$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: Yi9YqsD9s/8yuURWMFuY5+6nHSpJNabaTRN8rq1X14I= Subject key identifier: C0:52:31:C8:8B:22:C8:4B:91:D6:FF:EE:63:2E:19:62:EB:21:63:FE Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 52BB920CE4D8002126E789F8C3B881EB8A7E6775 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 0447 Signing time: Tue 18 Nov 2025 00:12:50 +0000 Manifest this update: Tue 18 Nov 2025 00:12:50 +0000 Manifest next update: Sat 22 Nov 2025 00:12:50 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: Yun5gQVTReGffcxtMbQx9qaPp1OnaVRbdIEhAgeuQ6M=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: r1unwGk41zwahxYbMiVdfKX2fWBDlL/OfANxHrqJcLI=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: icwfOShB4lIKxJpYepHX7ZYBe3ozFzvyzsP4jPUf8Qk=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: NlrHfe4Hs21KURaF8JKooWV3agvATo+wXjr9Z9iFPtU=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: 7TmW6LHZ/pM/2I92Gfg0WaXRgU+A+sf/sWql+Q5xU3Y=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: iPw4oozsUd+vRi0i+2m0B2EDEyxDyE9IldOJARH41Qk=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: XuIHLultJ/pKJ84YawLuReZUVIQsGCaLAVii+AG3agw=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: PejkuQe11e5Uh3bLIw766DouyxUwWdLencajOUdsgzA=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bb:92:0c:e4:d8:00:21:26:e7:89:f8:c3:b8:81:eb:8a:7e:67:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Nov 18 00:12:50 2025 GMT Not After : Nov 22 00:12:50 2025 GMT Subject: serialNumber=2df3e7cc0ed0c2a105d0054a0a981b559bf2ed824f7cac5497f7ca4bd3cb57b7, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:d7:1d:9d:4c:06:4c:7d:1d:5b:20:8c:c5: 1b:6a:73:aa:64:cd:a1:4f:60:41:ee:5f:4a:d5:8a: 70:a1:fa:17:fb:8f:48:60:76:b9:21:90:07:5f:cf: a0:08:7d:49:ff:e0:90:07:62:f6:33:0b:76:ac:d2: f8:9e:8f:e2:64:90:9f:7e:4a:af:61:cd:ef:d5:ff: 63:f0:e7:f2:2b:3e:ec:68:84:34:2b:5b:0d:5e:64: 93:e1:3c:96:27:a1:2b:99:e2:9f:71:88:2d:8a:a0: df:71:7f:52:f3:58:58:ba:72:f5:9f:e6:53:a0:a4: bc:de:52:0b:cd:81:90:97:9c:6b:94:ad:72:01:3f: 7a:7d:65:c4:db:93:dc:5f:8b:b1:06:15:8d:7b:89: 84:e6:e8:63:e1:8d:17:2f:df:ae:45:a9:c6:68:64: f6:06:aa:79:fc:ed:c3:51:53:ce:0a:7f:4b:51:eb: 7b:ea:86:04:c9:01:c4:b6:c4:d9:7f:63:52:01:8f: f9:e7:27:9d:82:97:ea:8c:5c:4f:93:c4:f2:d9:4a: 8b:ef:02:e4:3b:67:d8:9c:d3:76:19:dd:d4:ee:16: 11:06:1c:15:f7:07:d4:85:0c:a7:d2:de:b2:9f:c6: cd:c8:75:25:91:35:78:e4:58:c6:4f:ac:e3:98:b0: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:52:31:C8:8B:22:C8:4B:91:D6:FF:EE:63:2E:19:62:EB:21:63:FE X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e2:3a:f1:11:22:c0:07:f0:82:62:a6:63:2f:cf:88:c6:1b: 58:ab:8a:99:7c:9e:4a:84:d8:06:1e:81:53:c2:96:1b:a0:28: 78:80:00:dc:54:67:7c:f5:f2:32:b0:f7:37:ae:22:e4:bf:30: 65:26:df:ba:42:26:a3:b1:a8:89:cf:75:39:c1:50:b8:a8:4f: f9:d1:e8:fe:03:2f:98:88:a7:80:fe:8b:c1:84:e3:c7:77:19: 6a:50:fc:c8:93:85:45:8f:2b:84:29:eb:2d:5a:d0:d4:c9:4f: c3:2a:da:0f:cb:6f:00:8a:5e:88:03:ed:93:21:f7:40:e2:49: 09:82:d9:37:8f:0b:aa:5b:bd:57:dc:ea:6f:cf:b4:b9:cb:83: bb:e0:1c:eb:8a:ea:60:43:7f:02:6d:51:7e:40:4c:78:2a:62: 22:30:be:3b:f9:bb:b6:2d:0f:03:2a:c2:09:97:dc:7d:c1:b7: f5:14:8f:e4:b3:1e:d6:98:8e:b0:72:3e:b2:44:43:ba:ab:29: 8b:df:12:d4:85:98:6d:56:a3:1a:5f:aa:fa:0e:d3:84:04:47: 25:c2:3b:c6:e7:f3:4d:50:8d:c8:0e:3f:fc:ad:fd:6f:2e:b8: 46:eb:69:98:f0:46:df:a3:2d:81:4a:a2:ac:cc:fd:50:47:72: dd:3a:5a:ac -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUUruSDOTYACEm54n4w7iB64p+Z3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUxMTE4MDAxMjUwWhcNMjUxMTIyMDAxMjUw WjB6MUkwRwYDVQQFE0AyZGYzZTdjYzBlZDBjMmExMDVkMDA1NGEwYTk4MWI1NTli ZjJlZDgyNGY3Y2FjNTQ5N2Y3Y2E0YmQzY2I1N2I3MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX2tcdnUwGTH0dWyCMxRtqc6pkzaFPYEHuX0rVinCh+hf7 j0hgdrkhkAdfz6AIfUn/4JAHYvYzC3as0viej+JkkJ9+Sq9hze/V/2Pw5/IrPuxo hDQrWw1eZJPhPJYnoSuZ4p9xiC2KoN9xf1LzWFi6cvWf5lOgpLzeUgvNgZCXnGuU rXIBP3p9ZcTbk9xfi7EGFY17iYTm6GPhjRcv365FqcZoZPYGqnn87cNRU84Kf0tR 63vqhgTJAcS2xNl/Y1IBj/nnJ52Cl+qMXE+TxPLZSovvAuQ7Z9ic03YZ3dTuFhEG HBX3B9SFDKfS3rKfxs3IdSWRNXjkWMZPrOOYsAt9AgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUwFIxyIsiyEuR1v/uYy4ZYushY/4wHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO4jrx ESLAB/CCYqZjL8+IxhtYq4qZfJ5KhNgGHoFTwpYboCh4gADcVGd89fIysPc3riLk vzBlJt+6QiajsaiJz3U5wVC4qE/50ej+Ay+YiKeA/ovBhOPHdxlqUPzIk4VFjyuE KestWtDUyU/DKtoPy28Ail6IA+2TIfdA4kkJgtk3jwuqW71X3Opvz7S5y4O74Bzr iupgQ38CbVF+QEx4KmIiML47+bu2LQ8DKsIJl9x9wbf1FI/ksx7WmI6wcj6yREO6 qymL3xLUhZhtVqMaX6r6DtOEBEclwjvG5/NNUI3IDj/8rf1vLrhG62mY8Ebfoy2B SqKszP1QR3LdOlqs -----END CERTIFICATE-----Generated at Tue Nov 18 10:54:01 2025 by rpki-client