
$ rpki-client -vvvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json)
Hash identifier: Dzy1i5k30o7Mby1N6FSEGVhws1QhBXyKvjQXCT65KJ0=
Subject key identifier: 2B:FD:FA:43:35:0A:9B:2C:E9:53:25:1F:D4:48:E0:A8:D2:F7:97:E5
Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3
Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
Certificate serial: 0D64694305A33032FB100F4F7CFC1BDC9E4C1398
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
Manifest number: 056D
Signing time: Sat 10 Oct 2026 22:43:05 +0000
Manifest this update: Sat 10 Oct 2026 22:38:05 +0000
Manifest next update: Mon 12 Oct 2026 00:07:05 +0000
Files and hashes: 1: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: zbuw7s7PXjQFZcJ28sCUaJeTxqXw9qAU6xAVMHUSGHs=)
2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: H/Xiqju4qBbznQCOHnS+HNpk+CBQjQ99RqG+6Jj6Ts4=)
3: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: Zv5M1SBEHtjHmj26XBNl/RJsXP8FKS/ZPad1BH61wzk=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl
rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 00:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:64:69:43:05:a3:30:32:fb:10:0f:4f:7c:fc:1b:dc:9e:4c:13:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
Validity
Not Before: Oct 10 22:38:05 2026 GMT
Not After : Oct 12 00:07:05 2026 GMT
Subject: CN=2BFDFA43350A9B2CE953251FD448E0A8D2F797E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:8c:83:24:70:51:dd:20:99:eb:12:9e:5c:
d0:e1:e3:58:1e:4a:fe:37:32:fc:68:5e:bf:b8:d2:
2e:7d:de:f7:14:06:cc:01:a1:06:be:83:f9:29:59:
20:0f:f7:ca:ee:a8:57:71:f2:ee:fa:7a:5a:f5:ea:
cb:a6:99:0b:f2:e6:db:01:20:94:97:b3:12:08:fe:
ad:3f:bd:a8:06:5c:ca:ef:ca:13:77:04:96:95:8a:
0e:ba:21:37:cc:f9:ca:c4:29:e2:cc:b9:2c:ce:40:
9c:27:f6:02:f8:63:0e:e6:5f:0b:57:43:d8:24:5e:
65:21:e6:67:ae:cd:ec:5c:43:32:8f:e4:0d:fe:ce:
32:e7:36:a5:69:19:f5:4d:3e:11:0f:18:18:4f:fb:
5d:35:da:14:2f:36:38:74:42:51:8a:9a:b9:61:26:
65:9c:a5:0c:0e:2d:ea:25:ea:d2:13:aa:ae:b1:24:
bd:5d:72:f9:5c:aa:51:f8:07:10:80:9c:3e:9d:d5:
af:38:ae:ff:53:82:81:60:ad:c3:15:c4:bb:61:3f:
a2:be:3a:4f:9a:31:ca:62:ec:47:f3:63:2a:e7:99:
c2:c8:24:a0:19:01:f6:c7:db:b8:4e:a4:07:c0:85:
ff:76:93:c8:4f:a8:76:c9:39:7f:25:a5:52:f4:20:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:FA:43:35:0A:9B:2C:E9:53:25:1F:D4:48:E0:A8:D2:F7:97:E5
X509v3 Authority Key Identifier:
keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:10:4e:0c:0d:4e:89:91:06:70:10:b7:83:55:36:02:11:37:
02:6c:a1:80:73:d3:2c:f7:75:dc:a0:74:75:a4:8a:51:fd:89:
41:e8:21:d4:97:c4:51:1c:cd:66:e2:c5:36:3a:e8:b0:d2:e6:
74:37:77:9e:ce:fe:d6:57:89:4c:d5:88:10:dc:b7:4b:de:fc:
22:06:f5:df:59:0d:67:a1:ff:b7:fb:53:4a:49:b0:71:35:36:
11:3f:5f:0d:91:67:75:36:4d:51:59:e6:0a:94:9a:08:b3:34:
e7:aa:48:df:f3:18:06:16:f5:fc:23:6e:be:c3:9d:2c:ae:5c:
72:02:f0:ce:9b:27:b7:b9:1e:00:26:c1:5d:3d:8a:94:a0:a3:
22:a4:66:1a:8e:6d:32:ee:83:5e:20:01:eb:51:6a:d7:4a:3a:
1a:91:df:f6:f0:f2:24:40:33:db:5c:79:63:aa:d5:b3:48:c6:
ed:1d:58:39:06:25:59:6a:b6:67:ae:ec:7f:16:f5:ab:54:b0:
c5:93:ee:23:d0:92:7c:c9:4f:6a:78:3b:31:61:2e:48:8b:97:
d9:34:6b:e1:57:c3:3e:45:ae:27:57:34:53:0e:7c:78:1b:ec:
1e:04:6f:8b:a4:19:5f:56:df:9e:56:0f:9c:25:49:d6:12:57:
ca:c7:27:13
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUDWRpQwWjMDL7EA9PfPwb3J5ME5gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw
ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYxMDEwMjIzODA1WhcNMjYxMDEyMDAwNzA1
WjAzMTEwLwYDVQQDEygyQkZERkE0MzM1MEE5QjJDRTk1MzI1MUZENDQ4RTBBOEQy
Rjc5N0U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ2MgyRwUd0g
mesSnlzQ4eNYHkr+NzL8aF6/uNIufd73FAbMAaEGvoP5KVkgD/fK7qhXcfLu+npa
9erLppkL8ubbASCUl7MSCP6tP72oBlzK78oTdwSWlYoOuiE3zPnKxCnizLkszkCc
J/YC+GMO5l8LV0PYJF5lIeZnrs3sXEMyj+QN/s4y5zalaRn1TT4RDxgYT/tdNdoU
LzY4dEJRipq5YSZlnKUMDi3qJerSE6qusSS9XXL5XKpR+AcQgJw+ndWvOK7/U4KB
YK3DFcS7YT+ivjpPmjHKYuxH82Mq55nCyCSgGQH2x9u4TqQHwIX/dpPIT6h2yTl/
JaVS9CD14wIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFCv9+kM1Cpss6VMlH9RI4KjS
95flMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE
AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j
cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr
aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh
LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt
OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh
OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy
NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz
eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4
MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAJIQTgwNTomRBnAQt4NVNgIRNwJsoYBz
0yz3ddygdHWkilH9iUHoIdSXxFEczWbixTY66LDS5nQ3d57O/tZXiUzViBDct0ve
/CIG9d9ZDWeh/7f7U0pJsHE1NhE/Xw2RZ3U2TVFZ5gqUmgizNOeqSN/zGAYW9fwj
br7DnSyuXHIC8M6bJ7e5HgAmwV09ipSgoyKkZhqObTLug14gAetRatdKOhqR3/bw
8iRAM9tceWOq1bNIxu0dWDkGJVlqtmeu7H8W9atUsMWT7iPQknzJT2p4OzFhLkiL
l9k0a+FXwz5FridXNFMOfHgb7B4Eb4ukGV9W355WD5wlSdYSV8rHJxM=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:02:52 2026 by rpki-client