
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File: 5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier: alJYKI7R0KU6gHoq5pCVvT335RMw88GGquVAxFB59g4=
Subject key identifier: 53:19:76:2B:A6:D0:EC:23:80:F3:12:C4:07:2E:D4:00:79:44:59:86
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer: /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial: 06BCF4C3AA76AE182DD4AAAF80EDA9CC68C081B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number: 057A
Signing time: Sat 05 Sep 2026 00:15:38 +0000
Manifest this update: Sat 05 Sep 2026 00:15:38 +0000
Manifest next update: Wed 09 Sep 2026 00:15:38 +0000
Files and hashes: 1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: 1vitnlLOWuwkEyCgjBqDWY1AS55VoQvzjncFnoINJqc=)
2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: 24xQ60AlwijX5KtPSCsokxVy+nNoIXNmcgq3qcPIYzU=)
3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: mpkznovsE95eAwX4Lbn7rs/0KKci13ceQpy/zqSiq68=)
4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: XGmrnHKXEbgCOqiUhlTZo8DlMYLIEalPae4BcrXVWfQ=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:bc:f4:c3:aa:76:ae:18:2d:d4:aa:af:80:ed:a9:cc:68:c0:81:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Validity
Not Before: Sep 5 00:15:38 2026 GMT
Not After : Sep 9 00:15:38 2026 GMT
Subject: serialNumber=3b5eda91c25aa08e108a521ce33f5d19ec77205e0603226966a6c7d428ba52c3, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:e7:6f:d1:c3:83:9e:79:0c:ad:0e:48:13:
2f:2e:8f:f2:26:c5:6e:81:31:b6:a1:d2:a9:ed:57:
8d:5f:e4:c3:fe:df:2e:c7:04:af:ab:e6:a7:f9:eb:
2d:1d:70:c8:8c:36:56:47:26:48:0d:54:0d:eb:4f:
62:bf:e3:1e:3c:68:0b:ee:6e:30:99:1e:9a:99:a4:
f8:73:2f:92:03:3d:51:07:1f:52:3c:40:7d:d3:0f:
55:58:35:a5:03:cb:be:dd:53:09:c3:36:24:e3:2b:
6d:ca:74:3f:20:b4:35:0b:c8:5f:77:ea:e9:5b:0a:
24:20:27:5d:1b:14:62:5a:a1:98:fc:f1:e4:73:2f:
16:b3:59:67:88:98:34:32:ea:19:ea:45:9a:d1:be:
9d:75:a4:7c:20:a7:0f:8c:ee:72:08:98:6d:6d:7a:
55:3b:2f:c0:6a:99:1b:dc:2a:77:38:99:77:6b:dd:
13:96:a4:9b:3b:d5:83:4f:32:8c:fa:5d:03:a8:5d:
f8:6c:d5:88:a9:89:9a:eb:f3:c5:49:e2:0a:68:14:
e5:0d:2b:97:aa:60:61:f3:65:fb:62:50:ff:93:31:
af:ed:2c:ab:63:68:1d:3b:cd:54:52:81:2d:8b:2f:
cc:a2:69:cf:85:77:ed:df:b3:fe:26:e0:4a:b4:ad:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:76:2B:A6:D0:EC:23:80:F3:12:C4:07:2E:D4:00:79:44:59:86
X509v3 Authority Key Identifier:
keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5e:3b:04:c8:e8:a9:61:29:f2:a1:d2:a9:82:cb:64:12:11:
2d:5f:7c:01:6b:fb:7c:9d:f9:d7:72:59:67:8a:d2:e1:eb:a3:
72:83:af:2f:72:b8:f5:7a:9f:44:a6:e5:e6:4e:6a:d6:6d:ce:
72:ab:5c:71:67:8d:f3:d4:74:96:e1:bb:e9:52:ea:26:8b:3c:
c8:f9:30:ec:28:ac:d9:36:e8:62:c3:83:23:1f:a7:4c:2b:3b:
07:54:6e:1f:bf:cc:b7:24:04:da:a5:52:8f:51:1c:98:38:39:
9e:32:31:38:51:8c:7c:f1:98:e8:02:d6:af:8c:7d:bb:42:4b:
4b:0a:bd:d3:75:11:f4:c2:b3:85:de:20:df:3f:00:c7:a4:7c:
55:cf:11:e7:5e:ce:d6:f5:5f:0b:3a:25:ef:11:03:a1:90:52:
cd:ad:20:2b:fa:01:10:0f:fd:67:74:7e:a2:bc:64:6e:9c:73:
fb:d0:a4:9d:0d:bc:37:db:46:e0:06:32:f3:aa:c5:8b:a1:96:
6f:2d:9c:e4:b3:9d:22:c8:84:43:fd:f8:d9:06:18:4d:41:38:
bb:bb:df:a9:71:95:7d:ca:50:6e:a5:0c:e1:9a:8a:f9:7c:29:
67:08:b7:ee:81:6d:a9:83:ed:2e:ea:5c:e7:6e:1f:f4:85:31:
cd:e0:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:11 2026 by rpki-client