$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: dIU7J7F3yS1uluGegxY2mYVTcN87mdWIavarn1Ax4Z8= Subject key identifier: 93:E2:D4:C3:91:A7:14:74:D7:2E:6A:56:D6:97:7E:84:4B:8C:A1:F6 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 685A5356578AA80D71BB10426CE51A3CFB8BA635 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0331 Signing time: Fri 08 Aug 2025 14:17:34 +0000 Manifest this update: Fri 08 Aug 2025 14:12:34 +0000 Manifest next update: Sat 09 Aug 2025 17:52:34 +0000 Files and hashes: 1: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: Y/3rmgU/sldh4Hfp9RHavnPp2jy6RYQXAdoezGv2CjQ=) 2: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YHE5juILGcXmvEbsHkjOWPNwOPk4cYDIWZUneodgsXQ=) 3: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: hyWcMkVAnb/ts0OLXms/1Xanw5xLdoM5kuZivgcEGXQ=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5a:53:56:57:8a:a8:0d:71:bb:10:42:6c:e5:1a:3c:fb:8b:a6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Aug 8 14:12:34 2025 GMT Not After : Aug 9 17:52:34 2025 GMT Subject: CN=93E2D4C391A71474D72E6A56D6977E844B8CA1F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:d6:6b:c4:fd:b0:81:76:bf:dd:7f:d9:08: 69:15:ec:65:f0:29:06:fd:d3:9c:ee:cb:b0:8f:2e: 71:2c:41:55:f5:60:08:00:62:3a:cb:2f:4d:0d:fe: e7:75:cb:33:94:08:14:95:cf:3b:a9:aa:be:2a:80: c4:e4:6c:10:88:fb:d4:44:22:b0:70:ba:48:9f:4f: 7f:b1:71:4c:bd:2e:34:74:b3:5a:e1:02:29:05:9a: 2f:51:e0:5f:b0:fa:43:70:a4:ca:1a:16:78:b8:15: e8:fb:9b:2b:53:f9:28:0f:fa:77:a2:2c:aa:4a:2a: 76:10:ad:cd:c4:08:e9:4b:24:fe:73:5c:13:90:50: 42:c4:1b:32:5e:0e:3b:a2:b6:ad:5c:6e:9f:a8:d0: 87:a3:66:31:64:f6:77:d1:aa:92:c9:54:f8:da:cb: 66:06:b2:3f:99:d5:49:34:eb:02:d0:eb:bc:bc:fd: ca:b0:9b:d2:77:00:f4:60:0a:71:ea:1e:5a:e6:96: 24:25:a6:ad:33:98:6d:1d:c1:e9:48:15:2e:3c:54: 61:14:77:f1:e0:0c:e8:50:72:9e:fb:c6:0b:e6:8b: 98:c2:43:62:d6:20:23:2d:3e:b6:3b:5c:9c:c6:59: d0:8a:3a:3e:7b:c2:01:66:13:e7:a1:50:f3:b5:ea: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E2:D4:C3:91:A7:14:74:D7:2E:6A:56:D6:97:7E:84:4B:8C:A1:F6 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f6:97:a4:56:f8:28:4a:b6:e0:d5:1b:ec:66:35:21:90:87: e1:fe:63:27:88:50:7d:73:ec:ac:b2:8e:b4:15:af:f7:e4:8f: 6d:02:c6:e0:97:e4:ae:fa:e9:44:b0:2c:8c:2e:a7:a3:e3:f4: cf:83:d3:4d:75:2c:da:91:f4:ee:54:6f:00:65:dc:0d:8e:50: d2:15:fe:7b:9a:03:fa:63:51:d8:fb:ab:77:fa:19:db:d6:96: 5f:43:60:55:7e:f7:5a:6a:2a:30:c1:85:8b:36:74:54:67:ef: 5f:e3:75:bc:9e:7e:57:f4:c8:63:8c:c9:ec:65:13:48:ad:c8: db:6b:50:3a:56:2a:07:18:ef:f2:6b:40:d2:01:0b:e8:55:53: 7d:6b:f8:33:b1:74:93:b5:49:03:f0:90:dc:d5:c1:a2:e2:19: 3e:da:8c:23:3a:49:75:04:76:c6:89:b0:1c:77:9f:fe:bf:ad: 0b:1f:96:56:18:da:b0:5c:2c:3f:9b:51:c7:28:b8:6c:85:67: f5:3f:ea:ce:e0:06:96:71:41:60:25:74:c3:51:04:0d:4d:7a: 85:9f:3f:b0:ca:ad:b3:c9:6a:63:cf:05:2c:19:6b:62:a6:4d: ab:d4:98:95:4e:77:ad:95:5c:22:0d:22:8d:e5:78:8b:aa:7b: 4b:62:de:1e -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUaFpTVleKqA1xuxBCbOUaPPuLpjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUwODA4MTQxMjM0WhcNMjUwODA5MTc1MjM0 WjAzMTEwLwYDVQQDEyg5M0UyRDRDMzkxQTcxNDc0RDcyRTZBNTZENjk3N0U4NDRC OENBMUY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkprWa8T9sIF2 v91/2QhpFexl8CkG/dOc7suwjy5xLEFV9WAIAGI6yy9NDf7ndcszlAgUlc87qaq+ KoDE5GwQiPvURCKwcLpIn09/sXFMvS40dLNa4QIpBZovUeBfsPpDcKTKGhZ4uBXo +5srU/koD/p3oiyqSip2EK3NxAjpSyT+c1wTkFBCxBsyXg47oratXG6fqNCHo2Yx ZPZ30aqSyVT42stmBrI/mdVJNOsC0Ou8vP3KsJvSdwD0YApx6h5a5pYkJaatM5ht HcHpSBUuPFRhFHfx4AzoUHKe+8YL5ouYwkNi1iAjLT62O1ycxlnQijo+e8IBZhPn oVDztepfYwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFJPi1MORpxR01y5qVtaXfoRL jKH2MB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHv2l6RW+ChKtuDVG+xmNSGQh+H+YyeI UH1z7KyyjrQVr/fkj20CxuCX5K766USwLIwup6Pj9M+D0011LNqR9O5UbwBl3A2O UNIV/nuaA/pjUdj7q3f6GdvWll9DYFV+91pqKjDBhYs2dFRn71/jdbyeflf0yGOM yexlE0ityNtrUDpWKgcY7/JrQNIBC+hVU31r+DOxdJO1SQPwkNzVwaLiGT7ajCM6 SXUEdsaJsBx3n/6/rQsfllYY2rBcLD+bUccouGyFZ/U/6s7gBpZxQWAldMNRBA1N eoWfP7DKrbPJamPPBSwZa2KmTavUmJVOd62VXCINIo3leIuqe0ti3h4= -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:45 2025 by rpki-client