$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft File: JmLOFOkF4Y68t1IvkrNoS8SGW00.mft (raw, json) Hash identifier: v05wGHUGUrjL+wJoDS4pW52TMogTaPdHfvkymTUWDSE= Subject key identifier: 6F:B4:6A:C9:CA:BC:30:06:27:B6:F9:E5:F9:91:7B:7C:CC:5A:BF:5D Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Certificate serial: 3ADB494E1D318DB73C7E16395821F4C12C02C578 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft Manifest number: EBE2 Signing time: Sun 11 May 2025 14:53:18 +0000 Manifest this update: Sun 11 May 2025 14:53:18 +0000 Manifest next update: Thu 15 May 2025 14:53:18 +0000 Files and hashes: 1: JmLOFOkF4Y68t1IvkrNoS8SGW00.crl (hash: p52XVQDefRvCKLaihmiiwI20+Hq/KojLi6aMlv6gLI4=) 2: a086ec74-8977-4888-973e-bc58835ec911.roa (hash: sotvyKgz7vzNuGTQ4/w5D3uQG4r8V56yBtdd05iUhIg=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:db:49:4e:1d:31:8d:b7:3c:7e:16:39:58:21:f4:c1:2c:02:c5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Validity Not Before: May 11 14:53:18 2025 GMT Not After : May 15 14:53:18 2025 GMT Subject: serialNumber=acaeb29804f2c3a6f15feef46406c891fb8e367051dda1b8513967dc9c6c4cea, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:bf:4b:93:0d:7d:a3:91:04:a2:2b:f0:73: 72:b7:c2:d7:06:33:8f:4f:0a:e0:2c:34:08:7f:f0: 56:89:e8:96:bf:8a:43:73:f5:97:82:8e:93:51:c1: 4f:37:b6:00:49:2c:da:eb:a8:60:58:d8:77:e7:6a: 16:f5:85:d2:d3:c3:8a:b4:8c:53:db:a0:88:a9:74: b8:b3:59:4a:3a:36:3e:5c:20:b2:2c:2c:99:aa:2a: 42:5f:b8:1d:92:e8:55:77:bd:a7:55:cc:41:00:e6: 36:7c:56:bd:0f:57:67:c1:84:b0:1c:d6:24:7d:a1: a2:95:28:31:91:05:5a:a0:6e:20:b8:b9:3c:72:50: ce:70:ad:36:a7:2a:68:73:8b:d3:71:58:fb:78:f1: 3c:62:be:6b:36:c4:64:13:85:b6:7c:43:68:a4:f3: 76:58:89:10:66:e7:d4:da:3a:59:63:74:51:f5:2d: d4:2f:06:ff:a6:29:1d:59:25:85:24:2e:90:13:f2: c1:d9:c5:66:d5:d4:f4:1c:a2:fc:26:aa:19:28:8f: c4:79:f3:80:f2:c1:8d:00:cd:da:b3:54:ff:ad:12: 51:80:b2:63:f5:b3:e2:13:51:84:ef:11:3e:0e:94: fd:ed:13:3b:5b:9e:3b:c9:49:b2:94:dd:81:f8:0b: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B4:6A:C9:CA:BC:30:06:27:B6:F9:E5:F9:91:7B:7C:CC:5A:BF:5D X509v3 Authority Key Identifier: keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5c:b5:4e:a3:51:67:2c:a0:5a:22:cb:1f:4e:1a:c7:8a:42: 94:82:c7:db:25:2b:f6:db:38:5b:44:a6:70:38:3a:ce:21:a1: d0:7b:6d:06:70:dc:52:c3:5a:5e:a0:67:5a:5f:2a:bc:f6:58: ff:37:c6:e0:49:43:9e:bd:04:b9:32:ed:f3:eb:e2:ee:84:80: a7:fe:81:74:95:40:cf:80:f9:1f:ff:94:93:27:7a:3d:d7:9b: 8a:d6:3d:39:fd:06:3c:aa:78:73:37:7c:82:c6:f0:f1:2f:17: 80:28:59:4e:7d:39:c1:4b:b3:06:1d:15:72:9b:72:53:e6:31: ad:c7:bf:fe:e7:a8:50:40:e4:3f:f1:f8:db:9f:60:25:36:39: 96:fd:83:f1:a7:80:05:9f:6b:93:94:72:51:a2:f0:f6:a3:b5: 98:96:8a:b4:6e:81:7b:0f:14:82:27:98:33:84:5b:38:b8:1a: 2a:2a:d7:28:89:2c:db:69:f3:dd:63:dd:ce:92:84:48:90:05: 86:88:ab:f8:e0:9e:d0:57:ba:82:ae:11:28:8f:c9:f0:c8:02: 00:b5:e3:c3:5f:82:b1:a5:74:b7:b8:46:ee:f7:1a:a4:49:7b: 48:fd:e8:52:86:86:96:c3:1f:fd:8c:54:78:b0:83:6f:1e:ed: 2e:ce:78:3f -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUOttJTh0xjbc8fhY5WCH0wSwCxXgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNTExMTQ1MzE4WhcNMjUwNTE1MTQ1MzE4 WjB6MUkwRwYDVQQFE0BhY2FlYjI5ODA0ZjJjM2E2ZjE1ZmVlZjQ2NDA2Yzg5MWZi OGUzNjcwNTFkZGExYjg1MTM5NjdkYzljNmM0Y2VhMS0wKwYDVQQDEyRjMGNlMjNl YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpCL9Lkw19o5EEoivwc3K3wtcGM49PCuAsNAh/8FaJ6Ja/ ikNz9ZeCjpNRwU83tgBJLNrrqGBY2Hfnahb1hdLTw4q0jFPboIipdLizWUo6Nj5c ILIsLJmqKkJfuB2S6FV3vadVzEEA5jZ8Vr0PV2fBhLAc1iR9oaKVKDGRBVqgbiC4 uTxyUM5wrTanKmhzi9NxWPt48Txivms2xGQThbZ8Q2ik83ZYiRBm59TaOlljdFH1 LdQvBv+mKR1ZJYUkLpAT8sHZxWbV1PQcovwmqhkoj8R584DywY0AzdqzVP+tElGA smP1s+ITUYTvET4OlP3tEztbnjvJSbKU3YH4C/lXAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUb7Rqycq8MAYntvnl+ZF7fMxav10wHwYDVR0jBBgwFoAUVajdRdlEE/nR kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk ZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1LWZkZGVmYTlh MDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAXLVO o1FnLKBaIssfThrHikKUgsfbJSv22zhbRKZwODrOIaHQe20GcNxSw1peoGdaXyq8 9lj/N8bgSUOevQS5Mu3z6+LuhICn/oF0lUDPgPkf/5STJ3o915uK1j05/QY8qnhz N3yCxvDxLxeAKFlOfTnBS7MGHRVym3JT5jGtx7/+56hQQOQ/8fjbn2AlNjmW/YPx p4AFn2uTlHJRovD2o7WYloq0boF7DxSCJ5gzhFs4uBoqKtcoiSzbafPdY93OkoRI kAWGiKv44J7QV7qCrhEoj8nwyAIAtePDX4KxpXS3uEbu9xqkSXtI/ehShoaWwx/9 jFR4sINvHu0uzng/ -----END CERTIFICATE-----Generated at Sun May 11 17:09:36 2025 by rpki-client