$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft File: 5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json) Hash identifier: irCmZZO9rvDHLdcxE6Nxnw6xfGfhZQnEkzBbtaJJc7A= Subject key identifier: 04:09:D3:91:FA:80:0E:F9:D4:CC:4D:64:80:47:BC:6E:BF:73:84:9B Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E Certificate issuer: /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Certificate serial: 224ECAC89915C74D0607A7BB5653782E4B7334C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft Manifest number: 0448 Signing time: Tue 04 Nov 2025 00:23:20 +0000 Manifest this update: Tue 04 Nov 2025 00:23:20 +0000 Manifest next update: Sat 08 Nov 2025 00:23:20 +0000 Files and hashes: 1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: fJ0mdp/dnX4me52j0CjmjzU1MfvNgNWxXMLTNG91PbU=) 2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: 5pgE9ckE9jXK5wWD5rNHbMT7e40T5n/aZPIFNRkvTJM=) 3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: 8kb5nOq3Rgj6e1QKsuF4c72Tf1cEQoNVR2ihoIR+MNI=) 4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: DyUkCIbeZMZw+r/G0eGilgLWQQmRlZgwpQF2etwjRYo=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4e:ca:c8:99:15:c7:4d:06:07:a7:bb:56:53:78:2e:4b:73:34:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Validity Not Before: Nov 4 00:23:20 2025 GMT Not After : Nov 8 00:23:20 2025 GMT Subject: serialNumber=f907fc0a4585349874586d416396a92cc8118a96fab52a4cd08514fb7b65fd36, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:3d:2c:bc:d4:89:17:17:4a:aa:2d:5f:fb: 84:cd:9d:2e:df:20:15:6d:1a:d1:48:6a:dd:b6:c3: 37:cf:10:af:fc:89:ad:78:ce:09:2f:f2:ed:bc:8a: 60:4d:db:a7:e1:c8:d1:cd:e2:34:36:49:ec:7c:de: 69:ec:b4:04:26:1a:c0:05:d5:96:47:21:7f:12:b0: c8:69:df:5b:c6:49:60:2e:ae:f2:70:c8:d6:7c:1b: 38:90:ad:89:05:d5:86:30:3d:1c:29:d3:83:27:c2: 6c:65:0c:77:df:a6:36:27:50:1c:b7:12:45:79:4c: 0a:94:1e:51:18:f5:10:8d:97:b3:67:ed:3a:eb:8c: 3a:59:22:7e:81:f6:ee:59:8d:1a:da:62:e4:1e:9c: cb:37:f7:23:05:79:25:8d:14:fa:1a:09:8d:bc:5b: b6:a7:63:da:14:93:5a:06:0d:60:65:54:95:89:c2: ed:00:46:3d:cd:de:37:12:9f:93:16:6b:a9:d1:33: 43:61:48:d9:b7:d3:54:da:17:cc:17:6f:94:2f:ca: 4d:8a:c1:d4:74:ed:f1:21:3a:6b:12:a0:75:fb:0b: c1:6f:0e:2c:15:fb:8b:12:f1:3e:e3:54:64:96:7e: a9:32:30:3c:a0:99:08:cc:ea:b0:db:a3:bc:a3:a0: c4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:09:D3:91:FA:80:0E:F9:D4:CC:4D:64:80:47:BC:6E:BF:73:84:9B X509v3 Authority Key Identifier: keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fe:ac:e4:52:78:ee:66:3e:d6:b6:68:e2:85:f7:42:09:31: 26:9d:52:9a:0a:67:8a:45:f7:01:4a:d3:25:ac:4a:5c:b2:59: 79:eb:f5:b8:f4:5e:ac:f7:6c:9f:f4:13:99:69:46:6c:35:86: 2a:2b:8b:e1:5e:36:f8:9a:ea:14:ac:b7:eb:32:bc:84:ee:2e: c0:69:4f:be:d4:30:9e:04:06:1f:8a:06:3b:1b:5a:2a:55:bd: d9:79:24:db:ae:a6:b1:26:c6:2d:19:9a:c2:57:fe:55:e4:d0: 27:25:f5:0c:7c:39:cb:f3:51:72:3d:8a:e6:93:2b:d7:a8:07: d3:04:f7:d3:40:71:de:9c:22:6b:61:28:52:37:0d:7a:21:1f: 45:3f:92:8a:17:62:c6:32:8a:f5:ca:61:3d:8c:1d:e8:68:98: 95:71:3d:4a:83:3f:f0:d3:1f:44:92:c8:c1:c3:e9:3d:ac:70: 4a:55:e3:3d:d6:63:74:af:09:b9:9d:46:8d:2c:32:ae:3c:88: a1:58:b0:71:f7:d6:ce:f8:13:41:a3:71:53:25:5b:6d:b7:59: f8:d0:4c:cc:9b:30:f0:ee:e9:37:e2:93:9d:e6:26:1e:5e:01: b7:f0:73:16:4d:1f:b5:59:75:74:93:7e:64:41:ff:e3:0a:82: 13:b6:27:85 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUIk7KyJkVx00GB6e7VlN4LktzNMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5 MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjUxMTA0MDAyMzIwWhcNMjUxMTA4MDAyMzIw WjB6MUkwRwYDVQQFE0BmOTA3ZmMwYTQ1ODUzNDk4NzQ1ODZkNDE2Mzk2YTkyY2M4 MTE4YTk2ZmFiNTJhNGNkMDg1MTRmYjdiNjVmZDM2MS0wKwYDVQQDEyQxNWYxNjgz YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8IT0svNSJFxdKqi1f+4TNnS7fIBVtGtFIat22wzfPEK/8 ia14zgkv8u28imBN26fhyNHN4jQ2Sex83mnstAQmGsAF1ZZHIX8SsMhp31vGSWAu rvJwyNZ8GziQrYkF1YYwPRwp04MnwmxlDHffpjYnUBy3EkV5TAqUHlEY9RCNl7Nn 7TrrjDpZIn6B9u5ZjRraYuQenMs39yMFeSWNFPoaCY28W7anY9oUk1oGDWBlVJWJ wu0ARj3N3jcSn5MWa6nRM0NhSNm301TaF8wXb5Qvyk2KwdR07fEhOmsSoHX7C8Fv DiwV+4sS8T7jVGSWfqkyMDygmQjM6rDbo7yjoMRJAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUBAnTkfqADvnUzE1kgEe8br9zhJswHwYDVR0jBBgwFoAUbcpl0HFNfvJW kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01 NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0 ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4 NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCE/qzk UnjuZj7WtmjihfdCCTEmnVKaCmeKRfcBStMlrEpcsll56/W49F6s92yf9BOZaUZs NYYqK4vhXjb4muoUrLfrMryE7i7AaU++1DCeBAYfigY7G1oqVb3ZeSTbrqaxJsYt GZrCV/5V5NAnJfUMfDnL81FyPYrmkyvXqAfTBPfTQHHenCJrYShSNw16IR9FP5KK F2LGMor1ymE9jB3oaJiVcT1Kgz/w0x9EksjBw+k9rHBKVeM91mN0rwm5nUaNLDKu PIihWLBx99bO+BNBo3FTJVttt1n40EzMmzDw7uk34pOd5iYeXgG38HMWTR+1WXV0 k35kQf/jCoITtieF -----END CERTIFICATE-----Generated at Tue Nov 4 02:56:13 2025 by rpki-client