$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: ah+YfmoIbbwNvt8QbV56gR4Z7vdxbYwjhygWNUgpEvw= Subject key identifier: 49:35:B3:D7:1A:6A:96:EA:75:F8:75:6A:66:AA:73:97:0C:36:A4:2B Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 78CCAACC9B56038BD108D43D6A934B83A960169B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 04EE Signing time: Wed 08 Jul 2026 17:48:55 +0000 Manifest this update: Wed 08 Jul 2026 17:43:55 +0000 Manifest next update: Thu 09 Jul 2026 21:13:55 +0000 Files and hashes: 1: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) 2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: O1+15o9evXOoElrObGSU/N0rdDw9XQKH9Q5PwdSsV5o=) 3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:cc:aa:cc:9b:56:03:8b:d1:08:d4:3d:6a:93:4b:83:a9:60:16:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Jul 8 17:43:55 2026 GMT Not After : Jul 9 21:13:55 2026 GMT Subject: CN=4935B3D71A6A96EA75F8756A66AA73970C36A42B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:07:4f:36:e0:c9:01:b2:66:0b:84:66:da:53: 62:40:54:fb:c0:87:fc:c1:b5:90:ba:0d:fd:a8:9c: 22:a0:a4:5d:87:8f:33:ec:92:2e:5f:38:26:f0:75: 43:91:ae:84:e6:8b:1b:b3:b7:cf:c4:54:46:6c:88: c1:c3:62:1b:5d:f7:3d:45:bf:30:3a:c5:08:22:57: b7:fc:08:61:f6:35:40:4e:97:78:d6:e7:d4:4e:25: 12:83:8d:53:95:41:8d:e6:ff:7c:c9:54:eb:ba:ba: dc:c7:c1:24:c5:c9:84:b6:80:d2:56:06:2d:3f:cb: b0:18:60:9a:7a:01:0c:7c:5b:c3:0f:e1:df:ac:61: 12:6e:d5:49:db:21:be:89:a0:f8:11:13:50:e4:b5: 56:d2:30:4b:88:cb:e6:46:dc:9e:06:13:39:f4:2d: 36:d9:9c:15:5e:57:bf:f1:c9:16:33:f9:e6:41:ef: 3f:80:b1:85:f2:1a:7f:00:79:22:47:ea:e0:54:17: 39:65:0e:cd:ed:79:02:0b:5f:a3:ee:73:52:41:df: 94:18:1d:f4:41:48:c4:7b:0d:fe:da:a6:e4:6c:49: 68:27:82:fd:7d:73:e8:dc:2d:1a:b7:55:0c:bc:3d: 97:4c:14:33:4e:de:e9:ae:4b:2c:2e:f8:bc:27:53: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:35:B3:D7:1A:6A:96:EA:75:F8:75:6A:66:AA:73:97:0C:36:A4:2B X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:40:4d:b3:1b:67:be:91:2d:77:6a:b2:b2:a6:0f:7f:d4:2a: 22:0f:54:7d:1f:77:5d:a5:82:36:87:89:ed:db:61:71:8c:e1: 79:94:40:f0:91:a7:4d:aa:d1:cc:3f:21:f2:a4:07:c4:e4:6d: d6:59:86:03:bf:dd:f4:4a:f5:3c:0d:79:d1:59:ae:f5:5d:69: de:65:cb:ed:68:e2:9d:c5:42:61:3a:8b:4a:ca:ed:90:8f:8f: 2b:53:89:c1:fb:f7:b0:73:c7:e6:9b:7d:28:58:95:50:cf:cc: 5b:1f:9a:a9:f4:7f:27:f5:f4:ea:90:a9:54:aa:be:d0:cf:25: a3:1d:8f:a8:39:7a:cc:5d:84:42:5b:94:18:32:dc:53:8a:7b: b1:b3:54:4e:e4:26:93:a5:9a:b6:a8:76:2e:42:77:47:20:a1: ef:6e:d1:7b:a1:0b:24:13:df:38:1d:a5:39:2b:36:86:bc:7a: f6:99:6e:00:11:0f:dd:86:5d:b4:72:0a:7a:d9:90:e8:cd:8d: 6d:6f:31:f7:78:3f:8d:15:30:81:81:3a:08:4c:a0:13:3d:53: cb:6b:b0:c0:b9:11:66:4d:6b:9a:a6:94:a8:65:de:65:50:92: 4b:84:3f:1c:1b:5c:10:4f:a3:4f:d1:34:f3:41:dc:93:de:b5: aa:ac:a5:29 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUeMyqzJtWA4vRCNQ9apNLg6lgFpswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwNzA4MTc0MzU1WhcNMjYwNzA5MjExMzU1 WjAzMTEwLwYDVQQDEyg0OTM1QjNENzFBNkE5NkVBNzVGODc1NkE2NkFBNzM5NzBD MzZBNDJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AdPNuDJAbJm C4Rm2lNiQFT7wIf8wbWQug39qJwioKRdh48z7JIuXzgm8HVDka6E5osbs7fPxFRG bIjBw2IbXfc9Rb8wOsUIIle3/Ahh9jVATpd41ufUTiUSg41TlUGN5v98yVTrurrc x8EkxcmEtoDSVgYtP8uwGGCaegEMfFvDD+HfrGESbtVJ2yG+iaD4ERNQ5LVW0jBL iMvmRtyeBhM59C022ZwVXle/8ckWM/nmQe8/gLGF8hp/AHkiR+rgVBc5ZQ7N7XkC C1+j7nNSQd+UGB30QUjEew3+2qbkbEloJ4L9fXPo3C0at1UMvD2XTBQzTt7prkss Lvi8J1Pq/QIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFEk1s9caapbqdfh1amaqc5cM NqQrMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBALVATbMbZ76RLXdqsrKmD3/UKiIPVH0f d12lgjaHie3bYXGM4XmUQPCRp02q0cw/IfKkB8TkbdZZhgO/3fRK9TwNedFZrvVd ad5ly+1o4p3FQmE6i0rK7ZCPjytTicH797Bzx+abfShYlVDPzFsfmqn0fyf19OqQ qVSqvtDPJaMdj6g5esxdhEJblBgy3FOKe7GzVE7kJpOlmraodi5Cd0cgoe9u0Xuh CyQT3zgdpTkrNoa8evaZbgARD92GXbRyCnrZkOjNjW1vMfd4P40VMIGBOghMoBM9 U8trsMC5EWZNa5qmlKhl3mVQkkuEPxwbXBBPo0/RNPNB3JPetaqspSk= -----END CERTIFICATE-----Generated at Thu Jul 9 11:10:57 2026 by rpki-client