$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: 3AWwKPpRmCLHZhNbcv4ZQ2WnI9eDCdnddcIC+Cg2p5o= Subject key identifier: AE:36:57:94:D5:4B:9B:FC:1B:AB:6D:0A:2B:C1:21:D6:9A:BF:47:FF Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 5B4345A60B57EB187D6A1741A3B9D65145E576F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 03A8 Signing time: Tue 04 Nov 2025 16:28:45 +0000 Manifest this update: Tue 04 Nov 2025 16:23:45 +0000 Manifest next update: Wed 05 Nov 2025 18:20:45 +0000 Files and hashes: 1: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) 2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: kjG5bzoU0+UtS6fGJ6mD7nEy1/t+notGnhRuwPqprK0=) 3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 18:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:43:45:a6:0b:57:eb:18:7d:6a:17:41:a3:b9:d6:51:45:e5:76:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Nov 4 16:23:45 2025 GMT Not After : Nov 5 18:20:45 2025 GMT Subject: CN=AE365794D54B9BFC1BAB6D0A2BC121D69ABF47FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b6:ac:8f:f6:6c:e3:7e:05:4c:ab:f1:53:5b: 6f:00:99:2d:5b:29:a2:1b:d1:f6:3d:10:bc:60:3d: be:a5:e9:f8:6c:e3:66:06:e7:78:cf:ce:23:31:c0: 4b:56:f7:5c:f0:11:d5:00:c2:53:37:03:9d:70:c6: d4:a0:4a:91:50:90:3b:ce:68:8b:cf:e1:48:17:b2: 07:66:41:53:a9:a8:6b:13:4d:69:9c:4c:fd:5e:c4: f6:15:e5:70:3f:84:e4:9c:b0:0d:5b:0f:7f:b9:2e: 1d:90:82:34:83:9c:f8:c5:ae:72:ce:fa:33:bb:0e: 00:72:0c:65:3f:cf:32:e6:04:ff:8d:cb:4e:e9:00: e1:e3:04:3e:16:83:ba:a8:5d:18:e4:a3:3f:cf:0b: fb:f8:7d:6f:c7:23:ad:a9:d0:3a:d2:ef:01:be:20: 8c:d3:c1:eb:68:87:e5:ea:a3:e5:d8:9e:26:eb:8c: 56:a1:49:87:4c:ef:b9:2b:35:ba:4e:b7:08:6c:a6: 09:f4:23:a2:6f:2d:19:9b:3a:60:1e:30:fd:a6:77: 89:30:90:6e:ea:51:97:50:f4:be:50:1e:7e:53:8f: 7f:70:a9:ae:c1:07:6f:75:61:5e:b6:7e:2b:05:11: 74:a6:26:30:d6:12:c2:28:c3:43:87:64:22:77:c7: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:36:57:94:D5:4B:9B:FC:1B:AB:6D:0A:2B:C1:21:D6:9A:BF:47:FF X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:c4:b8:4d:b9:0a:e7:a3:ae:48:6c:ad:cf:02:c6:9c:78:31: 31:de:b2:cd:17:9f:84:1f:d3:16:f2:5e:4b:21:72:83:76:1c: 52:d7:e7:5f:42:63:48:56:52:00:40:c6:87:5d:43:8f:d7:28: 40:63:72:3c:ba:56:7e:c0:64:0b:cc:85:5d:ae:ac:ab:15:30: f7:cf:af:ec:1a:3f:20:cb:50:1d:14:cb:2b:7b:2b:de:41:c7: af:40:b1:37:47:70:d8:4b:2a:c6:82:8b:20:91:8d:19:84:a5: 5a:f0:51:65:b4:9c:e1:2d:11:aa:57:1c:9a:02:a5:66:a5:da: 3f:2c:ca:66:6c:db:63:2f:10:cb:9a:33:b9:3d:64:54:5b:c1: ac:65:a3:83:10:17:ad:77:2b:d8:cc:8e:49:d3:1e:8d:a6:65: 44:7e:ec:f1:f2:33:c8:18:52:18:af:e7:19:00:e4:a6:ce:d4: 16:5f:2d:da:ff:b6:f0:f7:df:95:4d:46:f4:53:c4:5b:4c:6d: 0e:8b:4b:f0:6f:03:44:75:51:e8:bc:c3:b8:48:1e:cc:af:fc: 04:51:01:18:c3:3d:9f:52:3b:e2:8b:a5:83:3b:ce:d3:82:b9: 71:1b:c0:82:b7:90:3e:ee:8b:5c:70:3c:87:ca:7d:ea:78:51: 35:d5:b6:85 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUW0NFpgtX6xh9ahdBo7nWUUXldvMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUxMTA0MTYyMzQ1WhcNMjUxMTA1MTgyMDQ1 WjAzMTEwLwYDVQQDEyhBRTM2NTc5NEQ1NEI5QkZDMUJBQjZEMEEyQkMxMjFENjlB QkY0N0ZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97asj/Zs434F TKvxU1tvAJktWymiG9H2PRC8YD2+pen4bONmBud4z84jMcBLVvdc8BHVAMJTNwOd cMbUoEqRUJA7zmiLz+FIF7IHZkFTqahrE01pnEz9XsT2FeVwP4TknLANWw9/uS4d kII0g5z4xa5yzvozuw4AcgxlP88y5gT/jctO6QDh4wQ+FoO6qF0Y5KM/zwv7+H1v xyOtqdA60u8BviCM08HraIfl6qPl2J4m64xWoUmHTO+5KzW6TrcIbKYJ9COiby0Z mzpgHjD9pneJMJBu6lGXUPS+UB5+U49/cKmuwQdvdWFetn4rBRF0piYw1hLCKMND h2Qid8e+TwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFK42V5TVS5v8G6ttCivBIdaa v0f/MB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAMHEuE25Cuejrkhsrc8Cxpx4MTHess0X n4Qf0xbyXkshcoN2HFLX519CY0hWUgBAxoddQ4/XKEBjcjy6Vn7AZAvMhV2urKsV MPfPr+waPyDLUB0Uyyt7K95Bx69AsTdHcNhLKsaCiyCRjRmEpVrwUWW0nOEtEapX HJoCpWal2j8symZs22MvEMuaM7k9ZFRbwaxlo4MQF613K9jMjknTHo2mZUR+7PHy M8gYUhiv5xkA5KbO1BZfLdr/tvD335VNRvRTxFtMbQ6LS/BvA0R1Uei8w7hIHsyv /ARRARjDPZ9SO+KLpYM7ztOCuXEbwIK3kD7ui1xwPIfKfep4UTXVtoU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:05 2025 by rpki-client