$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: fHUDGznskA/RfNL+j31bcnZA8rCovKlbF0CUYM1v058= Subject key identifier: A0:1B:E2:27:92:5A:5E:D1:1E:BE:B0:91:C7:35:23:F9:1D:C0:C3:10 Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 1D43AE6FC6214A470832F3F295DC8A10E5AD2054 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 05B9 Signing time: Tue 10 Nov 2026 00:13:10 +0000 Manifest this update: Tue 10 Nov 2026 00:13:10 +0000 Manifest next update: Sat 14 Nov 2026 00:13:10 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: EhI0qOCrGFxkkHGYembgFFFkw0m4A/BJdTxOApracBw=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: yz4U2yUOB+5Y7afo/7+CSdtM+dTxoptrm/58a39dRVQ=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:43:ae:6f:c6:21:4a:47:08:32:f3:f2:95:dc:8a:10:e5:ad:20:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Nov 10 00:13:10 2026 GMT Not After : Nov 14 00:13:10 2026 GMT Subject: serialNumber=571d22ae7d495b3ae1f535e65a5c41a4ff049836cc99d2e2aa743ee9e275ce65, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:9d:bc:f0:44:51:50:40:23:ef:7f:42:ec: 5e:59:57:24:cc:e6:ee:a1:e0:35:56:6f:14:5b:63: 05:7e:28:c5:00:67:0f:2b:50:a3:c2:22:ff:aa:ce: 6a:97:84:22:10:ee:29:15:fc:8d:fa:d4:47:4d:fb: 3b:e7:c4:26:e7:24:95:5c:10:73:0c:ec:94:4e:97: b1:fa:51:c9:f4:40:75:69:13:7e:d5:98:5c:21:a7: d8:af:f9:ce:d3:4e:a0:e0:47:f0:4e:7d:25:5e:94: 56:bf:f7:1c:64:18:aa:f1:2d:82:83:81:57:38:9d: b8:11:bf:a1:c8:0b:86:25:51:8c:b6:ba:ff:0c:3a: dc:3a:3c:c4:f4:30:cd:2c:3a:0f:75:1f:0c:1a:8c: e6:f1:d7:e0:79:35:f1:02:99:9e:fa:90:43:b8:34: 60:29:34:9b:56:ee:70:48:f3:29:74:6b:a5:bd:e8: 8b:b0:4c:1a:11:1f:06:81:e6:da:5e:f8:c8:aa:1b: 14:cf:7b:0a:80:e6:a9:5c:cc:c2:40:05:e6:89:fd: e3:74:4c:96:93:37:c4:b2:d4:ed:e0:a2:5b:56:48: 85:0a:e9:61:57:39:22:78:44:51:57:cb:05:e8:ae: bd:1c:4d:18:86:0b:41:d6:ba:d0:7b:e7:81:42:f8: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1B:E2:27:92:5A:5E:D1:1E:BE:B0:91:C7:35:23:F9:1D:C0:C3:10 X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6f:de:c9:45:53:20:4b:3e:ea:f7:ba:c5:5b:8b:cd:f5:71: 98:6b:4e:ac:46:a8:85:91:20:2c:23:e1:a7:85:0e:c0:e0:5e: 3f:6d:44:70:61:e3:d5:16:dd:af:3f:0a:1e:ff:a4:b6:ca:2e: 38:85:46:05:08:3b:35:c1:ec:53:e7:f1:a0:1c:4c:71:f7:00: 51:66:7c:ab:47:99:8b:e6:2a:d0:6b:9e:40:3d:48:a6:f5:a1: 37:b1:fd:35:44:82:48:66:84:d8:05:30:ef:56:cb:99:5d:47: 97:84:0b:da:29:20:1b:2e:20:78:fb:f3:a9:d6:46:6f:dd:5a: b9:cd:59:a2:e4:69:61:f4:a0:b8:fd:73:52:4e:fd:45:9b:c3: 8d:84:1a:80:24:a4:7e:ea:7f:11:1a:18:7f:66:17:6b:47:82: de:3d:ed:b3:71:a8:c5:b1:68:50:09:6a:f6:46:5a:b0:e0:4c: 67:61:44:31:3d:d5:bf:8d:2a:c2:54:96:93:1f:71:ab:8f:53: d0:d8:fe:af:8b:5a:de:bd:f6:57:bf:75:bc:77:60:15:50:6c: 41:65:60:e5:34:7a:1b:40:33:5a:98:9e:36:57:94:50:c7:7b: d2:e5:e6:31:25:7b:5b:f0:56:fc:82:e4:69:b9:66:57:b4:e7: e7:ac:c5:7e -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUHUOub8YhSkcIMvPyldyKEOWtIFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjYxMTEwMDAxMzEwWhcNMjYxMTE0MDAxMzEw WjB6MUkwRwYDVQQFE0A1NzFkMjJhZTdkNDk1YjNhZTFmNTM1ZTY1YTVjNDFhNGZm MDQ5ODM2Y2M5OWQyZTJhYTc0M2VlOWUyNzVjZTY1MS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrcZ288ERRUEAj739C7F5ZVyTM5u6h4DVWbxRbYwV+KMUA Zw8rUKPCIv+qzmqXhCIQ7ikV/I361EdN+zvnxCbnJJVcEHMM7JROl7H6Ucn0QHVp E37VmFwhp9iv+c7TTqDgR/BOfSVelFa/9xxkGKrxLYKDgVc4nbgRv6HIC4YlUYy2 uv8MOtw6PMT0MM0sOg91HwwajObx1+B5NfECmZ76kEO4NGApNJtW7nBI8yl0a6W9 6IuwTBoRHwaB5tpe+MiqGxTPewqA5qlczMJABeaJ/eN0TJaTN8Sy1O3goltWSIUK 6WFXOSJ4RFFXywXorr0cTRiGC0HWutB754FC+FfBAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUoBviJ5JaXtEevrCRxzUj+R3AwxAwHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQb97J RVMgSz7q97rFW4vN9XGYa06sRqiFkSAsI+GnhQ7A4F4/bURwYePVFt2vPwoe/6S2 yi44hUYFCDs1wexT5/GgHExx9wBRZnyrR5mL5irQa55APUim9aE3sf01RIJIZoTY BTDvVsuZXUeXhAvaKSAbLiB4+/Op1kZv3Vq5zVmi5Glh9KC4/XNSTv1Fm8ONhBqA JKR+6n8RGhh/ZhdrR4LePe2zcajFsWhQCWr2Rlqw4ExnYUQxPdW/jSrCVJaTH3Gr j1PQ2P6vi1revfZXv3W8d2AVUGxBZWDlNHobQDNamJ42V5RQx3vS5eYxJXtb8Fb8 guRpuWZXtOfnrMV+ -----END CERTIFICATE-----Generated at Tue Nov 10 22:02:58 2026 by rpki-client