$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: fD1wDcisO6gALbwVQ8UylfdbQ6btyNdKlOLCDUlprAA= Subject key identifier: 77:82:10:A6:06:29:63:40:90:71:21:62:B5:D4:EE:D6:9E:99:57:0B Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 46CAFA4B13ED713A64B4BFFEFA686DF7A83C873D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 03D9 Signing time: Sun 16 Nov 2025 01:04:54 +0000 Manifest this update: Sun 16 Nov 2025 01:04:54 +0000 Manifest next update: Thu 20 Nov 2025 01:04:54 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: P6nBxl2wvJNHRl8yCs1Aq/y6vApFHido6xd10CbpaqU=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ca:fa:4b:13:ed:71:3a:64:b4:bf:fe:fa:68:6d:f7:a8:3c:87:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Nov 16 01:04:54 2025 GMT Not After : Nov 20 01:04:54 2025 GMT Subject: serialNumber=694af182ef044033a3a178f45a2f5c7360b70713f8427219f30ef528ef1c8408, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:9d:35:72:f1:05:04:85:c9:7b:99:8d:16: e8:00:3c:7f:f6:d3:b3:d9:f4:17:44:71:a4:6a:f2: d6:80:89:f8:43:97:cb:87:13:b9:6a:c2:a5:f4:e3: 8f:50:5f:22:64:0b:5e:44:78:c9:40:ab:60:14:0d: a5:b9:94:dc:52:8c:ff:9c:c5:26:b6:cc:63:21:1d: 44:04:72:83:f6:84:56:4b:af:f6:82:92:6e:28:fa: d3:3d:9f:47:48:04:9d:7e:e8:43:11:79:6f:bc:06: 39:a3:21:28:3a:c3:d0:62:54:1b:80:39:05:f0:f5: 7a:ab:03:c6:68:6a:2f:41:da:17:94:43:ff:f5:51: 2f:5a:02:6a:82:3b:de:3d:90:df:2e:0b:b0:f6:a2: b2:58:83:77:e3:b0:32:b0:70:12:17:3e:46:48:40: c1:f7:3c:61:fe:01:32:14:a5:09:b5:c2:5c:c6:da: 94:61:35:ac:b5:18:fe:c4:93:f4:36:7f:ba:97:02: e0:89:3f:17:fe:d9:5b:4c:ab:ab:1d:6a:f3:a8:d6: 1e:36:a0:f9:d7:ac:d8:63:10:4c:75:ad:06:1b:d2: 06:4f:01:a6:01:7c:12:2e:81:bd:35:46:c7:e6:8b: e5:97:43:32:aa:7f:27:03:9b:68:33:3b:4f:95:9a: 39:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:82:10:A6:06:29:63:40:90:71:21:62:B5:D4:EE:D6:9E:99:57:0B X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5e:93:d7:54:ae:aa:8a:6c:c4:2d:46:e0:f7:6f:ec:15:95: 0c:3d:86:da:af:8d:86:c7:a6:75:04:ac:80:68:d9:62:07:4e: 3b:03:93:ef:cd:58:c6:bc:fe:3d:da:e2:64:e8:a7:5d:e2:4b: a6:fd:2b:90:fc:49:9d:25:aa:a7:6e:19:63:e6:d3:01:62:4a: ad:2d:fe:68:b0:bb:85:bb:a5:d1:e0:db:1d:d3:96:f8:48:67: 95:0a:e9:df:8d:6b:a3:bd:3f:ab:7b:c6:57:bd:4b:91:68:60: f0:29:f4:1b:9e:95:4f:5a:83:a4:dd:db:b0:77:51:5c:fb:06: 54:cb:87:91:72:ed:17:12:1a:66:38:0f:19:0b:4d:77:0f:9a: 25:1e:45:56:09:15:9e:f9:0f:89:1d:6f:6b:34:e8:cf:83:fa: 21:c1:7f:5e:45:80:60:59:4f:cf:6c:e7:15:ee:4a:21:90:d4: 6f:53:e7:fb:78:77:8a:a7:31:cd:4d:7c:84:df:1f:57:9b:39: 54:ff:77:e6:2a:40:49:d4:44:53:9b:5e:d5:23:37:8d:9b:7e: 85:4d:91:c8:09:b1:ef:68:c5:b0:a2:74:ac:f4:04:6b:8c:df: 70:2e:40:df:b1:3e:af:81:9d:bc:6f:30:91:3d:0e:e7:ca:de: 05:53:56:8b -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIURsr6SxPtcTpktL/++mht96g8hz0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUxMTE2MDEwNDU0WhcNMjUxMTIwMDEwNDU0 WjB6MUkwRwYDVQQFE0A2OTRhZjE4MmVmMDQ0MDMzYTNhMTc4ZjQ1YTJmNWM3MzYw YjcwNzEzZjg0MjcyMTlmMzBlZjUyOGVmMWM4NDA4MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1p501cvEFBIXJe5mNFugAPH/207PZ9BdEcaRq8taAifhD l8uHE7lqwqX0449QXyJkC15EeMlAq2AUDaW5lNxSjP+cxSa2zGMhHUQEcoP2hFZL r/aCkm4o+tM9n0dIBJ1+6EMReW+8BjmjISg6w9BiVBuAOQXw9XqrA8Zoai9B2heU Q//1US9aAmqCO949kN8uC7D2orJYg3fjsDKwcBIXPkZIQMH3PGH+ATIUpQm1wlzG 2pRhNay1GP7Ek/Q2f7qXAuCJPxf+2VtMq6sdavOo1h42oPnXrNhjEEx1rQYb0gZP AaYBfBIugb01Rsfmi+WXQzKqfycDm2gzO0+VmjmzAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUd4IQpgYpY0CQcSFitdTu1p6ZVwswHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDXpPX VK6qimzELUbg92/sFZUMPYbar42Gx6Z1BKyAaNliB047A5PvzVjGvP492uJk6Kdd 4kum/SuQ/EmdJaqnbhlj5tMBYkqtLf5osLuFu6XR4Nsd05b4SGeVCunfjWujvT+r e8ZXvUuRaGDwKfQbnpVPWoOk3duwd1Fc+wZUy4eRcu0XEhpmOA8ZC013D5olHkVW CRWe+Q+JHW9rNOjPg/ohwX9eRYBgWU/PbOcV7kohkNRvU+f7eHeKpzHNTXyE3x9X mzlU/3fmKkBJ1ERTm17VIzeNm36FTZHICbHvaMWwonSs9ARrjN9wLkDfsT6vgZ28 bzCRPQ7nyt4FU1aL -----END CERTIFICATE-----Generated at Mon Nov 17 00:27:52 2025 by rpki-client