$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: l8fAL4Qg8PzEo4rsDZLTsCTTcSsvfGzl1Ps6/x+P+ZQ= Subject key identifier: D5:FD:28:12:CE:C8:0F:C3:A3:5B:B3:1D:EF:50:69:FD:F3:1D:0E:BF Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 33746EA8035E4B46A0B5D1A49D0C19C47DAA4C92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0464 Signing time: Thu 26 Mar 2026 11:26:19 +0000 Manifest this update: Thu 26 Mar 2026 11:21:19 +0000 Manifest next update: Fri 27 Mar 2026 11:45:19 +0000 Files and hashes: 1: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: jwLNfDaENJdG6dV02VXHO5BLD0VANrPYuRteB8cCEwk=) 2: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) 3: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:74:6e:a8:03:5e:4b:46:a0:b5:d1:a4:9d:0c:19:c4:7d:aa:4c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Mar 26 11:21:19 2026 GMT Not After : Mar 27 11:45:19 2026 GMT Subject: CN=D5FD2812CEC80FC3A35BB31DEF5069FDF31D0EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:2a:fa:68:a9:18:b4:b3:a0:f7:98:e5:b8: 78:f3:14:62:2f:9a:7e:de:b1:ad:05:22:cc:90:f3: ed:00:0a:35:dd:5e:70:54:e1:42:b3:ec:b6:07:4f: 17:7f:89:97:e0:4f:ba:36:df:d7:3b:88:7d:44:e3: b6:89:88:5e:d3:53:9f:00:d8:7e:68:6f:9d:68:09: 60:ef:af:55:bd:7c:9a:96:5e:50:6c:dd:5d:51:03: 19:5e:53:de:d0:21:4c:30:7f:8a:27:f5:29:61:65: f0:84:97:6f:a6:d6:83:a9:c5:4e:88:28:98:1d:3f: f2:2b:55:4e:0c:41:6e:94:88:36:2c:65:11:73:21: 78:67:c1:2d:64:f9:9e:5f:9f:2d:e0:17:fc:9a:d7: a3:a6:d0:fe:6a:4a:29:92:79:e8:74:7e:08:81:76: 59:41:eb:7d:e2:4c:e8:02:5a:6e:0f:9a:cf:c5:44: 33:6a:13:d4:1d:ad:05:29:46:60:fe:f0:1e:05:74: c5:0c:89:df:fd:a8:92:bf:50:63:bd:89:fb:5a:ba: 8d:9d:d8:93:9c:bf:8e:64:bd:f2:ce:af:86:92:f0: a5:a1:2a:44:0b:1d:ad:dc:ee:79:f6:24:19:77:5d: 1b:85:ac:f9:98:14:5a:c1:24:a9:11:cb:29:03:b1: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FD:28:12:CE:C8:0F:C3:A3:5B:B3:1D:EF:50:69:FD:F3:1D:0E:BF X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8b:43:3f:01:89:88:16:b0:48:e4:e0:5e:76:51:ac:44:e0: da:12:1f:4e:fc:eb:70:5f:08:5d:11:4e:55:d0:06:eb:41:7f: e2:0b:85:77:81:7d:c6:fe:05:ca:94:4d:d4:bb:10:71:93:c7: a9:3f:b3:62:3e:af:1b:41:ba:20:57:0e:12:4e:e5:3b:0e:03: 04:33:7f:f2:ee:da:23:c5:d4:97:dc:5b:73:c9:47:96:f9:8a: 92:29:df:3a:7f:5b:25:8e:86:4f:60:4d:40:a4:09:8a:46:b7: f8:56:4d:f2:6d:66:f7:57:80:06:d5:ba:6e:63:1c:a6:0a:fb: 2f:59:d8:2e:f4:fc:6d:1e:b3:83:3e:86:f6:60:a2:a3:be:76: 17:c8:53:8f:84:18:24:24:da:13:34:86:03:b5:ec:0b:da:55: 3d:d1:d9:bd:08:43:98:0a:93:6e:67:f1:d1:cf:e7:7c:b8:17: 78:9b:f4:42:8c:a9:b3:ac:3f:17:a6:25:98:f8:57:e5:02:44: 4e:a6:ea:d9:4a:63:30:cf:4d:87:ca:dc:23:80:b7:41:1c:b9: 27:5c:0e:f8:05:30:5d:2d:dd:dc:90:8a:cd:08:b2:3e:5e:9f: a7:68:f4:5f:37:64:be:3d:19:7c:16:9d:bd:27:8b:40:1e:96: 3f:82:07:59 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUM3RuqANeS0agtdGknQwZxH2qTJIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwMzI2MTEyMTE5WhcNMjYwMzI3MTE0NTE5 WjAzMTEwLwYDVQQDEyhENUZEMjgxMkNFQzgwRkMzQTM1QkIzMURFRjUwNjlGREYz MUQwRUJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2wq+mipGLSz oPeY5bh48xRiL5p+3rGtBSLMkPPtAAo13V5wVOFCs+y2B08Xf4mX4E+6Nt/XO4h9 ROO2iYhe01OfANh+aG+daAlg769VvXyall5QbN1dUQMZXlPe0CFMMH+KJ/UpYWXw hJdvptaDqcVOiCiYHT/yK1VODEFulIg2LGURcyF4Z8EtZPmeX58t4Bf8mtejptD+ akopknnodH4IgXZZQet94kzoAlpuD5rPxUQzahPUHa0FKUZg/vAeBXTFDInf/aiS v1BjvYn7WrqNndiTnL+OZL3yzq+GkvCloSpECx2t3O559iQZd10bhaz5mBRawSSp EcspA7FJNQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFNX9KBLOyA/Do1uzHe9Qaf3z HQ6/MB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIeLQz8BiYgWsEjk4F52UaxE4NoSH078 63BfCF0RTlXQButBf+ILhXeBfcb+BcqUTdS7EHGTx6k/s2I+rxtBuiBXDhJO5TsO AwQzf/Lu2iPF1JfcW3PJR5b5ipIp3zp/WyWOhk9gTUCkCYpGt/hWTfJtZvdXgAbV um5jHKYK+y9Z2C70/G0es4M+hvZgoqO+dhfIU4+EGCQk2hM0hgO17AvaVT3R2b0I Q5gKk25n8dHP53y4F3ib9EKMqbOsPxemJZj4V+UCRE6m6tlKYzDPTYfK3COAt0Ec uSdcDvgFMF0t3dyQis0Isj5en6do9F83ZL49GXwWnb0ni0Aelj+CB1k= -----END CERTIFICATE-----Generated at Thu Mar 26 16:34:10 2026 by rpki-client