$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: iMHETQZw4r7PHXCHwSIy6WGtDF2vNrIaJN+jM/pY5HA= Subject key identifier: DB:43:54:EC:B0:F4:B1:B4:F7:A9:FE:6E:5C:36:C7:12:4E:3F:C1:57 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 57D5A2F2628B0E1B28AF9C0F1B1085424B53CF75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 03BF Signing time: Tue 21 Oct 2025 00:58:41 +0000 Manifest this update: Tue 21 Oct 2025 00:58:41 +0000 Manifest next update: Sat 25 Oct 2025 00:58:41 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: 2LWUbo/2yGWhHWCwHSRGgc5Jltyp8PBa7cuKXWPlt78=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d5:a2:f2:62:8b:0e:1b:28:af:9c:0f:1b:10:85:42:4b:53:cf:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Oct 21 00:58:41 2025 GMT Not After : Oct 25 00:58:41 2025 GMT Subject: serialNumber=9f46b245d21bd1adf8b910b0a5672256549837a6ed8a6690d2aec62a1d3a5dd2, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:78:22:80:c0:89:b2:18:77:3b:b3:b8:1a: 27:19:c1:c5:41:c2:e4:d8:00:fa:e0:d8:0b:51:12: 1f:b3:47:4b:b4:36:84:9b:a4:22:a1:a7:b5:a0:15: f1:5a:2f:01:12:e3:73:30:64:f1:1b:cc:08:28:81: c3:91:ea:a8:71:05:f4:7d:20:bd:43:c5:44:6b:16: 77:0e:95:74:91:ab:81:3d:88:05:1b:f0:5c:8b:88: 86:4b:2c:8a:1d:b2:43:f4:81:e9:42:a9:a0:fa:a9: 0f:45:34:71:e3:12:cb:e3:6d:8d:ae:d4:d1:2b:2a: 7f:de:35:58:96:1a:1e:cc:cc:6a:5d:27:bc:c8:61: f1:22:ef:c3:23:6e:fc:6d:90:93:6a:82:b5:31:ef: 2f:10:6d:93:80:a3:7b:72:7a:64:a9:84:c2:cf:b4: 2d:87:91:1a:b7:51:67:92:d3:a6:fe:98:22:39:a6: 57:4b:aa:2c:4e:3f:ba:01:ce:3d:57:06:20:f5:91: c2:db:c0:ea:0c:fc:7a:34:b6:c7:f6:27:ee:2c:cb: 6b:85:83:57:37:29:bc:b9:6a:e9:0c:54:98:26:2a: af:7f:21:e0:32:f7:56:5d:d9:87:ed:eb:bb:14:9d: 8d:78:b9:8e:c2:3c:a2:3a:ba:45:98:37:ce:30:aa: 5f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:54:EC:B0:F4:B1:B4:F7:A9:FE:6E:5C:36:C7:12:4E:3F:C1:57 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:83:d7:22:4c:c4:fc:32:3f:ea:20:18:6d:f3:75:7d:be:e5: 1d:62:e8:28:d8:7a:52:a9:a1:aa:8b:c8:03:48:24:ed:69:73: f4:44:8e:a1:1f:3b:b6:f3:15:93:1b:a5:45:1a:b1:59:73:c7: 73:f3:cb:2b:9a:ad:e1:cc:a5:60:d1:48:bd:fe:e7:e8:e9:fa: f9:8b:7e:05:d2:fe:11:76:bd:08:df:dc:24:9d:84:08:e9:3a: 5a:0c:78:2a:77:a3:f6:8c:48:13:4c:e0:66:7f:5c:e0:26:d6: e1:8b:6b:77:d0:ff:d6:8a:ae:56:f3:fe:bc:08:04:5c:b2:06: 28:aa:bb:bf:0d:09:d4:fc:1d:2f:87:24:67:4e:45:61:24:3e: 97:24:7b:6a:50:d6:d3:54:db:11:d0:d3:0e:15:51:ca:3a:f1: 8a:f1:cd:9f:46:c9:48:f5:f8:dd:22:89:a2:c1:1e:3c:68:ca: dc:9d:b0:2a:e2:2e:1f:5f:0b:f2:f8:d3:be:95:5a:3b:d4:7c: fd:58:4a:50:17:b8:2d:45:df:a0:36:a9:65:8c:03:63:15:73: af:21:1f:f9:03:c9:45:37:0e:61:46:94:eb:72:d0:1e:32:f4: bd:bd:3b:47:a0:b8:a9:a9:aa:fd:b5:6b:27:0e:fa:74:03:2d: f1:84:c1:cc -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUV9Wi8mKLDhsor5wPGxCFQktTz3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUxMDIxMDA1ODQxWhcNMjUxMDI1MDA1ODQx WjB6MUkwRwYDVQQFE0A5ZjQ2YjI0NWQyMWJkMWFkZjhiOTEwYjBhNTY3MjI1NjU0 OTgzN2E2ZWQ4YTY2OTBkMmFlYzYyYTFkM2E1ZGQyMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBN3gigMCJshh3O7O4GicZwcVBwuTYAPrg2AtREh+zR0u0 NoSbpCKhp7WgFfFaLwES43MwZPEbzAgogcOR6qhxBfR9IL1DxURrFncOlXSRq4E9 iAUb8FyLiIZLLIodskP0gelCqaD6qQ9FNHHjEsvjbY2u1NErKn/eNViWGh7MzGpd J7zIYfEi78MjbvxtkJNqgrUx7y8QbZOAo3tyemSphMLPtC2HkRq3UWeS06b+mCI5 pldLqixOP7oBzj1XBiD1kcLbwOoM/Ho0tsf2J+4sy2uFg1c3Kby5aukMVJgmKq9/ IeAy91Zd2Yft67sUnY14uY7CPKI6ukWYN84wql95AgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU20NU7LD0sbT3qf5uXDbHEk4/wVcwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbg9ci TMT8Mj/qIBht83V9vuUdYugo2HpSqaGqi8gDSCTtaXP0RI6hHzu28xWTG6VFGrFZ c8dz88srmq3hzKVg0Ui9/ufo6fr5i34F0v4Rdr0I39wknYQI6TpaDHgqd6P2jEgT TOBmf1zgJtbhi2t30P/Wiq5W8/68CARcsgYoqru/DQnU/B0vhyRnTkVhJD6XJHtq UNbTVNsR0NMOFVHKOvGK8c2fRslI9fjdIomiwR48aMrcnbAq4i4fXwvy+NO+lVo7 1Hz9WEpQF7gtRd+gNqlljANjFXOvIR/5A8lFNw5hRpTrctAeMvS9vTtHoLipqar9 tWsnDvp0Ay3xhMHM -----END CERTIFICATE-----Generated at Tue Oct 21 13:20:29 2025 by rpki-client