$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: L5R3LUUF9FD3EDWue22gVW1P4Qx6wqHFkz8M5gjJ+U4= Subject key identifier: F5:4C:18:77:73:E0:79:B3:E5:A3:24:2B:A2:F3:CF:0C:4E:7E:0E:71 Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 63B77818B2A1F72BBDA11AE59C2740DDF4513737 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 0589 Signing time: Wed 23 Sep 2026 00:12:40 +0000 Manifest this update: Wed 23 Sep 2026 00:12:40 +0000 Manifest next update: Sun 27 Sep 2026 00:12:40 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: Sgn9+rlMk/nCpuFw9ZxGJQvITJSymJqYtDh/ivmAADg=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: WEDmOfZ1Ndrs54FydlIUYQdBXnfXlCyaFF7ANTnUek0=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b7:78:18:b2:a1:f7:2b:bd:a1:1a:e5:9c:27:40:dd:f4:51:37:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Sep 23 00:12:40 2026 GMT Not After : Sep 27 00:12:40 2026 GMT Subject: serialNumber=68c629438151e9c38197fdfbc7f4ffe26235cc4acc7dde5f4945d853936f43a5, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:bd:33:bf:a4:52:94:27:17:f3:fe:d8:92: 5b:ea:8e:af:5a:fe:50:02:27:ba:58:e6:13:56:9a: 15:9a:83:27:5f:53:90:17:32:20:4b:c1:24:ba:68: 52:62:d1:ad:98:d5:39:93:fa:20:d3:0b:00:57:9e: 05:97:b7:25:78:2b:bb:8f:66:7d:be:b6:6a:cc:54: 54:d1:ac:96:35:8e:c8:23:5a:c2:45:f2:7e:a5:77: c1:32:c8:6f:9b:26:d4:1b:13:53:5f:0c:56:fe:35: 76:84:ce:c8:a5:f9:4b:bf:f4:bc:81:3c:80:8a:f7: ba:1a:c3:64:f9:93:ce:54:ea:4d:df:a1:f0:c9:16: ad:84:c7:eb:91:82:f1:58:9d:d0:50:58:1a:c7:09: 16:38:4f:b5:ed:4c:30:1f:ae:90:f1:56:1e:64:60: 80:1e:35:7d:4e:e3:93:11:b3:72:ef:4c:c5:e7:61: ec:9a:89:17:8c:47:a7:60:f4:7c:a1:4b:0e:13:b3: e1:42:61:81:89:ac:29:11:32:f9:b8:d2:5b:64:3b: 7a:4b:4f:ff:80:3c:6a:12:24:4f:24:26:5c:de:89: 2e:f6:5c:7c:d6:e2:45:8d:28:d4:cd:bb:23:3f:75: 68:b1:36:1a:67:f6:5d:7b:9a:0a:1d:40:91:a2:73: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4C:18:77:73:E0:79:B3:E5:A3:24:2B:A2:F3:CF:0C:4E:7E:0E:71 X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ab:2c:31:5a:c2:91:4a:49:fc:f1:20:3b:8f:f7:4c:fe:9c: 21:78:e1:21:4c:89:04:0d:47:d5:72:91:15:d6:fb:6c:c7:7d: 53:1e:fc:4b:d9:1f:17:fd:13:e5:fa:83:3c:e9:1f:c5:70:c6: 8c:75:9c:65:10:8b:68:08:b8:de:8e:55:80:db:bf:2c:21:c9: 8c:c6:da:e0:e5:ce:f1:d8:7c:3f:3a:85:45:97:4f:82:81:40: 5a:fb:3d:da:f8:e0:8f:84:23:95:71:a6:f4:0a:1b:d9:9e:54: cd:f0:c9:ef:2c:3b:6f:67:75:e7:0c:6f:0b:e9:7c:6d:5f:b8: 22:8b:a1:9d:a4:6d:70:8b:f0:e4:b1:11:29:3d:32:4c:84:9d: 0d:26:86:ee:f0:87:cb:84:4b:bc:64:04:ca:fa:87:fc:8d:bd: bd:78:fa:a8:91:08:2f:cb:e2:c1:d4:8d:ad:70:f4:b9:35:ab: c8:e9:c2:ab:3a:00:e0:66:36:1e:61:c4:fc:b4:7d:5b:18:52: 17:11:47:bd:d1:9d:5c:08:b5:e7:df:b9:33:de:8f:9a:07:7d: 8c:82:f3:93:d8:b0:eb:56:91:6d:29:5d:78:6f:af:6f:09:a2: 6e:6d:97:23:cf:9a:1e:c4:cb:73:c5:29:88:7d:cf:81:f0:45: 8e:db:1e:c7 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUY7d4GLKh9yu9oRrlnCdA3fRRNzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjYwOTIzMDAxMjQwWhcNMjYwOTI3MDAxMjQw WjB6MUkwRwYDVQQFE0A2OGM2Mjk0MzgxNTFlOWMzODE5N2ZkZmJjN2Y0ZmZlMjYy MzVjYzRhY2M3ZGRlNWY0OTQ1ZDg1MzkzNmY0M2E1MS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHuL0zv6RSlCcX8/7Yklvqjq9a/lACJ7pY5hNWmhWagydf U5AXMiBLwSS6aFJi0a2Y1TmT+iDTCwBXngWXtyV4K7uPZn2+tmrMVFTRrJY1jsgj WsJF8n6ld8EyyG+bJtQbE1NfDFb+NXaEzsil+Uu/9LyBPICK97oaw2T5k85U6k3f ofDJFq2Ex+uRgvFYndBQWBrHCRY4T7XtTDAfrpDxVh5kYIAeNX1O45MRs3LvTMXn YeyaiReMR6dg9HyhSw4Ts+FCYYGJrCkRMvm40ltkO3pLT/+APGoSJE8kJlzeiS72 XHzW4kWNKNTNuyM/dWixNhpn9l17mgodQJGic6APAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU9UwYd3PgebPloyQrovPPDE5+DnEwHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnqywx WsKRSkn88SA7j/dM/pwheOEhTIkEDUfVcpEV1vtsx31THvxL2R8X/RPl+oM86R/F cMaMdZxlEItoCLjejlWA278sIcmMxtrg5c7x2Hw/OoVFl0+CgUBa+z3a+OCPhCOV cab0ChvZnlTN8MnvLDtvZ3XnDG8L6XxtX7gii6GdpG1wi/DksREpPTJMhJ0NJobu 8IfLhEu8ZATK+of8jb29ePqokQgvy+LB1I2tcPS5NavI6cKrOgDgZjYeYcT8tH1b GFIXEUe90Z1cCLXn37kz3o+aB32MgvOT2LDrVpFtKV14b69vCaJubZcjz5oexMtz xSmIfc+B8EWO2x7H -----END CERTIFICATE-----Generated at Wed Sep 23 23:07:05 2026 by rpki-client