$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: ZdwEb8Ied1kye9Vy3ZnebRIk8r3HacMOQsgT+g1pxYc= Subject key identifier: 4C:CE:91:76:7F:41:23:15:D4:5C:F9:5E:67:48:1E:93:06:3E:B2:33 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 431BEA00D5E8E25DE495ADEC03851E29FBD4D0E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 0363 Signing time: Mon 21 Jul 2025 00:22:21 +0000 Manifest this update: Mon 21 Jul 2025 00:22:21 +0000 Manifest next update: Fri 25 Jul 2025 00:22:21 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: 0VAwMVjY1WYKc7skb6UKDDc/7W4yksF/kpo/yZ5ZKMY=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1b:ea:00:d5:e8:e2:5d:e4:95:ad:ec:03:85:1e:29:fb:d4:d0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Jul 21 00:22:21 2025 GMT Not After : Jul 25 00:22:21 2025 GMT Subject: serialNumber=fe3d082bc1bc235c75c53043040c0a87856cd02041332eb2e59a08051dce5dac, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:de:e2:b1:38:25:b2:9d:e4:05:26:6e:f1: cc:e9:1e:3d:e1:d7:a4:ba:da:5b:ac:48:59:21:56: 63:ff:fd:23:01:12:9e:3d:9f:a6:d9:fc:fe:37:a7: 17:c3:fe:d6:d4:b4:91:3e:cb:41:50:7e:1a:af:1c: d3:ed:3c:15:bb:f2:ea:b6:7a:08:df:ab:7a:d9:56: 10:e2:15:7e:32:27:79:5f:1c:f9:2e:07:c9:27:3d: c7:71:20:2a:79:c7:db:5d:d1:f2:b2:49:7d:aa:7a: c7:0c:e8:f1:cd:15:00:a0:b2:2a:02:76:9f:e9:b4: f8:f9:62:d8:17:25:56:0b:c4:ca:99:aa:4d:c6:92: 0a:45:53:b3:d5:dd:22:f3:74:05:0f:58:77:7c:a6: 94:74:37:2b:e7:d2:ee:a4:8e:70:5e:ed:4e:14:65: a9:4a:24:4f:bb:65:fa:5c:9d:f2:d2:04:fb:8b:49: 46:d5:e5:a7:ff:29:21:e4:f3:b8:a9:69:8e:0f:ee: ef:a4:c6:dc:bd:56:5c:17:66:33:56:7c:cf:f9:9a: ff:c9:b6:58:6d:ea:58:7b:48:32:7e:61:73:a4:9f: 0b:22:14:7a:75:b9:29:66:75:19:59:c2:42:c2:e3: 2a:b1:7d:51:f1:59:3d:bb:b9:0a:04:e9:6d:40:45: ac:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CE:91:76:7F:41:23:15:D4:5C:F9:5E:67:48:1E:93:06:3E:B2:33 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8d:8d:dc:cc:19:b5:ea:f1:6c:fd:98:eb:3c:a0:f1:2b:ad: 09:32:ef:be:aa:c7:33:74:9e:a3:fb:e0:11:f3:de:db:1c:56: 86:1c:fe:d3:db:7f:97:d5:37:ee:5d:89:85:9f:b9:94:a1:cf: cb:40:85:96:0d:38:7f:b6:eb:3a:e1:46:2b:11:60:f8:70:5c: 5e:20:ad:bd:a0:7e:80:47:94:47:fd:2a:8e:f1:1a:4c:a4:9b: 08:48:ec:b1:4e:41:27:e7:a7:8f:a3:a6:71:a7:5f:1b:9b:ca: b1:76:65:60:6c:68:75:db:10:3b:16:63:12:ce:ec:97:58:33: ee:78:9b:94:89:e5:59:96:76:d6:9e:06:aa:42:9b:7d:e2:ba: 0f:4d:e8:b3:e6:69:bf:d8:6b:f7:bb:1d:8a:ad:62:b5:9e:5d: ae:26:30:89:e1:aa:96:eb:9f:da:0f:1a:8d:c8:4b:30:ed:c3: 34:86:d2:65:dc:a1:57:fd:61:a4:9c:9b:2d:e3:b0:4b:1f:a1: cb:56:e6:04:d1:0b:e4:23:cf:b4:95:2a:54:57:60:b1:77:34: 76:f3:db:44:6c:ac:83:57:7b:5f:e2:22:48:e0:1a:96:a8:52: d9:60:8b:be:d7:24:72:64:19:f9:d3:1a:e5:c0:57:61:d0:48: 3d:d5:56:f5 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUQxvqANXo4l3kla3sA4UeKfvU0OIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUwNzIxMDAyMjIxWhcNMjUwNzI1MDAyMjIx WjB6MUkwRwYDVQQFE0BmZTNkMDgyYmMxYmMyMzVjNzVjNTMwNDMwNDBjMGE4Nzg1 NmNkMDIwNDEzMzJlYjJlNTlhMDgwNTFkY2U1ZGFjMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1Ct7isTglsp3kBSZu8czpHj3h16S62lusSFkhVmP//SMB Ep49n6bZ/P43pxfD/tbUtJE+y0FQfhqvHNPtPBW78uq2egjfq3rZVhDiFX4yJ3lf HPkuB8knPcdxICp5x9td0fKySX2qescM6PHNFQCgsioCdp/ptPj5YtgXJVYLxMqZ qk3GkgpFU7PV3SLzdAUPWHd8ppR0Nyvn0u6kjnBe7U4UZalKJE+7ZfpcnfLSBPuL SUbV5af/KSHk87ipaY4P7u+kxty9VlwXZjNWfM/5mv/Jtlht6lh7SDJ+YXOknwsi FHp1uSlmdRlZwkLC4yqxfVHxWT27uQoE6W1ARawBAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUTM6Rdn9BIxXUXPleZ0gekwY+sjMwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqjY3c zBm16vFs/ZjrPKDxK60JMu++qsczdJ6j++AR897bHFaGHP7T23+X1TfuXYmFn7mU oc/LQIWWDTh/tus64UYrEWD4cFxeIK29oH6AR5RH/SqO8RpMpJsISOyxTkEn56eP o6Zxp18bm8qxdmVgbGh12xA7FmMSzuyXWDPueJuUieVZlnbWngaqQpt94roPTeiz 5mm/2Gv3ux2KrWK1nl2uJjCJ4aqW65/aDxqNyEsw7cM0htJl3KFX/WGknJst47BL H6HLVuYE0QvkI8+0lSpUV2CxdzR289tEbKyDV3tf4iJI4BqWqFLZYIu+1yRyZBn5 0xrlwFdh0Eg91Vb1 -----END CERTIFICATE-----Generated at Mon Jul 21 23:17:12 2025 by rpki-client