$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: P3xY5mfdaZonHCb7MuzD8uEfq9+KHrqqYirsZllFTm8= Subject key identifier: 67:AD:9C:5E:D7:A0:F6:C4:06:AD:1A:FB:B3:53:B2:DD:47:9F:72:CE Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 3C72FE8189729E699DAA16522E56DE173B3B9FD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 044E Signing time: Fri 13 Mar 2026 01:42:52 +0000 Manifest this update: Fri 13 Mar 2026 01:42:52 +0000 Manifest next update: Tue 17 Mar 2026 01:42:52 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: QqQ/1Tsn5HIQtRGwtrGPYY194YmrsLRoH561cQK3IwM=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:72:fe:81:89:72:9e:69:9d:aa:16:52:2e:56:de:17:3b:3b:9f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Mar 13 01:42:52 2026 GMT Not After : Mar 17 01:42:52 2026 GMT Subject: serialNumber=c9ef9f43f44ad3468a5312b5998b0ec650131014d3ae26be2ba38eb2363fbe90, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:95:b2:fa:c8:7b:12:a4:8b:da:88:8c:95: 64:6e:bb:a5:f3:0d:84:1c:82:3e:65:25:66:1b:b4: 98:a5:51:f9:09:56:15:ce:93:42:92:0f:f8:9e:7c: 4a:46:4d:ed:eb:5e:4b:b9:34:d8:82:52:d1:43:56: e6:e1:cc:62:56:95:89:5e:a1:97:8a:99:ad:c0:3a: 46:ce:32:d5:e9:a6:c3:9b:7a:3d:cd:79:1e:2f:17: 38:82:6f:14:eb:15:99:70:b0:18:bd:01:2e:31:d8: 6b:3c:e1:83:be:a2:24:13:bd:ac:02:48:fe:d9:65: b6:6e:7e:0a:ac:38:15:02:ae:ab:75:64:e9:dd:55: 8b:36:bb:ba:ed:1d:ce:70:ef:05:48:4d:9a:7f:3f: 5c:ec:c1:d3:e7:41:5f:7d:49:9b:73:8b:e6:2a:ee: a8:93:22:22:fa:19:cf:50:ef:6c:bc:ed:e2:9f:b6: 85:72:26:89:b2:37:e8:36:4b:02:2c:2a:26:1f:58: fe:61:45:bd:e6:04:5f:00:39:b6:15:e5:19:92:c7: 4a:18:75:dd:47:f6:54:22:d7:48:03:51:80:44:9b: 7e:fb:67:52:5e:0c:98:de:7c:db:59:d8:2f:8c:7a: ea:c2:87:a3:5e:1c:f5:7c:4e:fe:3a:3e:78:1e:62: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AD:9C:5E:D7:A0:F6:C4:06:AD:1A:FB:B3:53:B2:DD:47:9F:72:CE X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c3:c3:a8:da:5a:5e:ee:f8:a2:ed:7a:6b:32:e8:a2:dd:2c: ef:77:16:bf:74:bb:a8:09:73:46:67:11:af:88:02:1b:4d:3f: 56:89:cc:4e:ab:2f:f7:e3:8c:69:06:dd:82:80:de:f7:fb:a5: 2b:1d:84:c2:50:4a:b6:50:e6:f2:0e:d9:5b:e3:f1:96:ef:a2: 1f:29:f3:c5:5c:13:35:f3:b2:ad:ff:ef:71:83:3c:23:1c:f8: 3b:96:58:88:e8:76:66:ec:8c:1a:99:3f:5a:03:4e:0c:72:15: fd:34:08:c7:8d:60:9d:45:7c:fe:68:6e:e3:69:09:58:c6:2a: 87:ea:bb:7a:b2:67:7d:b2:6f:2d:03:1e:08:18:18:df:a1:ca: 90:76:4f:8e:74:68:35:d2:92:87:d3:4a:20:25:3e:d4:d1:19: 14:48:20:00:b1:e1:51:ed:25:61:89:83:75:09:67:59:fa:1c: 6e:03:01:96:c8:54:af:50:c8:5f:58:0f:ee:a8:e8:da:46:2c: 10:4c:5c:e0:29:ff:01:c9:a6:18:3d:2c:35:ee:2c:9c:32:05: 1e:d1:c4:49:7c:5d:a6:df:7a:bb:6d:ab:6a:1a:93:4c:f2:af: 91:50:d5:dd:3f:12:46:06:82:f5:f3:fe:a0:98:70:4a:0d:16: 50:da:3e:a5 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUPHL+gYlynmmdqhZSLlbeFzs7n9AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjYwMzEzMDE0MjUyWhcNMjYwMzE3MDE0MjUy WjB6MUkwRwYDVQQFE0BjOWVmOWY0M2Y0NGFkMzQ2OGE1MzEyYjU5OThiMGVjNjUw MTMxMDE0ZDNhZTI2YmUyYmEzOGViMjM2M2ZiZTkwMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC95JWy+sh7EqSL2oiMlWRuu6XzDYQcgj5lJWYbtJilUfkJ VhXOk0KSD/iefEpGTe3rXku5NNiCUtFDVubhzGJWlYleoZeKma3AOkbOMtXppsOb ej3NeR4vFziCbxTrFZlwsBi9AS4x2Gs84YO+oiQTvawCSP7ZZbZufgqsOBUCrqt1 ZOndVYs2u7rtHc5w7wVITZp/P1zswdPnQV99SZtzi+Yq7qiTIiL6Gc9Q72y87eKf toVyJomyN+g2SwIsKiYfWP5hRb3mBF8AObYV5RmSx0oYdd1H9lQi10gDUYBEm377 Z1JeDJjefNtZ2C+MeurCh6NeHPV8Tv46PngeYoXBAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUZ62cXteg9sQGrRr7s1Oy3Uefcs4wHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASw8Oo 2lpe7vii7XprMuii3Szvdxa/dLuoCXNGZxGviAIbTT9WicxOqy/344xpBt2CgN73 +6UrHYTCUEq2UObyDtlb4/GW76IfKfPFXBM187Kt/+9xgzwjHPg7lliI6HZm7Iwa mT9aA04MchX9NAjHjWCdRXz+aG7jaQlYxiqH6rt6smd9sm8tAx4IGBjfocqQdk+O dGg10pKH00ogJT7U0RkUSCAAseFR7SVhiYN1CWdZ+hxuAwGWyFSvUMhfWA/uqOja RiwQTFzgKf8ByaYYPSw17iycMgUe0cRJfF2m33q7batqGpNM8q+RUNXdPxJGBoL1 8/6gmHBKDRZQ2j6l -----END CERTIFICATE-----Generated at Fri Mar 13 12:10:23 2026 by rpki-client