$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: xCglc/RLO2N4uVGhP/7dft0aqlnNVdlrh45ybIetJmM= Subject key identifier: FE:19:4C:A1:A7:66:A4:BB:3F:06:DE:99:DB:2E:78:DE:6E:90:7A:35 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 4EAA59BF7DB4F5EF92B567C66D5271FE610A6BC7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 04A3 Signing time: Wed 13 May 2026 11:02:12 +0000 Manifest this update: Wed 13 May 2026 10:57:12 +0000 Manifest next update: Thu 14 May 2026 14:05:12 +0000 Files and hashes: 1: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) 2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: SjSe+86mGSNRuiixzJ3U9u1GDx4fhUVj18lyorOe+X8=) 3: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 14:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:aa:59:bf:7d:b4:f5:ef:92:b5:67:c6:6d:52:71:fe:61:0a:6b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: May 13 10:57:12 2026 GMT Not After : May 14 14:05:12 2026 GMT Subject: CN=FE194CA1A766A4BB3F06DE99DB2E78DE6E907A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:58:90:e0:da:2f:2c:5b:fe:32:a1:f6:39: 35:1f:8b:61:cf:7d:36:63:bd:ea:75:56:e4:34:1b: 41:7b:aa:c9:73:03:f9:07:6d:3e:07:c7:84:c0:63: 27:32:22:3e:db:e0:01:d5:3b:49:92:47:f0:29:b5: d0:48:37:f5:85:27:33:f5:41:b3:54:84:bc:46:56: 29:27:51:b4:ea:21:51:b9:85:65:7f:55:27:9c:83: 17:a9:c2:26:a1:b8:22:b6:28:34:b8:e7:f8:d5:5c: 15:58:cd:f4:c2:70:dc:ac:d9:1b:10:fe:4f:af:8b: a1:5d:b0:4c:9e:23:16:2d:20:41:5f:21:b3:d6:09: 0c:f3:32:08:c8:d1:46:2b:f2:ea:58:b5:f8:13:6c: b7:37:85:7d:50:87:77:da:20:c9:d0:70:59:29:0e: 15:52:f9:02:2a:a4:0c:e7:41:76:3b:20:14:b4:5f: 20:bb:6c:13:e3:34:50:76:b5:c4:b4:12:9c:98:cb: 0b:01:bd:26:4c:d6:3b:ea:89:fc:86:33:11:b3:43: a4:16:9e:c5:00:95:4f:28:a8:5c:61:12:8e:84:9f: 24:ef:e5:59:a2:a8:bd:27:4e:44:72:86:4b:b2:e2: 91:64:44:8c:2f:75:9c:4d:b2:f2:60:54:31:02:37: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:4C:A1:A7:66:A4:BB:3F:06:DE:99:DB:2E:78:DE:6E:90:7A:35 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:63:f7:a6:28:72:32:07:de:f8:9a:1c:98:55:95:40:68:2b: 97:c0:38:a3:ee:5d:e1:c8:70:4e:96:e9:c8:f4:0b:b3:0f:24: b9:ec:1d:4b:b4:2c:b6:f8:6e:eb:99:44:03:00:06:f5:a4:ad: f8:c1:18:17:00:99:ab:33:a9:7d:ce:16:05:8f:1c:42:81:6a: f0:b2:94:d7:a7:5d:52:c8:22:a1:1e:e9:c5:f7:22:42:9c:d4: 93:1a:40:e2:8a:a5:d8:08:85:d3:9b:91:1a:27:63:0c:80:e0: fd:1c:77:79:b3:ea:f3:a5:61:57:19:21:df:be:1f:be:f1:ca: 3c:79:3f:33:12:4d:4a:10:09:72:31:dd:3b:d3:c4:56:fc:8b: 5d:66:39:9f:b0:24:cf:da:ed:32:bb:1e:1e:51:18:36:0a:6b: 6a:51:99:b9:80:39:36:db:91:7b:27:8c:57:79:d0:ac:36:2e: fe:6c:ec:23:25:33:79:f3:d1:1f:12:bb:3d:e6:6a:d8:17:6d: 6a:9f:27:9b:af:87:6b:fa:30:81:6e:0d:fc:46:da:14:2a:88: 6f:2d:c0:f4:b8:3d:02:04:27:f0:cc:8c:b9:53:92:54:fa:1a: 0d:0e:72:75:5e:d9:31:19:17:ae:ce:da:df:0b:9f:f1:1d:f1: 22:1a:ba:22 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUTqpZv3209e+StWfGbVJx/mEKa8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwNTEzMTA1NzEyWhcNMjYwNTE0MTQwNTEy WjAzMTEwLwYDVQQDEyhGRTE5NENBMUE3NjZBNEJCM0YwNkRFOTlEQjJFNzhERTZF OTA3QTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9hYkODaLyxb /jKh9jk1H4thz302Y73qdVbkNBtBe6rJcwP5B20+B8eEwGMnMiI+2+AB1TtJkkfw KbXQSDf1hScz9UGzVIS8RlYpJ1G06iFRuYVlf1UnnIMXqcImobgitig0uOf41VwV WM30wnDcrNkbEP5Pr4uhXbBMniMWLSBBXyGz1gkM8zIIyNFGK/LqWLX4E2y3N4V9 UId32iDJ0HBZKQ4VUvkCKqQM50F2OyAUtF8gu2wT4zRQdrXEtBKcmMsLAb0mTNY7 6on8hjMRs0OkFp7FAJVPKKhcYRKOhJ8k7+VZoqi9J05EcoZLsuKRZESML3WcTbLy YFQxAjdEbwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFP4ZTKGnZqS7PwbemdsueN5u kHo1MB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIVj96YocjIH3viaHJhVlUBoK5fAOKPu XeHIcE6W6cj0C7MPJLnsHUu0LLb4buuZRAMABvWkrfjBGBcAmaszqX3OFgWPHEKB avCylNenXVLIIqEe6cX3IkKc1JMaQOKKpdgIhdObkRonYwyA4P0cd3mz6vOlYVcZ Id++H77xyjx5PzMSTUoQCXIx3TvTxFb8i11mOZ+wJM/a7TK7Hh5RGDYKa2pRmbmA OTbbkXsnjFd50Kw2Lv5s7CMlM3nz0R8Suz3matgXbWqfJ5uvh2v6MIFuDfxG2hQq iG8twPS4PQIEJ/DMjLlTklT6Gg0OcnVe2TEZF67O2t8Ln/Ed8SIauiI= -----END CERTIFICATE-----Generated at Wed May 13 15:40:46 2026 by rpki-client