$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft File: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft (raw, json) Hash identifier: OiV5TckdWcSp5xo5LG6aoUaIw/XHNgmOyuzMP68WHno= Subject key identifier: 8C:F1:E8:44:9F:F4:E5:8E:3A:D1:4C:26:49:1F:F7:9C:93:A4:E8:10 Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 Certificate issuer: /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Certificate serial: 7066FECE30900E596CBC23E193619463051A75E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer Subject info access: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft Manifest number: 1D Signing time: Tue 01 Jul 2025 22:18:50 +0000 Manifest this update: Tue 01 Jul 2025 22:13:50 +0000 Manifest next update: Thu 03 Jul 2025 00:53:50 +0000 Files and hashes: 1: 32332e3134302e35322e302f32342d3234203d3e203332353931.roa (hash: oZRtVcSi4lYHDLHNFVp6cKh6gXIDWw99wQ2eImbTS0Y=) 2: 323630323a663633333a3a2f34382d3438203d3e203332353931.roa (hash: nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=) 3: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl (hash: +cRyJjKi/S9bGbg0joQ2cBJVt5BOeDbpCGHm5/RACtw=) 4: AS32591.asa (hash: jPFYj/1kozNrsSDc+ajpDpFIhmwjdkNt/m65RzoGG3g=) 5: 323630323a663633333a3a2f34302d313238203d3e2030.roa (hash: Gm4KC4yKfvUQGJIav09rOCnI6G67sL4yLr2b6lVR5jE=) Validation: OK Signature path: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:66:fe:ce:30:90:0e:59:6c:bc:23:e1:93:61:94:63:05:1a:75:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Validity Not Before: Jul 1 22:13:50 2025 GMT Not After : Jul 3 00:53:50 2025 GMT Subject: CN=8CF1E8449FF4E58E3AD14C26491FF79C93A4E810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:19:a1:25:77:c1:12:f9:da:fb:95:9f:09: b1:9a:f7:1d:d4:ba:ad:b1:b6:f6:51:48:8f:89:62: b3:17:42:c0:99:5c:bc:6d:c2:48:69:42:48:54:f6: b6:3f:b4:8c:af:ae:af:2a:ff:8d:ec:91:ac:54:2b: eb:4f:31:88:0d:0c:b7:f2:2a:0f:11:6d:21:ca:8f: 83:91:de:aa:e7:b7:b5:83:f4:85:d1:bf:0d:66:5e: ce:5b:27:6c:04:e7:49:6b:99:f9:31:77:d1:2b:b2: 30:e1:ea:a3:3a:43:38:7a:74:ba:bc:3f:0f:b8:17: 33:70:91:70:aa:21:0e:b5:1c:f9:ad:6f:4c:03:3d: aa:38:db:82:17:2a:83:0e:eb:53:89:50:59:f8:92: 18:99:9d:72:3b:12:f2:2b:cc:5e:1c:37:6a:0d:17: bc:af:07:af:fd:58:c0:9f:31:28:02:76:7b:0a:8d: 02:2a:0a:97:33:f7:bc:6f:5b:af:50:7d:34:29:f7: 84:cb:20:1f:99:b5:fe:34:80:b1:83:d0:5f:ec:c7: 4c:e6:0b:39:68:9e:f9:16:7f:82:60:dd:a0:e6:f9: ba:68:51:ad:7c:6f:22:3b:27:0c:d0:81:37:b0:77: a7:9f:18:db:6f:bd:14:7f:9e:0a:4c:d7:e0:15:1a: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:E8:44:9F:F4:E5:8E:3A:D1:4C:26:49:1F:F7:9C:93:A4:E8:10 X509v3 Authority Key Identifier: keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:97:97:4d:26:32:67:e2:8e:2e:37:05:21:3e:d9:e9:13:2c: 0e:49:2d:c3:d2:9c:2d:f9:d6:f5:5b:1b:79:56:62:b7:d4:7b: ac:1d:3c:53:4a:7b:c9:8d:4d:4b:7d:37:20:8c:d1:18:77:84: 93:d4:b3:e9:ab:72:03:e2:97:ea:ee:b4:7b:ab:2b:f3:b4:1e: 88:41:bc:fe:45:5d:db:22:e3:ec:49:8c:09:80:37:e6:de:8a: 25:a2:c9:55:1e:32:ea:34:0c:03:eb:fa:83:49:44:b4:e3:e1: 03:f7:40:6f:67:7e:ae:1c:c8:f8:02:db:cf:1e:08:87:6d:73: 28:59:7b:3a:53:54:ca:00:28:03:ca:64:99:d7:82:08:8c:2b: c9:78:d7:25:1b:de:5d:bd:0e:a2:07:41:40:26:a8:34:0b:89: 88:15:42:54:1d:52:b6:ca:cf:e5:d2:0b:b2:c9:1a:8e:dc:d5: 10:e5:38:b8:ef:8e:5f:2e:da:6b:9a:2e:48:53:1f:f9:d2:97: f6:ef:6d:7b:20:31:d7:e5:da:7f:e5:2b:cd:9d:9e:81:49:22: df:af:d7:02:70:bd:f2:90:17:2c:db:78:ae:38:5b:1e:95:c6: 64:42:f6:79:99:d6:3c:57:9b:ad:93:69:3c:87:6a:89:d7:db: 79:48:1d:10 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUcGb+zjCQDllsvCPhk2GUYwUadecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzBhMzA4ZTg3MTY2ZDU3MzM1OTAyN2FmOTk3NWE0MTZk NWEzZjE3NmU0NGY0NWM5MzIwHhcNMjUwNzAxMjIxMzUwWhcNMjUwNzAzMDA1MzUw WjAzMTEwLwYDVQQDEyg4Q0YxRTg0NDlGRjRFNThFM0FEMTRDMjY0OTFGRjc5Qzkz QTRFODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/IZoSV3wRL5 2vuVnwmxmvcd1Lqtsbb2UUiPiWKzF0LAmVy8bcJIaUJIVPa2P7SMr66vKv+N7JGs VCvrTzGIDQy38ioPEW0hyo+Dkd6q57e1g/SF0b8NZl7OWydsBOdJa5n5MXfRK7Iw 4eqjOkM4enS6vD8PuBczcJFwqiEOtRz5rW9MAz2qONuCFyqDDutTiVBZ+JIYmZ1y OxLyK8xeHDdqDRe8rwev/VjAnzEoAnZ7Co0CKgqXM/e8b1uvUH00KfeEyyAfmbX+ NICxg9Bf7MdM5gs5aJ75Fn+CYN2g5vm6aFGtfG8iOycM0IE3sHennxjbb70Uf54K TNfgFRo5EQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFIzx6ESf9OWOOtFMJkkf95yT pOgQMB8GA1UdIwQYMBaAFAuJAEijo5W8H6SWXS3Vft19keLgMA4GA1UdDwEB/wQE AwIHgDBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5jYW5vcHMu b3JnL3JlcG8vQ2FuT3BzLVBBU1MvMC8wQjg5MDA0OEEzQTM5NUJDMUZBNDk2NUQy REQ1N0VERDdEOTFFMkUwLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUF BzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQy OC0xY2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDgyYTRkMDYtY2VkOC00ODUx LTgwYjItNjBkM2RhMTFmZDZmLzMwYTMwOGU4NzE2NmQ1NzMzNTkwMjdhZjk5NzVh NDE2ZDVhM2YxNzZlNDRmNDVjOTMyLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYB BQUHMAuGXHJzeW5jOi8vcnBraS1yZXBvLmNhbm9wcy5vcmcvcmVwby9DYW5PcHMt UEFTUy8wLzBCODkwMDQ4QTNBMzk1QkMxRkE0OTY1RDJERDU3RUREN0Q5MUUyRTAu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAPl5dNJjJn4o4uNwUhPtnpEywOSS3D0pwt+db1Wxt5VmK31Hus HTxTSnvJjU1LfTcgjNEYd4ST1LPpq3ID4pfq7rR7qyvztB6IQbz+RV3bIuPsSYwJ gDfm3ooloslVHjLqNAwD6/qDSUS04+ED90BvZ36uHMj4AtvPHgiHbXMoWXs6U1TK ACgDymSZ14IIjCvJeNclG95dvQ6iB0FAJqg0C4mIFUJUHVK2ys/l0guyyRqO3NUQ 5Ti4745fLtprmi5IUx/50pf27217IDHX5dp/5SvNnZ6BSSLfr9cCcL3ykBcs23iu OFselcZkQvZ5mdY8V5utk2k8h2qJ19t5SB0Q -----END CERTIFICATE-----Generated at Wed Jul 2 04:07:56 2025 by rpki-client