$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft File: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft (raw, json) Hash identifier: vP3JWMSB8ls4clUOK81Zwfu4jWB+m0V0PvFXWmYgiSg= Subject key identifier: DB:3D:71:58:CA:35:E5:64:57:1E:80:1A:91:AC:0A:4E:3A:C8:46:1F Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF Certificate issuer: /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Certificate serial: 4BC8CA3AE616C93B7D8F0C717E1BAB6A679C9698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft Manifest number: 0122 Signing time: Fri 30 May 2025 19:05:03 +0000 Manifest this update: Fri 30 May 2025 19:00:03 +0000 Manifest next update: Sat 31 May 2025 22:49:03 +0000 Files and hashes: 1: 323430373a636463303a3a2f33322d3438203d3e203338313336.roa (hash: gyvSqMvp7QGjZwRYvnjHPKRED5QlSm8vytxtNzhKRv4=) 2: 3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (hash: qLcl76U44IP1HQWYzwwST4ylq7rNT3nP7otBq06ZGKI=) 3: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (hash: W7U8cvEVzTdvHSzUGfCgZA1QXMFX/pc8YZ7R9tHweQg=) 4: 323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (hash: IbsQwly7cnVTBEgiFgf+/enW5rq3r6x9s+im/VDnjO0=) 5: 323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (hash: O8RXEUxtkCb17Y1a6ycwwR83b8fh0j3k8TJCZ5YM1cA=) 6: 323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa (hash: Is/6ISKCNtpu/mZDQ1ORoTZIfXd4t1+AUjoh95BopnU=) 7: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl (hash: 8wMDJqCAZS9Ed73/A3fgvs2fC57+1ZjfwQOGRY/Vvbk=) 8: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (hash: p4ZHXx5hpoe4/nJ0cynIBUE42cVR1g1cePX8hP3kyjc=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 May 2025 22:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c8:ca:3a:e6:16:c9:3b:7d:8f:0c:71:7e:1b:ab:6a:67:9c:96:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Validity Not Before: May 30 19:00:03 2025 GMT Not After : May 31 22:49:03 2025 GMT Subject: CN=DB3D7158CA35E564571E801A91AC0A4E3AC8461F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:50:1e:cb:4b:fc:be:bd:a5:81:b9:c9:0a: 83:86:47:67:0a:d8:99:4b:75:f7:1e:b4:82:27:02: 61:dd:04:fe:46:e4:60:fd:4e:db:56:fa:26:85:2f: 96:0b:2c:01:e8:2a:95:81:e9:23:d8:fe:b0:7b:de: 51:09:28:fc:5a:ec:46:c3:ab:bb:67:7d:8a:72:ea: c0:80:43:01:e8:f2:47:84:d8:05:90:aa:89:80:51: 92:d6:81:88:73:0b:69:87:bf:12:8f:b4:a2:7a:b8: ad:5a:99:73:74:cf:b8:0f:c2:60:bc:78:7e:31:d6: 5b:20:80:42:97:c6:14:ca:39:8e:9e:b2:a2:1f:f0: e0:73:d2:84:b8:f3:35:bf:20:35:10:7f:48:75:bc: 55:55:9c:e9:aa:28:84:85:cc:08:b1:12:f1:2f:5a: c9:59:23:93:f1:9a:78:aa:fc:24:23:ea:87:af:76: e1:25:db:fd:5b:bd:59:9f:39:1c:0a:04:f5:de:94: ae:2f:dc:a9:60:ad:33:dc:7a:65:a6:9f:6f:2b:20: 42:d7:f6:7b:56:2a:67:cc:e9:56:1b:33:04:a2:e9: 6e:91:04:d7:2f:fa:f8:40:ce:99:8e:b2:8e:b5:0a: d6:ad:d6:f6:dc:44:8d:2a:af:cc:70:ca:b7:2e:89: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3D:71:58:CA:35:E5:64:57:1E:80:1A:91:AC:0A:4E:3A:C8:46:1F X509v3 Authority Key Identifier: keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7e:00:18:b3:8b:71:54:68:e9:1b:8a:9c:f5:61:8c:98:c6: 11:a2:7e:3e:34:1b:07:b4:a9:b0:9b:bb:ac:2e:07:c2:96:c1: 23:52:b0:31:8d:d6:8f:da:91:93:a3:1c:74:b1:9c:7f:68:a1: 93:59:b1:f8:d8:ba:38:18:6f:89:c1:4e:a7:39:d7:d1:6e:0d: ce:ad:e9:6a:3d:32:9e:ce:56:8f:a1:4d:23:06:87:41:bf:6d: 68:ca:d6:32:6a:45:b4:8f:9b:a4:e6:a9:b7:65:2d:ef:e0:fc: dd:5a:f4:13:d0:a9:36:bd:e8:12:53:bd:b1:e5:92:ac:3d:b2: f3:5e:6a:ff:e4:ff:81:a0:ec:35:f5:2c:5e:78:f6:30:a6:02: 1b:43:0c:4c:43:1e:e6:ed:47:5e:76:a6:4d:4f:59:c7:61:1d: 0e:7e:33:7d:db:52:e8:4d:96:f9:e8:5d:5a:dd:c1:04:8b:1a: bd:07:2c:42:d9:80:81:92:90:b1:c0:e1:1f:b7:f1:e1:10:e8: c7:f3:01:53:a0:15:c0:63:84:c4:50:08:0d:3a:96:ec:de:df: 45:b9:06:02:2f:eb:51:73:20:81:b9:8f:23:e5:66:85:90:b7: d8:11:3d:12:32:a0:6f:1a:d7:79:07:1e:a9:bb:4a:d4:4f:74: b7:58:2e:3e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUS8jKOuYWyTt9jwxxfhurameclpgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyhBREJFMUEwRjQ2 RjlDNzdCMEQyNDlGRDZBNDM4QjQ4QjdGQjIxQkNGMB4XDTI1MDUzMDE5MDAwM1oX DTI1MDUzMTIyNDkwM1owMzExMC8GA1UEAxMoREIzRDcxNThDQTM1RTU2NDU3MUU4 MDFBOTFBQzBBNEUzQUM4NDYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqmUB7LS/y+vaWBuckKg4ZHZwrYmUt19x60gicCYd0E/kbkYP1O21b6JoUv lgssAegqlYHpI9j+sHveUQko/FrsRsOru2d9inLqwIBDAejyR4TYBZCqiYBRktaB iHMLaYe/Eo+0onq4rVqZc3TPuA/CYLx4fjHWWyCAQpfGFMo5jp6yoh/w4HPShLjz Nb8gNRB/SHW8VVWc6aoohIXMCLES8S9ayVkjk/GaeKr8JCPqh6924SXb/Vu9WZ85 HAoE9d6Uri/cqWCtM9x6ZaafbysgQtf2e1YqZ8zpVhszBKLpbpEE1y/6+EDOmY6y jrUK1q3W9txEjSqvzHDKty6JecsCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBTbPXFY yjXlZFcegBqRrApOOshGHzAfBgNVHSMEGDAWgBStvhoPRvnHew0kn9akOLSLf7Ib zzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5 ZjJmYjI3MGNhOC8xL0FEQkUxQTBGNDZGOUM3N0IwRDI0OUZENkE0MzhCNDhCN0ZC MjFCQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL3JiNGFEMGI1eDNzTkpKX1dwRGkwaTMteUc4OC5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4 LzEvQURCRTFBMEY0NkY5Qzc3QjBEMjQ5RkQ2QTQzOEI0OEI3RkIyMUJDRi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGl+ABizi3FUaOkbipz1YYyYxhGifj40Gwe0qbCbu6wuB8KWwSNSsDGN 1o/akZOjHHSxnH9ooZNZsfjYujgYb4nBTqc519FuDc6t6Wo9Mp7OVo+hTSMGh0G/ bWjK1jJqRbSPm6TmqbdlLe/g/N1a9BPQqTa96BJTvbHlkqw9svNeav/k/4Gg7DX1 LF549jCmAhtDDExDHubtR152pk1PWcdhHQ5+M33bUuhNlvnoXVrdwQSLGr0HLELZ gIGSkLHA4R+38eEQ6MfzAVOgFcBjhMRQCA06luze30W5BgIv61FzIIG5jyPlZoWQ t9gRPRIyoG8a13kHHqm7StRPdLdYLj4= -----END CERTIFICATE-----Generated at Sat May 31 16:25:49 2025 by rpki-client