$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: UJaRiWPK6hgpWyQSCI2nuz9ajRlAzNDghGRa/n7SsH8= Subject key identifier: A4:21:FB:05:18:C0:4D:D5:9A:E1:8D:E3:4E:B8:01:80:96:6E:4B:0C Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 17E4E2B178A94B29A39D4282D469BDB1BF2D1BCB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0454 Signing time: Fri 13 Mar 2026 23:51:04 +0000 Manifest this update: Fri 13 Mar 2026 23:46:04 +0000 Manifest next update: Sun 15 Mar 2026 03:26:04 +0000 Files and hashes: 1: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: gvHsPswj874Kk15f17jKLgqqvDT1hclxfZpUltBBNV4=) 2: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) 3: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 03:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e4:e2:b1:78:a9:4b:29:a3:9d:42:82:d4:69:bd:b1:bf:2d:1b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Mar 13 23:46:04 2026 GMT Not After : Mar 15 03:26:04 2026 GMT Subject: CN=A421FB0518C04DD59AE18DE34EB80180966E4B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:42:7a:77:17:86:0c:f1:b3:8b:a8:90:ea: 8c:d4:a6:af:45:5f:9f:06:fd:b2:be:81:57:f9:1c: cf:c0:8a:2b:ec:73:5e:93:96:bb:53:84:99:3b:56: a5:ec:c0:e2:42:5c:ad:6d:ce:e2:be:03:de:9c:d8: e3:78:8b:30:6a:55:7d:ba:be:b2:98:ce:5e:38:85: 04:a1:78:c5:f2:ac:cf:34:09:0e:74:db:64:78:82: 21:b8:42:0a:a1:f3:24:82:b8:65:10:b6:25:d0:83: 88:87:cb:00:24:81:eb:bb:6b:3d:e0:1d:73:d7:11: 0d:8e:1f:0d:db:49:d9:94:1d:be:78:e1:01:f5:2e: 3b:90:85:ee:8c:c3:a3:5b:99:50:6b:80:5d:c9:c8: 3a:1e:8e:bd:c2:85:0f:30:08:0a:85:ff:7b:5d:54: 3a:13:80:fc:b9:a3:42:35:f2:65:7c:0b:6b:39:a3: ec:4b:2d:a4:1c:e2:fe:5b:d3:3b:ef:28:2a:9a:2c: c7:3f:95:7b:7b:28:20:b5:f8:3d:5b:d3:47:c3:06: 05:96:91:18:11:18:27:09:7f:df:69:ba:cf:2d:74: 63:ac:f9:7a:3c:69:a6:f7:7b:ea:c0:71:ae:6f:6c: 89:6c:12:6e:ee:71:e9:a9:ea:ee:f0:2f:ef:88:a5: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:21:FB:05:18:C0:4D:D5:9A:E1:8D:E3:4E:B8:01:80:96:6E:4B:0C X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:36:d2:11:a4:21:e1:24:f1:30:bf:90:e5:71:0e:31:2c:00: b2:3a:4b:f3:2e:bb:e5:85:18:ff:cd:13:90:dc:c0:37:95:6d: 34:d9:72:ca:0e:3d:69:22:88:69:98:28:69:cc:b8:d6:bc:8c: 1f:03:ea:84:08:2a:1e:72:ea:20:48:ba:13:c4:bf:c7:b8:4b: a5:ad:55:91:e2:ad:77:cd:fb:a5:84:4d:fe:fd:01:2d:a0:b7: f0:55:98:12:d4:fe:14:8f:7f:61:fe:e0:18:99:b3:c0:30:73: 33:b3:37:6c:e7:fb:8a:7b:b5:d1:b9:5a:13:7d:0f:bc:1f:e0: 4c:4e:19:72:e9:41:24:b4:15:a2:d3:d4:d7:2d:1a:39:2b:81: 98:c2:46:e7:05:da:d5:a6:55:8d:4b:dc:d2:24:12:ec:07:d2: f2:ac:a6:e6:26:87:d5:3b:7c:47:fc:3e:af:0b:7f:c4:40:62: 73:17:51:a9:b9:27:fd:73:89:8e:b7:e7:15:9d:8a:95:b4:e7: 46:42:6f:b6:d2:07:df:92:2b:a3:ea:d8:0b:2a:ef:b6:a1:d8: 61:19:fb:59:57:9c:f5:29:37:9c:3b:ce:75:d2:b1:4f:34:2b: 44:19:82:c7:31:2f:8d:24:1d:8e:c8:07:8b:ba:12:04:dd:5e: 3a:0f:fe:d4 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUF+TisXipSymjnUKC1Gm9sb8tG8swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwMzEzMjM0NjA0WhcNMjYwMzE1MDMyNjA0 WjAzMTEwLwYDVQQDEyhBNDIxRkIwNTE4QzA0REQ1OUFFMThERTM0RUI4MDE4MDk2 NkU0QjBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlpCencXhgzx s4uokOqM1KavRV+fBv2yvoFX+RzPwIor7HNek5a7U4SZO1al7MDiQlytbc7ivgPe nNjjeIswalV9ur6ymM5eOIUEoXjF8qzPNAkOdNtkeIIhuEIKofMkgrhlELYl0IOI h8sAJIHru2s94B1z1xENjh8N20nZlB2+eOEB9S47kIXujMOjW5lQa4Bdycg6Ho69 woUPMAgKhf97XVQ6E4D8uaNCNfJlfAtrOaPsSy2kHOL+W9M77ygqmizHP5V7eygg tfg9W9NHwwYFlpEYERgnCX/fabrPLXRjrPl6PGmm93vqwHGub2yJbBJu7nHpqeru 8C/viKV9+QIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFKQh+wUYwE3VmuGN4064AYCW bksMMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIs20hGkIeEk8TC/kOVxDjEsALI6S/Mu u+WFGP/NE5DcwDeVbTTZcsoOPWkiiGmYKGnMuNa8jB8D6oQIKh5y6iBIuhPEv8e4 S6WtVZHirXfN+6WETf79AS2gt/BVmBLU/hSPf2H+4BiZs8AwczOzN2zn+4p7tdG5 WhN9D7wf4ExOGXLpQSS0FaLT1NctGjkrgZjCRucF2tWmVY1L3NIkEuwH0vKspuYm h9U7fEf8Pq8Lf8RAYnMXUam5J/1ziY635xWdipW050ZCb7bSB9+SK6Pq2Asq77ah 2GEZ+1lXnPUpN5w7znXSsU80K0QZgscxL40kHY7IB4u6EgTdXjoP/tQ= -----END CERTIFICATE-----Generated at Sat Mar 14 14:56:45 2026 by rpki-client