$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft File: JmLOFOkF4Y68t1IvkrNoS8SGW00.mft (raw, json) Hash identifier: pQnFkvynG6a1Izudt2Y+vSF1uenWH+EgEfCwHBY1MBk= Subject key identifier: B2:43:05:C2:23:77:4E:56:A6:91:E5:58:20:3F:F1:79:B3:F6:E8:A2 Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Certificate serial: 353D22E208D7CD6541321A6071E12721B9B34C08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft Manifest number: FCD8 Signing time: Wed 02 Jul 2025 13:48:18 +0000 Manifest this update: Wed 02 Jul 2025 13:48:18 +0000 Manifest next update: Sun 06 Jul 2025 13:48:18 +0000 Files and hashes: 1: JmLOFOkF4Y68t1IvkrNoS8SGW00.crl (hash: hy4e3VSd68UJ05agO9nOQWay8bnXa1robFmif6oWhqA=) 2: bd89e268-083b-4ed3-b5d1-5f2d7b18cf51.roa (hash: XeCsNDlvzZ9Kq76cJyDTNqKBh1YtjS5m6OWOkmxZoZI=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3d:22:e2:08:d7:cd:65:41:32:1a:60:71:e1:27:21:b9:b3:4c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Validity Not Before: Jul 2 13:48:18 2025 GMT Not After : Jul 6 13:48:18 2025 GMT Subject: serialNumber=ef2d7b340adeba67646519e0e77953aafcdc0c811d30c7867042cdd0a05cb45b, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:a6:39:b2:e2:b1:45:63:a8:11:82:09:df: b3:17:93:b2:ed:a4:6a:bc:e8:b8:eb:8d:47:df:2b: c4:82:77:5d:c7:65:48:62:45:fd:59:f8:65:f5:74: 4d:c3:71:8e:3c:9f:73:68:b8:90:43:24:90:c4:ee: 2f:ae:22:b6:ad:cd:e6:ee:9e:8e:bf:ef:03:af:e3: e4:96:7a:eb:3f:0c:90:7e:2c:55:55:f0:13:9e:cc: d7:90:a2:b0:e0:79:be:5f:49:64:66:83:b5:b8:32: 73:6b:c6:95:46:31:c0:83:d8:ed:75:ee:89:43:98: b3:ab:09:bd:79:eb:bc:e6:79:33:a5:5b:2d:f5:41: 59:c0:0f:02:ef:5a:c7:28:c7:dc:e2:31:8a:ae:2b: d7:2a:01:31:07:a0:d0:ee:49:c7:37:a5:1d:bd:d7: c5:73:81:1f:ae:2a:df:7c:2e:2d:63:c8:c9:b5:a6: bc:dc:e7:79:5e:f3:06:fe:c3:5c:aa:15:ed:83:09: 07:a4:0c:13:b7:fe:81:7f:52:a8:ff:ba:88:16:d2: 93:b1:e0:40:2b:ef:7b:e5:ef:36:9a:bb:29:07:da: 55:90:a3:3d:1e:cc:24:20:69:b2:20:80:87:23:70: e2:7c:9f:43:c1:8a:e4:22:10:e8:da:3c:94:13:64: 89:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:43:05:C2:23:77:4E:56:A6:91:E5:58:20:3F:F1:79:B3:F6:E8:A2 X509v3 Authority Key Identifier: keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d8:9c:61:0a:57:1c:07:34:dd:41:80:f5:1e:18:f7:61:c2: f6:ab:32:fd:a0:19:23:1e:ff:b0:07:62:cc:a4:ca:af:d8:f8: d9:2b:a0:b5:9a:27:fb:e7:4b:17:8b:34:9e:e5:c8:03:88:c2: 8a:73:12:22:4e:49:ef:fb:94:cd:1f:e8:37:4e:ba:a7:bf:58: a5:d9:95:e1:3f:a2:78:46:d5:05:64:91:48:12:45:e3:00:a5: f7:5b:76:36:3e:42:2d:ec:24:b8:7f:56:9c:b2:fc:c5:18:5a: 9a:d7:8b:e3:ca:4e:2a:24:89:bb:c4:39:97:8a:cc:77:4c:29: 0c:96:70:3e:b3:e8:05:a0:3f:ec:3b:32:9e:2f:02:bc:dc:cd: 0e:77:1a:41:98:b2:8f:45:c0:e0:05:98:21:9c:ee:7e:69:ca: 61:53:8e:a1:e2:72:e8:cb:e5:b1:52:88:c4:ce:d2:c6:08:be: bb:c2:d8:17:9f:26:c6:b1:7b:75:04:15:be:3c:da:97:86:37: f7:66:34:0c:4c:57:a2:c7:c2:f2:8b:41:2e:85:93:cb:b1:c8: 1b:cc:07:88:ca:66:98:6c:93:cf:52:28:df:21:ae:26:09:40: d5:98:53:67:91:5a:49:43:76:10:fd:8a:18:ff:1e:70:aa:13: 9b:fa:0a:05 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUNT0i4gjXzWVBMhpgceEnIbmzTAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNzAyMTM0ODE4WhcNMjUwNzA2MTM0ODE4 WjB6MUkwRwYDVQQFE0BlZjJkN2IzNDBhZGViYTY3NjQ2NTE5ZTBlNzc5NTNhYWZj ZGMwYzgxMWQzMGM3ODY3MDQyY2RkMGEwNWNiNDViMS0wKwYDVQQDEyRjMGNlMjNl YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDkaY5suKxRWOoEYIJ37MXk7LtpGq86LjrjUffK8SCd13H ZUhiRf1Z+GX1dE3DcY48n3NouJBDJJDE7i+uIratzebuno6/7wOv4+SWeus/DJB+ LFVV8BOezNeQorDgeb5fSWRmg7W4MnNrxpVGMcCD2O117olDmLOrCb1567zmeTOl Wy31QVnADwLvWscox9ziMYquK9cqATEHoNDuScc3pR2918VzgR+uKt98Li1jyMm1 przc53le8wb+w1yqFe2DCQekDBO3/oF/Uqj/uogW0pOx4EAr73vl7zaauykH2lWQ oz0ezCQgabIggIcjcOJ8n0PBiuQiEOjaPJQTZIkFAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUskMFwiN3TlamkeVYID/xebP26KIwHwYDVR0jBBgwFoAUVajdRdlEE/nR kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk ZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1LWZkZGVmYTlh MDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCd2Jxh ClccBzTdQYD1Hhj3YcL2qzL9oBkjHv+wB2LMpMqv2PjZK6C1mif750sXizSe5cgD iMKKcxIiTknv+5TNH+g3Trqnv1il2ZXhP6J4RtUFZJFIEkXjAKX3W3Y2PkIt7CS4 f1acsvzFGFqa14vjyk4qJIm7xDmXisx3TCkMlnA+s+gFoD/sOzKeLwK83M0OdxpB mLKPRcDgBZghnO5+acphU46h4nLoy+WxUojEztLGCL67wtgXnybGsXt1BBW+PNqX hjf3ZjQMTFeix8Lyi0EuhZPLscgbzAeIymaYbJPPUijfIa4mCUDVmFNnkVpJQ3YQ /YoY/x5wqhOb+goF -----END CERTIFICATE-----Generated at Wed Jul 2 15:11:15 2025 by rpki-client