$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft File: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json) Hash identifier: rnuml93yT/bPDcBN/G1IqMjwS/JQNn7Hhbnv0LeVi9Y= Subject key identifier: 19:8E:34:E4:CD:43:69:6E:B4:09:9D:FF:32:8E:42:AD:54:64:1F:CA Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 1E4C6BDD4A674280091E29E284977EF02F6E2844 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft Manifest number: 12 Signing time: Tue 03 Jun 2025 18:19:46 +0000 Manifest this update: Tue 03 Jun 2025 18:19:46 +0000 Manifest next update: Sat 07 Jun 2025 18:19:46 +0000 Files and hashes: 1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: U7lArcteahltG2RIkZiifQQVNeZaLBiMHwOKIX7lg3k=) 2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: 9mYnwcFiE9UMPJBBfBeiKZPx8kch0oW+Io8i0Jj5fkw=) 3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: yAqCQ+ZWfuC6xBoe6Tqt0sCKEv4MTMuy7zsocJBbTEA=) 4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: YLxvnGH2T70UVOoWQzxitZxwJhkdw4afivmuj3UEA6U=) 5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: 9Xe9jyVrdsOnFwuXpAFeQLuvqUQYP+kS2uYjzUriM58=) 6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: EuO2R/vcT3O8zKeWPqVFyE3yhJNYL5TOIQQFXef/hRg=) 7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: uS+lMAUEuvqQXEECcfQ26SpvdZCO+umjmstzoX/oHH0=) 8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: wpgTnGlR65dJrXWX+LaapqS/Qg83Pe1vxoWFYxreMzg=) 9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: PHLDA/R9Csai6TTaERdSHp5oOMCVS4iz9ydYwM9/i2w=) 10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: l4kdgEiUHoYxjDCvJ7S8tQAx/FcLEMamreDVtmEXWdA=) 11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: E2UcHyuPngD+8GQZ4xo6KLPK1CTyfoZE6le18teHKq4=) 12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: VGgstVFb4YdjKoOJRhytr2DwUpKLsqjsBxKGoCyLiAw=) 13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: oTJcRDFYYdv4QYfj5kE0hgS4yNA3P0bqHG+rD6JGNDs=) 14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: APYfWvu1xFC9Ovi89ocbMQkJz/K5ZW5SzDboNtulz48=) 15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: rlaqCgPnPdUITTslD0UNaPDaOFHyShL6LtL7dGd3bW8=) 16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: CRYRJoPyW+KoKcsZ+/fYeWU5rXhRYHyUz+X4wALsjlc=) 17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: Wz7XbhhqPvn+ys2gVAPuZoADzuwoztitjFF28sFf9CM=) 18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: acrH3qzQ0VGtxVeYbFBuI4Q8yy6d0I0baA6fcfdohbk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4c:6b:dd:4a:67:42:80:09:1e:29:e2:84:97:7e:f0:2f:6e:28:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Jun 3 18:19:46 2025 GMT Not After : Jun 7 18:19:46 2025 GMT Subject: serialNumber=a928a4458b2e38d54972541831f2b62a09f2aaa77f9d59e5b5b0e813a0d89558, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7e:0b:92:56:c9:67:b5:ef:bd:d0:9f:0f:22: 9b:ed:ad:c2:dd:56:b8:02:d9:5a:0a:2f:7b:e5:c1: c3:57:96:f9:d3:03:b4:64:9f:4d:d8:5e:90:3d:16: 3e:13:81:cc:e5:84:b2:c7:33:5e:95:9f:71:fa:a4: 4f:5c:82:54:c8:fe:fe:92:95:8c:4b:62:e2:f9:e2: c6:99:5b:13:fc:eb:be:cf:db:b0:2d:81:f8:2f:78: 6e:3a:28:18:52:ba:22:46:cf:34:a5:85:73:23:63: 09:fa:93:00:46:49:ae:33:01:72:e6:cb:cb:c0:83: d9:bc:d0:f6:42:38:a1:80:22:67:68:c3:cf:bf:71: d7:33:37:b9:fa:f2:96:43:b2:3c:e2:80:e1:86:da: 0a:31:f1:16:41:8f:3d:31:12:30:d1:bf:57:f6:d8: da:e6:0a:38:74:0b:5f:f3:b2:89:b6:dc:d4:b7:78: 41:de:68:cb:1f:3b:24:f1:0f:0f:10:27:5c:0e:e5: b0:56:29:66:cb:61:27:8b:00:e3:01:ad:a9:2e:ef: 76:dd:d9:9c:a4:4f:a1:95:ca:70:30:ca:de:ee:86: ca:21:0a:58:90:92:70:14:e0:56:31:49:39:17:3a: ad:3e:c6:ac:51:ac:77:d3:a7:9c:18:98:d3:6f:9e: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:34:E4:CD:43:69:6E:B4:09:9D:FF:32:8E:42:AD:54:64:1F:CA X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b2:c2:23:c1:03:95:33:01:d2:d8:43:6d:95:94:ff:f0:cc: a8:51:82:a9:a2:41:e5:98:0b:23:cb:74:47:04:3c:c3:24:44: 33:8c:01:c1:82:6b:73:3b:1a:1f:a9:68:ff:89:6d:f3:ce:f8: ae:36:93:06:76:01:56:0c:32:93:9e:0e:97:ab:8b:c0:35:15: d4:cd:d3:ab:5a:4a:47:85:79:dd:ed:bf:07:23:d3:70:da:ed: 21:d3:8c:c7:ef:ab:d5:4a:38:be:e5:2a:c3:79:8b:ab:35:fe: ec:40:09:63:6e:e6:5a:ab:f7:fc:0b:ec:de:82:06:ae:21:ba: d0:21:28:1f:c9:b0:5f:c1:3d:1a:f8:c7:da:ea:3e:4a:ae:e7: 5e:e0:49:90:d7:66:fe:e7:b7:96:e2:fc:04:b8:93:1e:88:6a: be:ad:5c:ff:2d:c2:f4:ae:b7:50:5f:f3:6e:15:11:dc:09:20: 13:57:f4:21:f6:0d:4f:85:3c:48:ab:92:f6:d3:81:93:14:51: 9c:78:0c:48:c6:65:50:13:3c:8e:52:1b:b5:bf:fc:b7:4b:f3: 26:5e:0b:36:1c:30:c0:5b:93:a7:b5:9d:64:39:93:54:b9:0d: b2:48:a8:8a:44:16:93:cf:d5:d0:8c:e5:69:b9:20:4c:3d:d2: 86:3d:c4:78 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUHkxr3UpnQoAJHinihJd+8C9uKEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNjAzMTgxOTQ2WhcNMjUwNjA3MTgxOTQ2 WjB6MUkwRwYDVQQFE0BhOTI4YTQ0NThiMmUzOGQ1NDk3MjU0MTgzMWYyYjYyYTA5 ZjJhYWE3N2Y5ZDU5ZTViNWIwZTgxM2EwZDg5NTU4MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDfguSVslnte+90J8PIpvtrcLdVrgC2VoKL3vlwcNXlvnT A7Rkn03YXpA9Fj4TgczlhLLHM16Vn3H6pE9cglTI/v6SlYxLYuL54saZWxP8677P 27AtgfgveG46KBhSuiJGzzSlhXMjYwn6kwBGSa4zAXLmy8vAg9m80PZCOKGAImdo w8+/cdczN7n68pZDsjzigOGG2gox8RZBjz0xEjDRv1f22NrmCjh0C1/zsom23NS3 eEHeaMsfOyTxDw8QJ1wO5bBWKWbLYSeLAOMBraku73bd2ZykT6GVynAwyt7uhsoh CliQknAU4FYxSTkXOq0+xqxRrHfTp5wYmNNvnhIDAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUGY405M1DaW60CZ3/Mo5CrVRkH8owHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL240YldyWl9FNXlJOS1FSFNDdWJRX3hKQ2dYTS5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhhLTMyMjFkMDFm N2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5ssIj wQOVMwHS2ENtlZT/8MyoUYKpokHlmAsjy3RHBDzDJEQzjAHBgmtzOxofqWj/iW3z zviuNpMGdgFWDDKTng6Xq4vANRXUzdOrWkpHhXnd7b8HI9Nw2u0h04zH76vVSji+ 5SrDeYurNf7sQAljbuZaq/f8C+zeggauIbrQISgfybBfwT0a+Mfa6j5Krude4EmQ 12b+57eW4vwEuJMeiGq+rVz/LcL0rrdQX/NuFRHcCSATV/Qh9g1PhTxIq5L204GT FFGceAxIxmVQEzyOUhu1v/y3S/MmXgs2HDDAW5OntZ1kOZNUuQ2ySKiKRBaTz9XQ jOVpuSBMPdKGPcR4 -----END CERTIFICATE-----Generated at Wed Jun 4 10:19:59 2025 by rpki-client