$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: uz/ubSnpXg02N1QZbu6BNmu7f68QLDxPVxexLwkoStk= Subject key identifier: E3:D8:A1:03:EC:E3:7C:B4:01:A8:3B:30:9D:7F:D6:FD:88:72:FD:49 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 7430996D7D84EE5D156EF6A23095088208C8C20C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0444 Signing time: Mon 02 Mar 2026 02:50:57 +0000 Manifest this update: Mon 02 Mar 2026 02:45:57 +0000 Manifest next update: Tue 03 Mar 2026 05:02:57 +0000 Files and hashes: 1: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) 2: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) 3: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: Od6SgAGpReDvRHU059YtMlRpwM9tT7CODKgDbyoT35c=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 05:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:30:99:6d:7d:84:ee:5d:15:6e:f6:a2:30:95:08:82:08:c8:c2:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Mar 2 02:45:57 2026 GMT Not After : Mar 3 05:02:57 2026 GMT Subject: CN=E3D8A103ECE37CB401A83B309D7FD6FD8872FD49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:7c:da:7a:5b:39:34:bf:d8:a3:41:e1:ab: ea:6f:6a:71:6d:be:5e:63:2b:58:6b:91:f7:6e:11: 81:0e:8a:e0:a2:95:90:cc:d3:69:6a:7a:e0:15:00: 25:5b:04:31:71:07:b0:05:9b:10:b7:37:80:84:55: c8:d4:8c:54:c3:8f:cc:46:c2:39:9f:7f:4d:e8:61: f9:5f:7d:5d:59:94:51:a4:d4:25:81:b2:9f:47:f4: 28:ab:14:0c:bf:c0:52:80:27:df:50:1a:d6:46:b4: f7:d6:a5:a7:6d:a3:94:a0:88:63:28:32:6b:13:f9: 86:94:60:46:73:a8:92:27:17:56:eb:db:b5:ce:69: 1e:9f:5a:68:f0:a7:6d:6a:6f:e4:c0:28:00:bd:c2: b7:58:6a:95:0f:62:c2:75:77:6f:29:84:83:23:12: 12:b2:62:a5:53:e0:1d:9b:3e:18:16:1b:4c:54:22: 75:c4:5a:6e:bb:68:4d:03:5d:fd:9b:c7:21:ef:b0: 7f:d8:34:b9:4f:2f:64:06:12:80:02:e2:69:1f:41: fb:ee:1f:8a:76:36:71:4e:59:b8:c6:d8:42:5c:12: 51:6f:43:45:09:bd:27:48:6a:ac:d6:d3:6e:80:21: 6d:e6:2a:ed:65:01:da:d7:b7:9a:df:ee:a4:e8:97: f5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D8:A1:03:EC:E3:7C:B4:01:A8:3B:30:9D:7F:D6:FD:88:72:FD:49 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0a:e4:55:48:13:9c:53:99:0d:ea:47:1e:c1:32:97:62:16: ce:e6:17:0d:b7:b6:2a:f0:cf:1e:64:76:3b:4f:98:50:15:ee: e3:8a:f2:27:61:41:86:21:88:19:2a:bc:54:5d:08:c6:52:6c: 35:7f:4e:67:1e:e0:b9:e3:8a:ba:9c:a1:5c:c6:12:9f:19:91: de:3e:c5:e3:f6:ee:fc:39:f9:f4:68:cf:ea:e4:41:41:f8:96: 95:62:8f:ec:a8:c0:cf:1f:b1:76:fd:37:82:dd:7a:be:14:27: 01:07:20:67:04:3f:e8:d1:2e:73:0a:ec:9d:46:a4:e1:04:82: ce:31:37:e4:2c:fd:91:40:af:5b:de:ae:6b:a1:a5:bb:4d:80: 5f:3c:b0:ab:44:da:0e:a8:cc:8b:f8:93:2e:3f:9d:ae:48:6d: 0c:3e:2e:1d:0c:01:3f:22:aa:47:40:b3:c2:65:1c:8d:f7:eb: 63:21:21:9d:bb:e2:72:e0:f1:e5:44:59:99:a3:bd:4b:dc:84: ba:30:e1:a7:c6:e5:ff:68:5d:2e:da:b9:8e:5b:07:e1:07:be: b8:b7:34:1c:07:a2:db:62:d5:f1:a2:3e:a7:e4:42:b7:dd:d0: d2:d0:fb:57:93:41:80:df:c8:fb:0f:4a:80:31:33:98:d3:eb: c9:29:66:d2 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUdDCZbX2E7l0VbvaiMJUIggjIwgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwMzAyMDI0NTU3WhcNMjYwMzAzMDUwMjU3 WjAzMTEwLwYDVQQDEyhFM0Q4QTEwM0VDRTM3Q0I0MDFBODNCMzA5RDdGRDZGRDg4 NzJGRDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20182npbOTS/ 2KNB4avqb2pxbb5eYytYa5H3bhGBDorgopWQzNNpanrgFQAlWwQxcQewBZsQtzeA hFXI1IxUw4/MRsI5n39N6GH5X31dWZRRpNQlgbKfR/QoqxQMv8BSgCffUBrWRrT3 1qWnbaOUoIhjKDJrE/mGlGBGc6iSJxdW69u1zmken1po8Kdtam/kwCgAvcK3WGqV D2LCdXdvKYSDIxISsmKlU+Admz4YFhtMVCJ1xFpuu2hNA139m8ch77B/2DS5Ty9k BhKAAuJpH0H77h+KdjZxTlm4xthCXBJRb0NFCb0nSGqs1tNugCFt5irtZQHa17ea 3+6k6Jf1PQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFOPYoQPs43y0Aag7MJ1/1v2I cv1JMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFsK5FVIE5xTmQ3qRx7BMpdiFs7mFw23 tirwzx5kdjtPmFAV7uOK8idhQYYhiBkqvFRdCMZSbDV/Tmce4LnjirqcoVzGEp8Z kd4+xeP27vw5+fRoz+rkQUH4lpVij+yowM8fsXb9N4Lder4UJwEHIGcEP+jRLnMK 7J1GpOEEgs4xN+Qs/ZFAr1vermuhpbtNgF88sKtE2g6ozIv4ky4/na5IbQw+Lh0M AT8iqkdAs8JlHI3362MhIZ274nLg8eVEWZmjvUvchLow4afG5f9oXS7auY5bB+EH vri3NBwHotti1fGiPqfkQrfd0NLQ+1eTQYDfyPsPSoAxM5jT68kpZtI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:39:58 2026 by rpki-client