
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
File: HwZxfSr2LjgJByCEw6-PSJSOQOI.mft (raw, json)
Hash identifier: oTNHm0U2+MJ8JUOVSvYyqHhu0Quf+tHMYT3rUHX51QI=
Subject key identifier: 8B:E3:AE:C1:11:A0:B6:62:DD:41:B1:4E:16:CF:6C:12:05:6C:2E:A8
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 358FDC04420F6EDC868DC104E311010A8D4714A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
Manifest number: 0557
Signing time: Thu 26 Mar 2026 00:07:34 +0000
Manifest this update: Thu 26 Mar 2026 00:07:34 +0000
Manifest next update: Mon 30 Mar 2026 00:07:34 +0000
Files and hashes: 1: 0c492edd-c347-4b97-a816-01566f9d097b.roa (hash: NXRhe2OBhSWadyGOdKYC9YQJ4o0P2+PIb3MZXVU07ec=)
2: 4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa (hash: 0mkknwvFDf89C8+MPN8MR2jcokUuJ39rkexZ7TV6bBs=)
3: 59031a63-ea1a-4943-86ab-19221a23ca42.roa (hash: eobGcPnW+qfjvKwbl/wr6fDfHRYvfxNU9768YZOQvTg=)
4: 6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (hash: FKNgq8nKjdHJjNSUuxCFa65Vuj7bc5IZQFnQdyDCWVU=)
5: 91a27594-a038-483a-a558-a5377f4d266f.roa (hash: nI73sI5eQmgn9k5wVdxS3KmsyUiWB3tgqndyH+k/YyM=)
6: 943694fe-e278-4d76-b786-7df26f151dd9.roa (hash: 1q4KNgysp+VraYN2vrD1uQTG6MAVWmslVcR5oWLXgbY=)
7: HwZxfSr2LjgJByCEw6-PSJSOQOI.crl (hash: e+mV7HLsLFyXQyKCokkKwCQktlZDWx6nBZzvIepByec=)
8: a86c8ffa-34ab-4a01-8f63-86207fe44159.roa (hash: X91ybmJWv3MMKZObjUk1xEak5p0FQ3KI5yRUdJrHrzQ=)
9: c686f937-000a-490a-846c-e2773b637b26.roa (hash: F8M/opGExcaD4OTZdzPB1iGkDr2ACW8ZNphAcIjDHqM=)
10: d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa (hash: khui7TTsYBHufD+isTrVKQGQxGXUnrqcocKx0RCArDM=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8f:dc:04:42:0f:6e:dc:86:8d:c1:04:e3:11:01:0a:8d:47:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Mar 26 00:07:34 2026 GMT
Not After : Mar 30 00:07:34 2026 GMT
Subject: serialNumber=c74b06f16317a3874c7b1f6db2a835b30e76d6a9be1b82e402bc5ed5c1199389, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:1d:5c:dc:1d:4c:67:d4:5c:6f:55:b5:22:
af:62:22:33:32:cb:32:e0:09:47:34:48:0a:d7:08:
80:8a:76:91:38:8c:61:7e:15:1d:8b:c0:6f:24:44:
46:1f:f5:d8:fe:cc:1c:3b:29:6a:1c:dd:65:29:88:
e0:9e:c6:3b:ae:ec:47:bc:5a:e3:e2:23:14:8b:53:
63:b4:d9:c5:9b:66:12:10:62:43:cb:d2:26:8f:79:
e2:35:e7:20:a9:64:8b:25:a8:6c:df:a6:c9:1c:91:
89:f4:3a:e2:ac:95:57:ca:be:da:5f:65:bb:5b:c2:
93:08:99:40:29:a4:93:04:ea:c9:51:47:a6:17:33:
bf:3e:db:8f:ed:a2:38:51:9b:8b:de:08:db:c9:c5:
84:7a:dd:a2:16:70:cc:27:c9:ec:eb:65:8f:42:3f:
7d:ea:48:76:d1:69:cd:b3:07:8a:98:7a:f2:4e:3e:
ee:28:ee:58:e7:26:53:57:a8:9a:1c:5d:e3:f5:a4:
e8:e9:63:83:88:8f:87:67:0d:b8:3d:58:41:bd:21:
0f:a6:62:46:2e:52:06:65:d0:5a:44:4f:bd:fe:5c:
a9:80:9e:02:bb:17:4a:5b:9b:75:fd:a9:17:14:24:
f4:65:ae:1f:30:00:a5:50:e5:0a:09:bb:c6:95:88:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E3:AE:C1:11:A0:B6:62:DD:41:B1:4E:16:CF:6C:12:05:6C:2E:A8
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ea:4c:ac:2f:6a:11:aa:cf:96:ae:02:7a:c3:26:c8:6e:af:
b3:d6:63:00:12:1c:c7:ad:6a:76:5d:a4:c5:f1:21:94:f4:e0:
f5:ed:63:7d:a2:18:a4:54:12:91:a7:b0:cb:e9:6d:fe:f1:de:
24:e1:8c:33:25:3d:50:ab:d8:d3:56:65:9c:16:f1:ae:8d:80:
09:43:77:bd:cb:d0:f8:fb:dc:31:27:cc:a0:af:ae:08:31:e2:
49:88:e4:b0:bb:3b:8e:26:77:44:5a:49:01:aa:5a:6e:f0:90:
a4:d4:45:0b:45:79:d2:9c:41:c0:9a:eb:eb:be:0c:4e:e7:f1:
b6:db:c6:e4:24:31:63:7b:da:9a:e4:ad:33:15:ea:f1:4c:d7:
78:be:40:a9:b6:d0:28:f0:0d:67:8e:cd:f7:1d:b9:4c:72:40:
47:52:65:a3:c7:1c:eb:46:b1:9c:c9:db:42:7e:6b:05:c3:88:
e6:a5:35:35:e7:d7:31:c7:ca:91:ef:62:d4:20:a9:33:13:88:
1b:38:60:89:fd:04:95:d5:34:13:ca:b8:d6:b5:2a:ee:54:3b:
e9:9a:8e:09:bb:c3:24:c5:b7:79:7b:09:26:0c:dc:01:c0:d6:
44:da:24:8d:fa:1e:bf:3d:32:48:8d:05:f0:24:73:6f:5d:72:
ac:74:41:c7
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIUNY/cBEIPbtyGjcEE4xEBCo1HFKYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4
NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwMzI2MDAwNzM0WhcNMjYwMzMwMDAwNzM0
WjB6MUkwRwYDVQQFE0BjNzRiMDZmMTYzMTdhMzg3NGM3YjFmNmRiMmE4MzViMzBl
NzZkNmE5YmUxYjgyZTQwMmJjNWVkNWMxMTk5Mzg5MS0wKwYDVQQDEyQ4Zjk1ZTRk
MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Ux1c3B1MZ9Rcb1W1Iq9iIjMyyzLgCUc0SArXCICKdpE4
jGF+FR2LwG8kREYf9dj+zBw7KWoc3WUpiOCexjuu7Ee8WuPiIxSLU2O02cWbZhIQ
YkPL0iaPeeI15yCpZIslqGzfpskckYn0OuKslVfKvtpfZbtbwpMImUAppJME6slR
R6YXM78+24/tojhRm4veCNvJxYR63aIWcMwnyezrZY9CP33qSHbRac2zB4qYevJO
Pu4o7ljnJlNXqJocXeP1pOjpY4OIj4dnDbg9WEG9IQ+mYkYuUgZl0FpET73+XKmA
ngK7F0pbm3X9qRcUJPRlrh8wAKVQ5QoJu8aViHJ1AgMBAAGjggLBMIICvTAdBgNV
HQ4EFgQUi+OuwRGgtmLdQbFOFs9sEgVsLqgwHwYDVR0jBBgwFoAUHl8tYvha0oTU
0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05
Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm
NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGVBggrBgEFBQcBCwSB
iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh
MzhjMzJmZDRjL0h3WnhmU3IyTGpnSkJ5Q0V3Ni1QU0pTT1FPSS5tZnQwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2FlLTdlYTM4YzMy
ZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCR6kys
L2oRqs+WrgJ6wybIbq+z1mMAEhzHrWp2XaTF8SGU9OD17WN9ohikVBKRp7DL6W3+
8d4k4YwzJT1Qq9jTVmWcFvGujYAJQ3e9y9D4+9wxJ8ygr64IMeJJiOSwuzuOJndE
WkkBqlpu8JCk1EULRXnSnEHAmuvrvgxO5/G228bkJDFje9qa5K0zFerxTNd4vkCp
ttAo8A1njs33HblMckBHUmWjxxzrRrGcydtCfmsFw4jmpTU159cxx8qR72LUIKkz
E4gbOGCJ/QSV1TQTyrjWtSruVDvpmo4Ju8Mkxbd5ewkmDNwBwNZE2iSN+h6/PTJI
jQXwJHNvXXKsdEHH
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:49:46 2026 by rpki-client