$ rpki-client -vvf rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft File: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft (raw, json) Hash identifier: L452LGpHeMB741si213FwpjCV15tI6WEPDL5bek2kIU= Subject key identifier: 74:F4:57:1E:8E:78:B9:6C:38:6D:B5:7B:44:C1:C8:8C:48:29:CD:59 Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 Certificate issuer: /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Certificate serial: 52F690A1A083FBC68E6FFFA90EE8113FB4D60BCF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject info access: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft Manifest number: 028D Signing time: Sun 06 Apr 2025 16:34:03 +0000 Manifest this update: Sun 06 Apr 2025 16:29:03 +0000 Manifest next update: Mon 07 Apr 2025 19:27:03 +0000 Files and hashes: 1: 323630323a666235353a3a2f33362d3438203d3e2031303031.roa (hash: YHE5juILGcXmvEbsHkjOWPNwOPk4cYDIWZUneodgsXQ=) 2: 04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl (hash: ddnn2gL5cxhxqo1tJVGy+iGaxC7gnReOFu/GI5OaFO8=) 3: 32332e3133382e35362e302f32342d3234203d3e2031303031.roa (hash: Y/3rmgU/sldh4Hfp9RHavnPp2jy6RYQXAdoezGv2CjQ=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f6:90:a1:a0:83:fb:c6:8e:6f:ff:a9:0e:e8:11:3f:b4:d6:0b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144 Validity Not Before: Apr 6 16:29:03 2025 GMT Not After : Apr 7 19:27:03 2025 GMT Subject: CN=74F4571E8E78B96C386DB57B44C1C88C4829CD59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:b9:6e:28:a3:aa:15:fc:40:6f:23:30:c3: 48:a8:db:85:e2:cc:03:a2:ca:fe:df:e5:0c:9e:31: 79:c0:08:0c:53:a6:6c:da:7d:94:00:f0:f7:a1:50: 1f:a8:d6:e1:7e:2d:f1:2a:4c:57:d6:1b:03:2f:51: 0d:0a:e2:ef:c0:9f:fb:3d:a8:8a:e9:8e:0a:c8:c6: 0e:dc:44:58:ae:6f:64:e6:d7:ef:3a:b7:cb:8b:c0: 49:b9:1d:f4:ba:b4:16:58:6d:de:77:6b:49:fa:ad: fb:f9:68:9e:18:f0:3f:90:59:25:7a:97:fb:53:96: 90:3a:8b:85:b6:9e:a1:93:4e:7d:d2:2b:1b:74:be: 01:03:2b:df:1b:3c:58:ff:79:60:c2:04:46:43:6f: 8b:5b:fa:37:ce:ea:aa:4a:4f:61:dd:60:a0:24:24: 68:41:dd:ba:fe:a1:62:ea:36:0f:cb:f2:1c:56:cc: 79:66:fd:d0:63:df:5d:a1:33:1e:78:07:21:71:8b: 6f:2c:f4:13:d0:1e:3f:3a:70:3a:62:10:04:46:5c: 02:0a:f3:7d:5d:e9:ab:96:6f:97:82:c3:c5:5f:49: f7:ab:b3:51:f1:de:f7:3c:bd:e9:fb:db:cd:f7:c2: bf:7f:4e:7c:7e:a4:10:08:96:e7:0d:57:15:1d:65: 84:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F4:57:1E:8E:78:B9:6C:38:6D:B5:7B:44:C1:C8:8C:48:29:CD:59 X509v3 Authority Key Identifier: keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:69:73:36:b9:26:d7:6c:19:c4:73:f0:7f:fc:b3:35:df:b2: af:60:8c:1a:6d:44:78:3d:c7:7f:f6:a5:77:e0:d4:b0:4c:b9: 83:50:e8:20:a8:1c:51:1a:aa:15:93:0f:27:9f:e7:da:9b:82: 1a:f4:78:3e:37:15:ee:2b:22:6f:d6:de:c3:85:d5:d5:89:9b: a1:b8:82:fc:87:c9:73:08:d0:73:46:5e:c1:95:2b:18:1a:c7: 5b:d9:25:66:a0:e9:0b:c4:72:9a:f4:40:a5:60:0a:06:12:39: 1c:b5:3a:ef:ed:93:99:cb:a6:81:bd:9b:fd:17:7a:15:4f:ee: b5:b3:22:18:d0:7e:9d:b8:4a:ad:9b:db:80:d4:ed:b2:49:48: b1:1f:c8:ed:45:49:eb:1f:2b:75:01:a6:07:5e:15:80:26:12: 79:fa:80:ec:95:79:90:89:0a:6a:15:16:bc:67:43:5d:fd:73: d8:c2:f2:eb:cc:b6:57:5a:f5:f0:62:50:b2:e8:57:6c:64:54: 2d:8b:48:e5:31:f9:80:6f:6b:81:ae:dc:fa:5a:3e:da:42:40: 69:9a:17:a0:7c:da:37:1d:5d:b2:c9:c4:a8:4a:1a:79:92:fb: b2:8b:a4:10:4e:2c:3e:67:de:ac:0a:22:61:f9:72:0c:8e:bf: de:3d:7e:fa -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUUvaQoaCD+8aOb/+pDugRP7TWC88wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjUwNDA2MTYyOTAzWhcNMjUwNDA3MTkyNzAz WjAzMTEwLwYDVQQDEyg3NEY0NTcxRThFNzhCOTZDMzg2REI1N0I0NEMxQzg4QzQ4 MjlDRDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsS5biijqhX8 QG8jMMNIqNuF4swDosr+3+UMnjF5wAgMU6Zs2n2UAPD3oVAfqNbhfi3xKkxX1hsD L1ENCuLvwJ/7PaiK6Y4KyMYO3ERYrm9k5tfvOrfLi8BJuR30urQWWG3ed2tJ+q37 +WieGPA/kFklepf7U5aQOouFtp6hk0590isbdL4BAyvfGzxY/3lgwgRGQ2+LW/o3 zuqqSk9h3WCgJCRoQd26/qFi6jYPy/IcVsx5Zv3QY99doTMeeAchcYtvLPQT0B4/ OnA6YhAERlwCCvN9Xemrlm+XgsPFX0n3q7NR8d73PL3p+9vN98K/f058fqQQCJbn DVcVHWWEMwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFHT0Vx6OeLlsOG21e0TByIxI Kc1ZMB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy NjE0NC5jZXIwZwYIKwYBBQUHAQsEWzBZMFcGCCsGAQUFBzALhktyc3luYzovL3Jz eW5jLnJwLmtpL3JlcG8vYWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4 MjExQzQ5MEUyMDlFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGZpcza5JtdsGcRz8H/8szXfsq9gjBpt RHg9x3/2pXfg1LBMuYNQ6CCoHFEaqhWTDyef59qbghr0eD43Fe4rIm/W3sOF1dWJ m6G4gvyHyXMI0HNGXsGVKxgax1vZJWag6QvEcpr0QKVgCgYSORy1Ou/tk5nLpoG9 m/0XehVP7rWzIhjQfp24Sq2b24DU7bJJSLEfyO1FSesfK3UBpgdeFYAmEnn6gOyV eZCJCmoVFrxnQ139c9jC8uvMtlda9fBiULLoV2xkVC2LSOUx+YBva4Gu3PpaPtpC QGmaF6B82jcdXbLJxKhKGnmS+7KLpBBOLD5n3qwKImH5cgyOv949fvo= -----END CERTIFICATE-----Generated at Sun Apr 6 23:32:54 2025 by rpki-client