$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: tpUuKCXgkrqPeNH1nH1+sXDk1td7ILlHHXwFF3pKGcI= Subject key identifier: 68:67:1D:D7:78:3C:DB:89:42:EF:82:64:2F:A0:E6:CA:9A:39:9C:D4 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 5FA6854AF9CAFE5449F7C392A9E1B0FC95BFD09A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0348 Signing time: Mon 25 Aug 2025 22:17:43 +0000 Manifest this update: Mon 25 Aug 2025 22:12:43 +0000 Manifest next update: Tue 26 Aug 2025 23:12:43 +0000 Files and hashes: 1: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YHE5juILGcXmvEbsHkjOWPNwOPk4cYDIWZUneodgsXQ=) 2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: ANEicQ2hCj/0DmoqRAzofH09fKrELbVBxt4cPOIM3xY=) 3: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: Y/3rmgU/sldh4Hfp9RHavnPp2jy6RYQXAdoezGv2CjQ=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 23:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a6:85:4a:f9:ca:fe:54:49:f7:c3:92:a9:e1:b0:fc:95:bf:d0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Aug 25 22:12:43 2025 GMT Not After : Aug 26 23:12:43 2025 GMT Subject: CN=68671DD7783CDB8942EF82642FA0E6CA9A399CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:ab:69:08:ac:ee:9a:3a:d0:c0:0d:0b:b4: 29:ad:5c:98:67:b4:15:10:92:ee:17:6e:f1:4c:82: e7:b7:99:c1:e4:97:54:db:3d:a5:9d:01:59:95:26: 43:ac:1e:d5:bd:0d:85:9d:84:86:3e:1e:3f:c9:fe: 8c:65:1a:56:bd:a8:ef:cd:11:10:d3:80:a8:4e:84: a2:77:90:5f:93:70:71:a7:fb:11:13:39:8a:20:2b: 98:e7:e8:de:18:8d:56:39:1e:7c:c9:cd:81:24:9a: fe:70:e3:3b:d0:0a:72:32:bc:3e:ca:0b:c5:ba:6c: f9:74:6e:4b:37:74:4d:46:3b:26:eb:44:44:5b:23: c9:12:65:33:17:29:f3:38:e2:8e:61:c7:38:b9:c9: 0d:71:fc:48:67:06:e7:fa:81:3d:25:a6:fa:eb:1a: 9b:5b:6e:cb:1e:05:ee:46:a8:e7:26:5d:86:35:9c: 30:3f:07:06:43:59:0e:32:b2:40:54:c1:ef:68:ad: a6:9a:c3:71:75:fe:b4:09:7d:ec:87:46:08:4f:43: 5f:c6:e1:34:69:65:98:26:57:8b:26:e6:df:b2:e3: 68:07:d2:46:5a:24:6e:d5:6c:f8:33:1f:fe:a3:b0: 12:d1:06:53:a6:f0:89:e4:67:f0:00:20:1e:9c:61: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:67:1D:D7:78:3C:DB:89:42:EF:82:64:2F:A0:E6:CA:9A:39:9C:D4 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5c:b2:31:b6:0f:0b:9e:e6:70:5d:8d:f3:1d:bc:55:83:ba: cd:1e:58:3d:98:b9:58:67:fd:8b:89:be:2e:ff:da:96:83:f4: 6a:7d:36:c8:c5:53:5f:94:7c:23:42:08:86:d1:52:97:a1:82: 0a:7e:b0:9c:5c:71:48:b8:c5:c1:a0:d7:83:eb:42:b7:69:fb: ef:c0:33:75:55:dc:96:7a:b9:29:1a:68:04:ef:af:fe:37:86: d0:bf:26:37:45:64:b2:3b:23:62:b5:6c:34:5f:ed:8a:4c:ae: ef:c7:15:8f:28:67:e8:b8:06:5a:30:63:a4:1e:78:ed:42:33: 0d:ed:77:1e:44:e6:9b:44:fe:5a:25:30:d0:fb:f6:90:48:a7: a2:a3:07:59:fc:19:a2:93:77:32:18:12:8f:0e:79:20:d9:b4: 44:f4:57:0a:73:5c:b3:b5:95:80:c2:91:61:c1:5b:e7:6a:46: d3:c4:49:41:7e:aa:c8:63:06:22:fd:d3:05:12:2f:db:29:9b: e5:a8:02:55:78:58:85:c2:9c:b4:57:eb:80:ae:7e:8d:72:bd: 1c:bd:22:93:2d:40:4e:e3:95:b1:97:7d:37:e5:9c:77:e2:46: fc:85:fb:84:4d:48:df:31:3a:46:6f:28:4f:7d:d5:4c:9f:f5: 7a:9f:d1:67 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUX6aFSvnK/lRJ98OSqeGw/JW/0JowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUwODI1MjIxMjQzWhcNMjUwODI2MjMxMjQz WjAzMTEwLwYDVQQDEyg2ODY3MURENzc4M0NEQjg5NDJFRjgyNjQyRkEwRTZDQTlB Mzk5Q0Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqraQis7po6 0MANC7QprVyYZ7QVEJLuF27xTILnt5nB5JdU2z2lnQFZlSZDrB7VvQ2FnYSGPh4/ yf6MZRpWvajvzREQ04CoToSid5Bfk3Bxp/sREzmKICuY5+jeGI1WOR58yc2BJJr+ cOM70ApyMrw+ygvFumz5dG5LN3RNRjsm60REWyPJEmUzFynzOOKOYcc4uckNcfxI Zwbn+oE9Jab66xqbW27LHgXuRqjnJl2GNZwwPwcGQ1kOMrJAVMHvaK2mmsNxdf60 CX3sh0YIT0NfxuE0aWWYJleLJubfsuNoB9JGWiRu1Wz4Mx/+o7AS0QZTpvCJ5Gfw ACAenGGazwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFGhnHdd4PNuJQu+CZC+g5sqa OZzUMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAKpcsjG2Dwue5nBdjfMdvFWDus0eWD2Y uVhn/YuJvi7/2paD9Gp9NsjFU1+UfCNCCIbRUpehggp+sJxccUi4xcGg14PrQrdp ++/AM3VV3JZ6uSkaaATvr/43htC/JjdFZLI7I2K1bDRf7YpMru/HFY8oZ+i4Blow Y6QeeO1CMw3tdx5E5ptE/lolMND79pBIp6KjB1n8GaKTdzIYEo8OeSDZtET0Vwpz XLO1lYDCkWHBW+dqRtPESUF+qshjBiL90wUSL9spm+WoAlV4WIXCnLRX64Cufo1y vRy9IpMtQE7jlbGXfTflnHfiRvyF+4RNSN8xOkZvKE991Uyf9Xqf0Wc= -----END CERTIFICATE-----Generated at Tue Aug 26 11:14:29 2025 by rpki-client