEzcyni+lCf+nxYb5+j UtD0VJbaYOl/DE6vOJB3Q+1MMAS8sbSnH/9r6Pfj/vCZOysd7J7O2XOawqX3OVZH UnDK0jI9MPcZFPwlA6NXbKxpPF1RvQmED2m5foZW2MgIGd5UqLMZthlQaC3BbJ0Y pvgEIxwhPwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFOQYRVlbREmpT4jrjlXRhh4Q vfadMB8GA1UdIwQYMBaAFAuJAEijo5W8H6SWXS3Vft19keLgMA4GA1UdDwEB/wQE AwIHgDBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5jYW5vcHMu b3JnL3JlcG8vQ2FuT3BzLVBBU1MvMC8wQjg5MDA0OEEzQTM5NUJDMUZBNDk2NUQy REQ1N0VERDdEOTFFMkUwLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUF BzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQy OC0xY2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDgyYTRkMDYtY2VkOC00ODUx LTgwYjItNjBkM2RhMTFmZDZmLzMwYTMwOGU4NzE2NmQ1NzMzNTkwMjdhZjk5NzVh NDE2ZDVhM2YxNzZlNDRmNDVjOTMyLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYB BQUHMAuGXHJzeW5jOi8vcnBraS1yZXBvLmNhbm9wcy5vcmcvcmVwby9DYW5PcHMt UEFTUy8wLzBCODkwMDQ4QTNBMzk1QkMxRkE0OTY1RDJERDU3RUREN0Q5MUUyRTAu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCPTgx71Zt3kn1lmSTGZm9ANqMFSMoeFx1dMfG2gxgx7W8AtOby zEc2nXMIW8WJNUSEp+7X4F0dJvKiwKTwf0usQ5H9IBe2wbHXajPSTt4UIjhmJwaF 80KGFYoyzfmBze5T8eqzlMQLZvRm1HK0/yXPnMFs4wUzb/FUocwf6ULkBVq9/Lky 9aqQk3QAf2GrBTkqI6YMlJhAhah5hSxUI8HV8V8nGsvd23uAvoe4RX3eikIzAeDo VZMDxg5kkybzaJYVQdx0j15cV7MDhOVU6EbcWH98xQ2s9ci6lwVu1YqBWie1mUmI c8NUU1Ba0nmcjpQRjtARx/LJpSfbzr8bAvIW -----END CERTIFICATE-----Generated at Fri Jun 20 20:05:30 2025 by rpki-client