$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: SyUFV+Moba2iTWDwXmz0E1A7a26UCnLArPKCrhnQJGk= Subject key identifier: A2:1B:96:44:CF:8D:C7:EC:40:0D:15:21:77:25:BD:50:3D:C1:DF:D2 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 2C9BE6F637FDB0C9E65084328E9560207D5077E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 05AD Signing time: Wed 11 Nov 2026 00:11:42 +0000 Manifest this update: Wed 11 Nov 2026 00:11:42 +0000 Manifest next update: Sun 15 Nov 2026 00:11:42 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: X9ipKW3E63fFdfciI66lAnsdH8tlnRXne6AtQ7HwyCw=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: MzMkvfJU/gKQJdxkJSBnHfq+RD4NDbMTtTYOe9t2YAA=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: RcTwsqQbl0EYhcIAhBI65V3yQrpoFuYIEMpEutzrbUw=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: z8aGOcZHUo4jhXUFgngtghdp90tD7CgDGmg2zGCO7PI=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: gaTa/lu88TdPBbbQIcJCsIvbp927fqteQCWWbphnZdA=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: 27ZuvimwArlkdLEnjBrpDJruyUUK1j7ySjEP8PY6Yrw=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: LlCzg8pLZe8sfpW7dF7n673TP1Nas1BtmnLgW1hwUo8=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: mUmNSyQYWe25FI3w1q75OB9z1E35egauK30fNSVhOY4=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9b:e6:f6:37:fd:b0:c9:e6:50:84:32:8e:95:60:20:7d:50:77:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Nov 11 00:11:42 2026 GMT Not After : Nov 15 00:11:42 2026 GMT Subject: serialNumber=ea472dcbc8e9900f335d4454b64b80505f171de6873f438d55679244f0b7d9f6, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:30:fa:6c:13:c5:f8:1b:5a:be:c8:0f:d8: 2e:be:f5:7b:bf:6d:6c:55:c6:43:99:07:82:42:b2: 9e:55:dd:1a:73:9f:51:0c:f5:f3:15:27:40:63:41: 12:1c:d3:ad:80:54:e7:4b:a3:28:dd:c2:76:29:9e: 89:d8:a9:73:da:22:c3:dd:1e:f6:ec:94:25:15:68: af:ba:15:b4:e9:ab:08:d0:86:e5:41:a8:7d:61:21: 51:b8:d6:ff:41:4f:eb:ff:12:9b:c6:da:27:a9:c5: 0d:a8:bc:8e:38:d4:0e:29:92:10:29:4c:c7:1d:e3: 09:2f:4d:99:3d:34:61:37:87:1b:60:10:0a:5c:d9: 72:c7:f9:9c:be:fc:92:e9:3a:ae:06:2c:18:be:ff: a6:28:45:45:5c:81:a6:1a:71:32:48:9b:4a:94:8d: 56:d7:7d:0d:a0:e1:cf:3c:dd:38:d1:60:41:38:29: 16:b7:83:db:03:1c:12:b9:dd:2b:f7:d8:55:d2:1d: a0:c7:9c:6d:3e:85:ad:f1:39:53:6f:5e:cb:16:1a: ef:0d:17:b5:79:93:66:5e:89:13:50:1c:37:43:82: 45:e7:1a:6f:5e:ef:43:5c:13:c5:ca:ba:93:f8:e5: 57:44:e8:80:50:7d:c5:ba:d2:bc:71:6b:da:ba:96: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1B:96:44:CF:8D:C7:EC:40:0D:15:21:77:25:BD:50:3D:C1:DF:D2 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4d:ba:d1:2d:ed:a9:7e:3e:45:48:16:9e:41:6a:07:76:4a: 12:d1:b3:35:95:95:80:01:9d:a0:79:ad:a6:17:d0:9d:08:71: 7c:38:be:b9:f6:d0:5d:52:30:6e:0e:00:a7:f9:9b:f5:21:e7: aa:e8:ad:fa:94:d0:d8:0d:ba:62:03:b4:29:1a:94:63:90:34: da:cb:93:b3:0b:e8:d8:f0:0c:38:9c:34:50:a3:6f:2e:06:a9: 00:42:54:07:80:3e:0a:35:9a:90:00:11:60:af:46:d7:bd:11: 37:e0:5b:e8:91:25:19:0f:95:4f:92:cf:f2:d1:16:b7:c7:2a: fd:b5:b2:20:56:0d:2d:f6:cb:67:88:d7:4f:53:ff:ea:40:e9: bd:87:85:b0:35:08:0f:02:07:ae:09:f5:2e:fd:b5:ca:80:22: 62:2e:06:7c:7f:45:d6:05:fd:94:a7:58:13:c5:85:d9:7a:7e: bb:6a:9d:2d:18:cd:4d:f9:78:df:57:5d:54:0f:94:e3:90:22: ab:2e:01:2a:ff:b0:33:f0:6d:22:a7:8c:db:af:86:9c:e0:e7: 52:df:26:27:26:36:a3:bb:a9:c3:42:b3:30:00:8e:9d:64:fd: 58:9e:49:21:4b:69:f8:ba:1e:88:ae:9d:3d:1d:3c:e7:1c:ef: 05:08:1f:02 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIULJvm9jf9sMnmUIQyjpVgIH1Qd+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjYxMTExMDAxMTQyWhcNMjYxMTE1MDAxMTQy WjB6MUkwRwYDVQQFE0BlYTQ3MmRjYmM4ZTk5MDBmMzM1ZDQ0NTRiNjRiODA1MDVm MTcxZGU2ODczZjQzOGQ1NTY3OTI0NGYwYjdkOWY2MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2AjD6bBPF+BtavsgP2C6+9Xu/bWxVxkOZB4JCsp5V3Rpz n1EM9fMVJ0BjQRIc062AVOdLoyjdwnYpnonYqXPaIsPdHvbslCUVaK+6FbTpqwjQ huVBqH1hIVG41v9BT+v/EpvG2iepxQ2ovI441A4pkhApTMcd4wkvTZk9NGE3hxtg EApc2XLH+Zy+/JLpOq4GLBi+/6YoRUVcgaYacTJIm0qUjVbXfQ2g4c883TjRYEE4 KRa3g9sDHBK53Sv32FXSHaDHnG0+ha3xOVNvXssWGu8NF7V5k2ZeiRNQHDdDgkXn Gm9e70NcE8XKupP45VdE6IBQfcW60rxxa9q6liupAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUohuWRM+Nx+xADRUhdyW9UD3B39IwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyTbrR Le2pfj5FSBaeQWoHdkoS0bM1lZWAAZ2gea2mF9CdCHF8OL659tBdUjBuDgCn+Zv1 Ieeq6K36lNDYDbpiA7QpGpRjkDTay5OzC+jY8Aw4nDRQo28uBqkAQlQHgD4KNZqQ ABFgr0bXvRE34FvokSUZD5VPks/y0Ra3xyr9tbIgVg0t9stniNdPU//qQOm9h4Ww NQgPAgeuCfUu/bXKgCJiLgZ8f0XWBf2Up1gTxYXZen67ap0tGM1N+XjfV11UD5Tj kCKrLgEq/7Az8G0ip4zbr4ac4OdS3yYnJjaju6nDQrMwAI6dZP1YnkkhS2n4uh6I rp09HTznHO8FCB8C -----END CERTIFICATE-----Generated at Wed Nov 11 12:04:57 2026 by rpki-client