$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft File: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft (raw, json) Hash identifier: vMLtvJrz2txUiL9gtOOmQomoSs6VhJiPl6Ae8JYB640= Subject key identifier: 5D:A0:F1:CB:76:1C:72:79:5A:C4:FF:4C:A6:A3:EC:CE:00:78:97:10 Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 Certificate issuer: /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Certificate serial: 26D11D1570E214776A08C18740642AAE57D8A26F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer Subject info access: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft Manifest number: 1B Signing time: Mon 30 Jun 2025 08:13:32 +0000 Manifest this update: Mon 30 Jun 2025 08:08:32 +0000 Manifest next update: Tue 01 Jul 2025 10:31:32 +0000 Files and hashes: 1: 32332e3134302e35322e302f32342d3234203d3e203332353931.roa (hash: oZRtVcSi4lYHDLHNFVp6cKh6gXIDWw99wQ2eImbTS0Y=) 2: 323630323a663633333a3a2f34302d313238203d3e2030.roa (hash: Gm4KC4yKfvUQGJIav09rOCnI6G67sL4yLr2b6lVR5jE=) 3: AS32591.asa (hash: jPFYj/1kozNrsSDc+ajpDpFIhmwjdkNt/m65RzoGG3g=) 4: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl (hash: 7k1lCx3F3QAduFbhj6W6nvkYqOm8J1guEkxfKt2rumw=) 5: 323630323a663633333a3a2f34382d3438203d3e203332353931.roa (hash: nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=) Validation: OK Signature path: rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d1:1d:15:70:e2:14:77:6a:08:c1:87:40:64:2a:ae:57:d8:a2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932 Validity Not Before: Jun 30 08:08:32 2025 GMT Not After : Jul 1 10:31:32 2025 GMT Subject: CN=5DA0F1CB761C72795AC4FF4CA6A3ECCE00789710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:95:21:36:56:52:34:6f:cc:48:13:8a:a2: 20:d9:78:0b:5d:fd:72:37:88:08:2c:dc:0a:02:cc: 75:ac:48:c2:0b:b5:72:42:35:c9:e6:1f:4a:ee:9a: 1e:fc:32:d8:9e:b5:12:6f:07:fb:e8:36:9c:8c:e6: 4d:53:29:ae:29:e1:de:ce:40:5a:5c:e6:cf:84:6f: 2f:c1:9d:b8:56:ee:35:42:10:bc:71:ed:c4:1d:ba: 5b:05:58:e2:38:00:c7:0a:ea:80:27:2e:7f:9e:da: 9f:2f:8e:8a:3e:78:99:49:6f:c6:f9:5d:a0:09:1a: 67:d4:05:c2:6f:78:67:d7:87:1b:63:92:2a:8e:a5: c6:89:2c:00:19:c3:a6:23:92:82:81:36:79:c7:52: 45:bd:45:54:2e:03:c8:45:44:b0:16:c8:1c:57:b9: c2:07:85:0d:45:b7:7c:17:93:c0:cf:d3:d2:cd:60: d2:c8:29:75:65:1f:06:54:08:49:67:b5:3c:7e:18: 57:b0:dc:77:88:a4:ff:aa:bc:df:a4:f6:0a:bc:f8: fd:9b:61:88:69:ec:2e:3a:af:52:cb:ec:67:88:82: b6:43:b8:8e:1d:09:e4:7f:c3:8c:ff:df:b5:8d:64: e6:83:93:37:79:62:6b:d4:51:94:c5:c0:72:33:59: c9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A0:F1:CB:76:1C:72:79:5A:C4:FF:4C:A6:A3:EC:CE:00:78:97:10 X509v3 Authority Key Identifier: keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f7:6e:39:85:4b:18:04:d9:a5:01:8b:6f:c8:7a:e6:d0:17: da:5a:ef:53:7c:1f:7d:88:bf:ae:61:4d:34:cc:f4:40:8d:ce: 84:ba:bd:f3:40:18:ac:bc:36:f7:9e:65:89:71:c3:58:14:ca: 76:68:98:d1:ab:88:5e:fb:5f:c8:b0:89:fd:ac:94:e7:e7:bf: 5f:de:2b:fe:8f:fb:10:0b:98:93:21:58:5e:30:cc:f4:5e:bd: 92:03:bd:86:04:16:c1:1f:eb:39:d7:f0:55:d9:60:a1:59:22: 09:c8:b5:8d:25:c1:a0:bc:8c:77:4f:7a:65:d0:e8:ff:2e:37: 66:a3:64:45:4a:19:52:ac:97:6e:d4:58:eb:27:2b:3e:fe:a5: 30:9b:f6:97:52:21:73:41:2d:13:f0:94:80:cb:e4:f2:15:a4: 5c:de:87:4f:6c:9c:6d:e2:80:40:b8:d5:1b:7e:fb:05:be:4a: c3:ea:ff:c7:27:c0:65:39:97:a0:88:31:1a:99:73:51:9e:6a: 55:ff:7c:3a:34:50:aa:4b:74:26:39:ac:19:0d:f1:06:43:ce: 16:c3:ff:b1:5c:3a:df:41:32:9b:b4:fe:f3:a3:0b:4b:3e:ed: ea:e8:dc:36:ca:78:85:b1:7d:d8:a9:1b:64:9a:9e:22:3c:93: b0:09:39:70 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUJtEdFXDiFHdqCMGHQGQqrlfYom8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzBhMzA4ZTg3MTY2ZDU3MzM1OTAyN2FmOTk3NWE0MTZk NWEzZjE3NmU0NGY0NWM5MzIwHhcNMjUwNjMwMDgwODMyWhcNMjUwNzAxMTAzMTMy WjAzMTEwLwYDVQQDEyg1REEwRjFDQjc2MUM3Mjc5NUFDNEZGNENBNkEzRUNDRTAw Nzg5NzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjWVITZWUjRv zEgTiqIg2XgLXf1yN4gILNwKAsx1rEjCC7VyQjXJ5h9K7poe/DLYnrUSbwf76Dac jOZNUymuKeHezkBaXObPhG8vwZ24Vu41QhC8ce3EHbpbBVjiOADHCuqAJy5/ntqf L46KPniZSW/G+V2gCRpn1AXCb3hn14cbY5IqjqXGiSwAGcOmI5KCgTZ5x1JFvUVU LgPIRUSwFsgcV7nCB4UNRbd8F5PAz9PSzWDSyCl1ZR8GVAhJZ7U8fhhXsNx3iKT/ qrzfpPYKvPj9m2GIaewuOq9Sy+xniIK2Q7iOHQnkf8OM/9+1jWTmg5M3eWJr1FGU xcByM1nJOQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFF2g8ct2HHJ5WsT/TKaj7M4A eJcQMB8GA1UdIwQYMBaAFAuJAEijo5W8H6SWXS3Vft19keLgMA4GA1UdDwEB/wQE AwIHgDBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5jYW5vcHMu b3JnL3JlcG8vQ2FuT3BzLVBBU1MvMC8wQjg5MDA0OEEzQTM5NUJDMUZBNDk2NUQy REQ1N0VERDdEOTFFMkUwLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUF BzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQy OC0xY2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDgyYTRkMDYtY2VkOC00ODUx LTgwYjItNjBkM2RhMTFmZDZmLzMwYTMwOGU4NzE2NmQ1NzMzNTkwMjdhZjk5NzVh NDE2ZDVhM2YxNzZlNDRmNDVjOTMyLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYB BQUHMAuGXHJzeW5jOi8vcnBraS1yZXBvLmNhbm9wcy5vcmcvcmVwby9DYW5PcHMt UEFTUy8wLzBCODkwMDQ4QTNBMzk1QkMxRkE0OTY1RDJERDU3RUREN0Q5MUUyRTAu bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBE9245hUsYBNmlAYtvyHrm0BfaWu9TfB99iL+uYU00zPRAjc6E ur3zQBisvDb3nmWJccNYFMp2aJjRq4he+1/IsIn9rJTn579f3iv+j/sQC5iTIVhe MMz0Xr2SA72GBBbBH+s51/BV2WChWSIJyLWNJcGgvIx3T3pl0Oj/Ljdmo2RFShlS rJdu1FjrJys+/qUwm/aXUiFzQS0T8JSAy+TyFaRc3odPbJxt4oBAuNUbfvsFvkrD 6v/HJ8BlOZegiDEamXNRnmpV/3w6NFCqS3QmOawZDfEGQ84Ww/+xXDrfQTKbtP7z owtLPu3q6Nw2yniFsX3YqRtkmp4iPJOwCTlw -----END CERTIFICATE-----Generated at Mon Jun 30 19:29:22 2025 by rpki-client