$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: BNlr9xpVqQQsh8kKyzZM7qKpAT7HGDl3xdZURRGwwNo= Subject key identifier: 6C:00:9D:CC:17:30:DB:7A:BD:12:82:73:C7:86:98:A9:E4:F1:26:2B Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 43B8000640F496EB9DECC2BFB784BF96E65EF013 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 03EF Signing time: Sat 23 Aug 2025 00:21:24 +0000 Manifest this update: Sat 23 Aug 2025 00:21:24 +0000 Manifest next update: Wed 27 Aug 2025 00:21:24 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: s3wvRisBpAiYXAG2+9nEVurPq7uGJ31O14FL9tVQfUw=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: Zu5qg3vp67Rfb/eSnXOp3oDkk1rbRX6nGhisaKiFkl0=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: ou0g24PMffA4LCwylaTCVBDyeIPRLSfy8dhK00411s4=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: hpci4DihvPXkMpoMotHfOJlVje1PQsOd8JYqCkaEaOk=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: sUArdsgPPJqn4JnemNMlukpM4JV+dQesnYxTN0EZKUw=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: iCdCHITOP+FLqCj4XWlljLmKDF5shjdmmZzpnTgayxw=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: l1ow5IL2QdrNIGUj3AOCR+lf+4E6mzLIDRcFL1xcN3M=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: k9JQqJ8f/E1JYbJeUZNtTgtmECbYtlUg3/tXmjJigt4=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b8:00:06:40:f4:96:eb:9d:ec:c2:bf:b7:84:bf:96:e6:5e:f0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Aug 23 00:21:24 2025 GMT Not After : Aug 27 00:21:24 2025 GMT Subject: serialNumber=5db2c249c8d4eb7c5a5ea10a6f36b771f19e442d328ecebe44b67988d3d065c6, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:b4:8d:53:e7:fe:c5:2c:a6:9b:a2:36:61: 2b:e6:1e:3b:da:21:09:85:cf:0b:97:f2:f0:e6:8b: f2:8f:18:c3:8c:f4:c8:4f:66:b4:af:35:ca:ff:b8: f8:bd:96:26:78:25:7c:88:92:39:80:29:e7:cc:78: d8:36:21:59:f1:61:37:ac:05:67:b4:96:3e:49:8b: 3b:29:6b:a9:cf:14:d3:a0:7e:35:65:e1:dd:13:c7: 21:e2:76:4e:a0:63:6c:5c:6a:32:f3:e5:c7:6e:3b: fd:53:15:17:e1:8a:9d:6f:36:0f:40:4a:6d:19:34: c3:26:a2:65:32:61:de:a8:1d:6a:30:51:ff:0d:cc: a8:d8:11:39:e9:58:8b:fb:25:d4:c5:74:18:60:9b: 4b:9f:92:7b:8b:18:9f:b7:ec:7d:81:22:d7:cc:f8: 3e:b8:26:45:87:72:6d:8c:53:c3:87:c1:f1:45:3c: 8d:b2:87:18:57:a2:81:da:73:d3:4d:4a:9d:78:36: f0:8e:03:a2:56:7e:b4:3c:a3:31:9f:81:53:62:c2: 87:80:50:45:8e:cb:01:0e:ee:71:bf:97:0b:db:18: ac:8a:db:cf:3e:92:63:40:6a:d6:ca:20:3d:bb:24: fc:63:bd:9d:a2:76:1a:15:7a:12:39:a5:df:f9:74: 39:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:00:9D:CC:17:30:DB:7A:BD:12:82:73:C7:86:98:A9:E4:F1:26:2B X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:63:ee:80:48:d7:b7:a9:e2:15:ed:1b:79:d7:f4:90:1e:55: 9d:a0:68:23:a8:76:d9:c1:01:ca:44:33:9f:ec:7e:c2:d1:93: a7:25:a0:1b:ac:17:4a:f9:1c:14:2d:26:6e:a0:f7:db:9f:62: 93:3b:a3:8f:07:61:e7:ac:9d:68:49:9d:c8:56:c5:7d:67:c7: 46:d7:41:67:65:95:1d:10:22:62:e6:64:ee:12:68:38:ea:d7: 57:cd:ca:72:df:3a:26:df:66:80:60:39:57:06:e1:8d:ef:89: 18:a3:27:4b:7c:c2:5d:f7:a9:ec:e9:ad:9f:c9:5a:e9:d2:12: 25:c5:76:6c:13:2c:fb:ac:f4:ec:3d:9b:0a:20:f8:71:1b:7b: 0b:6f:d2:a6:3c:1b:75:ea:50:3b:78:34:41:ad:e6:11:9c:9c: b9:78:31:b0:7a:9b:09:88:91:20:c8:06:44:0c:56:45:0a:16: 51:c1:79:db:6e:97:b8:ef:22:68:cc:a9:c6:34:3c:f8:6d:5a: 01:2e:03:b3:8d:5f:e9:c3:84:40:39:b4:8f:61:88:5b:d9:4f: d3:c6:18:79:6c:35:a5:8f:22:ea:27:af:3c:b8:05:29:7c:93: ea:81:a4:2b:24:52:ad:1a:e2:2a:03:7b:25:58:ba:9e:b9:01: bc:2c:d2:da -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUQ7gABkD0luud7MK/t4S/luZe8BMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwODIzMDAyMTI0WhcNMjUwODI3MDAyMTI0 WjB6MUkwRwYDVQQFE0A1ZGIyYzI0OWM4ZDRlYjdjNWE1ZWExMGE2ZjM2Yjc3MWYx OWU0NDJkMzI4ZWNlYmU0NGI2Nzk4OGQzZDA2NWM2MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClw7SNU+f+xSymm6I2YSvmHjvaIQmFzwuX8vDmi/KPGMOM 9MhPZrSvNcr/uPi9liZ4JXyIkjmAKefMeNg2IVnxYTesBWe0lj5Jizspa6nPFNOg fjVl4d0TxyHidk6gY2xcajLz5cduO/1TFRfhip1vNg9ASm0ZNMMmomUyYd6oHWow Uf8NzKjYETnpWIv7JdTFdBhgm0ufknuLGJ+37H2BItfM+D64JkWHcm2MU8OHwfFF PI2yhxhXooHac9NNSp14NvCOA6JWfrQ8ozGfgVNiwoeAUEWOywEO7nG/lwvbGKyK 288+kmNAatbKID27JPxjvZ2idhoVehI5pd/5dDnLAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUbACdzBcw23q9EoJzx4aYqeTxJiswHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCY+6A SNe3qeIV7Rt51/SQHlWdoGgjqHbZwQHKRDOf7H7C0ZOnJaAbrBdK+RwULSZuoPfb n2KTO6OPB2HnrJ1oSZ3IVsV9Z8dG10FnZZUdECJi5mTuEmg46tdXzcpy3zom32aA YDlXBuGN74kYoydLfMJd96ns6a2fyVrp0hIlxXZsEyz7rPTsPZsKIPhxG3sLb9Km PBt16lA7eDRBreYRnJy5eDGwepsJiJEgyAZEDFZFChZRwXnbbpe47yJozKnGNDz4 bVoBLgOzjV/pw4RAObSPYYhb2U/Txhh5bDWljyLqJ688uAUpfJPqgaQrJFKtGuIq A3slWLqeuQG8LNLa -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:56 2025 by rpki-client