$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: MxWq06XNOHa4RZQ1sUtht+OwsrmJygWVSdea/lnfcgg= Subject key identifier: 2B:F9:A5:1B:34:8C:81:25:9E:00:EC:10:A1:6C:DC:BE:54:2D:06:21 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 3E30021BB26C795296203BBD77C70747FAE1C996 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0345 Signing time: Sat 23 Aug 2025 16:17:43 +0000 Manifest this update: Sat 23 Aug 2025 16:12:43 +0000 Manifest next update: Sun 24 Aug 2025 18:14:43 +0000 Files and hashes: 1: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: Sy3u14rEnqJNGHw+J1+FEDOZu9O7J++yFxBl9qkJY+o=) 2: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: Y/3rmgU/sldh4Hfp9RHavnPp2jy6RYQXAdoezGv2CjQ=) 3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YHE5juILGcXmvEbsHkjOWPNwOPk4cYDIWZUneodgsXQ=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:30:02:1b:b2:6c:79:52:96:20:3b:bd:77:c7:07:47:fa:e1:c9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Aug 23 16:12:43 2025 GMT Not After : Aug 24 18:14:43 2025 GMT Subject: CN=2BF9A51B348C81259E00EC10A16CDCBE542D0621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:d7:b3:c4:61:7e:0e:c8:8e:28:e7:cd:c6: e9:8f:72:56:be:73:48:2e:b6:34:4c:48:2c:65:c5: 8f:ad:22:2b:24:70:e7:06:d8:1c:d5:8f:f6:52:b0: 29:86:bb:56:b5:39:28:8f:4f:ad:9d:61:a7:7b:3c: 4a:7e:29:2b:e4:d0:76:34:69:7c:35:d7:dd:84:43: 0c:06:a9:be:d7:d5:43:95:3f:8e:ad:b8:d6:e4:a6: f1:58:99:39:c9:b0:27:e7:1b:2f:57:17:fd:69:2f: 81:39:9f:95:5c:0b:f1:1d:bf:20:2d:d4:0c:3f:d3: a8:5d:44:da:34:81:55:ad:22:f1:97:f3:e3:a6:84: 1c:92:58:35:52:57:eb:86:9f:74:e3:a8:26:f4:a4: f5:45:4c:e3:25:ba:ab:93:36:e9:fe:07:8d:9a:44: ab:0e:26:4b:dc:ac:5f:af:a5:48:92:09:22:37:6a: de:ea:ed:33:73:28:ef:22:f3:98:c9:95:62:db:8e: e6:96:e9:c6:25:28:c8:10:09:ee:e9:eb:ea:d7:7d: 9f:54:eb:25:a7:6e:87:9d:51:36:bf:dd:e5:79:a3: 7c:19:f8:dd:e3:52:b5:09:ce:dd:f7:a6:d0:4a:88: 07:ec:30:26:13:6e:96:1a:bb:25:64:07:b7:bc:1a: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F9:A5:1B:34:8C:81:25:9E:00:EC:10:A1:6C:DC:BE:54:2D:06:21 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1a:a5:31:ff:df:1e:44:5c:a3:5a:ec:c9:f9:01:80:a4:98: 87:7a:c0:f0:3b:0d:76:84:d7:04:af:f8:86:49:c0:92:bd:04: c5:9c:6e:76:09:e6:23:ac:3f:02:3b:ef:2f:59:57:2c:3d:04: 21:f2:3d:18:61:f4:bb:53:e4:df:ad:be:50:68:9a:d0:cb:89: 09:4a:4f:33:6e:bd:93:34:dd:74:4e:7f:14:e5:e6:03:6e:2e: d8:71:f9:9a:a2:8e:89:07:0d:fa:82:f7:dd:5d:f4:7d:7b:84: d8:54:50:43:8c:86:e5:4b:12:ce:74:5f:cd:9d:b8:3e:a0:0c: ea:81:e4:11:10:2f:b6:81:ef:ba:b3:84:be:0a:62:62:72:ee: 04:b1:70:9b:43:c9:2f:ff:89:29:e2:36:56:8c:7a:b8:f5:63: 23:c7:da:15:0e:58:bf:76:ea:ae:2b:e5:6e:70:4a:07:38:79: 14:18:29:23:25:ee:67:c6:3c:f1:c2:fd:66:8f:44:0d:7f:ef: db:c4:22:18:b4:8f:1c:73:67:c9:71:3e:0b:c4:74:3a:b7:ce: 80:b1:69:65:60:d0:29:7e:ab:04:f7:04:82:34:22:e6:21:12: 44:91:5b:79:f5:25:87:f3:4c:35:19:73:fe:fa:9b:be:ca:c7: 49:5b:8a:40 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUPjACG7JseVKWIDu9d8cHR/rhyZYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUwODIzMTYxMjQzWhcNMjUwODI0MTgxNDQz WjAzMTEwLwYDVQQDEygyQkY5QTUxQjM0OEM4MTI1OUUwMEVDMTBBMTZDRENCRTU0 MkQwNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnknXs8Rhfg7I jijnzcbpj3JWvnNILrY0TEgsZcWPrSIrJHDnBtgc1Y/2UrAphrtWtTkoj0+tnWGn ezxKfikr5NB2NGl8NdfdhEMMBqm+19VDlT+OrbjW5KbxWJk5ybAn5xsvVxf9aS+B OZ+VXAvxHb8gLdQMP9OoXUTaNIFVrSLxl/PjpoQcklg1Ulfrhp9046gm9KT1RUzj Jbqrkzbp/geNmkSrDiZL3Kxfr6VIkgkiN2re6u0zcyjvIvOYyZVi247mlunGJSjI EAnu6evq132fVOslp26HnVE2v93leaN8Gfjd41K1Cc7d96bQSogH7DAmE26WGrsl ZAe3vBr+pQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFCv5pRs0jIElngDsEKFs3L5U LQYhMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBADsapTH/3x5EXKNa7Mn5AYCkmId6wPA7 DXaE1wSv+IZJwJK9BMWcbnYJ5iOsPwI77y9ZVyw9BCHyPRhh9LtT5N+tvlBomtDL iQlKTzNuvZM03XROfxTl5gNuLthx+ZqijokHDfqC991d9H17hNhUUEOMhuVLEs50 X82duD6gDOqB5BEQL7aB77qzhL4KYmJy7gSxcJtDyS//iSniNlaMerj1YyPH2hUO WL926q4r5W5wSgc4eRQYKSMl7mfGPPHC/WaPRA1/79vEIhi0jxxzZ8lxPgvEdDq3 zoCxaWVg0Cl+qwT3BII0IuYhEkSRW3n1JYfzTDUZc/76m77Kx0lbikA= -----END CERTIFICATE-----Generated at Sun Aug 24 06:30:04 2025 by rpki-client