$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: 0h6GmGiC9SRyHhwVqbeZdf6Uf2DS/q0iw9Gv93Ioq50= Subject key identifier: 7B:E8:88:19:99:18:58:05:64:6A:92:88:EB:D7:66:40:03:61:43:D8 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 39C43611CC54832686A052526E20893D601BE2FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 03FE Signing time: Sun 07 Sep 2025 00:26:03 +0000 Manifest this update: Sun 07 Sep 2025 00:26:03 +0000 Manifest next update: Thu 11 Sep 2025 00:26:03 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: T3OcDZqo/tR4j6nbBaSXey7FxbKdGhQYOzLBNVjEks8=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: Zu5qg3vp67Rfb/eSnXOp3oDkk1rbRX6nGhisaKiFkl0=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: ou0g24PMffA4LCwylaTCVBDyeIPRLSfy8dhK00411s4=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: hpci4DihvPXkMpoMotHfOJlVje1PQsOd8JYqCkaEaOk=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: sUArdsgPPJqn4JnemNMlukpM4JV+dQesnYxTN0EZKUw=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: iCdCHITOP+FLqCj4XWlljLmKDF5shjdmmZzpnTgayxw=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: l1ow5IL2QdrNIGUj3AOCR+lf+4E6mzLIDRcFL1xcN3M=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: k9JQqJ8f/E1JYbJeUZNtTgtmECbYtlUg3/tXmjJigt4=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c4:36:11:cc:54:83:26:86:a0:52:52:6e:20:89:3d:60:1b:e2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Sep 7 00:26:03 2025 GMT Not After : Sep 11 00:26:03 2025 GMT Subject: serialNumber=5ddba6fba5ddbcb2909fcde972cf686d4da6f33b4ad52d4f3f20d6fcf5e113f4, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:0a:d9:13:8f:31:ab:e5:0f:f9:b4:e1:38: 6f:a8:45:8c:9f:a7:f9:1d:f0:5b:23:82:35:3e:d2: bc:ba:5e:e1:bf:5a:99:7c:50:9e:b7:36:40:c9:0c: 79:95:70:9f:ac:b2:0f:11:fc:70:48:68:30:9e:01: 3d:7b:55:02:4a:cf:d3:a0:14:63:a3:1a:64:e6:56: 70:0c:1b:45:5e:49:51:35:e2:53:f4:07:9b:fe:4a: a4:9c:50:43:4a:e7:4d:d7:d2:ec:a9:15:ea:c0:f3: 6b:43:2b:21:b4:2a:e2:96:04:f3:0f:9b:c8:1d:df: 59:2e:ff:db:15:de:8d:2b:1a:d0:a2:4e:77:5e:cc: 77:f3:9f:05:6a:02:16:57:ec:0a:ee:18:e1:2c:4f: b3:ff:bb:50:dc:f2:8a:04:89:77:92:a9:91:42:18: de:88:b0:aa:87:e7:bf:fe:e7:e5:bc:b7:a0:11:b9: 10:97:23:7e:fa:0d:f2:02:95:22:5f:dd:e4:8c:0b: 21:d5:3f:09:54:04:6a:54:58:3d:32:10:dc:f5:6f: 96:52:82:ee:a2:83:60:cf:b1:3a:1a:1d:e0:c9:88: 49:e0:02:5d:fe:2d:dd:b4:de:98:8b:05:b2:08:fe: 43:2d:3e:62:c9:53:07:dc:75:c4:7a:36:23:f8:a0: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E8:88:19:99:18:58:05:64:6A:92:88:EB:D7:66:40:03:61:43:D8 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:77:58:af:7f:68:9e:88:28:39:ec:a3:80:98:5b:1a:82:eb: d2:61:e0:b5:41:2e:a2:d1:27:a2:4f:de:d8:09:f6:f2:59:33: 47:c7:01:26:af:9e:81:32:d0:2e:a3:d5:05:f3:30:33:29:fd: 2a:65:2e:20:a2:b5:f2:34:09:b5:34:50:0a:ba:b3:75:02:91: 07:87:22:77:eb:9f:5c:48:40:a4:2a:24:7d:5e:4e:91:be:cd: bc:47:93:17:97:b1:b9:c6:f6:ec:df:10:5e:25:0e:41:2b:00: 51:ca:4b:04:13:c0:0a:93:19:25:bf:c8:41:f3:af:4b:42:e5: 78:dd:e5:ee:c9:1d:1d:b0:87:41:79:fe:bc:61:1d:cf:3b:a0: c7:6c:32:92:e1:c7:e7:83:c4:bc:b8:e5:c5:29:92:db:b0:c1: 94:b4:b1:83:f9:b5:b0:c0:cf:b0:9c:d6:bc:99:fa:7c:97:8a: 2a:10:6e:78:b5:7a:8d:cd:7f:64:4a:93:1c:fe:95:d4:fd:ce: 84:fd:bd:6b:89:65:9a:5c:ac:99:99:98:9d:b8:cd:25:dd:20: e6:8b:7f:b5:28:9b:41:34:0b:97:b3:78:d8:0c:26:c2:dd:ac: f0:5c:52:4e:af:4d:98:58:3d:d2:f2:ec:89:d2:f0:d1:40:0f: ff:ec:35:db -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUOcQ2EcxUgyaGoFJSbiCJPWAb4v4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwOTA3MDAyNjAzWhcNMjUwOTExMDAyNjAz WjB6MUkwRwYDVQQFE0A1ZGRiYTZmYmE1ZGRiY2IyOTA5ZmNkZTk3MmNmNjg2ZDRk YTZmMzNiNGFkNTJkNGYzZjIwZDZmY2Y1ZTExM2Y0MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsMQrZE48xq+UP+bThOG+oRYyfp/kd8FsjgjU+0ry6XuG/ Wpl8UJ63NkDJDHmVcJ+ssg8R/HBIaDCeAT17VQJKz9OgFGOjGmTmVnAMG0VeSVE1 4lP0B5v+SqScUENK503X0uypFerA82tDKyG0KuKWBPMPm8gd31ku/9sV3o0rGtCi TndezHfznwVqAhZX7AruGOEsT7P/u1Dc8ooEiXeSqZFCGN6IsKqH57/+5+W8t6AR uRCXI376DfIClSJf3eSMCyHVPwlUBGpUWD0yENz1b5ZSgu6ig2DPsToaHeDJiEng Al3+Ld203piLBbII/kMtPmLJUwfcdcR6NiP4oI/RAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUe+iIGZkYWAVkapKI69dmQANhQ9gwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5d1iv f2ieiCg57KOAmFsaguvSYeC1QS6i0SeiT97YCfbyWTNHxwEmr56BMtAuo9UF8zAz Kf0qZS4gorXyNAm1NFAKurN1ApEHhyJ3659cSECkKiR9Xk6Rvs28R5MXl7G5xvbs 3xBeJQ5BKwBRyksEE8AKkxklv8hB869LQuV43eXuyR0dsIdBef68YR3PO6DHbDKS 4cfng8S8uOXFKZLbsMGUtLGD+bWwwM+wnNa8mfp8l4oqEG54tXqNzX9kSpMc/pXU /c6E/b1riWWaXKyZmZiduM0l3SDmi3+1KJtBNAuXs3jYDCbC3azwXFJOr02YWD3S 8uyJ0vDRQA//7DXb -----END CERTIFICATE-----Generated at Sun Sep 7 23:17:14 2025 by rpki-client