$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: KAd2rKSNx8NNXWIybtjS3/SZbNQVbu6beoc34LtAxzw= Subject key identifier: 2D:E7:8A:2B:3C:64:18:7E:15:8A:0D:1F:B2:27:A4:2E:A5:44:82:C7 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 66C20361D76385A6BE69AEF4B2D7C1DB93DBF947 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 0385 Signing time: Sat 10 May 2025 00:16:06 +0000 Manifest this update: Sat 10 May 2025 00:16:06 +0000 Manifest next update: Wed 14 May 2025 00:16:06 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: BvSf6XKhuDzGZaXtteYwK1BkfAMKzaJVEHotqKOkEo4=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: r8Qrpuz7peEnmrp+qgojAw9Zhpl1z2w94lGaelii64M=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: gRkJFZBipBsn7+sq00aPPGkEV+YWF1Lve+4gKe+7juA=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: WaTADevfvgyQuqC+x/vgKTfboADbdxu6rB5i8BOH58g=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: Dv9hURagZrOVYsj6cDCUGn+2JQiPGtdTfEINqBm+zWs=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: S0yNlhOBRmCNxMOK8ST7rqClIVPQA7S++elUbBn3210=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: Hq0zKjvhHERXBvoSvlxToroT7MXRsoMFYbbq+Sosenw=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: NKqWpLVF3pUZNwQg8vdS7JZKwaEEl0kfFhpHa4AShUk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c2:03:61:d7:63:85:a6:be:69:ae:f4:b2:d7:c1:db:93:db:f9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: May 10 00:16:06 2025 GMT Not After : May 14 00:16:06 2025 GMT Subject: serialNumber=3ccbf5dae211fbeee10afebd50932d4ab046c9d3151ce3922d375a9151584cc9, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:1c:32:ab:0a:06:d0:ad:cc:ae:12:7d:cc: 24:5f:46:09:21:64:18:16:15:d1:29:43:35:dc:dd: 90:f4:3a:e6:80:b7:0a:52:65:bb:9b:a5:f1:8e:43: 6b:63:de:18:61:64:85:d3:b3:f7:ea:82:ed:02:7f: cd:d9:9e:88:74:89:e4:da:d4:26:d7:8b:09:2d:99: 8d:a4:3d:e3:81:8a:0e:8b:ba:30:93:b1:da:e3:98: a3:4a:4f:66:37:96:d1:b5:08:17:60:90:53:05:5c: 37:23:6f:38:bd:43:e3:cc:c7:71:eb:38:9c:95:e1: 84:7b:f6:8b:e4:a6:f7:73:7e:35:f1:9e:ef:e4:8a: 89:d9:91:ea:a5:10:d3:4a:3f:d9:60:3e:06:98:24: dc:1f:02:1d:b7:be:f2:fc:8c:08:b5:d8:6a:43:74: f0:e1:fa:3a:8e:37:2d:70:4c:58:58:ee:e2:82:10: b6:74:4f:75:a0:e7:3a:60:6f:0f:82:e6:77:3f:7b: 82:62:75:bd:b0:30:6f:8f:d6:0b:c9:e0:03:73:8e: b0:39:44:4f:da:53:9a:0d:16:75:83:89:9a:d2:db: 95:fb:57:dc:01:1c:11:e7:c8:da:c6:3e:fc:88:77: 51:45:0b:bd:4a:fb:0e:b1:62:a5:c3:07:7e:16:8f: c8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E7:8A:2B:3C:64:18:7E:15:8A:0D:1F:B2:27:A4:2E:A5:44:82:C7 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c5:30:34:f8:ab:19:41:9c:c9:3a:23:74:26:86:86:4f:7b: 9f:c1:c8:1c:1d:40:b8:1a:4a:c1:01:ff:c9:81:92:55:9c:01: 30:3a:f6:d6:ce:90:dd:b0:9c:8d:2a:a0:8e:57:86:f4:e5:5a: cc:01:99:2b:b8:7b:83:96:d7:5c:5e:d7:06:bb:47:c1:50:ce: ff:c3:09:c3:3e:ee:2e:39:33:15:f4:ea:23:16:e1:10:53:d5: ea:2b:d7:48:6e:2c:2d:3b:3e:2a:28:60:35:42:09:da:ec:25: 80:9e:bf:52:d8:5b:6d:12:a0:e6:4b:5a:e5:51:91:8d:90:4a: 58:e6:c3:b7:37:53:61:fc:76:44:7c:15:4c:b3:bb:e2:4d:2d: ce:0e:13:af:34:83:e3:93:1d:dc:39:c8:45:16:d0:59:83:60: 4e:71:b1:de:95:35:cf:e8:66:99:a5:9e:21:fe:9f:ee:47:e1: 24:78:d0:3c:ad:df:3b:87:2d:53:bb:dc:c1:46:65:46:af:25: 17:bb:9b:af:00:bc:85:37:ad:55:7f:f3:00:9d:b5:cf:72:83: 04:42:66:3b:5e:fd:cd:04:08:61:e8:61:12:09:a9:51:96:6e: f5:7e:59:b2:de:3d:d1:13:16:c5:bf:c3:43:ef:e0:e3:b5:f6: 70:90:36:0d -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUZsIDYddjhaa+aa70stfB25Pb+UcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwNTEwMDAxNjA2WhcNMjUwNTE0MDAxNjA2 WjB6MUkwRwYDVQQFE0AzY2NiZjVkYWUyMTFmYmVlZTEwYWZlYmQ1MDkzMmQ0YWIw NDZjOWQzMTUxY2UzOTIyZDM3NWE5MTUxNTg0Y2M5MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtVBwyqwoG0K3MrhJ9zCRfRgkhZBgWFdEpQzXc3ZD0OuaA twpSZbubpfGOQ2tj3hhhZIXTs/fqgu0Cf83Znoh0ieTa1CbXiwktmY2kPeOBig6L ujCTsdrjmKNKT2Y3ltG1CBdgkFMFXDcjbzi9Q+PMx3HrOJyV4YR79ovkpvdzfjXx nu/kionZkeqlENNKP9lgPgaYJNwfAh23vvL8jAi12GpDdPDh+jqONy1wTFhY7uKC ELZ0T3Wg5zpgbw+C5nc/e4Jidb2wMG+P1gvJ4ANzjrA5RE/aU5oNFnWDiZrS25X7 V9wBHBHnyNrGPvyId1FFC71K+w6xYqXDB34Wj8iRAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQULeeKKzxkGH4Vig0fsiekLqVEgscwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAixTA0 +KsZQZzJOiN0JoaGT3ufwcgcHUC4GkrBAf/JgZJVnAEwOvbWzpDdsJyNKqCOV4b0 5VrMAZkruHuDltdcXtcGu0fBUM7/wwnDPu4uOTMV9OojFuEQU9XqK9dIbiwtOz4q KGA1Qgna7CWAnr9S2FttEqDmS1rlUZGNkEpY5sO3N1Nh/HZEfBVMs7viTS3ODhOv NIPjkx3cOchFFtBZg2BOcbHelTXP6GaZpZ4h/p/uR+EkeNA8rd87hy1Tu9zBRmVG ryUXu5uvALyFN61Vf/MAnbXPcoMEQmY7Xv3NBAhh6GESCalRlm71flmy3j3RExbF v8ND7+DjtfZwkDYN -----END CERTIFICATE-----Generated at Sat May 10 22:05:06 2025 by rpki-client