$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: NAxlzFMfnanOC8q7bfsVM/L/NlVGY1xqlT/7VtH3V6g= Subject key identifier: 37:2C:B1:7F:03:7E:02:13:7A:B6:7A:02:AE:62:11:65:6A:7E:CC:8F Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 0C3BDC2D858811CF6133E7B46F877167C2124FBC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 02C5 Signing time: Thu 26 Mar 2026 05:18:01 +0000 Manifest this update: Thu 26 Mar 2026 05:13:01 +0000 Manifest next update: Fri 27 Mar 2026 06:45:01 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: Tja966xOWvWuUg3GDEiYNNI1b+n8/wJpFYOvM3v6CSM=) 2: 323630323a663764653a3a2f34302d3438203d3e203331383938.roa (hash: D9VdjvhOYF09b5z9awGHcc1wRjsMlbsTgh+JB0uGMwY=) 3: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 4: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: uS9rqFKZ07mB8+YZnPlfGTxqPhMI6sgRdMjKP2z7h/I=) 5: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: huw/azfVtTuGJ+KiuQkTd/zUzlN/Io2KIFdebZxScmw=) 6: 32332e3139312e34302e302f32342d3234203d3e203331383938.roa (hash: BIc+hyQ1qBCFYW6xfCJ2KWm2W3zeUtGnxmH5EdT5vpY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 06:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3b:dc:2d:85:88:11:cf:61:33:e7:b4:6f:87:71:67:c2:12:4f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Mar 26 05:13:01 2026 GMT Not After : Mar 27 06:45:01 2026 GMT Subject: CN=372CB17F037E02137AB67A02AE6211656A7ECC8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:2a:b7:1d:c0:ff:48:6f:88:2e:ba:ae:0f: 40:dc:6d:af:a7:c6:e0:e2:19:db:9e:bf:41:22:df: 35:2c:e7:40:1a:f7:dc:5f:ed:04:32:2e:fa:47:a3: b1:2f:0d:2c:eb:b7:da:92:ec:05:3d:75:b3:ea:1d: 3f:d4:66:df:d4:93:3d:59:f3:b3:b5:79:75:cf:e8: 19:69:44:33:8d:98:be:c6:ee:b3:d3:a2:e2:18:f1: 7f:d9:05:a5:06:c8:31:33:78:40:14:1d:b1:c9:ae: 37:25:8d:ae:22:52:be:96:56:e6:59:c6:83:d7:f7: 3f:b8:c3:b7:d2:3d:52:0f:76:d1:1c:72:29:63:27: 2f:89:12:4a:7f:0e:7f:51:81:2f:04:b3:8e:d1:c0: fb:f9:c2:ff:8a:9d:a3:c8:0c:75:dc:b2:fd:b0:9c: 8c:52:c3:54:2b:27:6f:08:1b:ea:0a:b7:d1:80:c6: a2:a7:d6:5d:46:2a:8c:16:ae:02:8a:0d:93:27:c5: f4:e5:95:df:85:fa:f6:d7:ad:6e:f4:3b:0f:3a:38: 3c:7d:30:45:b7:ee:80:0d:55:14:84:2f:19:e2:94: c2:c8:89:4c:11:2f:12:4b:22:46:b3:c6:18:d4:2d: 39:84:7d:ce:ea:6f:c5:80:54:bb:42:a3:7c:25:f9: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:B1:7F:03:7E:02:13:7A:B6:7A:02:AE:62:11:65:6A:7E:CC:8F X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d9:ad:65:19:12:90:35:b8:d8:c7:df:e3:13:b8:a9:1e:7f: 33:76:45:d0:2c:fc:59:9b:d7:a6:c9:0f:6b:70:b3:35:b0:d6: d5:c4:72:ef:1e:92:05:53:f4:ee:36:90:d1:36:e4:5d:2e:fb: d9:cd:08:1b:6a:c7:0e:f5:b2:3f:1c:21:e3:d7:24:d2:49:b1: bc:50:6d:4c:02:87:c6:8c:0e:34:2f:90:69:88:4c:9d:5d:e4: 0b:61:be:33:77:0e:77:af:8d:90:d3:90:ca:98:0f:06:f9:32: 64:4a:f4:96:38:46:4f:18:8a:ba:de:e5:d9:c0:5a:4f:d1:49: cf:ad:ea:5f:81:25:fc:8e:7d:d9:7d:12:3b:92:bc:8b:16:15: 0d:66:d0:4b:50:88:14:6e:31:26:e9:ef:48:32:a5:da:7a:13: 79:42:7c:6f:7c:f5:33:76:5b:ca:a1:58:6a:a2:a8:64:5a:de: 3f:d8:5f:13:46:54:49:4b:47:50:cb:5d:7f:8f:b0:78:cf:72: 04:62:ad:e9:08:98:83:f9:4f:0e:e8:6c:fe:89:30:f3:98:be: ca:ce:f9:de:77:54:e4:5f:db:ea:3a:33:da:6d:b6:02:fe:d3: 5b:e1:cb:f1:1b:f6:53:37:f4:fa:0a:0b:8a:cc:64:9d:18:14: 87:38:cb:72 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUDDvcLYWIEc9hM+e0b4dxZ8IST7wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjYwMzI2MDUxMzAxWhcNMjYwMzI3MDY0NTAx WjAzMTEwLwYDVQQDEygzNzJDQjE3RjAzN0UwMjEzN0FCNjdBMDJBRTYyMTE2NTZB N0VDQzhGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy50qtx3A/0hv iC66rg9A3G2vp8bg4hnbnr9BIt81LOdAGvfcX+0EMi76R6OxLw0s67fakuwFPXWz 6h0/1Gbf1JM9WfOztXl1z+gZaUQzjZi+xu6z06LiGPF/2QWlBsgxM3hAFB2xya43 JY2uIlK+llbmWcaD1/c/uMO30j1SD3bRHHIpYycviRJKfw5/UYEvBLOO0cD7+cL/ ip2jyAx13LL9sJyMUsNUKydvCBvqCrfRgMaip9ZdRiqMFq4Cig2TJ8X05ZXfhfr2 161u9DsPOjg8fTBFt+6ADVUUhC8Z4pTCyIlMES8SSyJGs8YY1C05hH3O6m/FgFS7 QqN8Jfl04wIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDcssX8DfgITerZ6Aq5iEWVq fsyPMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF3ZrWUZ EpA1uNjH3+MTuKkefzN2RdAs/Fmb16bJD2twszWw1tXEcu8ekgVT9O42kNE25F0u +9nNCBtqxw71sj8cIePXJNJJsbxQbUwCh8aMDjQvkGmITJ1d5AthvjN3DnevjZDT kMqYDwb5MmRK9JY4Rk8Yirre5dnAWk/RSc+t6l+BJfyOfdl9EjuSvIsWFQ1m0EtQ iBRuMSbp70gypdp6E3lCfG989TN2W8qhWGqiqGRa3j/YXxNGVElLR1DLXX+PsHjP cgRirekImIP5Tw7obP6JMPOYvsrO+d53VORf2+o6M9pttgL+01vhy/Eb9lM39PoK C4rMZJ0YFIc4y3I= -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:31 2026 by rpki-client