$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: RkAJjUKw+uGRmehFzYBKEMBrfq8m/2RZJfqNsaOnIYU= Subject key identifier: 58:19:B9:04:2E:C8:2A:20:5E:AA:82:CC:D8:95:A6:7F:93:78:60:6D Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 58D36DB311B8677E70FCE5F8AB3B949BBD44CC6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 030A Signing time: Thu 10 Jul 2025 15:02:07 +0000 Manifest this update: Thu 10 Jul 2025 14:57:07 +0000 Manifest next update: Fri 11 Jul 2025 15:30:07 +0000 Files and hashes: 1: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: Y/3rmgU/sldh4Hfp9RHavnPp2jy6RYQXAdoezGv2CjQ=) 2: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YHE5juILGcXmvEbsHkjOWPNwOPk4cYDIWZUneodgsXQ=) 3: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: fydVsB6rSrBHEnFbEGwiIYjWnsjaqo69l1RHXrFKR0w=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 15:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d3:6d:b3:11:b8:67:7e:70:fc:e5:f8:ab:3b:94:9b:bd:44:cc:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Jul 10 14:57:07 2025 GMT Not After : Jul 11 15:30:07 2025 GMT Subject: CN=5819B9042EC82A205EAA82CCD895A67F9378606D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:29:be:f2:ea:21:39:13:11:5a:4c:02:9c: 09:2d:c6:f6:b8:18:8b:f7:a1:85:77:fc:c0:64:88: ac:78:17:a0:cf:60:56:67:8b:42:72:f0:29:5d:2d: 1d:ef:15:49:39:49:36:fd:03:7f:8d:c9:04:2b:aa: c8:4a:85:dd:27:56:09:85:1c:a6:fa:db:48:f4:b2: 8a:25:90:10:61:ff:de:8c:cc:01:50:c2:59:28:4d: 3e:c1:3e:0d:b7:b4:00:77:75:d3:25:89:95:de:96: 97:aa:fb:61:33:81:57:36:7e:79:22:1d:fe:f0:67: 17:ec:e8:f8:78:cb:d3:a5:5d:fc:c9:7b:34:21:9d: 81:95:35:89:59:5b:6f:a0:62:6f:21:9b:20:ca:71: 82:fb:c8:62:d5:17:0f:dc:eb:1c:f6:43:58:8e:fd: 53:33:b5:43:6e:06:1c:13:a9:de:59:fe:11:8c:d0: 20:a7:b4:ef:7e:cd:86:45:16:dd:77:ba:1a:57:d7: 71:2c:ac:ae:73:d9:e9:d5:5a:78:5e:c8:ae:20:17: 94:ee:25:e4:c5:64:34:2f:a8:33:ef:78:e2:f7:fd: fb:57:69:05:22:6d:15:0c:fb:54:32:5c:ec:b9:23: 83:d2:f5:8d:d2:bb:d0:85:50:fb:49:7c:d7:7c:a0: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:19:B9:04:2E:C8:2A:20:5E:AA:82:CC:D8:95:A6:7F:93:78:60:6D X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:44:1f:7f:2a:42:6d:fb:e7:3f:7f:fc:94:ff:f4:32:bd:83: 17:02:72:0c:4b:d1:5e:3a:d8:62:08:cd:07:79:c1:12:66:7b: 1c:e9:27:fa:a2:09:37:42:0c:9d:53:aa:82:87:a3:b8:39:78: 5e:5b:d5:c5:df:e8:63:91:b6:22:55:03:79:44:36:81:da:17: 1e:e5:f7:45:50:79:85:45:58:62:6d:69:ce:b7:df:28:16:66: f1:ae:19:24:8c:09:44:af:eb:21:73:dc:ee:b0:f1:3f:35:23: ac:60:33:30:58:11:5f:10:a7:6d:d6:d4:ef:ec:0c:0f:d1:ba: 07:d2:39:ac:1a:54:3d:46:e6:78:19:87:90:9d:25:f1:f9:0e: a2:1e:fb:a2:72:55:b0:1b:5a:84:03:a2:e3:3d:84:89:b1:bd: c3:e0:c5:31:1e:f2:ad:3d:1e:41:4b:37:c5:98:a0:c8:c9:be: 1c:80:dc:f2:c2:fc:f2:6e:1e:f7:53:ab:5f:68:9a:74:5b:eb: 5e:29:77:68:99:5d:6e:48:45:4a:ce:45:39:7d:14:f6:40:9c: 32:d1:c2:0a:59:0f:85:3d:1d:a7:9b:3b:9c:be:5a:ac:01:de: 53:5a:ee:06:f8:1b:77:2c:6b:5d:26:b2:f2:4b:d7:7c:dc:42: d3:cb:55:14 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUWNNtsxG4Z35w/OX4qzuUm71EzG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUwNzEwMTQ1NzA3WhcNMjUwNzExMTUzMDA3 WjAzMTEwLwYDVQQDEyg1ODE5QjkwNDJFQzgyQTIwNUVBQTgyQ0NEODk1QTY3Rjkz Nzg2MDZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqApvvLqITkT EVpMApwJLcb2uBiL96GFd/zAZIiseBegz2BWZ4tCcvApXS0d7xVJOUk2/QN/jckE K6rISoXdJ1YJhRym+ttI9LKKJZAQYf/ejMwBUMJZKE0+wT4Nt7QAd3XTJYmV3paX qvthM4FXNn55Ih3+8GcX7Oj4eMvTpV38yXs0IZ2BlTWJWVtvoGJvIZsgynGC+8hi 1RcP3Osc9kNYjv1TM7VDbgYcE6neWf4RjNAgp7Tvfs2GRRbdd7oaV9dxLKyuc9np 1Vp4XsiuIBeU7iXkxWQ0L6gz73ji9/37V2kFIm0VDPtUMlzsuSOD0vWN0rvQhVD7 SXzXfKB8fQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFFgZuQQuyCogXqqCzNiVpn+T eGBtMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAC1EH38qQm375z9//JT/9DK9gxcCcgxL 0V462GIIzQd5wRJmexzpJ/qiCTdCDJ1TqoKHo7g5eF5b1cXf6GORtiJVA3lENoHa Fx7l90VQeYVFWGJtac633ygWZvGuGSSMCUSv6yFz3O6w8T81I6xgMzBYEV8Qp23W 1O/sDA/RugfSOawaVD1G5ngZh5CdJfH5DqIe+6JyVbAbWoQDouM9hImxvcPgxTEe 8q09HkFLN8WYoMjJvhyA3PLC/PJuHvdTq19omnRb614pd2iZXW5IRUrORTl9FPZA nDLRwgpZD4U9HaebO5y+WqwB3lNa7gb4G3csa10msvJL13zcQtPLVRQ= -----END CERTIFICATE-----Generated at Fri Jul 11 06:16:17 2025 by rpki-client