$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: EoxkIY7VmhcDolG51McYcBiyjJ6LwqvKKZX5P7pSzH8= Subject key identifier: 46:32:3A:8E:63:82:0B:B3:83:54:B1:99:04:85:14:E5:D4:14:33:DA Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 6A867DE2339F7EF98B92621D1D06E26EBD282082 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0481 Signing time: Fri 17 Apr 2026 08:31:39 +0000 Manifest this update: Fri 17 Apr 2026 08:26:39 +0000 Manifest next update: Sat 18 Apr 2026 12:20:39 +0000 Files and hashes: 1: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) 2: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) 3: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: yxdxZWo3+NDTdQQygL78DBcUnF/EqMB3wBN4QNHQ1I4=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 12:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:86:7d:e2:33:9f:7e:f9:8b:92:62:1d:1d:06:e2:6e:bd:28:20:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Apr 17 08:26:39 2026 GMT Not After : Apr 18 12:20:39 2026 GMT Subject: CN=46323A8E63820BB38354B199048514E5D41433DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f5:80:e6:f1:80:82:94:68:5d:0e:31:9b:fe: 6e:c1:06:4f:3c:fe:97:b4:e7:72:ed:79:d2:17:e6: f4:77:57:f7:72:97:91:6f:88:80:fd:9b:f0:26:c1: 0d:00:c5:27:b4:0c:ca:d7:90:ed:00:19:9e:5b:1e: 66:f5:54:fc:80:0f:42:1b:da:01:bb:dd:67:26:91: f8:5d:79:f0:b0:4c:6f:c4:c6:b9:81:db:40:00:bd: ba:ca:c8:d3:37:43:7d:f3:ac:f0:fd:5a:68:c9:a3: 7d:5f:4e:65:80:0f:3e:cf:93:b8:ee:b5:b5:89:5b: df:cb:a2:05:f8:2d:d4:53:0f:ec:1d:4d:c2:f8:07: 4c:58:c8:4a:6d:b3:66:de:66:cd:5d:42:a9:f1:8f: 21:19:ea:63:06:32:48:b1:b9:ce:83:2a:3f:ab:95: 92:57:6e:ce:59:fb:cf:d0:51:89:15:7b:76:dd:04: 99:b6:98:f4:88:0f:d8:0d:2a:e3:df:ba:20:14:63: 97:93:4c:af:ad:00:b0:a5:cd:23:39:6d:82:84:a3: 91:8e:84:2d:50:ca:b0:3d:67:a3:38:7a:f8:21:18: 55:62:3c:1e:00:dc:c7:5b:2f:8a:43:c9:7a:04:8f: 5f:05:ce:b4:3b:88:70:a9:84:49:e1:98:bb:66:b3: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:32:3A:8E:63:82:0B:B3:83:54:B1:99:04:85:14:E5:D4:14:33:DA X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e6:38:8b:e2:e5:35:30:32:a7:b5:bf:d4:57:4b:6f:f9:ae: 85:6d:7f:ca:d0:0d:cd:31:2e:4d:68:f5:59:8e:22:a7:10:a5: 8d:3e:08:c1:bf:b1:ef:83:ca:8b:e6:71:7a:a0:5d:62:d5:1e: 05:a1:df:a3:f0:30:00:c1:b3:42:db:ea:01:cd:fd:68:23:fb: fa:89:72:59:3b:10:95:7d:97:a2:14:f1:3e:d8:33:1b:0b:a9: 83:d3:0f:1c:07:9f:06:e7:c2:f2:ee:cf:1a:68:e7:59:07:21: 5f:7f:5f:82:14:55:b7:27:56:1b:d6:d2:4c:33:77:01:cf:cc: 61:57:73:5d:bb:fc:be:8d:a4:30:ac:65:ed:5e:25:7a:cf:bf: 6f:ab:93:32:66:e3:33:de:76:34:d5:db:fe:41:20:97:9d:ac: 49:41:6f:7b:ce:30:ae:7b:82:61:f6:f5:97:9f:2d:b0:49:f6: ed:0f:bb:36:50:65:6e:c1:c6:4f:65:c0:9d:81:d2:20:ab:23: 1c:ce:f4:22:c4:4f:30:ae:bb:17:82:c3:26:86:17:1c:fe:29: fd:5d:e4:b0:98:64:a1:ef:1a:fd:38:71:27:bf:ac:01:23:8e: e9:17:5c:ab:00:e8:02:98:ac:b5:7e:55:5c:cd:33:3c:a4:3b: 7f:8a:00:4d -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUaoZ94jOffvmLkmIdHQbibr0oIIIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwNDE3MDgyNjM5WhcNMjYwNDE4MTIyMDM5 WjAzMTEwLwYDVQQDEyg0NjMyM0E4RTYzODIwQkIzODM1NEIxOTkwNDg1MTRFNUQ0 MTQzM0RBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/WA5vGAgpRo XQ4xm/5uwQZPPP6XtOdy7XnSF+b0d1f3cpeRb4iA/ZvwJsENAMUntAzK15DtABme Wx5m9VT8gA9CG9oBu91nJpH4XXnwsExvxMa5gdtAAL26ysjTN0N986zw/VpoyaN9 X05lgA8+z5O47rW1iVvfy6IF+C3UUw/sHU3C+AdMWMhKbbNm3mbNXUKp8Y8hGepj BjJIsbnOgyo/q5WSV27OWfvP0FGJFXt23QSZtpj0iA/YDSrj37ogFGOXk0yvrQCw pc0jOW2ChKORjoQtUMqwPWejOHr4IRhVYjweANzHWy+KQ8l6BI9fBc60O4hwqYRJ 4Zi7ZrMCJwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFEYyOo5jgguzg1SxmQSFFOXU FDPaMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBADjmOIvi5TUwMqe1v9RXS2/5roVtf8rQ Dc0xLk1o9VmOIqcQpY0+CMG/se+DyovmcXqgXWLVHgWh36PwMADBs0Lb6gHN/Wgj +/qJclk7EJV9l6IU8T7YMxsLqYPTDxwHnwbnwvLuzxpo51kHIV9/X4IUVbcnVhvW 0kwzdwHPzGFXc127/L6NpDCsZe1eJXrPv2+rkzJm4zPedjTV2/5BIJedrElBb3vO MK57gmH29ZefLbBJ9u0PuzZQZW7Bxk9lwJ2B0iCrIxzO9CLETzCuuxeCwyaGFxz+ Kf1d5LCYZKHvGv04cSe/rAEjjukXXKsA6AKYrLV+VVzNMzykO3+KAE0= -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:27 2026 by rpki-client