$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft File: JmLOFOkF4Y68t1IvkrNoS8SGW00.mft (raw, json) Hash identifier: DLi//flpZpFtUSI88VdJ2GNn3FzbSTER6ZfUGMiqqmM= Subject key identifier: 6E:C9:C5:46:97:66:DC:3E:F1:78:AB:2B:FC:AB:A9:EE:AA:3F:11:5E Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Certificate serial: 5E4D4BE38C0602F07069E19594782C9999D053D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft Manifest number: 011FE8 Signing time: Mon 20 Oct 2025 21:53:22 +0000 Manifest this update: Mon 20 Oct 2025 21:53:22 +0000 Manifest next update: Fri 24 Oct 2025 21:53:22 +0000 Files and hashes: 1: 29ea79d7-cc01-4531-b88c-9dfe49434d95.roa (hash: YXuanicAjyI4nDZyxRw3HBz8gsNWI9yPsavT5PYJfkA=) 2: JmLOFOkF4Y68t1IvkrNoS8SGW00.crl (hash: jL2R7tHmUhCkjrLQ36nvsDUK8CqI3ZpOAmNTQ9YZWJI=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:4d:4b:e3:8c:06:02:f0:70:69:e1:95:94:78:2c:99:99:d0:53:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Validity Not Before: Oct 20 21:53:22 2025 GMT Not After : Oct 24 21:53:22 2025 GMT Subject: serialNumber=28f426571fd633f0a5363661a334bd356ccfef39ab086a2626665fd46edcedba, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:1f:f2:83:93:50:fb:16:fd:e8:f4:67:31: 14:4b:13:74:ca:89:32:aa:83:f0:e6:61:cf:bb:32: ca:ec:0b:ba:d0:9c:a3:6b:c9:88:cb:b3:55:34:d8: 79:1a:50:7f:6d:a5:e9:95:12:e4:f2:68:97:35:e2: a4:7f:4b:c8:af:b1:d2:44:75:24:4d:63:5a:b3:39: 20:1f:2a:c0:2e:b7:57:67:5e:00:c9:d8:d6:75:00: 96:69:66:b4:48:d4:1a:0b:d8:be:38:8e:1d:b8:b6: c2:a0:0a:bb:e5:1e:dd:18:9f:5b:2d:08:84:68:23: 58:7b:89:6a:87:5c:a7:85:a2:2b:1a:d1:3e:50:42: 89:ac:4f:36:19:a1:10:55:fa:d4:63:1c:5b:b4:8d: 04:00:0d:af:aa:1b:61:ef:16:9f:16:1c:57:18:49: 58:8a:eb:c0:b5:18:3f:27:7d:9d:f1:16:d5:b3:f0: 42:d2:f7:b5:74:a5:e5:e1:cc:ac:d8:1d:0b:d3:4a: 09:ff:cc:c8:42:85:2a:ba:d8:b7:dc:2a:a5:c9:01: 0b:a2:a7:b6:d3:f3:25:1f:45:88:95:87:7e:3d:1c: b4:eb:8c:28:96:85:69:c8:0c:52:06:0d:18:8d:10: 98:38:47:ab:0d:be:a9:6b:ae:2a:5c:9c:86:62:07: 6d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C9:C5:46:97:66:DC:3E:F1:78:AB:2B:FC:AB:A9:EE:AA:3F:11:5E X509v3 Authority Key Identifier: keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b8:89:4a:c6:7b:29:41:29:71:40:45:50:81:3b:8b:db:c0: 50:60:70:b3:d5:22:ff:d7:d4:00:86:da:14:fc:9a:36:5d:cd: d8:20:3a:e5:cb:b1:0b:ff:ef:79:2a:ac:54:c5:0a:2d:89:0f: ef:d2:eb:7f:96:53:92:2a:1a:cb:cb:ba:13:05:25:b2:27:dc: 8e:5e:ff:32:31:d7:a6:09:89:18:06:9f:da:b2:09:b4:fd:34: af:e5:c8:5d:46:d7:e3:b1:1e:9e:a3:ca:7b:b1:8e:b0:ad:ca: 27:42:52:12:75:e0:af:c7:5d:a0:25:fe:8a:16:66:e5:f5:9f: 84:eb:38:5a:98:55:ae:26:d4:ee:4b:27:e7:a6:5b:d5:3d:aa: 1e:83:db:d9:56:b9:62:1e:e8:bb:80:2c:e5:08:69:08:9b:d8: 5f:8d:de:f2:3a:03:88:a4:93:1f:8b:eb:be:f0:1b:ed:44:ec: f3:ed:b6:b8:fc:ee:c2:d3:b4:d1:2b:a3:78:9c:64:db:65:92: 45:b4:d2:83:33:20:02:a4:07:1b:aa:89:8f:24:d6:6b:5d:97: 8f:8b:56:0c:fd:cf:74:86:43:28:3d:2f:66:e7:4b:6b:f7:d8: 4a:63:ac:12:16:3d:a1:85:58:a8:8e:9d:fb:64:6f:2b:3f:72: 23:29:af:ef -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUXk1L44wGAvBwaeGVlHgsmZnQU9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUxMDIwMjE1MzIyWhcNMjUxMDI0MjE1MzIy WjB6MUkwRwYDVQQFE0AyOGY0MjY1NzFmZDYzM2YwYTUzNjM2NjFhMzM0YmQzNTZj Y2ZlZjM5YWIwODZhMjYyNjY2NWZkNDZlZGNlZGJhMS0wKwYDVQQDEyRjMGNlMjNl YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCahh/yg5NQ+xb96PRnMRRLE3TKiTKqg/DmYc+7MsrsC7rQ nKNryYjLs1U02HkaUH9tpemVEuTyaJc14qR/S8ivsdJEdSRNY1qzOSAfKsAut1dn XgDJ2NZ1AJZpZrRI1BoL2L44jh24tsKgCrvlHt0Yn1stCIRoI1h7iWqHXKeFoisa 0T5QQomsTzYZoRBV+tRjHFu0jQQADa+qG2HvFp8WHFcYSViK68C1GD8nfZ3xFtWz 8ELS97V0peXhzKzYHQvTSgn/zMhChSq62LfcKqXJAQuip7bT8yUfRYiVh349HLTr jCiWhWnIDFIGDRiNEJg4R6sNvqlrripcnIZiB20xAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUbsnFRpdm3D7xeKsr/Kup7qo/EV4wHwYDVR0jBBgwFoAUVajdRdlEE/nR kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk ZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1LWZkZGVmYTlh MDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAauIlK xnspQSlxQEVQgTuL28BQYHCz1SL/19QAhtoU/Jo2Xc3YIDrly7EL/+95KqxUxQot iQ/v0ut/llOSKhrLy7oTBSWyJ9yOXv8yMdemCYkYBp/asgm0/TSv5chdRtfjsR6e o8p7sY6wrconQlISdeCvx12gJf6KFmbl9Z+E6zhamFWuJtTuSyfnplvVPaoeg9vZ VrliHui7gCzlCGkIm9hfjd7yOgOIpJMfi+u+8BvtROzz7ba4/O7C07TRK6N4nGTb ZZJFtNKDMyACpAcbqomPJNZrXZePi1YM/c90hkMoPS9m50tr99hKY6wSFj2hhVio jp37ZG8rP3IjKa/v -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:11 2025 by rpki-client