$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft File: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft (raw, json) Hash identifier: degC306qJh9nX4jD27e26GnI8uQbWWkxs1da+LrdkWA= Subject key identifier: E5:01:32:EE:4B:BB:DC:84:DB:1E:36:C2:8C:00:1D:6C:47:C7:00:F1 Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF Certificate issuer: /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Certificate serial: 1B36FEC337564E8C35601E2C67BA5D73BC0441BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft Manifest number: 017B Signing time: Mon 04 Aug 2025 01:42:03 +0000 Manifest this update: Mon 04 Aug 2025 01:37:03 +0000 Manifest next update: Tue 05 Aug 2025 05:40:03 +0000 Files and hashes: 1: 323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa (hash: eZuSQzqTU8VaOvzd0KHJBHquZCW7OqwP4n8vCwstUQw=) 2: 323430373a636463303a3a2f33322d3438203d3e203338313336.roa (hash: E/iWUzr8mY4I9/EKi0Ny4oAFvSVSVhEt9Jt/vhQC6Vc=) 3: 3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (hash: QD/alelphOxkxHKUCWX3HtYczkHB7jGrfqC0WsHbBHY=) 4: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl (hash: liwPfjNqCx5MCiSQe/FvghRAUS80MI67HGPeCGzcXqg=) 5: 323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (hash: TA0zzDtznfaVunUDTZhEgOpcmXojb9Y1CH8zcOAwKlk=) 6: 323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (hash: KD9zvlK+/6ZkExjWr88WbUAlBYvbDy3RsOKuw5U65zg=) 7: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (hash: FcS3uH0lPouCumRLFvl7n0JB1Vv1j5a/3yIEZK9NRJA=) 8: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (hash: l1w0E6wpDTD0OHKad8HWPNEfYx3DzUJOujE3Goaa6gA=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 05:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:36:fe:c3:37:56:4e:8c:35:60:1e:2c:67:ba:5d:73:bc:04:41:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Validity Not Before: Aug 4 01:37:03 2025 GMT Not After : Aug 5 05:40:03 2025 GMT Subject: CN=E50132EE4BBBDC84DB1E36C28C001D6C47C700F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:6a:df:e6:2d:7e:32:db:14:07:95:ca:cb: be:ae:c5:29:7e:20:0c:2f:ea:81:e3:aa:db:fb:4d: bd:06:ff:bd:78:c4:77:d8:99:f3:6c:4d:0e:a3:b1: 7f:6c:70:eb:28:3f:d5:be:07:73:aa:6e:cb:52:36: 28:96:dd:98:de:da:6f:c8:c0:c1:38:7c:d5:d3:dd: 81:68:90:73:55:cf:07:b8:be:c3:82:6b:48:85:09: f9:41:fa:92:9a:d5:86:89:5f:ed:30:7a:a6:c1:63: 1a:91:63:93:23:fa:ab:c1:42:a2:99:33:34:b2:40: ce:05:dc:a7:39:1f:b4:10:6f:a0:8a:1b:86:73:c7: 0e:6b:8c:69:7f:45:c6:ab:fe:b2:70:40:eb:99:cc: e9:10:7a:d6:0c:58:ff:1a:40:6e:ef:b1:de:83:ba: 5c:51:30:9f:02:ed:70:6d:5a:9b:a0:3d:05:16:88: b3:5c:9b:be:a1:59:d3:05:21:24:94:d0:75:7b:01: f6:21:ad:5f:9c:12:c1:00:05:63:f0:30:2b:3c:84: dc:e2:7d:bf:31:71:b9:22:3f:5c:09:57:c6:e7:63: ae:d2:28:05:47:4b:ae:6f:30:1b:2c:fe:f7:72:3c: f8:bf:34:41:a7:cb:36:c4:5f:ae:63:b4:a6:20:50: ec:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:01:32:EE:4B:BB:DC:84:DB:1E:36:C2:8C:00:1D:6C:47:C7:00:F1 X509v3 Authority Key Identifier: keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ec:21:2e:96:ed:25:23:fd:69:53:63:ea:14:80:10:d0:70: c9:52:be:5a:47:d7:b7:2c:54:01:b2:ba:d3:8b:2a:c0:ad:3f: 15:5c:c6:d4:51:58:b0:1b:d8:6d:26:63:06:1d:f8:bc:c3:55: 21:0e:30:a4:50:28:be:87:05:1f:73:c7:57:f7:fd:5b:7a:f2: 54:da:7e:b1:20:fb:fc:28:8a:ef:fe:17:fd:95:9c:2f:cb:5d: 54:10:d5:3d:a8:8c:fc:f1:1f:9d:78:a0:a6:c6:4c:c8:b3:22: 1f:7f:33:9f:73:4c:3f:cf:6f:95:10:c2:db:29:4f:e2:a4:a2: 47:07:ab:d5:84:52:f4:97:1b:77:e7:f4:33:d9:1a:25:27:e9: 33:5c:04:f9:bb:93:9c:1e:3d:5e:2d:cf:10:b3:8c:8b:e5:90: 49:11:20:34:f8:30:9e:8a:02:e5:33:e2:00:b0:a6:50:7e:45: 3c:e5:7d:46:66:25:1f:c5:26:c8:69:3a:90:e2:9c:3a:31:c1: 9c:f9:ad:fb:40:c3:ba:c4:6a:0a:fe:ba:a2:14:6e:49:eb:c7: e3:c1:43:52:be:f8:18:28:75:49:40:25:c0:ad:ca:85:7e:be: 9f:3f:6f:10:a3:77:49:65:48:56:83:8b:de:8e:12:00:cf:ec: 27:b8:4c:fb -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGzb+wzdWTow1YB4sZ7pdc7wEQb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyhBREJFMUEwRjQ2 RjlDNzdCMEQyNDlGRDZBNDM4QjQ4QjdGQjIxQkNGMB4XDTI1MDgwNDAxMzcwM1oX DTI1MDgwNTA1NDAwM1owMzExMC8GA1UEAxMoRTUwMTMyRUU0QkJCREM4NERCMUUz NkMyOEMwMDFENkM0N0M3MDBGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHOat/mLX4y2xQHlcrLvq7FKX4gDC/qgeOq2/tNvQb/vXjEd9iZ82xNDqOx f2xw6yg/1b4Hc6puy1I2KJbdmN7ab8jAwTh81dPdgWiQc1XPB7i+w4JrSIUJ+UH6 kprVholf7TB6psFjGpFjkyP6q8FCopkzNLJAzgXcpzkftBBvoIobhnPHDmuMaX9F xqv+snBA65nM6RB61gxY/xpAbu+x3oO6XFEwnwLtcG1am6A9BRaIs1ybvqFZ0wUh JJTQdXsB9iGtX5wSwQAFY/AwKzyE3OJ9vzFxuSI/XAlXxudjrtIoBUdLrm8wGyz+ 93I8+L80QafLNsRfrmO0piBQ7H8CAwEAAaOCAkYwggJCMB0GA1UdDgQWBBTlATLu S7vchNseNsKMAB1sR8cA8TAfBgNVHSMEGDAWgBStvhoPRvnHew0kn9akOLSLf7Ib zzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5 ZjJmYjI3MGNhOC8xL0FEQkUxQTBGNDZGOUM3N0IwRDI0OUZENkE0MzhCNDhCN0ZC MjFCQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL3JiNGFEMGI1eDNzTkpKX1dwRGkwaTMteUc4OC5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4 LzEvQURCRTFBMEY0NkY5Qzc3QjBEMjQ5RkQ2QTQzOEI0OEI3RkIyMUJDRi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIbsIS6W7SUj/WlTY+oUgBDQcMlSvlpH17csVAGyutOLKsCtPxVcxtRR WLAb2G0mYwYd+LzDVSEOMKRQKL6HBR9zx1f3/Vt68lTafrEg+/woiu/+F/2VnC/L XVQQ1T2ojPzxH514oKbGTMizIh9/M59zTD/Pb5UQwtspT+KkokcHq9WEUvSXG3fn 9DPZGiUn6TNcBPm7k5wePV4tzxCzjIvlkEkRIDT4MJ6KAuUz4gCwplB+RTzlfUZm JR/FJshpOpDinDoxwZz5rftAw7rEagr+uqIUbknrx+PBQ1K++BgodUlAJcCtyoV+ vp8/bxCjd0llSFaDi96OEgDP7Ce4TPs= -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:38 2025 by rpki-client