$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft File: 5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json) Hash identifier: PF2d9kZjRX7BN7t6hHCEyOpAgt7RpxtAaXxS5+y1fxo= Subject key identifier: F5:95:55:33:7D:9F:D2:29:E2:B7:50:C5:C5:F2:D8:DC:87:D9:2A:3D Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E Certificate issuer: /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Certificate serial: 6AA42BAC5C34C952F7B844FA6689E1BA4245D7E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft Manifest number: 0418 Signing time: Wed 17 Sep 2025 19:16:28 +0000 Manifest this update: Wed 17 Sep 2025 19:16:28 +0000 Manifest next update: Sun 21 Sep 2025 19:16:28 +0000 Files and hashes: 1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: V7m4Q44l/f/AggpsxPFMLlttMX2dYfHaoH38DEvKGXA=) 2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: HT9sPBo1vfBVG+ppV+cWYLuN8xQlJLmYBSLYhPKmfAY=) 3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: qHU3Sa4GOoGh7m8VqAzOmFNiPNCYw0if5fTpwF9xjIM=) 4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: GXH8s+tS1Z+F8AqQhpBcLTSMkVsff4tRUcLeWq7o8Gk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a4:2b:ac:5c:34:c9:52:f7:b8:44:fa:66:89:e1:ba:42:45:d7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Validity Not Before: Sep 17 19:16:28 2025 GMT Not After : Sep 21 19:16:28 2025 GMT Subject: serialNumber=21220983355278d731f5c2a74b74d20e0c0a5f8a73f938f8c9c7d7106b29c404, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:06:e5:81:86:ac:e0:6c:6d:78:cc:b5:09: b1:33:c7:76:4f:f5:6b:7b:52:ed:8a:9f:3c:f5:20: 25:d3:a0:3a:73:e7:35:e6:e3:ca:59:b2:a3:64:d6: 6e:61:9b:28:32:48:a5:0c:1e:97:c7:84:15:1e:bb: c1:d1:d3:76:96:70:56:0b:b0:d6:2f:ba:2e:b6:91: fa:a7:2b:ab:87:ed:8c:60:1f:54:94:a2:c5:18:cc: c9:2d:07:fd:36:26:a2:d0:e6:25:d9:b1:cb:42:09: 1c:ad:a3:c7:6b:0b:2c:60:40:16:96:9a:fd:66:8d: c2:ea:ca:cb:f3:27:8b:bc:a0:e1:9c:41:26:c1:f2: 6d:67:58:62:5d:18:25:e2:37:8f:3d:3f:b8:a6:9a: de:3b:bd:d5:5a:43:3e:50:6b:e5:1d:3c:ea:22:c5: f4:a6:5d:26:8e:83:06:9b:ad:83:86:11:3d:7a:15: ab:b4:2b:29:25:f8:63:49:d5:c5:39:7a:7a:0a:e0: ab:64:af:24:6d:4c:c2:e8:90:33:05:d7:c1:43:54: ce:24:02:1d:40:a9:9d:7c:3d:7f:a7:63:b6:1f:3f: 6f:9e:65:ff:84:c8:87:b9:55:fb:78:7c:ab:ba:d9: 9d:a5:ba:41:c8:d4:fd:47:4b:65:ae:8d:d9:f9:e7: 9e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:95:55:33:7D:9F:D2:29:E2:B7:50:C5:C5:F2:D8:DC:87:D9:2A:3D X509v3 Authority Key Identifier: keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:02:de:10:15:c1:f8:64:9c:9c:3f:1b:a0:86:52:de:8c:86: 97:8d:7c:03:3e:4d:25:de:e4:44:e5:ef:5d:0a:d5:8a:a4:c5: 4e:dd:ef:ad:c2:47:d5:41:a2:4d:2e:6b:07:f1:4c:22:53:bf: 6d:8b:f0:4a:f9:e5:65:d4:84:7b:21:44:57:bb:64:0d:86:ec: 27:0b:d8:42:ca:17:c6:83:d6:fa:7e:03:5a:7d:a9:07:9e:bc: 76:72:d9:6c:97:b9:f4:ad:a8:2b:a3:b3:79:b2:5a:cd:f0:14: da:20:ad:76:ab:f2:b0:c2:92:7c:d8:e7:f1:b9:fb:ce:6a:cc: d2:9b:82:36:47:1d:7d:cd:b1:12:21:7c:a6:e3:77:b1:ba:64: 1c:f6:c1:6f:f7:6e:03:3f:6f:c9:08:e0:bc:89:04:3d:4e:34: 57:29:7c:9a:77:22:7a:09:33:f8:2a:44:15:b1:e9:2c:0d:64: fb:f0:bf:7a:e4:ef:51:79:dd:53:3d:5d:a6:a6:69:f3:91:17: a2:9e:83:d8:0a:77:88:ff:cf:96:f6:c4:f8:13:07:11:dd:73: 1e:35:66:6c:db:e7:3c:e2:1b:b1:ef:64:b1:15:a0:c2:2f:e9: 21:91:02:7b:7a:85:f5:be:74:85:af:b8:b2:b6:69:25:ff:a6: 82:ad:f2:f9 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUaqQrrFw0yVL3uET6ZonhukJF1+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5 MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjUwOTE3MTkxNjI4WhcNMjUwOTIxMTkxNjI4 WjB6MUkwRwYDVQQFE0AyMTIyMDk4MzM1NTI3OGQ3MzFmNWMyYTc0Yjc0ZDIwZTBj MGE1ZjhhNzNmOTM4ZjhjOWM3ZDcxMDZiMjljNDA0MS0wKwYDVQQDEyQxNWYxNjgz YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0DQblgYas4GxteMy1CbEzx3ZP9Wt7Uu2Knzz1ICXToDpz 5zXm48pZsqNk1m5hmygySKUMHpfHhBUeu8HR03aWcFYLsNYvui62kfqnK6uH7Yxg H1SUosUYzMktB/02JqLQ5iXZsctCCRyto8drCyxgQBaWmv1mjcLqysvzJ4u8oOGc QSbB8m1nWGJdGCXiN489P7immt47vdVaQz5Qa+UdPOoixfSmXSaOgwabrYOGET16 Fau0Kykl+GNJ1cU5enoK4KtkryRtTMLokDMF18FDVM4kAh1AqZ18PX+nY7YfP2+e Zf+EyIe5Vft4fKu62Z2lukHI1P1HS2Wujdn5557VAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU9ZVVM32f0init1DFxfLY3IfZKj0wHwYDVR0jBBgwFoAUbcpl0HFNfvJW kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01 NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0 ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4 NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfAt4Q FcH4ZJycPxughlLejIaXjXwDPk0l3uRE5e9dCtWKpMVO3e+twkfVQaJNLmsH8Uwi U79ti/BK+eVl1IR7IURXu2QNhuwnC9hCyhfGg9b6fgNafakHnrx2ctlsl7n0ragr o7N5slrN8BTaIK12q/KwwpJ82OfxufvOaszSm4I2Rx19zbESIXym43exumQc9sFv 924DP2/JCOC8iQQ9TjRXKXyadyJ6CTP4KkQVseksDWT78L965O9Red1TPV2mpmnz kReinoPYCneI/8+W9sT4EwcR3XMeNWZs2+c84hux72SxFaDCL+khkQJ7eoX1vnSF r7iytmkl/6aCrfL5 -----END CERTIFICATE-----Generated at Thu Sep 18 09:39:54 2025 by rpki-client