
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
File: _2i1wiK-1gUjyNKa-HTumZaQltA.mft (raw, json)
Hash identifier: REqVAyacbN2LIWF9ANpN6SnqjEt1tyHawfkeH6bDJOo=
Subject key identifier: 4A:C4:9B:8D:A3:4B:79:89:6C:F0:84:69:F7:A9:48:54:75:0E:AD:3E
Authority key identifier: 40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8
Certificate issuer: /CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0
Certificate serial: 583995B93124771E2483A42A1915C17FE48F3193
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
Manifest number: C4
Signing time: Thu 12 Nov 2026 00:25:32 +0000
Manifest this update: Thu 12 Nov 2026 00:25:32 +0000
Manifest next update: Mon 16 Nov 2026 00:25:32 +0000
Files and hashes: 1: 551b5df8-0b14-4ce4-a5a8-774a44f4c5ce.roa (hash: YehawQHtILGczJaEpovZnCWKRRJQXCuwNN3IPZZjr6A=)
2: 6767eb02-2d96-4cda-bbeb-814fa55fee3b.roa (hash: IVAuU5t3kre91a7vH0Y+4sepo6sKIOCS2DZCFV+MnBA=)
3: 94f5f688-47ac-44f5-a5fd-9104b80f7066.roa (hash: aUhQRu4CoypybaMEgze7tlYkjV/oIOd07MuqYcInyek=)
4: _2i1wiK-1gUjyNKa-HTumZaQltA.crl (hash: ZtFKBelt36jpr6fZHf84LhPXANcs6rENfxbZ1qqolR4=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/4aeb5517-6a72-4c2c-8107-6588ea4aed59.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Nov 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:39:95:b9:31:24:77:1e:24:83:a4:2a:19:15:c1:7f:e4:8f:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0
Validity
Not Before: Nov 12 00:25:32 2026 GMT
Not After : Nov 16 00:25:32 2026 GMT
Subject: serialNumber=dc3f7da386d5216c4142b01ec53b5e3f5352e7302ce43a23b31681479f10c144, CN=f87cdf0e-327b-4a18-a50e-cd2f1317909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:22:cf:0f:3b:83:db:d2:f9:2e:cf:38:05:
8c:9c:fa:13:48:8b:e3:d6:25:d4:06:9c:a7:62:17:
80:a6:bb:7d:a9:6d:11:43:74:5a:d6:d6:0d:b3:0c:
e8:2a:b0:49:9d:d5:37:52:9d:71:34:fa:c0:e9:35:
eb:ff:37:c9:e0:8d:77:19:18:47:9e:78:79:fe:fa:
01:70:05:e7:04:8a:95:11:d6:89:80:ce:67:90:54:
c3:a5:34:6a:d7:30:92:fd:85:fe:c7:22:8f:94:67:
88:84:9d:72:b6:25:02:a1:84:a0:be:5a:f7:0d:cb:
7c:0e:27:d1:b3:4c:75:fa:f0:4a:d2:de:b7:f5:83:
e8:10:35:b7:03:86:4d:96:6f:2b:25:bf:5a:c0:57:
1e:20:90:a1:78:5b:6e:22:a6:d7:a8:0d:87:15:17:
77:89:a9:6e:3a:e4:37:77:26:8a:7a:30:f1:4a:c3:
5c:22:51:e6:c1:f7:9c:dc:2d:10:11:89:01:a3:dd:
84:65:37:fe:38:44:72:23:9d:d7:21:75:5a:d8:2e:
7e:37:ff:64:3a:57:93:17:29:c5:0b:aa:90:de:f9:
3d:ec:1e:a2:1b:f7:e3:3d:c0:56:c7:b6:a7:d0:12:
c5:10:4d:43:34:69:35:2d:53:39:d3:4e:5b:fd:95:
ac:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C4:9B:8D:A3:4B:79:89:6C:F0:84:69:F7:A9:48:54:75:0E:AD:3E
X509v3 Authority Key Identifier:
keyid:40:1D:A9:CC:17:19:EA:88:CC:98:EE:8D:3A:9A:7B:B7:68:B3:8F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4aeb5517-6a72-4c2c-8107-6588ea4aed59/00b10f38eeff68b5c222bed60523c8d29af874ee99969096d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fd36ad64-200f-4064-84a8-3c7cc91cdece/_2i1wiK-1gUjyNKa-HTumZaQltA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f3:59:4a:7c:39:88:e8:0a:7f:8c:ae:53:f9:c1:a2:85:23:
45:15:df:b8:b3:9c:6d:8c:e0:92:13:cd:6b:6f:d7:45:a5:b9:
da:fa:73:c6:33:b8:b8:fb:1a:1d:73:da:de:6c:79:66:3b:54:
c1:9e:08:a2:0b:c2:a9:b6:53:db:89:4b:36:67:14:73:00:92:
5b:dc:d3:3e:e9:94:a2:b2:1c:af:07:e3:72:0b:e6:4c:db:c9:
aa:54:67:24:68:90:03:c6:4e:71:de:15:4d:83:c1:0e:0f:84:
ce:a1:b3:21:04:b6:3f:a0:5b:76:b8:6d:c3:0f:07:35:18:b0:
d5:fd:e5:b9:bd:1e:92:7f:86:b1:89:14:00:56:cf:fc:c1:74:
8f:42:d5:05:03:53:61:65:d6:ff:30:63:7f:1f:cc:0f:53:6e:
13:96:e5:2d:de:46:b5:20:dc:f0:cc:fb:42:4d:e9:6d:bd:b5:
2f:86:55:2c:e9:45:2f:1a:62:d9:77:f9:02:b8:98:f0:51:ae:
ee:59:4a:d9:d7:17:7b:15:89:22:7a:c4:0e:19:0d:a2:77:a3:
bb:7c:26:08:b6:10:e8:f9:89:9c:e4:8a:4a:d9:7a:71:69:f1:
d8:13:04:6c:b9:0a:2c:53:bf:8b:0b:b4:c1:e9:19:a0:98:8f:
1b:c3:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 21:28:06 2026 by rpki-client