$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft File: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft (raw, json) Hash identifier: teBs21Os7iCo1NORr6tcPSF1m+j+UMI60xBLehpKnlw= Subject key identifier: C2:60:E7:3B:6E:10:94:70:1F:9C:8F:79:60:9B:96:A2:69:57:A4:CF Authority key identifier: 23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30 Certificate issuer: /CN=A91650860000/serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630 Certificate serial: 5C8DD4C492E676D6929898AB80B12F66165AD64D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft Manifest number: 03E6 Signing time: Tue 29 Apr 2025 08:45:31 +0000 Manifest this update: Tue 29 Apr 2025 08:40:31 +0000 Manifest next update: Wed 30 Apr 2025 11:14:31 +0000 Files and hashes: 1: 3136302e32322e3136392e302f32342d3234203d3e20313338393935.roa (hash: vDov3YnGSnWrcM96lRtoECvAP7HfJTVBABlVnmFupgo=) 2: 3136302e32322e3136382e302f32332d3234203d3e20313439333031.roa (hash: 00SAKB+c1ZqVOWau32xWx/dnPvLXGO0UJVkyDkd1bns=) 3: 23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl (hash: BnEpTdRUEGwwef8YaltElHymYoB1qgSH8FsHYAuEMlY=) 4: 3136302e32322e3136382e302f32342d3234203d3e20313338393935.roa (hash: peOoHbAyNXRF9mz75eJ5KMjpaMtSGocvqHZA9xdrAmo=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 11:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8d:d4:c4:92:e6:76:d6:92:98:98:ab:80:b1:2f:66:16:5a:d6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650860000, serialNumber=23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630 Validity Not Before: Apr 29 08:40:31 2025 GMT Not After : Apr 30 11:14:31 2025 GMT Subject: CN=C260E73B6E1094701F9C8F79609B96A26957A4CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:78:28:8a:a2:90:0d:f0:dd:61:01:2a:af: 47:d7:fc:52:07:8f:4c:9f:a6:4f:8d:92:31:06:97: 29:3c:ba:96:b3:4a:5a:a5:3d:4d:ce:c2:27:a4:57: e9:44:33:fb:57:17:20:a3:40:fe:fb:09:82:4d:9a: 41:ea:06:ea:1c:6a:c2:34:d0:de:e0:45:66:c7:9a: 47:33:a2:7e:f6:d5:9e:8b:b0:9f:84:08:31:06:b4: bc:d9:26:b4:5c:3c:84:d7:1c:8f:37:67:3f:f3:e4: 27:0d:f9:94:84:4a:f8:23:9c:7e:31:03:44:3b:a1: bc:b9:1a:0a:2f:9e:d2:f0:49:4a:a4:ad:d5:9a:76: 9e:f7:f0:4a:b4:ec:00:35:5e:27:e5:a9:8c:ab:35: b8:82:88:ba:85:db:9e:93:0e:06:7c:66:d4:86:3f: a2:e9:01:b6:0f:05:97:ee:04:f9:63:ab:a9:85:ed: 81:1a:5d:22:75:3d:f0:b4:88:87:b4:86:53:99:93: f3:55:87:a0:9f:65:68:b6:df:bf:9a:94:b8:b2:9f: 8c:d4:78:92:ce:68:25:5c:74:80:6e:aa:20:31:39: 77:93:32:66:c8:4d:f1:4b:d3:14:82:98:1c:2d:2a: 99:d3:09:16:ce:13:12:30:0e:17:f6:ab:09:a8:99: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:60:E7:3B:6E:10:94:70:1F:9C:8F:79:60:9B:96:A2:69:57:A4:CF X509v3 Authority Key Identifier: keyid:23:B1:03:0F:3C:CA:C9:99:F2:B5:77:45:FC:9D:DA:1C:CD:FA:36:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I7EDDzzKyZnytXdF_J3aHM36NjA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/5/23B1030F3CCAC999F2B57745FC9DDA1CCDFA3630.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:80:99:ae:0b:ad:43:3d:06:af:70:15:c8:92:1c:44:7b:73: f1:a3:3b:a6:10:43:f4:f7:d3:0c:78:88:80:b7:35:07:0b:0d: 46:6b:57:f3:72:72:78:a0:7a:76:f6:37:e0:5c:3c:c9:94:42: c6:ca:45:9b:e6:a5:15:9a:3b:1a:49:46:d6:e9:7d:40:6a:e4: 3e:e2:b0:2f:ea:19:b4:3d:18:e0:ff:01:5c:12:78:9c:07:9e: ee:58:64:e0:dc:9f:f2:8b:29:cc:31:f9:be:a4:62:dc:c0:a6: 1c:42:66:d4:85:f1:bb:7f:23:b3:de:fc:d2:8a:d0:d7:9e:18: 49:cb:0f:ab:63:b7:54:12:21:67:4b:99:f3:91:02:d2:75:c2: 10:2b:f7:79:63:0a:d2:42:53:1c:17:d9:fa:f0:ee:b9:63:20: 38:16:4e:f6:8e:b8:8b:11:42:49:87:05:af:96:af:78:c5:51: b3:88:97:b2:d4:fe:d2:e9:a0:58:1f:d5:d4:72:47:c4:95:ce: dc:92:68:3a:ff:23:b2:4c:6a:48:5f:ee:2f:94:b0:1c:2f:34: 8d:32:78:f5:f9:b3:87:f8:51:1e:3f:2f:6d:a6:de:d5:ad:a6: d3:c8:81:7a:7a:ed:19:7a:53:d0:dd:a2:b0:0c:63:71:89:cc: 45:b9:15:aa -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUXI3UxJLmdtaSmJirgLEvZhZa1k0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjUwODYwMDAwMTEwLwYDVQQFEygyM0IxMDMwRjND Q0FDOTk5RjJCNTc3NDVGQzlEREExQ0NERkEzNjMwMB4XDTI1MDQyOTA4NDAzMVoX DTI1MDQzMDExMTQzMVowMzExMC8GA1UEAxMoQzI2MEU3M0I2RTEwOTQ3MDFGOUM4 Rjc5NjA5Qjk2QTI2OTU3QTRDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg2eCiKopAN8N1hASqvR9f8UgePTJ+mT42SMQaXKTy6lrNKWqU9Tc7CJ6RX 6UQz+1cXIKNA/vsJgk2aQeoG6hxqwjTQ3uBFZseaRzOifvbVnouwn4QIMQa0vNkm tFw8hNccjzdnP/PkJw35lIRK+COcfjEDRDuhvLkaCi+e0vBJSqSt1Zp2nvfwSrTs ADVeJ+WpjKs1uIKIuoXbnpMOBnxm1IY/oukBtg8Fl+4E+WOrqYXtgRpdInU98LSI h7SGU5mT81WHoJ9laLbfv5qUuLKfjNR4ks5oJVx0gG6qIDE5d5MyZshN8UvTFIKY HC0qmdMJFs4TEjAOF/arCaiZgzUCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBTCYOc7 bhCUcB+cj3lgm5aiaVekzzAfBgNVHSMEGDAWgBQjsQMPPMrJmfK1d0X8ndoczfo2 MDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1 NWM5MWJlM2Y5ZC81LzIzQjEwMzBGM0NDQUM5OTlGMkI1Nzc0NUZDOUREQTFDQ0RG QTM2MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3 QzcyRkQxRkYyL0k3RUREenpLeVpueXRYZEZfSjNhSE0zNk5qQS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk LzUvMjNCMTAzMEYzQ0NBQzk5OUYyQjU3NzQ1RkM5RERBMUNDREZBMzYzMC5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACSAma4LrUM9Bq9wFciSHER7c/GjO6YQQ/T30wx4iIC3NQcLDUZrV/Ny cnigenb2N+BcPMmUQsbKRZvmpRWaOxpJRtbpfUBq5D7isC/qGbQ9GOD/AVwSeJwH nu5YZODcn/KLKcwx+b6kYtzAphxCZtSF8bt/I7Pe/NKK0NeeGEnLD6tjt1QSIWdL mfORAtJ1whAr93ljCtJCUxwX2frw7rljIDgWTvaOuIsRQkmHBa+Wr3jFUbOIl7LU /tLpoFgf1dRyR8SVztySaDr/I7JMakhf7i+UsBwvNI0yePX5s4f4UR4/L22m3tWt ptPIgXp67Rl6U9DdorAMY3GJzEW5Fao= -----END CERTIFICATE-----Generated at Tue Apr 29 17:08:45 2025 by rpki-client