$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft File: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json) Hash identifier: XQR2F4VYrikRBFBhE3VLtqffQpvtN+5zcPcEy7YAgXk= Subject key identifier: 89:DA:9B:D8:D3:19:58:60:6A:CA:36:50:A6:78:F4:41:7C:19:DB:BE Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 6DA3681C82A9D6536013AD57B62C7B71D86A1052 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft Manifest number: 64 Signing time: Fri 22 Aug 2025 15:05:40 +0000 Manifest this update: Fri 22 Aug 2025 15:05:40 +0000 Manifest next update: Tue 26 Aug 2025 15:05:40 +0000 Files and hashes: 1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: tM4dtxf5TpAzCDMbETz5eWDUj1tCP3qQGVTF7zF933M=) 2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: Vz6pcDGm8YDNBrekXOQC7h+7HQahCTgSvXm9PeTWRKY=) 3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: OKF5yJL6u2iH9la6JjVpmTfWlwRTmkF4j8EEjAH5oUA=) 4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: MnI8L3t+FcObK4LyGHY2+/W6Sl3hZqkB5/Mg6yi/7OU=) 5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: dNcgHoxpUat6/6qJt+AsnILJJ5ICMITS9h+/SKKIuJA=) 6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: ReEmrmuRQsFuRQ4rrvH94TV/xsHrr/QLlUAYKzQ2rJc=) 7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: kbCx9Oe1P+cyMyblbFuQ+ePcjKClMv1dp5C/DbVl8tE=) 8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: 08C8VT4Qv4kksrxdIn3DIEQhzYjWwtVvCACaRx1pHGs=) 9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: vuy/D0Z4OS13VdXBaEx7WQyafvjZitoaCGkogrcIeYM=) 10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: 1+dDfhy5dmLtQTvSqmfQGOETjpvFT0C7dXM1hA1D7ds=) 11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: OHcvzEWWhz8CLGZLM4X5VIC/uKRrDXOtkHsfRJbS1Zw=) 12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: izDKDy45L4T5je1YdnWy/DF/isRSWK4pkS60IQLFfq4=) 13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: SmSDAOupotfr8OSGIUOM0fhWMKndRoDAYIhyMyOmg70=) 14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: iaufOBzVD4BrhThX07vPB0q1uKorV89MpYEVOyMkBdk=) 15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: qHvIQRG+sIAbmBViAvGABnFuh+CD5hAx2PBtUkQ2VK0=) 16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: Op5lIEV/fzacmHqDeNHJqqH5VkYlqRHVgjVcIw7BqRg=) 17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: zDk3Ag8jlLmpRZkODK1eW81Ju9tTzfqOLr1/4I/egPA=) 18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: qff+BygXPVIRq+xIkVLUKqP+LiIHSICV0yYiuu7+Acg=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a3:68:1c:82:a9:d6:53:60:13:ad:57:b6:2c:7b:71:d8:6a:10:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 22 15:05:40 2025 GMT Not After : Aug 26 15:05:40 2025 GMT Subject: serialNumber=65fff380bdce7df4bd951b5d189090c021d97d466afc0a9ef9f96cc3b3fa0d6b, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:fd:d5:a4:95:8d:be:96:96:83:5e:71:e1: fa:ab:0d:a5:71:72:cf:d3:8a:98:6d:64:0a:62:7e: ff:21:2e:7f:cf:d4:c6:29:37:81:c7:bd:15:e7:f2: 8f:fc:76:2a:76:45:95:98:38:48:6c:85:bb:91:1e: c9:b1:4a:09:56:5c:25:5c:7d:c9:41:49:a8:83:03: 95:76:2b:88:eb:53:a7:b6:25:31:8f:e2:1a:8d:07: 7e:9b:df:66:34:53:b8:5b:6c:71:8c:a0:b0:9c:3e: 0e:c7:fb:02:ff:a5:07:83:7a:c3:39:57:60:9e:9c: 87:b8:6c:a2:4b:cd:93:4c:99:9f:72:b8:c7:9d:72: 0f:aa:df:69:85:70:8e:a4:5c:5f:cd:66:c7:bd:7b: 07:f2:5b:e6:c6:1a:42:e7:86:50:e2:38:6b:64:7d: 0a:58:f0:4b:d0:83:29:e2:75:fc:cc:cc:7d:d3:66: b8:a1:cf:67:a7:1c:c8:11:67:f5:20:62:c4:bf:ff: 4e:75:e4:7a:7c:fb:73:5a:47:ca:ab:ad:9e:f4:a4: be:23:07:55:70:ba:9b:ba:63:f3:57:e3:84:f3:81: 89:bd:e6:37:1c:d2:e5:7f:a1:26:54:d9:8c:87:16: 7c:55:dd:f5:cb:9a:6e:6b:70:56:f2:2c:ca:25:cb: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DA:9B:D8:D3:19:58:60:6A:CA:36:50:A6:78:F4:41:7C:19:DB:BE X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d3:82:6a:7c:51:99:14:eb:33:4d:4f:a1:8d:f2:62:db:dc: 83:6b:97:47:57:0f:35:b5:27:4b:75:83:39:67:33:e1:f1:5f: fe:be:09:3d:7f:f8:c6:d4:bf:8d:00:f8:e8:ac:45:d3:9d:f8: 3e:37:83:80:15:1e:dc:28:c9:64:e6:93:7f:b8:2f:1f:b7:1a: 4d:78:83:47:a0:01:ac:b9:6e:71:df:ba:9e:f0:c6:1f:e6:38: f3:81:d4:18:88:23:55:41:4a:23:d0:f6:bf:0d:27:bd:ad:5d: 80:e0:11:58:50:5e:a3:00:84:aa:5d:a6:3e:34:aa:b5:02:c2: 1c:8d:5b:a8:71:89:f8:aa:48:9d:1a:22:35:7a:56:00:a3:71: 04:44:e3:6e:42:09:cf:bd:a5:d5:1a:ae:a7:1b:38:d3:98:e0: fb:e3:e6:2a:16:2d:de:4d:75:a7:fd:bd:62:b8:37:1d:f9:e1: 07:1d:8f:69:56:24:aa:b9:b7:31:f2:86:39:2f:12:ee:ba:31: c3:4e:26:38:33:c2:ca:ec:c9:3c:ce:1a:6e:05:4f:e1:b3:d8: 86:51:47:62:13:ba:07:d2:83:d1:ac:5b:bd:5c:96:45:27:02: 71:6a:68:6f:95:8a:18:29:3d:e0:44:c1:41:8b:e5:09:79:82: 36:e8:87:02 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUbaNoHIKp1lNgE61Xtix7cdhqEFIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwODIyMTUwNTQwWhcNMjUwODI2MTUwNTQw WjB6MUkwRwYDVQQFE0A2NWZmZjM4MGJkY2U3ZGY0YmQ5NTFiNWQxODkwOTBjMDIx ZDk3ZDQ2NmFmYzBhOWVmOWY5NmNjM2IzZmEwZDZiMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6IP3VpJWNvpaWg15x4fqrDaVxcs/TiphtZApifv8hLn/P 1MYpN4HHvRXn8o/8dip2RZWYOEhshbuRHsmxSglWXCVcfclBSaiDA5V2K4jrU6e2 JTGP4hqNB36b32Y0U7hbbHGMoLCcPg7H+wL/pQeDesM5V2CenIe4bKJLzZNMmZ9y uMedcg+q32mFcI6kXF/NZse9ewfyW+bGGkLnhlDiOGtkfQpY8EvQgynidfzMzH3T Zrihz2enHMgRZ/UgYsS//0515Hp8+3NaR8qrrZ70pL4jB1Vwupu6Y/NX44TzgYm9 5jcc0uV/oSZU2YyHFnxV3fXLmm5rcFbyLMoly8MfAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUidqb2NMZWGBqyjZQpnj0QXwZ274wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL240YldyWl9FNXlJOS1FSFNDdWJRX3hKQ2dYTS5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhhLTMyMjFkMDFm N2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC604Jq fFGZFOszTU+hjfJi29yDa5dHVw81tSdLdYM5ZzPh8V/+vgk9f/jG1L+NAPjorEXT nfg+N4OAFR7cKMlk5pN/uC8ftxpNeINHoAGsuW5x37qe8MYf5jjzgdQYiCNVQUoj 0Pa/DSe9rV2A4BFYUF6jAISqXaY+NKq1AsIcjVuocYn4qkidGiI1elYAo3EERONu QgnPvaXVGq6nGzjTmOD74+YqFi3eTXWn/b1iuDcd+eEHHY9pViSqubcx8oY5LxLu ujHDTiY4M8LK7Mk8zhpuBU/hs9iGUUdiE7oH0oPRrFu9XJZFJwJxamhvlYoYKT3g RMFBi+UJeYI26IcC -----END CERTIFICATE-----Generated at Sat Aug 23 09:49:15 2025 by rpki-client