$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: TbnLTIZjKO1GgMPwOtMD0vZ7Do7F+JZq+a7VXiMPXME= Subject key identifier: 57:DA:66:F4:5C:45:A3:8E:97:A3:2F:6F:9E:EC:BA:B6:73:68:AF:87 Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 4B7340E0B0E4BD2BE141C741EA5CD5E7299C29D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 036D Signing time: Fri 04 Apr 2025 00:04:12 +0000 Manifest this update: Fri 04 Apr 2025 00:04:12 +0000 Manifest next update: Tue 08 Apr 2025 00:04:12 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: 3nRY/YX4zc0MKUcoVcAqiriGpoJq0J4095IEyyVFn54=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: KqEzsRGkc0KLacw36QKWSb/FXG/l/MkDkVMvkYdE6AE=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:73:40:e0:b0:e4:bd:2b:e1:41:c7:41:ea:5c:d5:e7:29:9c:29:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Apr 4 00:04:12 2025 GMT Not After : Apr 8 00:04:12 2025 GMT Subject: CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:ca:79:e8:96:d4:0e:93:80:4c:99:59:b8: 96:93:71:a8:75:aa:56:6d:1b:5d:53:f8:35:b4:5d: 80:d8:1e:34:95:3a:2a:89:bf:16:d9:6d:c0:60:69: ed:00:77:f9:33:3f:56:f6:66:c9:a5:8a:3f:f7:90: 31:3b:fb:1b:2f:88:70:c1:eb:e6:a1:30:f3:83:fb: 69:02:ce:46:2a:07:d9:3c:a6:94:36:5c:e5:a7:76: 92:6c:49:22:10:c7:13:75:e9:9a:36:75:bc:a5:53: e8:ef:56:66:38:bc:14:4b:21:70:01:38:c7:cd:fd: ac:5c:13:7d:9b:5d:94:53:19:48:e6:43:87:ce:37: b5:35:d3:4e:3d:53:90:b2:af:00:10:84:d0:34:c9: f8:40:c5:01:27:a4:b0:5d:c9:31:dd:25:34:79:a5: f0:4b:c4:9a:be:6b:43:31:68:7a:18:ee:2c:c0:08: c5:f1:5c:5b:bf:d3:8a:aa:33:19:50:b6:8b:c3:27: 19:c2:5f:c0:7a:1f:0c:ca:5b:9d:ae:a1:2a:0d:65: 79:7a:96:e6:60:5d:79:d4:6d:3a:b5:9e:e0:63:c5: ee:35:b9:3b:b8:90:87:b9:ab:13:6f:2f:ba:09:d6: de:1b:29:4e:7a:05:eb:e8:be:a6:90:06:e5:53:04: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DA:66:F4:5C:45:A3:8E:97:A3:2F:6F:9E:EC:BA:B6:73:68:AF:87 X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:60:80:48:f7:a8:ac:9b:00:0d:22:37:e9:66:e6:f2:07:fa: f2:75:8c:e4:4f:45:bc:ac:9b:73:f6:f8:a4:5c:72:e4:7d:d7: e9:d7:2d:d6:c8:fe:aa:ff:27:6a:91:5c:34:36:0a:fc:61:f7: 14:58:d2:c7:60:ba:0c:46:fc:a8:e6:72:24:d3:5c:fa:4b:c1: f8:96:db:27:a7:63:72:ba:9a:6a:46:d7:95:1e:c2:39:c1:91: 8a:6d:33:74:c8:3c:f7:2c:5a:48:ab:0f:1f:0b:26:3f:8e:23: b7:d3:4e:82:1b:51:f2:7e:91:ae:ea:73:d2:c7:aa:06:2f:41: f4:db:a5:7d:16:2e:18:37:2b:78:65:08:30:42:21:2c:07:17: 57:b5:b1:12:7a:2b:c4:f6:02:42:79:67:92:a2:64:e5:83:d4: 47:fb:b8:3e:3d:73:05:d4:02:aa:14:61:97:37:e3:85:6d:81: a0:1c:45:c9:34:8a:f2:69:5a:d4:66:f4:b7:74:4b:a5:0f:c5: c5:34:58:d2:6c:a7:eb:07:30:59:97:9b:da:e8:eb:c7:22:a8: 86:a8:3e:01:65:06:63:bc:c0:0f:6c:b5:b2:5d:27:5b:d8:4c: 14:32:26:63:1e:df:37:0e:de:71:dc:10:91:9e:b1:de:24:8e: d4:30:16:f3 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUS3NA4LDkvSvhQcdB6lzV5ymcKdYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjUwNDA0MDAwNDEyWhcNMjUwNDA4MDAwNDEy WjB6MUkwRwYDVQQFE0AxMDNiOGZjNDJhZmI0MWJlZGVhYzM2NWU5YWFlZGNlOTQx ZmExODdkNWFhMGRiNDY3N2U3OTRkNzE0YmNlZTA0MS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCersp56JbUDpOATJlZuJaTcah1qlZtG11T+DW0XYDYHjSV OiqJvxbZbcBgae0Ad/kzP1b2Zsmlij/3kDE7+xsviHDB6+ahMPOD+2kCzkYqB9k8 ppQ2XOWndpJsSSIQxxN16Zo2dbylU+jvVmY4vBRLIXABOMfN/axcE32bXZRTGUjm Q4fON7U10049U5CyrwAQhNA0yfhAxQEnpLBdyTHdJTR5pfBLxJq+a0MxaHoY7izA CMXxXFu/04qqMxlQtovDJxnCX8B6HwzKW52uoSoNZXl6luZgXXnUbTq1nuBjxe41 uTu4kIe5qxNvL7oJ1t4bKU56BevovqaQBuVTBJ4hAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUV9pm9FxFo46Xoy9vnuy6tnNor4cwHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhYIBI 96ismwANIjfpZubyB/rydYzkT0W8rJtz9vikXHLkfdfp1y3WyP6q/ydqkVw0Ngr8 YfcUWNLHYLoMRvyo5nIk01z6S8H4ltsnp2NyuppqRteVHsI5wZGKbTN0yDz3LFpI qw8fCyY/jiO3006CG1HyfpGu6nPSx6oGL0H026V9Fi4YNyt4ZQgwQiEsBxdXtbES eivE9gJCeWeSomTlg9RH+7g+PXMF1AKqFGGXN+OFbYGgHEXJNIryaVrUZvS3dEul D8XFNFjSbKfrBzBZl5va6OvHIqiGqD4BZQZjvMAPbLWyXSdb2EwUMiZjHt83Dt5x 3BCRnrHeJI7UMBbz -----END CERTIFICATE-----Generated at Fri Apr 4 20:16:38 2025 by rpki-client