$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: GpgRtUbUR0vyOQNbvCYHeO4f+iJpXdkBy2ppuLmMOBc= Subject key identifier: FC:4E:D0:02:B1:F7:F2:91:13:BF:6C:72:34:91:88:5D:0D:71:EA:EC Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 1C429FD6C02185BB7C7D2A835EB7395202716701 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 045B Signing time: Thu 26 Mar 2026 01:47:50 +0000 Manifest this update: Thu 26 Mar 2026 01:47:50 +0000 Manifest next update: Mon 30 Mar 2026 01:47:50 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: WACSs+/DvMf58vtsbAK2MvWZhBHlTnNEnhImnKjH2FY=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:42:9f:d6:c0:21:85:bb:7c:7d:2a:83:5e:b7:39:52:02:71:67:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Mar 26 01:47:50 2026 GMT Not After : Mar 30 01:47:50 2026 GMT Subject: serialNumber=f767189581e4d08f0a5acb39c24d4371435a65b0d91ff585d3672f2c1d0b1ec7, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0f:a6:22:f1:6d:49:8d:ec:35:ae:a2:4e:d6: 9b:a7:ea:a8:5a:f4:27:8b:f1:bd:a5:b0:db:d8:b9: cb:88:11:43:63:2c:47:15:27:f6:ca:66:af:62:84: 0b:c0:0e:7b:41:77:fa:ce:2f:b8:68:53:74:92:48: 2a:9d:d3:38:dc:fb:13:73:e5:46:55:4a:48:31:62: 1e:c8:d9:9c:03:d8:31:5b:03:a6:91:53:0a:c5:8b: 67:b6:c4:4d:da:0d:68:a9:b4:eb:bb:1c:68:33:31: 37:5f:64:d9:89:5d:ab:49:76:81:e0:11:5c:27:64: 45:7c:bd:83:b7:d7:8e:92:c5:7f:5a:66:bb:7f:a9: 5d:0b:d0:2f:62:59:70:e4:f5:25:28:45:a0:25:1e: 7c:d0:75:25:9f:8f:ba:7c:4a:c4:83:ea:fa:a5:b7: d9:bb:6d:da:03:5d:c6:27:39:4f:43:55:5c:e7:e6: 09:f2:97:6c:24:9b:4b:2d:ac:b7:6b:f1:33:22:99: e8:24:c1:59:67:8c:0b:55:15:29:06:c9:69:e5:bc: 92:69:20:cc:31:e5:bd:1d:c3:29:6b:3c:ac:97:84: 66:35:08:92:7d:22:b7:26:af:ca:8c:b5:85:77:16: e3:97:a0:6b:63:dd:f0:dc:e3:6b:8a:85:fa:7c:fb: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4E:D0:02:B1:F7:F2:91:13:BF:6C:72:34:91:88:5D:0D:71:EA:EC X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:86:62:95:fe:68:32:93:dd:30:77:d1:43:74:a8:1c:37:84: a8:ac:3b:a7:20:1b:b1:98:ce:ad:4f:c0:7e:8c:48:47:a0:46: 80:77:c1:5f:1d:8b:e6:81:5e:2a:1d:5f:83:24:4d:ff:bd:45: b2:a0:45:bd:49:bd:e1:b6:cc:8c:a4:a9:b2:69:79:d3:5e:2a: 3b:23:af:3a:04:db:88:50:4f:ba:8a:90:45:5d:b9:7a:55:9e: 67:46:6b:5e:e0:ed:ff:65:56:ad:ad:6b:63:19:37:cc:f2:1a: d0:d8:ea:b0:36:6f:9a:e5:1d:71:aa:49:b5:02:81:ca:2d:2a: 10:68:b0:ef:39:e7:02:2e:e7:f7:9d:b0:59:0d:77:f4:52:2d: 67:0c:ad:04:19:23:ff:d4:a3:54:9f:d8:69:b3:33:d8:6a:40: 2a:46:f5:c2:4f:71:99:33:ba:a6:86:a6:64:f0:09:85:5c:9a: b9:2c:21:ae:56:d8:29:de:b7:47:c1:a9:5e:ee:4b:ba:1c:1a: 30:61:92:e3:e1:9c:b1:2e:cc:12:cf:d7:5a:ca:20:66:33:61: 07:1c:3f:49:95:54:d9:3c:7d:6b:72:46:3e:61:9c:1c:cf:ff: 79:c8:08:20:8e:28:e0:b9:ec:e6:18:53:b9:33:cd:96:35:54: f8:95:26:68 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUHEKf1sAhhbt8fSqDXrc5UgJxZwEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjYwMzI2MDE0NzUwWhcNMjYwMzMwMDE0NzUw WjB6MUkwRwYDVQQFE0BmNzY3MTg5NTgxZTRkMDhmMGE1YWNiMzljMjRkNDM3MTQz NWE2NWIwZDkxZmY1ODVkMzY3MmYyYzFkMGIxZWM3MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWD6Yi8W1Jjew1rqJO1pun6qha9CeL8b2lsNvYucuIEUNj LEcVJ/bKZq9ihAvADntBd/rOL7hoU3SSSCqd0zjc+xNz5UZVSkgxYh7I2ZwD2DFb A6aRUwrFi2e2xE3aDWiptOu7HGgzMTdfZNmJXatJdoHgEVwnZEV8vYO3146SxX9a Zrt/qV0L0C9iWXDk9SUoRaAlHnzQdSWfj7p8SsSD6vqlt9m7bdoDXcYnOU9DVVzn 5gnyl2wkm0strLdr8TMimegkwVlnjAtVFSkGyWnlvJJpIMwx5b0dwylrPKyXhGY1 CJJ9Ircmr8qMtYV3FuOXoGtj3fDc42uKhfp8+xaVAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU/E7QArH38pETv2xyNJGIXQ1x6uwwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKhmKV /mgyk90wd9FDdKgcN4SorDunIBuxmM6tT8B+jEhHoEaAd8FfHYvmgV4qHV+DJE3/ vUWyoEW9Sb3htsyMpKmyaXnTXio7I686BNuIUE+6ipBFXbl6VZ5nRmte4O3/ZVat rWtjGTfM8hrQ2OqwNm+a5R1xqkm1AoHKLSoQaLDvOecCLuf3nbBZDXf0Ui1nDK0E GSP/1KNUn9hpszPYakAqRvXCT3GZM7qmhqZk8AmFXJq5LCGuVtgp3rdHwale7ku6 HBowYZLj4ZyxLswSz9dayiBmM2EHHD9JlVTZPH1rckY+YZwcz/95yAggjijguezm GFO5M82WNVT4lSZo -----END CERTIFICATE-----Generated at Thu Mar 26 15:16:39 2026 by rpki-client