$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: fAnGK5Ec/+EgKVCigTBaZmnqBLWL8nI6uX63mMhfcNY= Subject key identifier: 7A:6C:21:93:38:13:4A:44:43:39:C3:2C:30:76:08:D1:BA:4F:50:48 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 10C3F7D0B71FCD6F808D979878FF849BF3A92777 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 0362 Signing time: Sat 05 Apr 2025 00:13:42 +0000 Manifest this update: Sat 05 Apr 2025 00:13:42 +0000 Manifest next update: Wed 09 Apr 2025 00:13:42 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: zYFO/eTWDHv0hr0UR+D3mgeCDQxf7rRNHBHUbr6gX90=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: Qcch/Ib1a7CuDguCVGykLsURcz4hE2pIW8cgz2FberQ=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: mSB3EHCk2gRmwGVnNHJLmuOkYsySLNuDbcXAfjsBNz4=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: 6PW0UDzetC62OeR/GXwr2Bhq0PM7zpdg83oYm6j09n8=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: RyhDowMr7pGxTy90TeUulvNcsjqpJS33s29blBoXLo0=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: EdAJEwGHfOQTuIBIbNPmAVGsWznFbpGgWEgDuuz+iEo=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: uTUK+R0HiN2g+MARec2BzbAGYFsArY1oUj2WTc/JdKc=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: d10EYnEIKeLmeW++sHu7Pf8qDH4euPSGuF8FQJ+hgR4=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c3:f7:d0:b7:1f:cd:6f:80:8d:97:98:78:ff:84:9b:f3:a9:27:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Apr 5 00:13:42 2025 GMT Not After : Apr 9 00:13:42 2025 GMT Subject: CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:64:03:8e:bb:26:ee:37:52:c9:70:19:90: 67:a7:fc:34:34:d4:31:a5:64:e5:e0:7e:56:a7:8f: 3d:de:27:00:2d:4c:85:53:bf:08:0c:a8:73:de:c4: 6b:1d:98:58:42:31:90:bc:70:73:76:1d:fa:77:ae: 5b:5e:89:b3:3e:a5:26:87:d6:85:b9:9c:36:63:43: a8:66:05:09:5a:c4:47:9f:eb:2d:55:d9:ab:e9:ac: f5:fe:69:b6:cd:f0:8d:97:54:2f:8f:5a:4e:ab:18: f3:85:be:5c:34:62:b8:3a:89:e0:fe:f6:d7:12:5c: 1c:ac:6a:0f:0e:6b:c9:eb:ba:c4:1f:1f:d7:53:55: a6:13:c8:3b:15:e5:53:e0:c3:96:fb:d8:7e:37:54: 43:4e:ee:66:94:7c:42:1f:74:39:0a:17:a6:90:3f: b5:3f:1a:fc:61:46:4a:00:ae:08:20:80:b6:80:76: 14:94:e4:51:8d:b1:8d:2d:d4:86:61:fe:07:5c:2b: 12:61:26:05:3d:3c:e2:29:da:42:c0:b3:af:c7:5c: 56:75:f5:38:e0:00:eb:1b:93:63:9c:7d:78:72:49: de:a0:85:32:b3:65:35:3a:79:e3:d0:4f:94:49:07: 6c:a0:e8:37:4e:4e:c7:42:9f:76:32:08:7c:f1:54: 17:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6C:21:93:38:13:4A:44:43:39:C3:2C:30:76:08:D1:BA:4F:50:48 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:77:44:af:8f:1b:82:df:e6:65:f2:7e:d5:18:9f:0d:85:13: 2f:fc:32:cb:f5:6f:1c:d6:11:1f:9b:82:45:00:18:6c:6f:ae: 3d:a4:a7:25:8c:a9:7d:c0:c9:48:57:97:98:a6:fc:12:36:cb: 13:3c:7b:ef:cb:02:47:5b:55:ec:77:10:c1:18:25:99:98:25: e0:c9:ce:ff:e2:67:6e:db:a7:97:97:96:94:93:b9:14:74:4f: 89:9d:5c:ff:f3:eb:83:f2:44:27:07:ac:6b:1c:20:4f:44:b5: c0:4e:9a:19:3b:39:17:ee:a8:ed:b1:ca:39:b3:b4:d3:0a:78: 89:8e:6f:10:fa:34:10:47:d3:db:12:3e:ff:9d:14:c8:23:be: 4f:dd:4d:9b:57:57:ec:d0:56:13:bf:f6:a4:ad:33:64:2a:57: 93:0c:50:3b:8f:8c:3a:cc:b4:28:62:1c:56:ff:62:18:8b:72: 16:f0:9c:4d:63:73:1f:5d:4e:da:06:99:50:32:44:9c:c1:77: af:b5:3b:fa:d8:d7:21:ee:39:41:8b:70:15:3b:f6:63:8f:5b: dd:f9:64:7a:d0:43:f3:a3:13:95:8d:ba:0a:0f:1d:da:02:35: 8f:80:ee:5d:e2:43:60:ee:df:98:d7:ad:ca:f4:ab:57:e9:67: 1b:87:16:64 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUEMP30LcfzW+AjZeYeP+Em/OpJ3cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwNDA1MDAxMzQyWhcNMjUwNDA5MDAxMzQy WjB6MUkwRwYDVQQFE0A1YTUzYjBhODYyYmZjYjMwZDE4MTNmNjg2M2RlZjVjOTQy MWQwZmZkY2QwMTY2MDQwM2JmNDIxMGU0MzljYzg0MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbi2QDjrsm7jdSyXAZkGen/DQ01DGlZOXgflanjz3eJwAt TIVTvwgMqHPexGsdmFhCMZC8cHN2Hfp3rlteibM+pSaH1oW5nDZjQ6hmBQlaxEef 6y1V2avprPX+abbN8I2XVC+PWk6rGPOFvlw0Yrg6ieD+9tcSXBysag8Oa8nrusQf H9dTVaYTyDsV5VPgw5b72H43VENO7maUfEIfdDkKF6aQP7U/GvxhRkoArggggLaA dhSU5FGNsY0t1IZh/gdcKxJhJgU9POIp2kLAs6/HXFZ19TjgAOsbk2OcfXhySd6g hTKzZTU6eePQT5RJB2yg6DdOTsdCn3YyCHzxVBfDAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUemwhkzgTSkRDOcMsMHYI0bpPUEgwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrd0Sv jxuC3+Zl8n7VGJ8NhRMv/DLL9W8c1hEfm4JFABhsb649pKcljKl9wMlIV5eYpvwS NssTPHvvywJHW1XsdxDBGCWZmCXgyc7/4mdu26eXl5aUk7kUdE+JnVz/8+uD8kQn B6xrHCBPRLXATpoZOzkX7qjtsco5s7TTCniJjm8Q+jQQR9PbEj7/nRTII75P3U2b V1fs0FYTv/akrTNkKleTDFA7j4w6zLQoYhxW/2IYi3IW8JxNY3MfXU7aBplQMkSc wXevtTv62Nch7jlBi3AVO/Zjj1vd+WR60EPzoxOVjboKDx3aAjWPgO5d4kNg7t+Y 163K9KtX6WcbhxZk -----END CERTIFICATE-----Generated at Sat Apr 5 21:39:32 2025 by rpki-client