$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: u3C3hhFk149K+YpYyKo7P6bekAC6QmQlDDhV4dtC8HQ= Subject key identifier: 98:88:1D:AF:8E:49:0D:FB:B8:66:7A:E5:3A:F2:95:0E:EB:92:C5:71 Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 4C7F125769404823C871F21E662A8E215A509924 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 03C6 Signing time: Tue 01 Jul 2025 00:01:16 +0000 Manifest this update: Tue 01 Jul 2025 00:01:16 +0000 Manifest next update: Sat 05 Jul 2025 00:01:16 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: hnOyqgsO/fIgpWciu3r1AtwDIyM74PTZ2kFabymoHVE=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: HsKUDtIY0QQL5qbuIFwD3/cfFDOTYh5I/yHxT+A0nfE=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7f:12:57:69:40:48:23:c8:71:f2:1e:66:2a:8e:21:5a:50:99:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Jul 1 00:01:16 2025 GMT Not After : Jul 5 00:01:16 2025 GMT Subject: serialNumber=1a2fa87872ff162060e6b91b70b9dc051360d983bd47215956adff8af2ef6495, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:79:c8:2d:6a:ff:5c:7e:0e:74:56:76:44: c8:0f:9f:67:87:5c:01:d9:c5:81:54:bb:63:fa:28: 31:db:85:b9:0b:1f:df:d5:d6:75:96:d7:7c:2f:f6: b6:c4:3d:9d:19:4f:d8:48:d7:bb:68:15:96:4f:2a: a0:3b:a7:11:b9:5c:96:30:d6:a4:ce:e2:26:0a:bc: 41:5e:e0:da:f7:4c:82:5a:4d:25:2c:5b:b1:f4:ef: a2:4a:b8:2a:a4:a8:14:12:39:25:52:8f:64:fc:1f: 9e:a5:61:76:b4:95:41:fe:bb:18:55:15:ae:fe:15: 46:19:24:b5:58:0b:23:db:e0:28:2e:6d:e7:d0:d9: 8b:f9:47:f5:45:5c:21:26:13:a7:b6:a4:48:57:30: ab:f8:eb:8f:52:13:b9:71:3c:84:63:7a:ce:70:64: 67:40:63:62:68:89:8b:b1:90:0d:b1:e6:92:79:3c: f9:16:96:85:f5:21:5d:69:81:6b:48:d2:e4:c2:a5: 9a:3e:ab:e9:63:f0:55:8e:ad:39:c3:57:2b:34:fb: 0d:06:d2:ca:40:ae:4b:f3:91:a9:49:95:f1:bf:76: bf:5f:42:2a:ff:0d:73:49:2b:db:e0:3f:1d:72:90: 41:43:f7:f0:70:a7:2c:18:dd:c3:ca:85:d1:b7:bc: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:88:1D:AF:8E:49:0D:FB:B8:66:7A:E5:3A:F2:95:0E:EB:92:C5:71 X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:99:ef:1f:f3:0a:89:09:d5:e0:75:de:cd:9a:a0:81:b1:ff: 07:c4:01:5b:b7:56:e8:88:11:33:2b:be:b0:f8:e8:43:38:1f: 49:1d:2b:f1:16:fd:f2:82:ae:45:1e:c7:35:81:23:39:e4:a7: 74:18:81:ed:96:cd:a6:05:6e:e9:b4:72:da:90:e5:c0:91:89: 81:8f:9a:55:6e:13:5b:01:3f:be:96:b5:07:a9:08:1c:8b:ca: 44:f7:53:bb:25:95:a1:ca:ba:a5:c4:32:ec:69:e3:5f:1d:ba: 8a:73:d0:c9:3e:78:fc:2e:2d:65:96:40:79:4b:38:2a:71:bc: 58:c4:0c:7f:b4:7c:b8:24:6b:4c:f3:5c:2c:a1:9a:2d:b4:e4: 47:c4:77:b4:03:fd:34:3c:4a:3d:e9:99:e7:f2:3f:bb:26:c9: b4:7a:ac:e0:25:95:eb:1a:d9:5d:aa:c1:46:38:02:6b:34:d8: 1d:64:db:6d:ae:2a:e5:75:d9:6b:6d:28:b3:b5:ae:bd:e4:fa: 97:1c:0d:3e:ac:cd:76:ca:1f:16:6b:d4:84:0a:bb:2d:1f:8e: ba:8a:c4:58:f2:89:94:71:3c:6c:ba:07:55:53:1d:c2:a3:aa: b4:3a:16:09:50:d0:cd:11:3e:b2:4f:76:84:05:e7:7c:08:f1: e2:69:0f:53 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUTH8SV2lASCPIcfIeZiqOIVpQmSQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjUwNzAxMDAwMTE2WhcNMjUwNzA1MDAwMTE2 WjB6MUkwRwYDVQQFE0AxYTJmYTg3ODcyZmYxNjIwNjBlNmI5MWI3MGI5ZGMwNTEz NjBkOTgzYmQ0NzIxNTk1NmFkZmY4YWYyZWY2NDk1MS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXSnnILWr/XH4OdFZ2RMgPn2eHXAHZxYFUu2P6KDHbhbkL H9/V1nWW13wv9rbEPZ0ZT9hI17toFZZPKqA7pxG5XJYw1qTO4iYKvEFe4Nr3TIJa TSUsW7H076JKuCqkqBQSOSVSj2T8H56lYXa0lUH+uxhVFa7+FUYZJLVYCyPb4Cgu befQ2Yv5R/VFXCEmE6e2pEhXMKv4649SE7lxPIRjes5wZGdAY2JoiYuxkA2x5pJ5 PPkWloX1IV1pgWtI0uTCpZo+q+lj8FWOrTnDVys0+w0G0spArkvzkalJlfG/dr9f Qir/DXNJK9vgPx1ykEFD9/BwpywY3cPKhdG3vI4BAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUmIgdr45JDfu4ZnrlOvKVDuuSxXEwHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeme8f 8wqJCdXgdd7NmqCBsf8HxAFbt1boiBEzK76w+OhDOB9JHSvxFv3ygq5FHsc1gSM5 5Kd0GIHtls2mBW7ptHLakOXAkYmBj5pVbhNbAT++lrUHqQgci8pE91O7JZWhyrql xDLsaeNfHbqKc9DJPnj8Li1llkB5SzgqcbxYxAx/tHy4JGtM81wsoZottORHxHe0 A/00PEo96Znn8j+7Jsm0eqzgJZXrGtldqsFGOAJrNNgdZNttrirlddlrbSizta69 5PqXHA0+rM12yh8Wa9SECrstH466isRY8omUcTxsugdVUx3Co6q0OhYJUNDNET6y T3aEBed8CPHiaQ9T -----END CERTIFICATE-----Generated at Tue Jul 1 18:02:20 2025 by rpki-client