$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: 87zWLQRu47NUIV5xvzERSwtvVk3HtxFf5GiiGmm3ekM= Subject key identifier: 3D:A8:AD:1E:AA:B2:7B:6F:1E:75:27:D9:29:E2:6D:D4:8E:FE:39:14 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 6BE450C5384E54D19E50CDAC34C9A343F66CD7AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 0317 Signing time: Tue 06 May 2025 00:04:43 +0000 Manifest this update: Tue 06 May 2025 00:04:43 +0000 Manifest next update: Sat 10 May 2025 00:04:43 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: dZYT9ZASGcPJH2V24IkaNcNS2pDC+WKrb5iIFg8oa9E=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e4:50:c5:38:4e:54:d1:9e:50:cd:ac:34:c9:a3:43:f6:6c:d7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: May 6 00:04:43 2025 GMT Not After : May 10 00:04:43 2025 GMT Subject: serialNumber=0fc259c351c0ede30c75cf767f6b66c79f680a2ae333f69b8194baf2fbc231bc, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:ba:53:51:a7:29:e5:b6:fb:fa:9c:a5:6d: d1:f7:d4:94:89:b8:13:7a:bf:46:a8:df:3a:f6:0f: 81:fc:21:cb:b2:e9:5b:9b:36:a6:17:1a:76:d4:a6: 43:69:cc:e9:fa:1a:c2:9e:9c:ce:3a:2e:1f:17:4d: 94:e0:a8:ac:d4:18:32:e6:d6:5a:3d:83:ff:ff:46: fa:1f:ae:43:81:8e:c1:73:81:ee:f1:1f:bf:64:26: 11:cb:d0:80:ea:e1:77:13:1c:49:40:58:b1:34:07: f5:be:3f:c9:78:a7:73:c7:f5:7f:0f:c7:5e:d5:45: 07:cb:ce:09:92:1f:08:45:50:d3:7e:43:d3:67:df: 72:cc:d6:87:b4:33:37:a3:fb:30:71:f9:c5:d8:3e: b2:19:47:98:40:8e:f2:13:9b:15:f5:be:1d:28:f4: 1b:e5:b6:dd:42:65:d9:39:92:1a:8f:97:24:ae:ab: 04:67:7f:56:ac:65:26:5f:2f:ed:b9:b0:23:ce:b6: 14:d3:e8:f6:de:e3:57:e0:22:46:6c:2a:50:05:96: ef:4c:a6:82:82:f2:2e:f5:a6:e9:a0:2a:b3:99:99: cc:5d:da:af:c8:35:de:79:5f:8d:9d:bc:67:e4:6d: 3c:8d:06:60:65:35:1c:a8:ab:4c:a9:23:46:c2:7e: 79:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A8:AD:1E:AA:B2:7B:6F:1E:75:27:D9:29:E2:6D:D4:8E:FE:39:14 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ee:17:8f:35:d8:0d:b7:f3:fb:02:69:c7:e8:1e:7f:1a:ff: a0:4d:92:50:fc:af:79:87:09:58:b1:0f:fa:d9:3a:c9:10:8a: 90:f9:76:21:26:25:39:fd:e0:8a:92:9f:a5:16:ad:eb:9f:d1: 10:05:73:c8:5d:c9:75:af:da:b2:b4:c2:5a:3b:f9:38:ac:e0: 83:c9:4f:80:aa:f8:04:4c:fb:bb:92:15:91:7f:64:96:a1:ff: bf:de:d2:ff:57:07:f3:ea:86:80:2d:0c:29:20:71:16:33:91: f1:8d:4f:2e:a5:69:6b:7c:7b:0f:39:3b:0d:d5:29:48:b8:77: 24:b4:d2:09:6b:0f:ba:f0:21:1b:1a:5b:1b:df:c3:0a:35:da: 01:d1:09:1d:63:10:e1:1f:60:aa:89:67:6d:6d:9e:16:e6:04: 86:eb:7a:fc:19:d8:9d:4c:d1:29:b9:05:84:ed:45:89:53:bc: 52:9e:77:1e:b2:61:7d:85:6f:7e:cb:fa:71:0b:a9:c7:02:6a: b7:46:e1:c0:cb:98:38:c4:9d:72:59:12:3d:c0:e2:56:a3:ba: ff:87:63:07:03:e3:e9:a3:34:4a:1c:93:c7:c5:20:1a:cf:ff: 85:46:0b:6c:53:e3:1c:78:16:db:c1:cb:4d:a8:73:4e:9e:53: 0a:48:2e:d2 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUa+RQxThOVNGeUM2sNMmjQ/Zs164wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUwNTA2MDAwNDQzWhcNMjUwNTEwMDAwNDQz WjB6MUkwRwYDVQQFE0AwZmMyNTljMzUxYzBlZGUzMGM3NWNmNzY3ZjZiNjZjNzlm NjgwYTJhZTMzM2Y2OWI4MTk0YmFmMmZiYzIzMWJjMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBVbpTUacp5bb7+pylbdH31JSJuBN6v0ao3zr2D4H8Icuy 6VubNqYXGnbUpkNpzOn6GsKenM46Lh8XTZTgqKzUGDLm1lo9g///RvofrkOBjsFz ge7xH79kJhHL0IDq4XcTHElAWLE0B/W+P8l4p3PH9X8Px17VRQfLzgmSHwhFUNN+ Q9Nn33LM1oe0Mzej+zBx+cXYPrIZR5hAjvITmxX1vh0o9Bvltt1CZdk5khqPlySu qwRnf1asZSZfL+25sCPOthTT6Pbe41fgIkZsKlAFlu9MpoKC8i71pumgKrOZmcxd 2q/INd55X42dvGfkbTyNBmBlNRyoq0ypI0bCfnntAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUPaitHqqye28edSfZKeJt1I7+ORQwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCE7heP NdgNt/P7AmnH6B5/Gv+gTZJQ/K95hwlYsQ/62TrJEIqQ+XYhJiU5/eCKkp+lFq3r n9EQBXPIXcl1r9qytMJaO/k4rOCDyU+AqvgETPu7khWRf2SWof+/3tL/Vwfz6oaA LQwpIHEWM5HxjU8upWlrfHsPOTsN1SlIuHcktNIJaw+68CEbGlsb38MKNdoB0Qkd YxDhH2CqiWdtbZ4W5gSG63r8GdidTNEpuQWE7UWJU7xSnncesmF9hW9+y/pxC6nH Amq3RuHAy5g4xJ1yWRI9wOJWo7r/h2MHA+PpozRKHJPHxSAaz/+FRgtsU+MceBbb wctNqHNOnlMKSC7S -----END CERTIFICATE-----Generated at Tue May 6 17:18:44 2025 by rpki-client