$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: cRVzmD86/h3B35AqTNt4/PV+MJtseyTNc2FDFU0oUWs= Subject key identifier: 62:07:66:05:E8:4F:0B:6E:A2:60:6A:B3:6F:A3:F9:13:B1:08:FA:1D Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 3FD73AD45BDA7A9A6449AABE219923569D2A1F7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 04C7 Signing time: Thu 26 Mar 2026 00:18:52 +0000 Manifest this update: Thu 26 Mar 2026 00:18:52 +0000 Manifest next update: Mon 30 Mar 2026 00:18:52 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: T7I9VVOBqREmYn/M4GKUsVDPzXGNom0MM5Tn59ggDJQ=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: GVUs03xgv+8UpIu3WE1zyCCIoGR/HjxeJhDzyb8dxBI=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: DJaMsaBhmRctpIL5/HE3/ES2uOCC78Qj9N+KX6fzPe4=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: Mrtfroi736x+t0blZHu7y04uc0U+LYe+zara4TtUCIo=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: CIFZfmN5KUoU9ZYVqSQX6VPvo9Xhs8yrGttiq5bfNeg=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: 2nt5eBTWhQGkazPpqITbnaKehpP/TvgjrYHwCeunkBs=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: fMsGCZeAV0EfH4fL2Iy6rpL0f/UdfkpSZA8/b76QPX0=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: MQdKUs7iLuiDpSjuTK9jglEa2AM/8Z6qCZLLxRjVEko=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d7:3a:d4:5b:da:7a:9a:64:49:aa:be:21:99:23:56:9d:2a:1f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Mar 26 00:18:52 2026 GMT Not After : Mar 30 00:18:52 2026 GMT Subject: serialNumber=19b182b65686239f537bbdeaa34f254fa9172c466acb4d3e9e68e62e3a14f739, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:26:94:d6:71:0a:8b:55:a6:65:f4:ef:be: 00:e5:c5:28:26:c6:1c:ca:08:93:cf:72:f5:38:68: bf:fa:c9:79:cb:2f:8f:aa:97:85:24:d2:fa:53:bc: ec:07:76:9e:5a:9e:2f:d2:34:ed:dd:a3:88:65:01: 2d:76:19:89:60:7f:83:83:2f:d1:a9:13:6d:aa:f6: 3d:6f:95:0b:a6:0d:23:dc:6d:de:af:56:9b:1d:b7: 17:30:6d:cd:5c:1a:28:84:ff:98:09:65:70:7c:07: ca:63:f8:dd:eb:c2:2e:38:5d:9e:3e:b8:d7:61:80: 03:f9:76:57:a5:23:c3:17:60:cb:2f:aa:b8:12:e0: f9:02:16:31:ba:69:a2:36:d9:91:71:70:c7:79:cc: aa:ac:6a:87:5e:5c:13:df:7d:2b:77:13:6a:e6:40: 76:05:d6:ce:d6:ed:5d:a9:c5:cf:24:75:a4:c4:cf: 24:f9:8d:2e:12:09:61:5d:11:84:93:4e:0a:e6:ac: 10:00:bb:29:dd:2d:df:18:a6:6e:62:d3:63:ad:be: af:31:c1:f3:26:ce:15:a1:68:3e:bd:63:35:c6:72: 86:e6:8c:86:5c:1d:0f:21:9b:aa:b7:61:f8:3c:42: 0b:11:5d:ed:b8:5a:99:43:01:27:49:79:bb:e7:3b: 86:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:07:66:05:E8:4F:0B:6E:A2:60:6A:B3:6F:A3:F9:13:B1:08:FA:1D X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:84:5f:66:89:d3:c6:75:6f:49:2d:0d:06:12:87:d1:1c:bb: f8:cd:04:f5:1e:e3:b8:5a:81:2b:09:2b:46:df:ee:93:38:a5: d0:a0:ab:cc:96:3f:26:c3:2f:f1:3d:8b:b7:7c:a4:84:11:15: db:6c:f9:11:ba:5a:bc:c6:6c:67:68:f9:2d:80:85:b8:f7:65: 1f:f7:e0:23:bc:d9:95:60:a5:ac:d3:bd:43:25:a9:a7:dd:a5: dd:5a:37:1b:eb:c2:54:4f:96:01:44:07:c6:44:cd:09:32:f0: 76:b2:71:84:bf:e3:cb:9a:8f:13:d9:08:a6:c4:c3:4c:c5:dd: 7c:79:17:e2:7d:ea:bd:8e:65:3c:14:f0:26:2f:ab:83:cd:b7: b1:ea:ca:1b:4e:62:f1:8e:49:32:68:3f:76:f0:39:76:e2:32: 30:83:14:95:25:ab:13:d6:d2:c9:2b:39:c7:4b:2b:b0:79:1c: 05:73:12:67:30:b3:00:fb:f7:6a:60:70:73:56:0b:d1:1f:11: ee:83:ed:e1:23:94:25:97:3c:e5:b9:09:db:bd:ae:b4:d6:70: b6:ab:d4:c8:07:6b:89:c5:40:1a:a4:1f:85:f3:18:6a:15:05: 43:b9:fb:e2:71:98:82:c0:33:37:8d:a1:86:15:d0:4a:d9:7f: a9:60:5e:66 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUP9c61FvaeppkSaq+IZkjVp0qH38wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjYwMzI2MDAxODUyWhcNMjYwMzMwMDAxODUy WjB6MUkwRwYDVQQFE0AxOWIxODJiNjU2ODYyMzlmNTM3YmJkZWFhMzRmMjU0ZmE5 MTcyYzQ2NmFjYjRkM2U5ZTY4ZTYyZTNhMTRmNzM5MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnJyaU1nEKi1WmZfTvvgDlxSgmxhzKCJPPcvU4aL/6yXnL L4+ql4Uk0vpTvOwHdp5ani/SNO3do4hlAS12GYlgf4ODL9GpE22q9j1vlQumDSPc bd6vVpsdtxcwbc1cGiiE/5gJZXB8B8pj+N3rwi44XZ4+uNdhgAP5dlelI8MXYMsv qrgS4PkCFjG6aaI22ZFxcMd5zKqsaodeXBPffSt3E2rmQHYF1s7W7V2pxc8kdaTE zyT5jS4SCWFdEYSTTgrmrBAAuyndLd8Ypm5i02Otvq8xwfMmzhWhaD69YzXGcobm jIZcHQ8hm6q3Yfg8QgsRXe24WplDASdJebvnO4a1AgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUYgdmBehPC26iYGqzb6P5E7EI+h0wHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMhF9m idPGdW9JLQ0GEofRHLv4zQT1HuO4WoErCStG3+6TOKXQoKvMlj8mwy/xPYu3fKSE ERXbbPkRulq8xmxnaPktgIW492Uf9+AjvNmVYKWs071DJamn3aXdWjcb68JUT5YB RAfGRM0JMvB2snGEv+PLmo8T2QimxMNMxd18eRfifeq9jmU8FPAmL6uDzbex6sob TmLxjkkyaD928Dl24jIwgxSVJasT1tLJKznHSyuweRwFcxJnMLMA+/dqYHBzVgvR HxHug+3hI5QllzzluQnbva601nC2q9TIB2uJxUAapB+F8xhqFQVDufvicZiCwDM3 jaGGFdBK2X+pYF5m -----END CERTIFICATE-----Generated at Thu Mar 26 09:00:23 2026 by rpki-client