$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: OYC7LtpZ4POXc6DwH0fITX+nAu4U10swrDz6D9ekrnw= Subject key identifier: DA:31:CD:A8:DF:0D:12:7D:0B:71:A6:2A:6B:B7:DE:1F:68:9F:28:7E Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 3C8F903032FC3BAC4E0A787A0275991106FDA863 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 042A Signing time: Mon 20 Oct 2025 00:23:43 +0000 Manifest this update: Mon 20 Oct 2025 00:23:43 +0000 Manifest next update: Fri 24 Oct 2025 00:23:43 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: lxUFViG5NXw3XPYH+A/gzGzfrgnRfbTq6T2HnAdqUT0=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: nQundgBG+KoBzsXTUJ5ni2vDjuwA7RBcCTA/BZqnGQw=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: jL9MowjFOhBolUpCubiMYKU1cnxRG+YBdolUxtaH6fo=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: C2BSonCKYiVWZeeC2qwoV2X1NssMvOZNIG8UgoDzSzg=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: MAz7ueK6KNkEbBZ7kN7pJ4jbP51YAwJEIRmNSRO/8Bk=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: fI0AxCUrfvmNusEM8IUtrafc/+Cqp+BuNNqAlcdbLco=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: prEgXyRZtT0u/n9/JuY0sWhUg7MPSxh49t4LO2FBh94=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: SScCLH8lt4131F9rtfAU7hKLylAqYZwb/oYukzGw91Q=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8f:90:30:32:fc:3b:ac:4e:0a:78:7a:02:75:99:11:06:fd:a8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Oct 20 00:23:43 2025 GMT Not After : Oct 24 00:23:43 2025 GMT Subject: serialNumber=481db233988518ecd9c90e0a4aa4fb34e104cfc75e1e50056e346672c6586968, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:fa:cd:39:9d:2a:f9:01:e1:e0:fa:a8:92: 5d:91:37:27:5e:af:b2:23:8a:3d:f5:1a:54:c3:46: 2a:84:7c:21:e7:fa:1c:8e:7f:c0:39:09:55:b3:91: e8:8b:d4:cf:7b:4e:d7:f7:d9:2a:19:64:6c:62:9b: 08:8d:93:7e:c5:5c:9f:c7:d7:64:ba:c8:cf:a1:c3: 9b:89:41:84:b0:97:22:0f:44:1f:98:30:0a:1b:18: 1f:36:02:58:84:cd:d6:23:c7:21:8a:a0:46:bc:92: 36:85:b6:f9:7c:9e:20:43:59:7a:bd:70:34:96:73: 4b:da:04:57:cd:96:bc:51:ce:86:90:e6:83:c9:aa: 07:41:c4:bd:e0:3b:14:f3:5f:15:80:bd:14:e8:77: b4:48:ac:7c:db:58:66:a0:f9:8e:cf:61:bc:f5:8b: 35:40:92:5f:aa:dc:e4:49:af:b6:d0:2a:f6:42:7c: 37:f4:3c:c3:be:b5:ae:85:70:c7:65:4d:92:c7:e0: 1c:fc:52:5b:fa:46:65:44:5d:ab:ee:12:e1:34:ec: 51:bf:fb:d2:14:e2:70:67:03:7a:1e:5b:73:96:17: 5f:c8:52:da:98:2f:e1:b0:f2:2e:00:83:a9:f9:c1: 0a:dc:6f:8b:ea:9f:12:26:15:0b:22:f6:a3:f0:30: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:31:CD:A8:DF:0D:12:7D:0B:71:A6:2A:6B:B7:DE:1F:68:9F:28:7E X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:73:5b:99:39:43:61:d9:88:2b:2b:5e:be:06:49:fc:fa:60: 7f:be:f1:eb:03:e3:a6:c2:2a:51:9c:77:f1:5d:c0:2b:fd:5f: de:15:27:4a:a4:af:6a:71:be:80:86:a4:9d:32:f3:40:33:56: 74:91:cf:d4:a2:5c:85:a6:c2:95:27:52:38:37:f2:ba:3a:d4: eb:00:30:cc:20:86:da:ae:ba:83:5d:5b:53:2a:58:cf:b5:3a: dd:74:73:f7:30:1e:2f:85:28:1d:78:a8:11:93:ba:fe:96:5e: e0:9d:17:2c:67:1f:eb:73:5b:78:c9:f5:de:6e:1c:77:cd:d8: 47:b4:ff:a0:44:b7:de:96:ea:99:91:82:0d:34:25:d9:0a:00: c1:06:af:ed:ea:4d:1c:28:1e:e9:2a:c3:99:fc:cf:b8:2c:70: f6:ee:64:ab:7d:88:a1:85:96:2b:68:6a:fd:ff:0d:fc:c8:f8: 75:99:eb:42:89:61:9a:22:9c:d9:6c:7c:2b:20:2b:e2:64:01: e5:10:0b:ff:2b:a5:9e:7d:49:f2:fd:e8:b5:60:2f:e0:0e:fa: 3d:8e:c9:97:62:84:6a:e9:f6:fb:58:5b:0e:01:07:56:f4:4b: 94:7c:88:2d:c3:33:58:2e:7b:cb:1e:b6:82:76:45:b0:3e:e5: 76:78:16:a4 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUPI+QMDL8O6xOCnh6AnWZEQb9qGMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUxMDIwMDAyMzQzWhcNMjUxMDI0MDAyMzQz WjB6MUkwRwYDVQQFE0A0ODFkYjIzMzk4ODUxOGVjZDljOTBlMGE0YWE0ZmIzNGUx MDRjZmM3NWUxZTUwMDU2ZTM0NjY3MmM2NTg2OTY4MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjZvrNOZ0q+QHh4Pqokl2RNyder7Ijij31GlTDRiqEfCHn +hyOf8A5CVWzkeiL1M97Ttf32SoZZGximwiNk37FXJ/H12S6yM+hw5uJQYSwlyIP RB+YMAobGB82AliEzdYjxyGKoEa8kjaFtvl8niBDWXq9cDSWc0vaBFfNlrxRzoaQ 5oPJqgdBxL3gOxTzXxWAvRTod7RIrHzbWGag+Y7PYbz1izVAkl+q3ORJr7bQKvZC fDf0PMO+ta6FcMdlTZLH4Bz8Ulv6RmVEXavuEuE07FG/+9IU4nBnA3oeW3OWF1/I UtqYL+Gw8i4Ag6n5wQrcb4vqnxImFQsi9qPwMBILAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU2jHNqN8NEn0LcaYqa7feH2ifKH4wHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbc1uZ OUNh2YgrK16+Bkn8+mB/vvHrA+OmwipRnHfxXcAr/V/eFSdKpK9qcb6AhqSdMvNA M1Z0kc/UolyFpsKVJ1I4N/K6OtTrADDMIIbarrqDXVtTKljPtTrddHP3MB4vhSgd eKgRk7r+ll7gnRcsZx/rc1t4yfXebhx3zdhHtP+gRLfeluqZkYINNCXZCgDBBq/t 6k0cKB7pKsOZ/M+4LHD27mSrfYihhZYraGr9/w38yPh1metCiWGaIpzZbHwrICvi ZAHlEAv/K6WefUny/ei1YC/gDvo9jsmXYoRq6fb7WFsOAQdW9EuUfIgtwzNYLnvL HraCdkWwPuV2eBak -----END CERTIFICATE-----Generated at Mon Oct 20 08:39:06 2025 by rpki-client