$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: 5PG6b7MGhfyyEVxpNzmpAAnbACxtRlp5jmAa5YKtlOM= Subject key identifier: AF:75:21:B2:5C:A3:A7:00:A4:B8:86:84:FA:4E:D2:12:F5:E9:CB:A8 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 7020D0E198AEF5D84864C3EC36371DEC2D483F7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 02AC Signing time: Wed 30 Apr 2025 14:19:27 +0000 Manifest this update: Wed 30 Apr 2025 14:14:27 +0000 Manifest next update: Thu 01 May 2025 16:22:27 +0000 Files and hashes: 1: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: 5srMqhR3wWS4QLRjUiR6TlOD92BiqUkCfDrn6OGPvuc=) 2: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: Y/3rmgU/sldh4Hfp9RHavnPp2jy6RYQXAdoezGv2CjQ=) 3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YHE5juILGcXmvEbsHkjOWPNwOPk4cYDIWZUneodgsXQ=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:20:d0:e1:98:ae:f5:d8:48:64:c3:ec:36:37:1d:ec:2d:48:3f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Apr 30 14:14:27 2025 GMT Not After : May 1 16:22:27 2025 GMT Subject: CN=AF7521B25CA3A700A4B88684FA4ED212F5E9CBA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:a7:8c:d7:74:73:d8:22:52:84:49:ca:f1: 7b:e8:0e:a3:f9:9c:df:49:d5:b7:7f:7b:28:f7:39: 58:78:38:34:b4:cb:91:2b:28:9c:a6:95:cd:d5:eb: 07:33:52:a6:04:ba:4f:11:6d:21:f6:10:d9:85:87: cc:f0:b6:5a:5d:e3:e6:07:da:b3:7a:22:fc:d1:65: c6:05:28:4c:01:2c:e6:19:ff:45:a6:28:ce:a1:4f: f1:c2:64:4d:46:a4:6a:70:26:d6:11:ee:e4:52:11: b0:5b:ce:d2:83:51:21:94:b9:3e:c9:d5:98:3d:8e: a8:4e:d3:68:3a:43:41:e8:5c:a8:b3:3b:3b:0a:f6: 24:32:62:7b:79:d2:4e:dc:c4:e4:e6:c5:ea:ab:91: 8e:fe:94:8d:67:df:8d:1b:40:7d:8b:43:5f:68:69: c8:b1:20:16:f7:0d:aa:9e:23:35:0b:1e:57:50:e5: af:29:7f:4d:fe:25:9f:ea:72:ff:3a:03:9f:bd:44: 8e:c7:02:18:c9:9c:5f:3e:9f:e2:a1:07:3b:a0:2a: d6:90:e1:fc:aa:8a:a1:7c:05:05:9b:fb:76:03:3a: e3:c4:91:0c:d3:6c:b3:49:d9:32:de:f3:ab:1d:43: 82:ab:4a:ed:e8:65:47:93:fd:1b:5a:b1:47:89:04: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:75:21:B2:5C:A3:A7:00:A4:B8:86:84:FA:4E:D2:12:F5:E9:CB:A8 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:87:89:0d:1b:a1:bb:f7:27:70:66:98:01:64:01:bd:d6:aa: fc:10:15:69:45:cb:8a:36:69:56:e8:db:8c:92:84:5a:96:24: 5b:be:62:c3:47:cf:7a:59:8c:f0:b1:73:9d:6b:fe:fb:41:8e: b5:03:be:ca:53:86:62:d0:65:f2:e1:5a:bf:3a:e2:99:72:15: c4:ba:2d:a4:22:01:04:e8:ba:78:9b:95:bf:67:f6:20:6d:c4: be:a2:e0:13:29:17:2d:58:31:eb:f2:d3:49:38:27:80:c9:44: d7:d8:d6:5b:ca:64:66:8e:12:26:9f:e6:96:a0:79:08:5a:57: 2d:a3:f4:83:d3:e3:11:08:c3:32:19:85:9b:dc:77:96:e1:27: 6c:79:31:22:6a:22:55:4a:bc:d6:0f:36:a7:61:75:33:6a:25: d1:eb:8b:a1:cc:a4:0a:08:08:8e:13:1d:13:f1:f9:78:53:de: ee:04:10:0f:0d:cc:cf:95:ba:16:92:ba:47:ba:a9:41:1d:16: 49:a3:8d:7f:e9:4a:73:8e:c5:6d:84:4b:79:c3:1b:5f:d9:7a: 4b:93:83:a2:42:e7:35:07:50:36:bd:27:7d:04:75:39:e4:d9: db:52:e5:fe:f3:8e:e9:55:37:77:12:84:82:24:f8:31:06:55: e0:19:8f:6d -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUcCDQ4Ziu9dhIZMPsNjcd7C1IP3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUwNDMwMTQxNDI3WhcNMjUwNTAxMTYyMjI3 WjAzMTEwLwYDVQQDEyhBRjc1MjFCMjVDQTNBNzAwQTRCODg2ODRGQTRFRDIxMkY1 RTlDQkE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthSnjNd0c9gi UoRJyvF76A6j+ZzfSdW3f3so9zlYeDg0tMuRKyicppXN1esHM1KmBLpPEW0h9hDZ hYfM8LZaXePmB9qzeiL80WXGBShMASzmGf9FpijOoU/xwmRNRqRqcCbWEe7kUhGw W87Sg1EhlLk+ydWYPY6oTtNoOkNB6Fyoszs7CvYkMmJ7edJO3MTk5sXqq5GO/pSN Z9+NG0B9i0NfaGnIsSAW9w2qniM1Cx5XUOWvKX9N/iWf6nL/OgOfvUSOxwIYyZxf Pp/ioQc7oCrWkOH8qoqhfAUFm/t2AzrjxJEM02yzSdky3vOrHUOCq0rt6GVHk/0b WrFHiQRhYQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFK91IbJco6cApLiGhPpO0hL1 6cuoMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAKSHiQ0bobv3J3BmmAFkAb3WqvwQFWlF y4o2aVbo24yShFqWJFu+YsNHz3pZjPCxc51r/vtBjrUDvspThmLQZfLhWr864ply FcS6LaQiAQTouniblb9n9iBtxL6i4BMpFy1YMevy00k4J4DJRNfY1lvKZGaOEiaf 5pageQhaVy2j9IPT4xEIwzIZhZvcd5bhJ2x5MSJqIlVKvNYPNqdhdTNqJdHri6HM pAoICI4THRPx+XhT3u4EEA8NzM+VuhaSuke6qUEdFkmjjX/pSnOOxW2ES3nDG1/Z ekuTg6JC5zUHUDa9J30EdTnk2dtS5f7zjulVN3cShIIk+DEGVeAZj20= -----END CERTIFICATE-----Generated at Wed Apr 30 22:33:55 2025 by rpki-client