$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: DuIIi7ZI3Xv+xEoe3f6LshYPwxeQ91z/wFdus5vkgcE= Subject key identifier: B1:5B:20:FF:DF:78:82:EB:EA:BB:7F:E7:BA:FA:CF:7D:E6:7C:13:E4 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 7EBCCC4CC1CA40553EA1574BD8736FA996341DE6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 03D0 Signing time: Wed 23 Jul 2025 00:25:12 +0000 Manifest this update: Wed 23 Jul 2025 00:25:12 +0000 Manifest next update: Sun 27 Jul 2025 00:25:12 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: MeO/mzf3FUlGev9Q/a/UZD9RUSUnXQpFe9iI3WKhvWc=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: 2GlBgfDXqmaIo79+S4Eq9XNRwq2fxitnhigwpEBbicQ=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: ldDJIQWRWfa4EouMGE1jvtC+xn4LhnPoboverbGvuNc=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: ycJI710rCAp6IqBWejFhP46GUAdiETWkPWkcXWU+KaU=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: AODG7K6XV1q9LZy8+rVg874obdEkRO+mvj6dKlqRzew=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: 3tYiJAz7xX6N8h6nkPI6HDQjSgklCgLVXmD2P8Si0sg=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: bPEZZNSliJNYDigjnsxcb/SN0MHmScPWeqXrbhPcX08=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: r3l9/hd43a1Bg1Su7sXgCreB+slLiZ0LVYxb34FGBno=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bc:cc:4c:c1:ca:40:55:3e:a1:57:4b:d8:73:6f:a9:96:34:1d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Jul 23 00:25:12 2025 GMT Not After : Jul 27 00:25:12 2025 GMT Subject: serialNumber=de2e2a659801de0ad6504414505deb551488121fb39ba522fef6fcce69dcd90a, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:af:de:83:6d:51:92:9c:5b:ed:4b:f8:99: f9:38:45:f9:09:70:a5:a4:43:b1:35:55:f0:d4:da: 60:a2:be:9c:36:b1:e2:b7:db:7e:d2:16:04:de:b7: 54:ec:24:4d:5b:92:23:ee:1c:9e:1c:2c:c2:82:1b: e7:c7:be:3e:0c:4c:4e:c0:df:3a:bd:cd:fd:f5:08: c9:71:1e:f8:3f:be:60:00:f0:91:d8:63:6e:d3:04: e4:3b:99:dd:ea:56:db:53:7c:30:c2:e6:44:e8:e3: 55:8c:9a:7e:75:dc:22:ad:ae:f8:67:03:d7:b6:e2: e9:49:e8:d5:16:14:dc:03:66:60:be:e2:0d:fd:5b: b0:fd:58:a8:03:03:fe:29:b9:65:22:f0:8d:e5:66: e5:57:e6:76:d5:d6:e6:26:d2:44:48:70:69:dc:4a: 75:db:1a:54:f3:f2:c5:b3:71:52:1c:cf:9e:fc:e9: 88:af:96:53:8d:f3:80:f3:3a:ac:35:5b:c7:16:36: 43:fb:d6:58:f7:35:3c:f1:4f:65:e1:2e:65:b7:ce: c1:45:ee:8a:44:2c:6c:a8:91:2e:00:db:69:80:29: 27:0f:93:bc:26:f8:d5:c5:6f:8c:30:92:5c:2c:08: e4:ab:60:47:c7:d0:19:73:4c:db:79:56:da:7b:1b: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5B:20:FF:DF:78:82:EB:EA:BB:7F:E7:BA:FA:CF:7D:E6:7C:13:E4 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:19:fc:8d:6d:3d:3d:ea:66:17:18:0b:b0:a6:64:96:2f:16: 4b:72:ea:c8:a8:be:46:d2:8b:07:1f:8d:a4:11:d6:b6:0f:d6: c4:e3:6f:17:0c:26:00:e1:88:a9:a7:a6:6f:1e:d5:da:86:ca: 52:63:4f:9a:31:ea:54:5e:66:34:a8:b6:f6:46:31:d1:3a:d9: 63:49:5d:e0:71:f3:da:a2:25:2f:d1:e5:2c:8f:3f:0d:64:cf: 5f:4b:5e:8c:ae:8a:eb:78:ba:b1:1b:1b:8f:dc:de:3f:b0:4b: 22:f8:68:d8:2f:7c:85:a8:f0:9b:21:72:da:85:44:33:5d:32: 54:b1:76:3a:37:e2:58:b1:02:90:18:2b:7a:54:0e:da:e2:77: 4b:ff:7f:ac:7a:55:02:25:d9:52:7f:ae:9d:f9:14:c3:f4:20: 5f:3b:03:4f:cb:18:94:fd:de:80:40:f2:b0:80:70:81:41:fc: 3d:cd:c9:b2:b9:8f:7d:db:2c:1d:f2:9a:2b:14:1f:c9:33:11: 6a:7e:d0:73:f7:31:4c:aa:e7:7c:10:c3:c1:16:cf:ba:be:be: 15:c3:80:dd:1b:6c:bc:d1:9c:58:4e:aa:11:32:6a:f4:e3:c0: ca:e7:fc:f0:38:c5:d1:e1:84:e2:9a:ec:64:af:b2:34:b8:7a: 17:d2:34:fb -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUfrzMTMHKQFU+oVdL2HNvqZY0HeYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwNzIzMDAyNTEyWhcNMjUwNzI3MDAyNTEy WjB6MUkwRwYDVQQFE0BkZTJlMmE2NTk4MDFkZTBhZDY1MDQ0MTQ1MDVkZWI1NTE0 ODgxMjFmYjM5YmE1MjJmZWY2ZmNjZTY5ZGNkOTBhMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmLa/eg21Rkpxb7Uv4mfk4RfkJcKWkQ7E1VfDU2mCivpw2 seK3237SFgTet1TsJE1bkiPuHJ4cLMKCG+fHvj4MTE7A3zq9zf31CMlxHvg/vmAA 8JHYY27TBOQ7md3qVttTfDDC5kTo41WMmn513CKtrvhnA9e24ulJ6NUWFNwDZmC+ 4g39W7D9WKgDA/4puWUi8I3lZuVX5nbV1uYm0kRIcGncSnXbGlTz8sWzcVIcz578 6YivllON84DzOqw1W8cWNkP71lj3NTzxT2XhLmW3zsFF7opELGyokS4A22mAKScP k7wm+NXFb4wwklwsCOSrYEfH0BlzTNt5Vtp7GwytAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUsVsg/994guvqu3/nuvrPfeZ8E+QwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByGfyN bT096mYXGAuwpmSWLxZLcurIqL5G0osHH42kEda2D9bE428XDCYA4Yipp6ZvHtXa hspSY0+aMepUXmY0qLb2RjHROtljSV3gcfPaoiUv0eUsjz8NZM9fS16MrorreLqx GxuP3N4/sEsi+GjYL3yFqPCbIXLahUQzXTJUsXY6N+JYsQKQGCt6VA7a4ndL/3+s elUCJdlSf66d+RTD9CBfOwNPyxiU/d6AQPKwgHCBQfw9zcmyuY992ywd8porFB/J MxFqftBz9zFMqud8EMPBFs+6vr4Vw4DdG2y80ZxYTqoRMmr048DK5/zwOMXR4YTi muxkr7I0uHoX0jT7 -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:55 2025 by rpki-client