$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft File: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft (raw, json) Hash identifier: kOA3JfbA9e69Zfbd1Vrw44yv3sdXU2wQlMZNtQ9d2Gk= Subject key identifier: 7E:D8:53:49:64:3D:1C:D7:25:EC:BF:49:95:8C:D5:D9:6C:E9:A4:85 Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF Certificate issuer: /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Certificate serial: 5663B576BF16E632516238CB13756E2F31856F33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft Manifest number: 0136 Signing time: Sat 14 Jun 2025 14:50:35 +0000 Manifest this update: Sat 14 Jun 2025 14:45:35 +0000 Manifest next update: Sun 15 Jun 2025 16:16:35 +0000 Files and hashes: 1: 323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (hash: O8RXEUxtkCb17Y1a6ycwwR83b8fh0j3k8TJCZ5YM1cA=) 2: 3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (hash: qLcl76U44IP1HQWYzwwST4ylq7rNT3nP7otBq06ZGKI=) 3: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (hash: p4ZHXx5hpoe4/nJ0cynIBUE42cVR1g1cePX8hP3kyjc=) 4: 323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (hash: IbsQwly7cnVTBEgiFgf+/enW5rq3r6x9s+im/VDnjO0=) 5: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (hash: W7U8cvEVzTdvHSzUGfCgZA1QXMFX/pc8YZ7R9tHweQg=) 6: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl (hash: /8dmnQ9UOWbsIvmK8qQI4MkbAofvTb9zthymovSb54o=) 7: 323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa (hash: Is/6ISKCNtpu/mZDQ1ORoTZIfXd4t1+AUjoh95BopnU=) 8: 323430373a636463303a3a2f33322d3438203d3e203338313336.roa (hash: gyvSqMvp7QGjZwRYvnjHPKRED5QlSm8vytxtNzhKRv4=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 16:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:63:b5:76:bf:16:e6:32:51:62:38:cb:13:75:6e:2f:31:85:6f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Validity Not Before: Jun 14 14:45:35 2025 GMT Not After : Jun 15 16:16:35 2025 GMT Subject: CN=7ED85349643D1CD725ECBF49958CD5D96CE9A485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:9c:31:80:34:0c:38:04:92:5f:d5:63:e9: 7e:cf:a9:74:68:2b:4a:96:a8:24:be:f8:94:ef:73: 3d:b3:55:5a:64:0b:ec:95:17:02:af:11:11:11:ef: 26:21:b4:be:51:2d:51:e0:c4:1f:21:a4:bc:54:a5: 2c:cd:28:35:da:dd:a3:f5:fa:31:8b:3b:e0:aa:ce: c0:62:19:43:38:09:99:93:0c:18:69:a7:50:fe:d9: a9:d0:26:41:5b:51:5b:20:0d:9e:e7:4a:6b:a5:e1: 4f:be:ec:8f:55:36:2f:09:92:04:97:81:2c:52:64: ed:ac:4f:c6:57:11:cc:d2:d2:99:a5:81:7c:d2:5c: 75:6d:d7:98:b1:6a:7e:c3:ca:a1:31:e2:37:d0:c2: 19:f2:b9:4a:47:e4:51:4d:b7:5c:65:c0:c1:63:e5: 5c:87:cb:80:e2:9e:6a:0d:c0:a8:6a:05:f4:a8:81: ea:c9:35:7f:41:bc:14:75:3f:d1:81:bd:87:67:85: bb:85:be:80:d7:73:31:b5:ea:ec:07:5a:d3:f0:54: b2:78:da:5d:37:34:72:21:4c:0d:46:40:fd:f6:c2: 61:aa:54:01:fc:6b:7f:80:50:8e:e7:89:06:ff:63: 38:31:b7:e6:a5:a6:bf:61:be:03:c1:91:92:3f:7b: 36:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D8:53:49:64:3D:1C:D7:25:EC:BF:49:95:8C:D5:D9:6C:E9:A4:85 X509v3 Authority Key Identifier: keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:95:32:04:c5:2b:f6:51:e9:dc:99:fc:f3:df:27:5c:73:5b: cc:cd:32:77:3f:07:e7:6a:be:ff:17:c4:ae:b9:1a:7b:2a:cc: a1:52:a9:4b:3e:df:18:dd:05:58:28:af:a6:b7:7b:2c:fd:bf: f0:8c:06:ac:53:e6:f8:0a:88:e3:e1:c4:a8:63:21:90:61:6d: 48:c7:41:a3:9e:75:1c:52:85:c2:29:76:8b:02:c8:c9:ab:ed: 2c:df:c3:4a:91:94:50:8f:d3:a7:50:2f:55:4b:22:18:84:b2: eb:a3:79:8d:9b:4f:aa:80:64:55:d0:3b:9b:2b:33:d5:ec:98: 9a:87:ac:40:c1:90:b4:22:e6:d9:97:0d:ee:9f:3f:c5:58:ec: c8:8e:1d:c7:ff:b6:f8:b6:0c:98:b9:0b:e6:fb:5b:74:d6:0b: c7:a5:c6:18:66:95:6b:d7:fe:b2:2c:92:ad:81:45:14:50:d8: b8:36:61:d3:28:32:84:32:ea:8d:aa:31:87:23:dd:7f:b5:f0: f6:3c:70:0d:5b:e4:99:cf:40:09:4e:4f:14:0f:b9:b9:10:f0: de:a0:ed:e6:fd:e6:c1:05:25:42:4e:7a:79:aa:ea:da:28:3c: 9d:8f:df:18:9e:12:d4:fa:c3:9d:2d:33:85:b6:79:63:0a:43: d6:be:c7:57 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUVmO1dr8W5jJRYjjLE3VuLzGFbzMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyhBREJFMUEwRjQ2 RjlDNzdCMEQyNDlGRDZBNDM4QjQ4QjdGQjIxQkNGMB4XDTI1MDYxNDE0NDUzNVoX DTI1MDYxNTE2MTYzNVowMzExMC8GA1UEAxMoN0VEODUzNDk2NDNEMUNENzI1RUNC RjQ5OTU4Q0Q1RDk2Q0U5QTQ4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKs8nDGANAw4BJJf1WPpfs+pdGgrSpaoJL74lO9zPbNVWmQL7JUXAq8RERHv JiG0vlEtUeDEHyGkvFSlLM0oNdrdo/X6MYs74KrOwGIZQzgJmZMMGGmnUP7ZqdAm QVtRWyANnudKa6XhT77sj1U2LwmSBJeBLFJk7axPxlcRzNLSmaWBfNJcdW3XmLFq fsPKoTHiN9DCGfK5SkfkUU23XGXAwWPlXIfLgOKeag3AqGoF9KiB6sk1f0G8FHU/ 0YG9h2eFu4W+gNdzMbXq7Ada0/BUsnjaXTc0ciFMDUZA/fbCYapUAfxrf4BQjueJ Bv9jODG35qWmv2G+A8GRkj97Nl8CAwEAAaOCAkYwggJCMB0GA1UdDgQWBBR+2FNJ ZD0c1yXsv0mVjNXZbOmkhTAfBgNVHSMEGDAWgBStvhoPRvnHew0kn9akOLSLf7Ib zzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5 ZjJmYjI3MGNhOC8xL0FEQkUxQTBGNDZGOUM3N0IwRDI0OUZENkE0MzhCNDhCN0ZC MjFCQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL3JiNGFEMGI1eDNzTkpKX1dwRGkwaTMteUc4OC5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4 LzEvQURCRTFBMEY0NkY5Qzc3QjBEMjQ5RkQ2QTQzOEI0OEI3RkIyMUJDRi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABKVMgTFK/ZR6dyZ/PPfJ1xzW8zNMnc/B+dqvv8XxK65GnsqzKFSqUs+ 3xjdBVgor6a3eyz9v/CMBqxT5vgKiOPhxKhjIZBhbUjHQaOedRxShcIpdosCyMmr 7Szfw0qRlFCP06dQL1VLIhiEsuujeY2bT6qAZFXQO5srM9XsmJqHrEDBkLQi5tmX De6fP8VY7MiOHcf/tvi2DJi5C+b7W3TWC8elxhhmlWvX/rIskq2BRRRQ2Lg2YdMo MoQy6o2qMYcj3X+18PY8cA1b5JnPQAlOTxQPubkQ8N6g7eb95sEFJUJOenmq6too PJ2P3xieEtT6w50tM4W2eWMKQ9a+x1c= -----END CERTIFICATE-----Generated at Sat Jun 14 18:37:02 2025 by rpki-client