$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: R4nizVRBAVMrQSAbzQyyMCQCA47Lgc/6WF1OVJ+Swt8= Subject key identifier: 3C:16:76:31:0D:3A:C0:C5:0E:69:B6:FB:C8:88:D0:25:D6:B9:8D:18 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 5FC3286807CCDEBA9E2C556E2F5B490DA956D846 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 0492 Signing time: Thu 30 Apr 2026 14:11:52 +0000 Manifest this update: Thu 30 Apr 2026 14:06:52 +0000 Manifest next update: Fri 01 May 2026 16:09:52 +0000 Files and hashes: 1: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: 6oFLyTYuJkvjS03uo6iqb3OI5JWHagpmx8aoJd8JLfo=) 2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: vXkVXVsQ4DlFJmGNph4+Gyf5z4YEG/44fD+hG2aAGs8=) 3: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YFqwmsAk/o1smoipS5AT33G6AuCE/iivcRjbYLVDiPU=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 16:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c3:28:68:07:cc:de:ba:9e:2c:55:6e:2f:5b:49:0d:a9:56:d8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Apr 30 14:06:52 2026 GMT Not After : May 1 16:09:52 2026 GMT Subject: CN=3C1676310D3AC0C50E69B6FBC888D025D6B98D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:44:ff:04:1e:2e:d4:8f:77:dc:8e:2e:5d:3e: 62:5c:ed:fe:42:e3:36:fe:74:40:7a:1a:3a:00:a7: 41:0e:03:fa:19:73:98:72:fb:ba:f8:7c:df:f7:10: 06:f7:63:ed:68:17:33:31:27:12:2c:ae:2d:b9:bd: f9:ae:aa:a1:d8:9e:54:fc:7f:a7:34:8d:59:5d:00: 52:d5:11:96:48:35:ea:03:00:c3:ae:70:01:42:0c: f4:a6:cc:be:c2:37:4e:5d:e2:81:63:49:ed:4d:6a: fd:88:ad:de:a2:3b:40:3a:64:93:64:87:ea:c2:d9: df:93:47:bd:ad:79:33:13:c6:98:21:ba:76:70:c6: 18:a9:f3:de:c5:45:2c:c2:45:8a:a9:19:72:1e:29: a1:ec:a2:a8:6c:0a:b1:55:28:7a:9c:6f:c1:54:70: 3d:22:c8:11:e1:ef:2c:b0:85:e1:74:2f:a0:3a:0a: 97:91:8e:c8:67:48:e4:a9:c9:59:22:53:0b:2c:cb: 2d:fd:c6:af:e4:61:a8:c8:86:0c:57:61:fb:2c:18: 16:8c:ec:3a:e8:88:6e:68:da:dd:eb:d7:86:94:70: 0b:63:87:8f:4f:0b:24:df:29:01:43:90:18:9e:e9: 64:e8:2d:e2:9d:58:2f:7b:79:87:3e:85:d6:5d:7c: 43:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:76:31:0D:3A:C0:C5:0E:69:B6:FB:C8:88:D0:25:D6:B9:8D:18 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8b:95:0f:99:50:58:93:61:57:87:74:a4:49:4b:25:69:64: b0:ca:90:26:72:e4:31:a0:b5:5b:50:7a:87:8e:6e:7c:58:f4: 53:80:c9:dd:f1:90:2f:5e:c2:33:d4:30:00:a0:33:09:33:62: aa:12:e6:f2:61:df:e1:a9:d1:db:61:ed:e6:73:fc:fa:cb:b5: 32:58:39:df:7e:01:c8:a0:95:26:57:fc:88:d2:57:25:d8:e0: 0f:33:5d:df:df:84:6a:04:59:d5:bf:c0:26:25:7d:5f:ab:1d: 45:ec:ff:01:df:1e:20:27:01:e2:d5:5e:5b:ba:0e:b8:57:7e: 4f:99:7a:47:91:29:8b:c2:13:68:54:bc:90:32:03:d9:f8:ed: a1:bd:2d:d0:0d:b6:ea:e6:59:03:80:54:59:42:83:96:f0:da: 8d:0c:3b:d0:14:eb:97:db:5e:db:c3:ac:2f:a8:ea:32:be:9f: 65:3f:7b:3c:c7:40:9f:36:db:a3:19:cd:88:72:c9:cd:5d:38: 5d:d9:68:5d:45:fd:7a:ff:ec:dd:74:d4:ec:f3:3b:19:ff:fe: 6b:65:6b:05:c2:53:93:d5:61:5d:65:a4:e6:3b:2f:4d:fd:40: b8:1b:40:fa:b4:ff:d6:fe:36:3d:e5:7e:d5:d3:ed:0a:dd:b1: 8d:56:d3:41 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUX8MoaAfM3rqeLFVuL1tJDalW2EYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjYwNDMwMTQwNjUyWhcNMjYwNTAxMTYwOTUy WjAzMTEwLwYDVQQDEygzQzE2NzYzMTBEM0FDMEM1MEU2OUI2RkJDODg4RDAyNUQ2 Qjk4RDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzET/BB4u1I93 3I4uXT5iXO3+QuM2/nRAeho6AKdBDgP6GXOYcvu6+Hzf9xAG92PtaBczMScSLK4t ub35rqqh2J5U/H+nNI1ZXQBS1RGWSDXqAwDDrnABQgz0psy+wjdOXeKBY0ntTWr9 iK3eojtAOmSTZIfqwtnfk0e9rXkzE8aYIbp2cMYYqfPexUUswkWKqRlyHimh7KKo bAqxVSh6nG/BVHA9IsgR4e8ssIXhdC+gOgqXkY7IZ0jkqclZIlMLLMst/cav5GGo yIYMV2H7LBgWjOw66IhuaNrd69eGlHALY4ePTwsk3ykBQ5AYnulk6C3inVgve3mH PoXWXXxDVQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFDwWdjENOsDFDmm2+8iI0CXW uY0YMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBACqLlQ+ZUFiTYVeHdKRJSyVpZLDKkCZy 5DGgtVtQeoeObnxY9FOAyd3xkC9ewjPUMACgMwkzYqoS5vJh3+Gp0dth7eZz/PrL tTJYOd9+AciglSZX/IjSVyXY4A8zXd/fhGoEWdW/wCYlfV+rHUXs/wHfHiAnAeLV Xlu6DrhXfk+ZekeRKYvCE2hUvJAyA9n47aG9LdANturmWQOAVFlCg5bw2o0MO9AU 65fbXtvDrC+o6jK+n2U/ezzHQJ8226MZzYhyyc1dOF3ZaF1F/Xr/7N101OzzOxn/ /mtlawXCU5PVYV1lpOY7L039QLgbQPq0/9b+Nj3lftXT7QrdsY1W00E= -----END CERTIFICATE-----Generated at Thu Apr 30 23:41:17 2026 by rpki-client