$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft File: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json) Hash identifier: DERExYlkLeJ29QmBi1XPU4PH/PbKn0cjYlOjLmYlrKI= Subject key identifier: EA:3B:9B:36:70:BA:CD:0E:C5:AB:CB:3A:2B:9E:CC:CA:5F:95:93:08 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 7622F0098876EA7A7E8E9C790D7A13239E18774E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft Manifest number: 9F Signing time: Mon 20 Oct 2025 00:10:33 +0000 Manifest this update: Mon 20 Oct 2025 00:10:33 +0000 Manifest next update: Fri 24 Oct 2025 00:10:33 +0000 Files and hashes: 1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: 1kP2M++fmWMNdeWHhWRDYGmhyBjDh9eVYNPrBWNpzCg=) 2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: m74/Y7AXPmenm4HcEa34J/O3E1khAnnEthHqbf3xaW8=) 3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: 9OM8KMPdNuQjQeB+6VVjTObX2r3L99F+7xJCKpVxJTs=) 4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: MJN1JHEhaUwlTLPvrqtAMQ+VdxfLuvodxCCLO0JzdLY=) 5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: 6tz2WoYEgJdALlaW9L6WAI5quBxS5hVl7KGt1Bb3eMg=) 6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: y/QH5BQ5TP6dQgZZigiolieZoHguppvZjnuMcYe6t/I=) 7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: dOtclQZJO3q1euXcFEfm+wyredqxLCAZgMt9j8i7Q/g=) 8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: bffOYUPP+I3Z4d4rrr+AaX8manKt40dAPnAvKgD4mWU=) 9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: TQYUohrElyKM+nn20cVf/Scx+RzBZLDl5Dcj/bhkll0=) 10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: r1Oc5U0H2kaq5/FrS+/HBFz7gWpgOOAAR4yJZh19fOc=) 11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: F/4GXpD+h63YLO3CR8UfTK/L0JHtgaTvd+xyFAYQCjo=) 12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: js7ccmNP950ZxGmvT22+qxxzt2mS9+WhRQ2ZTiKExZE=) 13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: CDUUxDf7KxKhP4Ighuyr/dViwFNAUfpOGw2bRT2oyCk=) 14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: 2lwB58UsF9WHsXXWxQ4wIgCalnXLOzk7FhDI0eM6IE4=) 15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: OzxpJXzDvuhBGzJLwQ7xDJzS93aA5yTPbv0zqhSzuhA=) 16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: 9MAWyxl8OSjTpr5G41Au4Ao90yyTgPQT21TrA83cC6o=) 17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: ku3m8+vhIyzxt83KPsvlEt7OPqTXmowAZM+Pmca2uak=) 18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: VKhFV7XMmlQAhFqWgXFggmzYJjhKFnHlG7ZdAUh8MC0=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:22:f0:09:88:76:ea:7a:7e:8e:9c:79:0d:7a:13:23:9e:18:77:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Oct 20 00:10:33 2025 GMT Not After : Oct 24 00:10:33 2025 GMT Subject: serialNumber=1c84bccbed8100130dd52e52d2c6f0443b0cc5493845633bbe330be7b90d79fe, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:d6:fc:51:b8:5a:0d:f0:19:79:a1:0e:4f: cb:4d:d1:a2:cf:d4:96:e9:2c:10:26:76:07:67:06: 5d:20:c8:76:7c:04:59:21:66:b6:2a:6b:ec:1d:9a: 85:90:40:27:d5:10:b2:18:9c:e2:6f:86:12:3b:35: ca:88:40:ad:24:6c:b5:ad:bc:fc:c0:b0:da:0e:0f: 46:e7:23:a3:95:f3:d8:9b:8f:9f:8b:31:2d:f8:28: b5:81:05:90:9b:fa:19:c3:62:45:b0:df:1a:11:7e: 77:7f:18:e3:ea:bd:bd:c2:57:45:1d:d3:3c:3c:01: 8e:f0:4c:e4:0a:94:b0:fa:df:ff:3e:7f:44:10:21: ef:58:db:77:17:c5:7b:3a:34:23:29:8e:92:5c:a9: 1f:ef:aa:c7:57:24:5f:82:08:38:26:15:c2:a3:b8: b8:1e:1e:01:f5:9b:7d:a4:d5:e6:e7:d4:f3:4c:c0: f1:2d:d8:8e:c3:cd:0e:7c:b9:a9:4b:51:90:7d:38: 91:8e:d8:4b:b3:32:89:cd:05:5b:0e:4b:d0:04:aa: de:64:46:9b:fd:28:27:2b:b5:19:e2:27:c8:a4:3c: 2e:31:a9:80:7f:ba:47:30:63:eb:3b:17:66:3c:a4: c0:38:b6:43:33:b0:46:39:94:9b:de:f5:e1:f8:8a: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3B:9B:36:70:BA:CD:0E:C5:AB:CB:3A:2B:9E:CC:CA:5F:95:93:08 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a2:9c:4c:92:9d:22:a0:34:4f:2e:2e:cb:4e:4e:81:a1:45: 24:6a:44:7e:ca:87:4a:1c:09:79:f6:6b:e2:11:36:43:c9:c5: 0b:7d:3f:01:95:7e:df:54:9e:e7:16:02:9f:ec:93:af:e8:a3: 7b:e7:e2:41:59:ca:ee:98:ce:95:de:0c:0a:29:16:52:63:17: 6e:2b:98:2d:e4:20:95:f8:fa:ea:cd:73:9e:21:3f:70:16:7b: 7e:d8:14:fd:d2:a8:90:6e:e6:c8:4b:e2:a7:a1:26:f4:9e:61: f9:e2:37:ea:ab:9e:4b:e2:50:9e:ec:04:4f:ee:00:74:1d:0a: 93:32:46:aa:74:c8:17:03:b8:ae:64:76:2d:53:3f:dd:8b:c5: 55:ab:51:01:e3:1d:14:84:e7:4f:da:98:d2:41:a7:a4:dc:06: 0b:7e:19:6a:ae:1b:28:06:15:1e:4f:05:48:0e:b7:0a:26:e0: 4a:dc:25:ee:22:d5:f5:79:1f:20:bd:28:15:6f:eb:c5:30:5f: c9:28:96:0b:60:99:4e:8f:3f:dc:ce:3f:d1:86:d0:54:d6:07: 69:db:b7:f1:a8:f3:d9:bb:a1:de:99:f2:ed:97:30:98:88:d6: a1:89:39:50:b8:fe:de:d7:95:ff:fe:e5:ee:db:30:72:bc:58: 25:84:8a:a8 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUdiLwCYh26np+jpx5DXoTI54Yd04wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUxMDIwMDAxMDMzWhcNMjUxMDI0MDAxMDMz WjB6MUkwRwYDVQQFE0AxYzg0YmNjYmVkODEwMDEzMGRkNTJlNTJkMmM2ZjA0NDNi MGNjNTQ5Mzg0NTYzM2JiZTMzMGJlN2I5MGQ3OWZlMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Y9b8UbhaDfAZeaEOT8tN0aLP1JbpLBAmdgdnBl0gyHZ8 BFkhZrYqa+wdmoWQQCfVELIYnOJvhhI7NcqIQK0kbLWtvPzAsNoOD0bnI6OV89ib j5+LMS34KLWBBZCb+hnDYkWw3xoRfnd/GOPqvb3CV0Ud0zw8AY7wTOQKlLD63/8+ f0QQIe9Y23cXxXs6NCMpjpJcqR/vqsdXJF+CCDgmFcKjuLgeHgH1m32k1ebn1PNM wPEt2I7DzQ58ualLUZB9OJGO2EuzMonNBVsOS9AEqt5kRpv9KCcrtRniJ8ikPC4x qYB/ukcwY+s7F2Y8pMA4tkMzsEY5lJve9eH4ioKxAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU6jubNnC6zQ7Fq8s6K57Myl+VkwgwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL240YldyWl9FNXlJOS1FSFNDdWJRX3hKQ2dYTS5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhhLTMyMjFkMDFm N2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRopxM kp0ioDRPLi7LTk6BoUUkakR+yodKHAl59mviETZDycULfT8BlX7fVJ7nFgKf7JOv 6KN75+JBWcrumM6V3gwKKRZSYxduK5gt5CCV+PrqzXOeIT9wFnt+2BT90qiQbubI S+KnoSb0nmH54jfqq55L4lCe7ARP7gB0HQqTMkaqdMgXA7iuZHYtUz/di8VVq1EB 4x0UhOdP2pjSQaek3AYLfhlqrhsoBhUeTwVIDrcKJuBK3CXuItX1eR8gvSgVb+vF MF/JKJYLYJlOjz/czj/RhtBU1gdp27fxqPPZu6HemfLtlzCYiNahiTlQuP7e15X/ /uXu2zByvFglhIqo -----END CERTIFICATE-----Generated at Mon Oct 20 07:24:43 2025 by rpki-client