$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft File: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft (raw, json) Hash identifier: ZTfiOCNXPjsAEPsCW6PPvgMji8/fivekATs6PtBoV1M= Subject key identifier: 10:CA:3D:DD:34:28:45:81:A0:68:21:E5:56:93:C1:1A:71:91:CC:30 Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF Certificate issuer: /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Certificate serial: 1A3475380151D576801E4803864EEE6BF11C16C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft Manifest number: 01A7 Signing time: Sat 06 Sep 2025 01:09:20 +0000 Manifest this update: Sat 06 Sep 2025 01:04:20 +0000 Manifest next update: Sun 07 Sep 2025 04:18:20 +0000 Files and hashes: 1: 323430373a636463303a656666303a3a2f34382d3438203d3e20313532373034.roa (hash: eZuSQzqTU8VaOvzd0KHJBHquZCW7OqwP4n8vCwstUQw=) 2: ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl (hash: UmGMrdynjlI0drmLrH2MmXwepvZLJg8m03QRYLiWj+s=) 3: 323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (hash: TA0zzDtznfaVunUDTZhEgOpcmXojb9Y1CH8zcOAwKlk=) 4: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (hash: FcS3uH0lPouCumRLFvl7n0JB1Vv1j5a/3yIEZK9NRJA=) 5: 323430373a636463303a3a2f33322d3438203d3e203338313336.roa (hash: E/iWUzr8mY4I9/EKi0Ny4oAFvSVSVhEt9Jt/vhQC6Vc=) 6: 323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (hash: KD9zvlK+/6ZkExjWr88WbUAlBYvbDy3RsOKuw5U65zg=) 7: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (hash: l1w0E6wpDTD0OHKad8HWPNEfYx3DzUJOujE3Goaa6gA=) 8: 3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (hash: QD/alelphOxkxHKUCWX3HtYczkHB7jGrfqC0WsHbBHY=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 04:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:34:75:38:01:51:d5:76:80:1e:48:03:86:4e:ee:6b:f1:1c:16:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C75D0000, serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF Validity Not Before: Sep 6 01:04:20 2025 GMT Not After : Sep 7 04:18:20 2025 GMT Subject: CN=10CA3DDD34284581A06821E55693C11A7191CC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:71:0c:ae:57:59:de:0a:f2:da:c0:06:5b: 1a:d3:f1:f7:2e:9f:8c:9a:cf:c5:54:9f:33:81:44: 4d:2c:67:2d:2a:06:4e:66:be:69:ce:5c:a0:06:b6: 8d:23:d2:67:26:a0:0a:9e:53:99:f3:73:db:d6:a3: 9a:d0:81:ad:e1:41:99:3c:54:a5:08:2e:4c:ee:ed: 1c:df:76:bc:f0:1e:a9:33:d6:27:54:43:9e:bc:d9: cb:3d:a3:e5:b5:bd:b5:6b:06:c0:6c:a8:92:bc:c6: 26:fd:0c:c6:cd:90:9a:7a:5f:98:59:b4:92:98:26: e0:57:33:7f:f4:36:d9:22:dc:ce:4f:6a:a8:e6:4c: c4:ae:e6:e4:cc:c5:06:71:3d:53:ce:be:83:2b:b8: 80:7b:0b:b7:2a:6e:51:a3:d1:cf:6a:d2:72:8e:70: d6:b1:86:6f:48:0a:67:d9:e0:5e:ab:be:8a:35:65: 37:ba:1d:fa:f9:e9:5e:be:52:4f:e3:ff:15:4d:76: c1:85:ec:35:aa:33:e9:1e:96:64:f1:bb:0d:24:d4: 17:87:ae:fa:f0:c7:70:87:8a:b1:81:a3:b3:3b:bd: 4a:47:88:27:54:af:e7:5f:ad:e9:9f:15:ac:aa:d6: 22:6e:59:5a:ad:5b:1a:29:cd:38:2b:61:15:94:06: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CA:3D:DD:34:28:45:81:A0:68:21:E5:56:93:C1:1A:71:91:CC:30 X509v3 Authority Key Identifier: keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e8:8e:25:6b:d3:1b:d3:09:78:b0:72:49:d6:c9:56:c1:af: 41:ab:e4:39:0e:34:32:91:05:6d:e1:98:9c:74:d9:ec:95:6f: c0:c8:73:d2:c1:c7:83:89:28:4d:ae:9d:b9:26:da:50:21:34: 65:4f:e4:03:75:d0:d9:68:9f:8f:28:03:75:bc:ab:7e:17:b6: dc:73:d4:c9:70:7a:ee:de:84:c9:a4:0d:e6:74:07:47:7a:81: 1c:60:98:48:c9:0d:d7:c6:2e:24:91:16:1a:1f:ad:a4:7d:3d: 32:c0:1d:a1:4a:c1:e1:9e:2f:1d:bc:7e:e9:af:32:33:29:81: 8f:76:50:94:9a:57:44:8a:28:c1:ff:76:52:da:14:57:29:6a: d0:3e:4e:6c:4c:ae:f2:c3:c2:41:8a:ab:4f:45:44:00:7d:04: 25:06:24:e5:51:cb:cd:cf:c7:79:a9:34:64:c0:d4:2a:cc:ef: 84:bb:dc:aa:26:b4:a7:2a:1d:2c:4c:d3:08:86:71:96:bb:de: cf:e8:a8:2d:ff:2c:20:06:a7:6a:a2:7a:74:d4:ef:7d:30:fe: 59:9d:7d:4d:d0:64:22:58:d1:a3:05:06:b0:3e:d0:c7:e0:be: fd:ae:29:04:cd:4f:f7:a2:46:b4:c3:e9:a5:0a:34:59:a9:3f: a0:90:14:b7 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUGjR1OAFR1XaAHkgDhk7ua/EcFskwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyhBREJFMUEwRjQ2 RjlDNzdCMEQyNDlGRDZBNDM4QjQ4QjdGQjIxQkNGMB4XDTI1MDkwNjAxMDQyMFoX DTI1MDkwNzA0MTgyMFowMzExMC8GA1UEAxMoMTBDQTNEREQzNDI4NDU4MUEwNjgy MUU1NTY5M0MxMUE3MTkxQ0MzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJF1cQyuV1neCvLawAZbGtPx9y6fjJrPxVSfM4FETSxnLSoGTma+ac5coAa2 jSPSZyagCp5TmfNz29ajmtCBreFBmTxUpQguTO7tHN92vPAeqTPWJ1RDnrzZyz2j 5bW9tWsGwGyokrzGJv0Mxs2QmnpfmFm0kpgm4Fczf/Q22SLczk9qqOZMxK7m5MzF BnE9U86+gyu4gHsLtypuUaPRz2rSco5w1rGGb0gKZ9ngXqu+ijVlN7od+vnpXr5S T+P/FU12wYXsNaoz6R6WZPG7DSTUF4eu+vDHcIeKsYGjszu9SkeIJ1Sv51+t6Z8V rKrWIm5ZWq1bGinNOCthFZQGL/ECAwEAAaOCAkYwggJCMB0GA1UdDgQWBBQQyj3d NChFgaBoIeVWk8EacZHMMDAfBgNVHSMEGDAWgBStvhoPRvnHew0kn9akOLSLf7Ib zzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNGUwYWE2MDE5MTU5 ZjJmYjI3MGNhOC8xL0FEQkUxQTBGNDZGOUM3N0IwRDI0OUZENkE0MzhCNDhCN0ZC MjFCQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL3JiNGFEMGI1eDNzTkpKX1dwRGkwaTMteUc4OC5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE0ZTBhYTYwMTkxNTlmMmZiMjcwY2E4 LzEvQURCRTFBMEY0NkY5Qzc3QjBEMjQ5RkQ2QTQzOEI0OEI3RkIyMUJDRi5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAATojiVr0xvTCXiwcknWyVbBr0Gr5DkONDKRBW3hmJx02eyVb8DIc9LB x4OJKE2unbkm2lAhNGVP5AN10Nlon48oA3W8q34Xttxz1Mlweu7ehMmkDeZ0B0d6 gRxgmEjJDdfGLiSRFhofraR9PTLAHaFKweGeLx28fumvMjMpgY92UJSaV0SKKMH/ dlLaFFcpatA+TmxMrvLDwkGKq09FRAB9BCUGJOVRy83Px3mpNGTA1CrM74S73Kom tKcqHSxM0wiGcZa73s/oqC3/LCAGp2qienTU730w/lmdfU3QZCJY0aMFBrA+0Mfg vv2uKQTNT/eiRrTD6aUKNFmpP6CQFLc= -----END CERTIFICATE-----Generated at Sat Sep 6 11:37:52 2025 by rpki-client