$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft File: HwZxfSr2LjgJByCEw6-PSJSOQOI.mft (raw, json) Hash identifier: IH589Ld4ywr23n8Sbj2/XrjLNrYIMgMlzSW3E5rH160= Subject key identifier: 9F:F5:03:54:0E:6A:57:90:93:0E:D4:BF:6D:89:A1:C0:60:6F:C3:04 Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Certificate serial: 259F14703D5AD94D4916B9CAD88046CCD263E313 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft Manifest number: 0498 Signing time: Thu 18 Sep 2025 15:21:40 +0000 Manifest this update: Thu 18 Sep 2025 15:21:40 +0000 Manifest next update: Mon 22 Sep 2025 15:21:40 +0000 Files and hashes: 1: 0c492edd-c347-4b97-a816-01566f9d097b.roa (hash: EmLdz8Ku4W5wu9TMapLxBBTRn84E9BpZTR5jrHVXOZs=) 2: 4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa (hash: xK9a7Zg9B1j1jmB7sVgdLfxq1ZkSl61gAR2MaJn2YC8=) 3: 59031a63-ea1a-4943-86ab-19221a23ca42.roa (hash: AUtZ/hTiSeMyDnxKF+6JGDUkhG9ECRxDEEP8D6llUWc=) 4: 6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (hash: p/S2FESzym+VMId/glXXU7vJMZnkQ1aYt7Km5HJoSuU=) 5: 91a27594-a038-483a-a558-a5377f4d266f.roa (hash: 9rN2tqOSzqAGOwF6wYyfLmiDSBV5l03jkMdjBnJwxSM=) 6: 943694fe-e278-4d76-b786-7df26f151dd9.roa (hash: 6C7L3TrfJW3/DPmg/fTHQ/pvGUnszS9chf1nUiPvm+w=) 7: HwZxfSr2LjgJByCEw6-PSJSOQOI.crl (hash: 1o38CycnWPUgPlcTfNgdPavfCDWG0ZRTw1+2S+oClb8=) 8: a86c8ffa-34ab-4a01-8f63-86207fe44159.roa (hash: VblAtRFJDH2s+816C2+q0IvZN/si8J2WVCWs5Jd01gg=) 9: c686f937-000a-490a-846c-e2773b637b26.roa (hash: wN2+q0EOqQmUNeq8cCljWicvBJJQbdxQdI5U19hYuCg=) 10: d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa (hash: b6/B3gnArohpxz6aAGHZcU7gujH8vx4czHFyTQjW0xk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9f:14:70:3d:5a:d9:4d:49:16:b9:ca:d8:80:46:cc:d2:63:e3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2 Validity Not Before: Sep 18 15:21:40 2025 GMT Not After : Sep 22 15:21:40 2025 GMT Subject: serialNumber=7c0af7dda40eb49e6248e2b991acc1b51cb4a1ee0788ef79c99ce4efa2a8d4c5, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:29:09:2e:b4:1d:d0:7a:c8:c0:60:c0:67: da:77:97:14:21:6d:4a:ae:da:d2:90:65:1b:24:e1: c7:72:31:50:51:ed:fe:9a:8e:5c:a1:17:b8:bd:bf: 79:f3:1e:ea:52:14:14:8e:bd:63:50:14:fb:d3:fe: ca:a1:9f:7f:08:4e:ac:28:e6:b8:cc:f1:57:7e:38: e7:e6:83:ab:b0:d1:d6:95:ee:2a:73:fa:45:de:17: 1a:b2:83:ad:ab:d2:fa:96:81:fe:8f:3e:3a:57:31: 5e:78:5a:83:83:d9:b8:20:cf:cf:80:74:c0:1d:0e: 44:df:3e:bd:6e:a0:1c:25:d7:36:a7:a1:4b:1a:5d: eb:81:30:71:39:0b:e2:b7:fa:c1:14:dc:11:80:4e: 24:54:1d:ec:6e:46:50:1e:2e:e4:3a:9a:44:ea:4e: 02:8d:88:0d:c3:00:8c:83:de:fc:c3:d7:21:d0:7f: 8d:dd:9d:0b:a6:82:3b:af:a1:77:58:cb:51:78:8f: 7c:53:6d:22:55:b2:ae:e3:23:de:d5:81:b5:33:fe: 37:73:53:1c:77:d0:2c:b8:97:b7:04:57:6b:bc:47: c5:42:8f:c3:b9:f7:65:ca:9b:ed:5f:b4:9d:b4:e4: f9:49:50:37:15:4b:ff:8c:73:3a:e4:9c:3d:98:bf: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F5:03:54:0E:6A:57:90:93:0E:D4:BF:6D:89:A1:C0:60:6F:C3:04 X509v3 Authority Key Identifier: keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f9:4d:5a:c5:df:6d:64:cd:4a:44:ae:e5:b0:4a:6b:a6:99: 42:76:e3:81:dc:ee:fd:32:2c:97:a8:50:2d:7b:a7:2f:2d:29: a7:bc:b2:39:de:ba:c7:a9:26:c6:ff:59:d5:81:96:6f:bc:f1: b4:b9:2c:0a:b4:60:df:0e:8f:04:5c:e5:a7:93:0a:ce:7a:f7: fe:b7:8c:45:1b:e7:ed:e4:4d:31:70:66:66:f3:8c:b0:1e:4e: 14:30:b2:e0:3e:ca:2c:2e:bc:e3:a7:b5:a2:89:4d:3f:90:07: b6:d1:95:eb:e9:51:05:4f:db:50:00:35:88:ec:69:24:d4:a5: 77:f6:b0:0f:c4:d8:87:58:a7:13:2c:7d:1a:16:56:db:a9:02: d7:1f:6f:0a:05:bd:4f:90:08:3b:b8:63:0d:2f:60:3c:f1:2b: f1:13:aa:fa:06:9f:d3:44:df:7d:b5:c2:95:47:fc:a8:05:f8: 56:f0:54:71:2d:90:6e:31:54:67:70:48:5b:d2:02:7f:d4:3e: 6f:f7:c4:c2:2c:cb:c6:f6:46:3f:b2:fd:74:6a:aa:40:55:3b: 5e:f7:f5:38:7a:c6:17:aa:cd:06:97:68:91:9a:0f:55:b1:13: 94:44:1c:96:22:4f:16:c1:99:49:7f:d1:bd:cb:50:ab:4d:c6: 8f:5a:06:71 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUJZ8UcD1a2U1JFrnK2IBGzNJj4xMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4 NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjUwOTE4MTUyMTQwWhcNMjUwOTIyMTUyMTQw WjB6MUkwRwYDVQQFE0A3YzBhZjdkZGE0MGViNDllNjI0OGUyYjk5MWFjYzFiNTFj YjRhMWVlMDc4OGVmNzljOTljZTRlZmEyYThkNGM1MS0wKwYDVQQDEyQ4Zjk1ZTRk MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyMikJLrQd0HrIwGDAZ9p3lxQhbUqu2tKQZRsk4cdyMVBR 7f6ajlyhF7i9v3nzHupSFBSOvWNQFPvT/sqhn38ITqwo5rjM8Vd+OOfmg6uw0daV 7ipz+kXeFxqyg62r0vqWgf6PPjpXMV54WoOD2bggz8+AdMAdDkTfPr1uoBwl1zan oUsaXeuBMHE5C+K3+sEU3BGATiRUHexuRlAeLuQ6mkTqTgKNiA3DAIyD3vzD1yHQ f43dnQumgjuvoXdYy1F4j3xTbSJVsq7jI97VgbUz/jdzUxx30Cy4l7cEV2u8R8VC j8O592XKm+1ftJ205PlJUDcVS/+MczrknD2YvxYFAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUn/UDVA5qV5CTDtS/bYmhwGBvwwQwHwYDVR0jBBgwFoAUHl8tYvha0oTU 0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05 Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh MzhjMzJmZDRjL0h3WnhmU3IyTGpnSkJ5Q0V3Ni1QU0pTT1FPSS5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2FlLTdlYTM4YzMy ZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCn+U1a xd9tZM1KRK7lsEprpplCduOB3O79MiyXqFAte6cvLSmnvLI53rrHqSbG/1nVgZZv vPG0uSwKtGDfDo8EXOWnkwrOevf+t4xFG+ft5E0xcGZm84ywHk4UMLLgPsosLrzj p7WiiU0/kAe20ZXr6VEFT9tQADWI7Gkk1KV39rAPxNiHWKcTLH0aFlbbqQLXH28K Bb1PkAg7uGMNL2A88SvxE6r6Bp/TRN99tcKVR/yoBfhW8FRxLZBuMVRncEhb0gJ/ 1D5v98TCLMvG9kY/sv10aqpAVTte9/U4esYXqs0Gl2iRmg9VsROURByWIk8WwZlJ f9G9y1CrTcaPWgZx -----END CERTIFICATE-----Generated at Fri Sep 19 11:51:53 2025 by rpki-client