$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: tH6S6X31DQKJ+l8w94ZQP9i6jTc2H1+wQd6iOdPaFWw= Subject key identifier: 60:54:3C:28:42:BB:62:F2:E7:E3:1D:D8:D2:CA:26:42:F2:3F:0C:20 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 27582744FC60261D8C798C0B1CCBA6F19B0C5920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 03A3 Signing time: Sun 08 Jun 2025 00:21:01 +0000 Manifest this update: Sun 08 Jun 2025 00:21:01 +0000 Manifest next update: Thu 12 Jun 2025 00:21:01 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: zrfjINtA39F01UIh81cTr8Z2wgLRl+sioEfXdztme68=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: +so24B7ZYGxm9nQE27gnASCGrNouyhskcSaFEk8LLzM=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: HZYk44SLEa7erJfYF/afwzwUHwPxWiraXhtiGs4AIwc=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: MDBVpUjZY8aWaTJNwdtlYFdevPTDNR9Fn4uVNFe7fdQ=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: ob84O2kG6WP3A5Io1QpgiNMhkpi5lPbyk9WQ0OpTvNE=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: S30Q64TzuLYgZuawXzqg/yMIiW9WzmScgAwuv5xlvDE=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: nsa60KIYAL9eIEw2VC62S2j5IxsXNjmdpeYY1q/qZw4=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: pG4fCzbjyPd7mhHs/CN5+NFS/zwVtiBUsODJbVgccMQ=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:58:27:44:fc:60:26:1d:8c:79:8c:0b:1c:cb:a6:f1:9b:0c:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Jun 8 00:21:01 2025 GMT Not After : Jun 12 00:21:01 2025 GMT Subject: serialNumber=7ef3d5a78d18390eeb02339fa8add4fe8450a8e2fdfa93cf8bf33d05d965dba0, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:de:8f:0a:96:c7:7e:69:61:7f:62:c8:5a: 14:15:ad:53:da:96:c9:c1:95:24:3a:dc:2c:98:51: 18:b7:02:55:c1:a0:3c:1a:71:31:91:d9:cb:34:26: 2d:85:89:7a:7d:4e:7c:66:22:b9:9c:52:1d:ae:a8: 2e:bf:75:7c:45:43:ac:f1:19:85:b2:30:80:5a:9a: 7c:b7:76:b3:aa:55:ae:ac:f1:9b:f2:fa:46:7e:bd: 9b:4a:53:de:c8:95:84:3b:35:5b:46:21:5b:71:cd: 6a:bf:d2:01:1b:e9:f1:a8:e8:8b:79:11:66:63:27: ef:be:c9:17:65:50:48:69:09:22:62:fe:5d:e7:cd: 90:d2:e0:c2:36:f3:61:a6:cd:15:41:4d:4f:65:51: 36:f2:5b:fb:a7:f1:94:56:13:3d:70:b9:0b:05:3a: 31:52:f2:42:5c:b5:a6:7b:ea:45:3e:a2:fe:bb:de: 25:d6:a5:60:fa:0f:d5:7b:4c:26:9c:22:4d:d7:7c: 96:60:b5:ef:4c:35:51:25:b5:a2:78:a2:3f:a1:11: 1d:1a:90:e6:dc:67:65:81:10:98:9a:27:f4:dd:2d: 4b:ae:46:f4:27:01:64:69:d3:04:f4:40:d8:09:ff: 6f:c9:b9:44:0e:a1:73:2f:f5:49:55:10:24:83:f0: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:54:3C:28:42:BB:62:F2:E7:E3:1D:D8:D2:CA:26:42:F2:3F:0C:20 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bd:14:9d:11:1f:14:4c:7c:4a:ab:9f:67:1f:78:0c:9b:83: 02:b3:eb:35:65:a8:d2:9c:09:b3:0d:2b:05:c1:1c:ab:37:15: d9:1d:64:4d:56:ce:eb:71:69:54:66:43:aa:0f:3c:00:93:55: 92:e1:4b:51:10:25:b2:d2:1f:a1:74:4b:b1:a2:28:a2:2d:b5: 07:97:0d:24:c9:71:4e:57:06:06:0c:16:93:35:7c:36:fd:00: ce:9f:ed:5c:00:ca:c9:0d:8c:cf:43:97:a8:5c:9f:f0:cb:41: bb:9b:30:45:c0:2d:9f:57:fd:c7:fe:2d:55:80:4b:95:4d:17: a1:3a:8c:e7:65:d1:2e:d5:c8:6f:63:12:99:60:9b:c1:2b:6e: d2:8c:2f:ef:18:37:f6:1a:71:84:4a:32:f3:31:43:b8:a9:78: 38:71:cc:db:ec:04:96:c2:de:bd:8a:4d:ed:de:1d:f8:fb:0e: 62:80:04:c1:8e:d3:ac:02:68:64:27:05:18:b7:5f:13:31:7e: b8:eb:00:81:f3:1b:a2:52:38:3c:8a:7b:ec:ef:1d:b4:b3:50: cd:4f:25:95:f4:e2:c2:a0:e9:79:e3:5c:6e:a7:af:fe:ae:3f: ac:a1:0a:05:b6:ae:19:81:b5:a0:23:d7:46:45:b2:88:7c:bf: 71:4d:56:a6 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUJ1gnRPxgJh2MeYwLHMum8ZsMWSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwNjA4MDAyMTAxWhcNMjUwNjEyMDAyMTAx WjB6MUkwRwYDVQQFE0A3ZWYzZDVhNzhkMTgzOTBlZWIwMjMzOWZhOGFkZDRmZTg0 NTBhOGUyZmRmYTkzY2Y4YmYzM2QwNWQ5NjVkYmEwMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCert6PCpbHfmlhf2LIWhQVrVPalsnBlSQ63CyYURi3AlXB oDwacTGR2cs0Ji2FiXp9TnxmIrmcUh2uqC6/dXxFQ6zxGYWyMIBamny3drOqVa6s 8Zvy+kZ+vZtKU97IlYQ7NVtGIVtxzWq/0gEb6fGo6It5EWZjJ+++yRdlUEhpCSJi /l3nzZDS4MI282GmzRVBTU9lUTbyW/un8ZRWEz1wuQsFOjFS8kJctaZ76kU+ov67 3iXWpWD6D9V7TCacIk3XfJZgte9MNVEltaJ4oj+hER0akObcZ2WBEJiaJ/TdLUuu RvQnAWRp0wT0QNgJ/2/JuUQOoXMv9UlVECSD8F4dAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUYFQ8KEK7YvLn4x3Y0somQvI/DCAwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtvRSd ER8UTHxKq59nH3gMm4MCs+s1ZajSnAmzDSsFwRyrNxXZHWRNVs7rcWlUZkOqDzwA k1WS4UtRECWy0h+hdEuxoiiiLbUHlw0kyXFOVwYGDBaTNXw2/QDOn+1cAMrJDYzP Q5eoXJ/wy0G7mzBFwC2fV/3H/i1VgEuVTRehOoznZdEu1chvYxKZYJvBK27SjC/v GDf2GnGESjLzMUO4qXg4cczb7ASWwt69ik3t3h34+w5igATBjtOsAmhkJwUYt18T MX646wCB8xuiUjg8invs7x20s1DNTyWV9OLCoOl541xup6/+rj+soQoFtq4ZgbWg I9dGRbKIfL9xTVam -----END CERTIFICATE-----Generated at Sun Jun 8 07:59:52 2025 by rpki-client