$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft File: ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft (raw, json) Hash identifier: MFLdwttEm58rabI5tsMTyCc74DR66lGSe+ypy0H3+qk= Subject key identifier: F7:34:58:22:3C:36:A3:91:BA:2E:18:DB:B4:03:99:5A:E2:B8:75:23 Authority key identifier: DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB Certificate issuer: /CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a Certificate serial: 4C16B363AC9B4AB5C3A6587B7F7A77BB40BDE8FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft Manifest number: 1A41 Signing time: Tue 06 Oct 2026 12:30:45 +0000 Manifest this update: Tue 06 Oct 2026 12:30:45 +0000 Manifest next update: Sat 10 Oct 2026 12:30:45 +0000 Files and hashes: 1: ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl (hash: BzqWvIwqKl3zFfcQ5Dnfp2d0qneJ5uXTU6psznOLSVU=) 2: ae237c81-ced1-4e19-9308-27d6b958b12d.roa (hash: DxCWnMAGajBNL5RroJzZHcPTQuP6vq+6wjeGGoRrQqI=) 3: f6082068-1502-4d02-a99e-190e44dee2aa.roa (hash: 5KSHF8gG0HrJ/4BvwXZK13mnpsIUuzXWcRLPoXDx7fs=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:16:b3:63:ac:9b:4a:b5:c3:a6:58:7b:7f:7a:77:bb:40:bd:e8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a Validity Not Before: Oct 6 12:30:45 2026 GMT Not After : Oct 10 12:30:45 2026 GMT Subject: serialNumber=3042371eb1ee22fea740b9c5b6f2c7dda9b1acec8f6b03fc46ad4c4903de1527, CN=66e6bf6f-c96c-4747-9680-4d23221702e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:e8:93:2f:60:0d:da:1e:3a:8f:ea:ff:d0: 11:9d:f5:23:0c:23:05:9b:1a:59:bd:24:90:28:aa: 29:2a:b3:b0:b5:7e:80:98:44:31:84:35:82:74:c3: 3a:5b:a9:da:c9:f2:1f:b2:b3:d2:89:e5:16:28:8c: b3:39:08:d8:18:f9:a2:75:c8:24:0e:b5:5d:e6:a0: d6:4f:fd:2a:85:35:7f:8b:b4:7f:a9:a8:e3:e9:0a: e7:01:db:33:38:b8:c9:9d:60:23:01:fc:7d:5a:c5: 06:e8:00:fb:ee:f8:6c:09:c7:b0:91:7b:50:b4:71: 88:e4:be:d0:d0:a0:0f:8d:b0:e1:98:05:0d:52:4d: 09:74:b7:08:0e:fd:45:98:63:64:69:89:c0:f2:1e: 92:6f:c5:37:66:84:9d:ee:04:a4:d9:7a:8f:9e:9e: f6:03:7e:66:d0:ea:c8:8b:18:32:5e:5a:6e:78:c5: c9:d8:d7:fa:0e:1b:23:22:c0:65:a7:d3:56:a3:e2: d6:8f:5e:5c:b6:a1:5c:be:cb:52:8e:00:53:59:db: f2:49:9a:90:8d:94:06:6a:28:eb:a6:67:c9:f3:51: 3e:23:07:bd:68:27:64:11:0a:87:02:a9:18:81:9f: 62:c4:0c:3f:30:bb:92:9d:63:fe:88:64:52:1e:e3: a1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:34:58:22:3C:36:A3:91:BA:2E:18:DB:B4:03:99:5A:E2:B8:75:23 X509v3 Authority Key Identifier: keyid:DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:df:ec:31:a1:e7:dc:02:4c:a6:1d:7e:25:6a:66:c1:d5:74: ce:95:76:40:d2:1a:a2:0a:9b:19:1c:90:e2:ee:a2:9a:fc:1b: 71:c2:ed:3a:ed:e4:96:55:11:32:a6:b1:a6:ec:0d:1c:3c:e6: 42:9f:88:03:a4:55:74:9d:50:1e:55:d4:81:69:e9:d4:e1:5c: cb:a8:e1:41:d7:42:c0:98:51:e1:f6:ed:8a:ba:ff:1d:b6:1d: fd:28:74:eb:3e:df:0f:00:57:7d:fa:73:0f:7d:ea:47:64:0c: 56:a8:a8:fe:8b:ad:17:a2:0f:f5:4b:94:b5:17:58:36:03:55: e3:91:c7:ea:96:8a:f1:9b:e8:db:f5:7f:49:f7:4d:b4:d4:16: a7:2e:df:ca:0f:17:13:12:06:82:af:b2:8b:c8:ef:b3:69:49: f9:4a:c5:d5:d0:64:c3:5f:1a:7b:6b:a1:d1:27:81:fa:43:f3: 35:4b:a7:dc:6f:7e:bb:98:9f:7d:bd:c4:e7:2c:07:ef:b3:1f: 89:68:4a:aa:9d:d2:68:94:10:89:55:d9:7b:98:f3:13:f8:db: f4:70:ba:a1:a6:f6:09:6b:11:d6:91:d2:ac:45:b5:cf:f2:c9: 93:cc:dd:f8:87:3f:74:7a:b9:00:f5:ea:b7:ee:03:63:97:83: d6:d5:e9:c9 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUTBazY6ybSrXDplh7f3p3u0C96PswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjY0ZTUxNDllYWRjOTA5NzQ2NWJhMTM4 ZjEyNDYxYjc4YzdkZDAyMGEwHhcNMjYxMDA2MTIzMDQ1WhcNMjYxMDEwMTIzMDQ1 WjB6MUkwRwYDVQQFE0AzMDQyMzcxZWIxZWUyMmZlYTc0MGI5YzViNmYyYzdkZGE5 YjFhY2VjOGY2YjAzZmM0NmFkNGM0OTAzZGUxNTI3MS0wKwYDVQQDEyQ2NmU2YmY2 Zi1jOTZjLTQ3NDctOTY4MC00ZDIzMjIxNzAyZTMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzVOiTL2AN2h46j+r/0BGd9SMMIwWbGlm9JJAoqikqs7C1 foCYRDGENYJ0wzpbqdrJ8h+ys9KJ5RYojLM5CNgY+aJ1yCQOtV3moNZP/SqFNX+L tH+pqOPpCucB2zM4uMmdYCMB/H1axQboAPvu+GwJx7CRe1C0cYjkvtDQoA+NsOGY BQ1STQl0twgO/UWYY2RpicDyHpJvxTdmhJ3uBKTZeo+envYDfmbQ6siLGDJeWm54 xcnY1/oOGyMiwGWn01aj4taPXly2oVy+y1KOAFNZ2/JJmpCNlAZqKOumZ8nzUT4j B71oJ2QRCocCqRiBn2LEDD8wu5KdY/6IZFIe46FzAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU9zRYIjw2o5G6LhjbtAOZWuK4dSMwHwYDVR0jBBgwFoAU3S2LSJ7tZOOo dwJbPRrbcYNDpsswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjY0ZTUxNDllYWRj OTA5NzQ2NWJhMTM4ZjEyNDYxYjc4YzdkZDAyMGEuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvOThjMWM5NzQtNDYwOC00Yjc1LTg3ODEtZGMx NDUxMDFhOWJkL1pPVVVucTNKQ1hSbHVoT1BFa1liZU1mZEFnby5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzk4YzFjOTc0LTQ2MDgtNGI3NS04NzgxLWRjMTQ1MTAx YTliZC9aT1VVbnEzSkNYUmx1aE9QRWtZYmVNZmRBZ28uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB83+wx oefcAkymHX4lambB1XTOlXZA0hqiCpsZHJDi7qKa/Btxwu067eSWVREyprGm7A0c POZCn4gDpFV0nVAeVdSBaenU4VzLqOFB10LAmFHh9u2Kuv8dth39KHTrPt8PAFd9 +nMPfepHZAxWqKj+i60Xog/1S5S1F1g2A1Xjkcfqlorxm+jb9X9J90201BanLt/K DxcTEgaCr7KLyO+zaUn5SsXV0GTDXxp7a6HRJ4H6Q/M1S6fcb367mJ99vcTnLAfv sx+JaEqqndJolBCJVdl7mPMT+Nv0cLqhpvYJaxHWkdKsRbXP8smTzN34hz90erkA 9eq37gNjl4PW1enJ -----END CERTIFICATE-----Generated at Tue Oct 6 14:51:29 2026 by rpki-client