$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: AL1bJ1mudARk1flSNZ38mq3+ntWfX0kXlWdSnZQa6BU= Subject key identifier: 1F:03:93:7E:0C:C3:E2:94:C0:97:0B:DA:EB:14:AA:A1:3D:05:F8:01 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 73CFD34245A16745B1BA09048C47E79DCB15B595 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0503 Signing time: Fri 24 Jul 2026 12:59:23 +0000 Manifest this update: Fri 24 Jul 2026 12:54:23 +0000 Manifest next update: Sat 25 Jul 2026 16:14:23 +0000 Files and hashes: 1: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) 2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: AxiXk1UbOm38nGsmul/mNagAZ9XqEB4Q5Cx5PVnzdkw=) 3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cf:d3:42:45:a1:67:45:b1:ba:09:04:8c:47:e7:9d:cb:15:b5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Jul 24 12:54:23 2026 GMT Not After : Jul 25 16:14:23 2026 GMT Subject: CN=1F03937E0CC3E294C0970BDAEB14AAA13D05F801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:fe:1a:54:2d:22:7e:4e:f2:d0:ef:9a:5d: 18:eb:98:3f:d8:3f:72:2a:42:8b:f9:29:2b:1d:e1: 2c:b8:1e:94:5c:bf:97:6b:0c:3c:2f:be:c4:32:c6: d0:7c:ad:a5:26:9f:12:e0:cc:64:4f:b0:6f:00:27: 35:56:4b:c8:e5:33:0d:c3:73:82:b2:71:ef:e4:32: c3:9b:64:20:26:ab:e2:ed:37:46:2d:6d:56:0b:7d: ce:7b:d5:3f:72:fa:13:41:fd:eb:4a:e0:31:8c:0e: 64:4e:6c:d0:52:47:ac:83:09:45:1b:7c:c1:1b:c9: 70:7e:a1:01:7a:fd:2a:f3:18:dd:78:9c:1f:5d:77: b6:68:7f:d8:60:56:43:0b:52:48:ee:f1:39:15:e9: 32:37:9e:eb:69:85:fa:2c:79:be:41:17:64:95:94: 3b:a6:fa:d1:dd:61:89:24:e9:dd:8d:1e:56:6a:22: fe:f3:5f:48:04:25:b1:b0:0f:b2:d3:2a:ee:01:72: 01:c0:f4:14:94:65:e3:5f:51:f2:1e:c3:62:4e:61: fd:8d:ce:fd:62:e1:ef:67:21:ce:48:f7:41:b4:80: b0:67:f3:de:92:57:f6:be:6c:bb:f7:a2:8c:9a:d7: f4:6b:33:c7:02:2f:8f:b0:5c:ba:85:7c:f3:f2:35: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:03:93:7E:0C:C3:E2:94:C0:97:0B:DA:EB:14:AA:A1:3D:05:F8:01 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:75:22:ef:68:c8:43:b3:69:75:de:a4:8f:6a:e0:2d:2d:87: eb:94:74:a0:fe:bc:8e:2f:cb:50:e4:3f:5f:29:ab:3e:e2:c5: 94:8e:bd:95:08:13:af:e4:c3:b4:37:d1:06:16:54:74:2e:0b: b3:5e:5a:b0:ca:b3:7d:b8:06:fb:30:74:2a:75:f5:9e:f4:c4: 66:4b:a5:a3:51:9e:64:25:9a:e3:68:b9:0b:a0:2b:92:e8:a2: 6b:8c:20:e9:63:9b:ca:e1:83:68:60:53:c9:d0:fd:5c:fd:65: 6e:48:d5:ad:ba:01:f7:50:6d:db:57:33:a3:9c:3a:eb:10:d4: ca:3c:f5:f5:65:6b:e8:96:ea:50:92:5e:21:6d:e9:0d:f6:f8: f9:bb:03:12:96:cc:3e:8f:ab:ef:96:e9:06:09:35:c1:05:f8: 2d:8c:86:68:f6:3c:89:9b:5b:3f:7b:9a:7e:66:10:16:bb:bb: 4c:80:3f:54:81:60:5d:b1:cf:92:95:1e:50:fd:3e:fb:d7:84: d4:28:c2:43:1e:43:42:ac:75:cc:6d:12:15:35:60:01:72:32: 2b:32:fa:c9:3b:e4:c0:32:e5:5b:1d:2b:c3:2f:3b:27:34:3b: aa:05:bd:c7:b9:3c:6f:89:f0:a9:4c:61:90:51:ca:e4:28:ce: c9:b8:a8:ac -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUc8/TQkWhZ0WxugkEjEfnncsVtZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwNzI0MTI1NDIzWhcNMjYwNzI1MTYxNDIz WjAzMTEwLwYDVQQDEygxRjAzOTM3RTBDQzNFMjk0QzA5NzBCREFFQjE0QUFBMTNE MDVGODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp83+GlQtIn5O 8tDvml0Y65g/2D9yKkKL+SkrHeEsuB6UXL+Xaww8L77EMsbQfK2lJp8S4MxkT7Bv ACc1VkvI5TMNw3OCsnHv5DLDm2QgJqvi7TdGLW1WC33Oe9U/cvoTQf3rSuAxjA5k TmzQUkesgwlFG3zBG8lwfqEBev0q8xjdeJwfXXe2aH/YYFZDC1JI7vE5FekyN57r aYX6LHm+QRdklZQ7pvrR3WGJJOndjR5WaiL+819IBCWxsA+y0yruAXIBwPQUlGXj X1HyHsNiTmH9jc79YuHvZyHOSPdBtICwZ/Peklf2vmy796KMmtf0azPHAi+PsFy6 hXzz8jV4FQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFB8Dk34Mw+KUwJcL2usUqqE9 BfgBMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAE91Iu9oyEOzaXXepI9q4C0th+uUdKD+ vI4vy1DkP18pqz7ixZSOvZUIE6/kw7Q30QYWVHQuC7NeWrDKs324BvswdCp19Z70 xGZLpaNRnmQlmuNouQugK5LoomuMIOljm8rhg2hgU8nQ/Vz9ZW5I1a26AfdQbdtX M6OcOusQ1Mo89fVla+iW6lCSXiFt6Q32+Pm7AxKWzD6Pq++W6QYJNcEF+C2Mhmj2 PImbWz97mn5mEBa7u0yAP1SBYF2xz5KVHlD9PvvXhNQowkMeQ0KsdcxtEhU1YAFy Misy+sk75MAy5VsdK8MvOyc0O6oFvce5PG+J8KlMYZBRyuQozsm4qKw= -----END CERTIFICATE-----Generated at Fri Jul 24 16:53:26 2026 by rpki-client