$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: Wq34lcdRKh8VBbZou8pApIY99FgcLeV+k/AdwEkYxn0= Subject key identifier: DD:24:62:39:6B:71:5C:5C:EC:D8:B9:AB:FA:BA:D1:7A:D3:F5:07:17 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 6EED0D56218BD216162C2012224B00E0FADD3280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0393 Signing time: Sun 19 Oct 2025 23:43:31 +0000 Manifest this update: Sun 19 Oct 2025 23:38:31 +0000 Manifest next update: Tue 21 Oct 2025 02:25:31 +0000 Files and hashes: 1: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: RJUwQgGXXGOIaZxOASd4DfkYSqtn6Lq8jGbhxOZNi8c=) 2: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) 3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ed:0d:56:21:8b:d2:16:16:2c:20:12:22:4b:00:e0:fa:dd:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Oct 19 23:38:31 2025 GMT Not After : Oct 21 02:25:31 2025 GMT Subject: CN=DD2462396B715C5CECD8B9ABFABAD17AD3F50717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:50:89:55:cb:7f:92:7c:51:44:e4:79:28:e5: 31:ba:69:bb:c2:2f:88:d2:2c:fa:bc:97:60:6e:1f: f4:12:f5:50:f8:dc:fd:12:ad:a7:54:f2:3e:46:e6: cc:e3:68:41:6b:08:59:ed:93:b5:d3:3d:99:61:32: b8:2e:20:70:04:b9:ed:8e:39:ee:d4:f8:39:17:54: a1:cb:75:66:07:39:f6:c7:aa:a7:12:a6:12:89:6a: 18:a4:90:6a:3d:6b:d4:54:b0:78:40:bc:bf:7b:da: 64:54:e0:49:b9:e2:65:c6:11:30:f3:4b:86:96:19: 12:a1:30:7a:49:d3:4e:ff:fa:42:65:c4:6d:3e:3d: 11:4c:c5:b7:3e:26:da:ed:47:49:68:f0:50:ac:77: 74:45:f7:89:bb:ea:83:19:9d:41:b6:d6:a0:91:6f: 9f:b6:2e:f7:2f:11:97:ff:7c:3c:82:a3:26:7d:8f: c8:c0:06:5e:c2:bc:8b:1d:ae:f3:5a:83:72:de:56: ed:86:9e:34:30:1a:e5:0e:e7:b7:1d:f4:8a:5b:a3: 6b:9f:93:11:ff:2f:95:b6:4f:65:1a:c3:34:74:88: 4b:43:84:6e:52:01:20:e8:c9:c8:4e:c1:33:26:cf: 9a:1b:0c:3f:9d:b3:27:80:96:ca:4f:74:0f:2b:74: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:24:62:39:6B:71:5C:5C:EC:D8:B9:AB:FA:BA:D1:7A:D3:F5:07:17 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ce:59:00:d2:ea:0e:ed:4a:52:2e:6c:e7:e5:ed:18:ac:cf: ae:2c:ea:7d:b5:77:45:fe:8f:3a:1e:73:cb:c6:b2:1b:64:d8: ed:82:8f:4c:bd:1e:15:05:7f:48:d8:6d:ea:33:ed:70:4c:14: a1:6c:09:93:a2:bc:b5:2c:95:64:97:aa:c5:ee:ab:5e:ed:d0: 6e:e8:e7:fb:db:ef:1b:7c:e6:6f:eb:23:d5:2a:9d:42:01:b4: cc:ac:26:f0:fb:37:23:ae:6f:3a:b3:8f:ed:c7:04:ac:7c:55: 76:94:20:14:b4:ba:fa:d3:f4:7e:69:74:84:d3:f7:7b:55:c1: 48:22:33:f3:ac:c9:0b:d4:02:13:11:ed:96:ee:eb:1b:43:2c: 80:76:08:e4:9b:d7:bc:eb:1d:e6:10:a9:82:bd:6a:b3:f1:fb: 1c:bc:a9:ed:a9:29:08:4d:a6:fa:62:72:18:16:3b:e4:82:04: e1:49:39:f9:25:d9:62:72:98:ac:ee:5a:b5:c6:38:5e:47:71: ae:67:9c:10:ce:51:fb:c9:f1:bc:27:7e:17:aa:b4:27:b7:d4: 4d:42:a1:d2:c4:2b:f2:21:0a:5f:eb:5d:9b:63:71:37:c6:24: 26:f5:c0:54:46:e4:95:56:1a:41:fc:b8:b6:cd:e3:84:9f:af: d7:80:b4:f3 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUbu0NViGL0hYWLCASIksA4PrdMoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUxMDE5MjMzODMxWhcNMjUxMDIxMDIyNTMx WjAzMTEwLwYDVQQDEyhERDI0NjIzOTZCNzE1QzVDRUNEOEI5QUJGQUJBRDE3QUQz RjUwNzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VCJVct/knxR ROR5KOUxumm7wi+I0iz6vJdgbh/0EvVQ+Nz9Eq2nVPI+RubM42hBawhZ7ZO10z2Z YTK4LiBwBLntjjnu1Pg5F1Shy3VmBzn2x6qnEqYSiWoYpJBqPWvUVLB4QLy/e9pk VOBJueJlxhEw80uGlhkSoTB6SdNO//pCZcRtPj0RTMW3Piba7UdJaPBQrHd0RfeJ u+qDGZ1BttagkW+fti73LxGX/3w8gqMmfY/IwAZewryLHa7zWoNy3lbthp40MBrl Due3HfSKW6Nrn5MR/y+Vtk9lGsM0dIhLQ4RuUgEg6MnITsEzJs+aGww/nbMngJbK T3QPK3QjcQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFN0kYjlrcVxc7Ni5q/q60XrT 9QcXMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAKDOWQDS6g7tSlIubOfl7Risz64s6n21 d0X+jzoec8vGshtk2O2Cj0y9HhUFf0jYbeoz7XBMFKFsCZOivLUslWSXqsXuq17t 0G7o5/vb7xt85m/rI9UqnUIBtMysJvD7NyOubzqzj+3HBKx8VXaUIBS0uvrT9H5p dITT93tVwUgiM/OsyQvUAhMR7Zbu6xtDLIB2COSb17zrHeYQqYK9arPx+xy8qe2p KQhNpvpichgWO+SCBOFJOfkl2WJymKzuWrXGOF5Hca5nnBDOUfvJ8bwnfheqtCe3 1E1CodLEK/IhCl/rXZtjcTfGJCb1wFRG5JVWGkH8uLbN44Sfr9eAtPM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:57:56 2025 by rpki-client