$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: XHb1MbD1d9Qu8W4mP5DcPdwYWQZ0RMHfn/9ILl++aeo= Subject key identifier: 00:B3:52:40:70:37:C8:CF:01:5E:0A:61:EB:06:37:73:0F:8C:1C:5D Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 743B7E2523CCF164C5E05D01F86E0EF023D8AA7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 03FC Signing time: Sat 23 Aug 2025 15:01:38 +0000 Manifest this update: Sat 23 Aug 2025 15:01:38 +0000 Manifest next update: Wed 27 Aug 2025 15:01:38 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: 2sfU92bmdYcsV9Bqy4R2joC+shyvErR0NFUc460A1OU=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: 44reNWsHPWkBCTaP71Mao/+994accOH4+0M1+5AgvHU=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3b:7e:25:23:cc:f1:64:c5:e0:5d:01:f8:6e:0e:f0:23:d8:aa:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Aug 23 15:01:38 2025 GMT Not After : Aug 27 15:01:38 2025 GMT Subject: serialNumber=7c3d1f51a756863b3e7c7ee7651cd4a9861e68c84ea28a303db4e48ea7aca7c5, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:33:4d:7d:7d:dc:67:64:6e:0b:27:60:b0:cc: 91:0e:af:ed:c3:b9:1b:78:87:d8:c5:db:97:b9:0f: 1d:d6:85:e8:86:04:c1:10:c8:76:ae:60:96:8b:6f: 7d:35:78:c6:f2:ca:db:76:ec:bc:01:71:e2:9a:b9: 99:27:07:90:f5:40:e5:71:0a:c0:03:ec:e0:07:cf: 98:2f:e4:37:b6:02:18:d4:21:f4:18:84:dd:74:1b: 13:4d:dd:6f:39:cb:68:6c:f2:6d:70:3f:bb:16:0f: 64:64:d7:a3:72:e8:66:03:2c:5f:47:8d:72:da:4d: 84:1d:d9:19:40:16:cf:61:f4:e7:a0:86:88:f8:bb: 6c:32:e7:df:b9:82:ea:ae:a8:3e:25:c8:63:94:1f: 4a:7c:35:61:2b:7b:12:74:9a:60:77:d5:ec:04:8c: 70:7f:88:47:cc:7a:6e:97:1d:2d:4e:9e:b0:29:9c: ab:78:df:42:2d:2d:5d:48:ff:55:f6:b3:97:2d:b5: f0:4d:6a:bb:eb:a2:fa:53:a9:eb:58:1a:fb:5f:7e: 30:d8:37:95:7b:c9:c7:99:72:bb:8d:47:02:9c:47: 9d:2c:c4:23:bf:bc:9e:b8:0d:22:48:e3:c0:65:46: ea:90:16:15:94:11:1e:1d:ee:98:78:e7:d5:3f:07: b8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B3:52:40:70:37:C8:CF:01:5E:0A:61:EB:06:37:73:0F:8C:1C:5D X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a0:55:0e:87:86:ad:d9:b2:68:eb:48:20:a6:d9:43:ae:29: d9:a6:e3:20:9e:33:d7:f0:d5:f0:74:82:38:4a:75:e4:f8:93: b4:e9:68:c3:3e:99:fb:7c:f2:a4:b9:02:c9:df:88:04:c8:7b: 94:70:5b:ea:b4:7d:19:8b:36:d3:28:de:f4:d1:91:28:2f:79: 71:98:ae:88:9a:63:0f:47:f1:af:35:0b:93:92:01:a5:5a:79: 5e:bb:83:9d:14:65:71:48:7f:48:6a:e8:7c:7d:15:06:77:4d: de:76:33:2c:36:b7:d6:dc:ee:8c:d9:ad:de:0c:84:d4:d9:26: fa:bc:82:59:26:34:fe:80:bf:c9:51:10:cb:91:8e:c7:d5:be: 5e:dd:e3:35:3b:68:d9:f9:2d:f2:81:9c:35:2e:03:3c:4c:3c: 7c:1c:e0:8c:0f:43:8f:5d:41:6c:42:0b:4d:0f:e8:6e:63:af: 62:22:cc:0e:6d:cb:3e:db:c2:cb:06:4a:42:7b:25:33:8d:12: ea:6b:29:86:1a:35:a9:ac:ed:bb:84:6d:8a:cb:6e:58:1f:3a: fd:c2:78:8a:00:8c:3c:ae:60:4b:10:af:04:55:28:b7:b0:a0: 48:6c:b4:b3:b2:51:68:e7:d2:66:e3:83:a5:d8:b4:ca:35:7d: 5e:34:9f:9e -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUdDt+JSPM8WTF4F0B+G4O8CPYqnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjUwODIzMTUwMTM4WhcNMjUwODI3MTUwMTM4 WjB6MUkwRwYDVQQFE0A3YzNkMWY1MWE3NTY4NjNiM2U3YzdlZTc2NTFjZDRhOTg2 MWU2OGM4NGVhMjhhMzAzZGI0ZTQ4ZWE3YWNhN2M1MS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVM019fdxnZG4LJ2CwzJEOr+3DuRt4h9jF25e5Dx3WheiG BMEQyHauYJaLb301eMbyytt27LwBceKauZknB5D1QOVxCsAD7OAHz5gv5De2AhjU IfQYhN10GxNN3W85y2hs8m1wP7sWD2Rk16Ny6GYDLF9HjXLaTYQd2RlAFs9h9Oeg hoj4u2wy59+5guquqD4lyGOUH0p8NWErexJ0mmB31ewEjHB/iEfMem6XHS1OnrAp nKt430ItLV1I/1X2s5cttfBNarvrovpTqetYGvtffjDYN5V7yceZcruNRwKcR50s xCO/vJ64DSJI48BlRuqQFhWUER4d7ph459U/B7j3AgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUALNSQHA3yM8BXgph6wY3cw+MHF0wHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANoFUO h4at2bJo60ggptlDrinZpuMgnjPX8NXwdII4SnXk+JO06WjDPpn7fPKkuQLJ34gE yHuUcFvqtH0ZizbTKN700ZEoL3lxmK6ImmMPR/GvNQuTkgGlWnleu4OdFGVxSH9I auh8fRUGd03edjMsNrfW3O6M2a3eDITU2Sb6vIJZJjT+gL/JURDLkY7H1b5e3eM1 O2jZ+S3ygZw1LgM8TDx8HOCMD0OPXUFsQgtND+huY69iIswObcs+28LLBkpCeyUz jRLqaymGGjWprO27hG2Ky25YHzr9wniKAIw8rmBLEK8EVSi3sKBIbLSzslFo59Jm 44Ol2LTKNX1eNJ+e -----END CERTIFICATE-----Generated at Sun Aug 24 11:01:26 2025 by rpki-client