$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: k+uneOOL2zI13n3aPuNSKOdv9ijNHi8/bKapBvZeCY8= Subject key identifier: 23:43:FB:D4:4A:1C:13:59:9D:10:EA:3D:C6:54:52:E4:75:CF:EA:E5 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 27130960A361D81327DD7BC8A81B4263FF80FD07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 0385 Signing time: Sun 24 Aug 2025 00:46:16 +0000 Manifest this update: Sun 24 Aug 2025 00:46:16 +0000 Manifest next update: Thu 28 Aug 2025 00:46:16 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: UUKdnY1f6OrRkQYCmsjJx/KEcaRE9mWNkSXmcRG+C0M=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:13:09:60:a3:61:d8:13:27:dd:7b:c8:a8:1b:42:63:ff:80:fd:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Aug 24 00:46:16 2025 GMT Not After : Aug 28 00:46:16 2025 GMT Subject: serialNumber=1f181496bd8ca04d3f683f20564bd7692f2ef77f6d70089e73cc7e92d2ddde82, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:26:5c:bf:cc:f1:44:a1:d8:6a:fa:e8:fb: 5e:6a:95:74:e4:99:5b:21:af:13:d1:4c:89:c2:e6: 40:4f:37:65:73:ca:e7:8c:61:82:04:90:43:55:f0: 63:7c:b1:c6:32:7c:1d:3f:f5:b5:10:5e:c4:cf:29: 90:1e:4a:11:41:f7:e2:53:8b:e9:47:67:22:32:0b: 64:d2:cc:80:6f:b3:9b:6c:d0:7a:85:05:84:4a:d9: c1:6f:1d:04:36:c2:07:0d:3f:11:87:ba:b8:b8:98: b0:fd:5e:73:4f:56:6b:6f:93:cf:56:11:d4:48:60: 4f:9d:5a:d6:2c:c9:5c:38:c7:16:25:ea:a2:bd:b7: 7e:70:48:f0:03:32:7e:5c:e9:ef:ce:9e:34:b8:b5: be:7d:64:38:14:ca:78:42:f5:f5:30:24:ab:4b:e1: 01:b9:36:b9:96:4a:87:d6:1c:7e:70:ba:06:55:4b: fd:c0:d0:92:d6:03:0f:9f:a6:9b:a6:b4:ea:46:0d: 0f:02:81:fc:18:71:ea:ac:a2:e9:c3:61:7a:ad:ad: f7:de:01:2e:d3:48:55:21:3a:7a:9f:0b:a0:33:48: 2e:30:02:37:96:a6:c1:66:d9:4d:f0:6e:10:84:ae: 9f:7c:77:b8:e8:a5:c8:d1:28:c5:03:be:d6:85:37: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:FB:D4:4A:1C:13:59:9D:10:EA:3D:C6:54:52:E4:75:CF:EA:E5 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5e:e7:c9:3f:54:d5:08:4d:4b:5a:66:9f:18:79:20:67:17: 03:9a:59:a0:75:8f:48:c1:58:22:f2:90:af:fb:41:f8:3f:c5: b8:58:5c:25:ca:68:5c:8c:e3:27:51:36:2e:47:33:36:ea:89: 55:55:2c:fd:9c:ca:12:62:44:aa:93:41:36:09:59:7b:0c:c7: f7:e3:ca:48:9f:47:32:04:34:cb:76:65:ef:aa:6b:2d:e4:ab: ae:32:cf:68:d6:37:1b:fa:c0:5d:26:ca:c9:81:ed:46:b5:80: 32:e3:fd:d6:c0:58:5a:a1:75:05:8b:34:ce:2d:85:1f:65:9e: 7e:84:a8:bb:b6:68:f0:87:a7:a4:59:2f:0a:3e:44:46:3f:aa: 0d:bf:68:27:77:a5:d7:97:8c:29:d7:5a:1c:8e:5c:aa:e7:6c: 2b:59:67:61:a2:a4:5d:1a:df:67:8c:09:bb:cd:da:0e:85:53: 96:01:8f:62:31:95:f8:c3:69:6e:d8:d4:af:16:af:c2:2b:35: af:31:cd:c0:2f:33:7c:dc:31:a8:fa:cd:9b:59:a8:00:d4:87: 97:0e:d3:3e:3d:0e:f1:2b:81:aa:73:75:22:c3:ad:cb:dc:67: 64:17:b1:71:78:bb:fa:33:56:bd:c3:6f:d7:b3:43:dc:87:cd: d7:a1:99:fc -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUJxMJYKNh2BMn3XvIqBtCY/+A/QcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUwODI0MDA0NjE2WhcNMjUwODI4MDA0NjE2 WjB6MUkwRwYDVQQFE0AxZjE4MTQ5NmJkOGNhMDRkM2Y2ODNmMjA1NjRiZDc2OTJm MmVmNzdmNmQ3MDA4OWU3M2NjN2U5MmQyZGRkZTgyMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPIyZcv8zxRKHYavro+15qlXTkmVshrxPRTInC5kBPN2Vz yueMYYIEkENV8GN8scYyfB0/9bUQXsTPKZAeShFB9+JTi+lHZyIyC2TSzIBvs5ts 0HqFBYRK2cFvHQQ2wgcNPxGHuri4mLD9XnNPVmtvk89WEdRIYE+dWtYsyVw4xxYl 6qK9t35wSPADMn5c6e/OnjS4tb59ZDgUynhC9fUwJKtL4QG5NrmWSofWHH5wugZV S/3A0JLWAw+fppumtOpGDQ8CgfwYceqsounDYXqtrffeAS7TSFUhOnqfC6AzSC4w AjeWpsFm2U3wbhCErp98d7jopcjRKMUDvtaFN21xAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUI0P71EocE1mdEOo9xlRS5HXP6uUwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbXufJ P1TVCE1LWmafGHkgZxcDmlmgdY9IwVgi8pCv+0H4P8W4WFwlymhcjOMnUTYuRzM2 6olVVSz9nMoSYkSqk0E2CVl7DMf348pIn0cyBDTLdmXvqmst5KuuMs9o1jcb+sBd JsrJge1GtYAy4/3WwFhaoXUFizTOLYUfZZ5+hKi7tmjwh6ekWS8KPkRGP6oNv2gn d6XXl4wp11ocjlyq52wrWWdhoqRdGt9njAm7zdoOhVOWAY9iMZX4w2lu2NSvFq/C KzWvMc3ALzN83DGo+s2bWagA1IeXDtM+PQ7xK4Gqc3Uiw63L3GdkF7FxeLv6M1a9 w2/Xs0Pch83XoZn8 -----END CERTIFICATE-----Generated at Sun Aug 24 11:19:49 2025 by rpki-client