$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: mDs9r94Q+xRV/y0xajP9nQxJx6nOtSI8dXRS5I3KsRY= Subject key identifier: 8E:30:FE:14:BD:19:91:75:B1:CD:A0:F4:9E:5C:B1:56:35:BF:20:16 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 1B0C69786764BC828812BEBFBE4839B659A66773 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0445 Signing time: Mon 02 Mar 2026 21:05:57 +0000 Manifest this update: Mon 02 Mar 2026 21:00:57 +0000 Manifest next update: Wed 04 Mar 2026 00:05:57 +0000 Files and hashes: 1: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) 2: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) 3: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: enQRZmDHh8taswPxv/pse6EyQK1DAlFmg0v64olMa7c=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0c:69:78:67:64:bc:82:88:12:be:bf:be:48:39:b6:59:a6:67:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Mar 2 21:00:57 2026 GMT Not After : Mar 4 00:05:57 2026 GMT Subject: CN=8E30FE14BD199175B1CDA0F49E5CB15635BF2016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:0e:60:68:fd:48:57:e2:0d:55:ae:c7:7e: 76:83:4f:a8:65:39:ef:01:51:43:0f:0d:c8:cf:e0: 63:be:c5:d1:2b:0f:55:03:0d:97:cd:5b:37:22:03: 00:5d:2b:2d:99:1a:30:71:14:cf:61:d7:96:33:09: 8d:60:67:46:3e:93:b2:56:c6:8d:c6:47:67:e9:b3: 39:61:16:81:80:27:3c:5c:4a:36:36:11:a5:39:3d: 5b:7b:25:56:ae:cc:8e:ee:e8:27:d7:fc:13:b9:a0: 1f:43:ee:57:5f:1a:1f:18:69:4e:ab:8a:5e:83:43: e8:40:85:19:c1:f1:ca:db:33:1f:b4:5e:fd:84:c7: 34:84:8f:59:cb:8f:21:b1:fb:02:f6:7f:27:00:b0: 61:26:96:1a:0b:e9:e3:83:15:89:9a:1a:b8:59:87: a6:a0:82:17:94:fd:38:c8:f6:1a:80:28:e0:68:ef: 1d:2d:35:a3:3f:ba:c7:cb:ff:21:70:e2:35:f2:e4: da:45:c3:e4:28:f4:00:ae:f3:93:57:01:73:8f:3a: 16:cd:7c:56:b0:51:68:2a:c2:de:6c:35:2a:e0:df: d5:dd:d6:fb:6f:89:f4:ee:37:e2:13:2e:7a:80:ad: fa:79:c8:23:5c:84:fd:bb:8a:7c:a4:a0:4e:6b:ae: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:30:FE:14:BD:19:91:75:B1:CD:A0:F4:9E:5C:B1:56:35:BF:20:16 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:94:6f:da:9c:65:d5:1d:90:e8:fb:8f:30:d9:32:7a:a4:63: f7:5f:29:c0:09:12:6e:17:d3:2a:0d:03:f5:8f:d6:0e:d4:da: 48:09:cb:64:77:c6:43:58:c2:43:69:0f:7b:5d:b6:26:29:09: 80:f4:a9:ef:d0:d8:3f:f0:fe:59:cc:c4:9d:23:0d:3d:e1:b2: 61:3b:2b:45:d0:45:fd:da:d2:a5:5c:ba:0d:b0:c7:f7:1e:e9: af:dd:ec:76:c6:95:f4:96:a5:6d:cc:2b:20:fc:dd:78:00:ca: c8:e7:14:6b:97:33:aa:5e:a5:f3:bd:e9:44:1f:d7:11:c7:0d: 2d:f0:ae:33:6d:a7:b9:7f:02:31:69:04:e2:17:b5:fe:07:13: 15:9d:21:be:c5:73:84:ff:ad:71:55:d9:b7:c6:a7:90:e9:d9: 0a:51:0f:bd:8e:12:29:19:ef:3d:fd:ff:76:65:75:1e:73:84: 50:92:bd:b1:bb:51:11:1d:72:61:95:7b:67:1e:3a:78:53:96: 6e:f4:3f:7c:a3:08:de:12:97:9b:74:26:ad:b0:70:7a:00:1d: 57:f9:71:f9:98:6b:94:57:5c:cd:bc:36:b1:ad:c4:ef:96:31: fe:eb:fd:9f:66:a5:80:a3:0e:f7:32:f9:bc:38:f0:80:34:01: 48:55:f0:00 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUGwxpeGdkvIKIEr6/vkg5tlmmZ3MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwMzAyMjEwMDU3WhcNMjYwMzA0MDAwNTU3 WjAzMTEwLwYDVQQDEyg4RTMwRkUxNEJEMTk5MTc1QjFDREEwRjQ5RTVDQjE1NjM1 QkYyMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoYOYGj9SFfi DVWux352g0+oZTnvAVFDDw3Iz+BjvsXRKw9VAw2XzVs3IgMAXSstmRowcRTPYdeW MwmNYGdGPpOyVsaNxkdn6bM5YRaBgCc8XEo2NhGlOT1beyVWrsyO7ugn1/wTuaAf Q+5XXxofGGlOq4peg0PoQIUZwfHK2zMftF79hMc0hI9Zy48hsfsC9n8nALBhJpYa C+njgxWJmhq4WYemoIIXlP04yPYagCjgaO8dLTWjP7rHy/8hcOI18uTaRcPkKPQA rvOTVwFzjzoWzXxWsFFoKsLebDUq4N/V3db7b4n07jfiEy56gK36ecgjXIT9u4p8 pKBOa65WpwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFI4w/hS9GZF1sc2g9J5csVY1 vyAWMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBALSUb9qcZdUdkOj7jzDZMnqkY/dfKcAJ Em4X0yoNA/WP1g7U2kgJy2R3xkNYwkNpD3tdtiYpCYD0qe/Q2D/w/lnMxJ0jDT3h smE7K0XQRf3a0qVcug2wx/ce6a/d7HbGlfSWpW3MKyD83XgAysjnFGuXM6pepfO9 6UQf1xHHDS3wrjNtp7l/AjFpBOIXtf4HExWdIb7Fc4T/rXFV2bfGp5Dp2QpRD72O EikZ7z39/3ZldR5zhFCSvbG7UREdcmGVe2ceOnhTlm70P3yjCN4Sl5t0Jq2wcHoA HVf5cfmYa5RXXM28NrGtxO+WMf7r/Z9mpYCjDvcy+bw48IA0AUhV8AA= -----END CERTIFICATE-----Generated at Tue Mar 3 05:40:21 2026 by rpki-client