$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: mDQYJcQIVnyW8yBRM2tiRFpJ+CIHAYrbxwr3W6dbY5g= Subject key identifier: D4:C5:C1:84:C0:39:76:68:75:FD:6E:3D:29:54:66:B9:7E:CE:28:96 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 58DB3538E79FE7E43E772AB8B9AD25018E65596D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 0334 Signing time: Wed 04 Jun 2025 00:10:26 +0000 Manifest this update: Wed 04 Jun 2025 00:10:26 +0000 Manifest next update: Sun 08 Jun 2025 00:10:26 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: IrFdbql1EduYRb519kGnsTyK5O35dUG3mo4ed15U1R8=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:db:35:38:e7:9f:e7:e4:3e:77:2a:b8:b9:ad:25:01:8e:65:59:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Jun 4 00:10:26 2025 GMT Not After : Jun 8 00:10:26 2025 GMT Subject: serialNumber=2ad3e387ea1b625f29dbc8b6a156c5f03398efed64d13aa170521791ed1f609c, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:f0:6d:58:c3:23:9d:b3:29:36:8f:52:23: 99:d3:44:a6:19:5e:bb:86:7a:7e:61:ea:92:6a:ba: ac:5d:b8:5c:3d:f9:ec:42:7d:ce:a9:7c:09:7b:5f: d9:b4:dd:d2:73:d8:01:f6:36:21:1d:50:e6:6c:48: 68:33:8f:91:04:53:23:e6:2a:f7:c2:4f:27:cd:10: 43:53:3c:c3:ca:71:f4:26:fa:ba:bb:d9:8b:02:98: 8f:3c:dd:74:fe:33:15:da:c9:ce:c9:c4:30:b5:28: 56:4d:03:05:3e:ad:15:15:3a:c5:06:39:9a:4a:8b: b3:57:4c:62:ef:8b:dc:9b:b6:17:8f:69:57:24:a6: 76:9e:c3:b2:3c:b7:f9:1b:3d:1c:2e:6d:c6:b4:a3: b7:b8:13:91:28:f8:48:c6:d7:bb:14:a6:d5:e5:34: ea:62:c2:b9:8e:db:75:e7:dc:93:ac:73:2d:87:01: 66:ea:ad:c9:fc:b8:b4:18:52:a8:41:c8:96:3e:f2: 6c:b5:4e:e7:83:d9:fb:bd:2a:63:f5:c5:cb:d1:9f: 27:1f:00:4a:f4:23:77:3f:89:e1:7e:3c:d2:f4:1c: 1a:ef:e8:08:c5:b9:1a:15:be:6f:0f:99:90:f6:4a: 39:3d:91:54:ed:83:55:16:a2:45:e4:f7:e4:74:f0: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C5:C1:84:C0:39:76:68:75:FD:6E:3D:29:54:66:B9:7E:CE:28:96 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:83:4f:3c:b9:76:cd:76:fc:49:d1:77:3d:5b:85:1d:d6:4a: 5e:12:fe:85:e1:46:f3:12:95:d2:08:c7:22:59:c9:b7:c2:7d: 32:8f:d3:8c:14:e5:c8:de:e7:e5:c7:4e:70:33:29:78:ee:1f: f5:a5:3a:d1:8e:04:58:0d:3e:77:73:d6:55:8a:49:42:96:05: ce:9a:41:fc:f5:c0:b3:ec:7f:36:e0:77:98:2e:4e:12:b5:ef: 21:5d:33:fb:d3:49:99:c1:7a:aa:e8:d4:9a:d3:4f:64:f4:32: c6:b3:b1:4d:7b:3a:88:78:e2:60:e2:62:f0:61:8a:df:7e:66: 22:2a:5f:fb:f2:b2:b6:15:88:e4:42:8a:af:9a:19:b6:8e:37: d5:6c:e7:d9:0d:5e:74:6e:35:11:f5:7c:c7:c5:ec:35:82:39: 33:e1:e8:3a:df:68:b6:a2:aa:d5:d5:00:e7:90:1c:a4:a7:d7: 73:e2:95:92:df:ff:2e:2a:d2:d2:23:e8:8f:8d:ce:ea:1c:b9: bb:8b:56:70:2b:08:a8:e7:c4:2a:08:c9:a5:27:8e:ef:9d:e0: 25:51:ec:cb:b8:eb:82:a9:7a:79:93:3d:aa:36:0e:70:0c:d1: 23:be:4a:1e:8f:55:c4:e0:8b:bb:60:cd:5f:15:47:f4:f0:16: ba:5b:4f:52 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUWNs1OOef5+Q+dyq4ua0lAY5lWW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUwNjA0MDAxMDI2WhcNMjUwNjA4MDAxMDI2 WjB6MUkwRwYDVQQFE0AyYWQzZTM4N2VhMWI2MjVmMjlkYmM4YjZhMTU2YzVmMDMz OThlZmVkNjRkMTNhYTE3MDUyMTc5MWVkMWY2MDljMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfK/BtWMMjnbMpNo9SI5nTRKYZXruGen5h6pJquqxduFw9 +exCfc6pfAl7X9m03dJz2AH2NiEdUOZsSGgzj5EEUyPmKvfCTyfNEENTPMPKcfQm +rq72YsCmI883XT+MxXayc7JxDC1KFZNAwU+rRUVOsUGOZpKi7NXTGLvi9ybtheP aVckpnaew7I8t/kbPRwubca0o7e4E5Eo+EjG17sUptXlNOpiwrmO23Xn3JOscy2H AWbqrcn8uLQYUqhByJY+8my1TueD2fu9KmP1xcvRnycfAEr0I3c/ieF+PNL0HBrv 6AjFuRoVvm8PmZD2Sjk9kVTtg1UWokXk9+R08P7LAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU1MXBhMA5dmh1/W49KVRmuX7OKJYwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfg088 uXbNdvxJ0Xc9W4Ud1kpeEv6F4UbzEpXSCMciWcm3wn0yj9OMFOXI3uflx05wMyl4 7h/1pTrRjgRYDT53c9ZViklClgXOmkH89cCz7H824HeYLk4Ste8hXTP700mZwXqq 6NSa009k9DLGs7FNezqIeOJg4mLwYYrffmYiKl/78rK2FYjkQoqvmhm2jjfVbOfZ DV50bjUR9XzHxew1gjkz4eg632i2oqrV1QDnkBykp9dz4pWS3/8uKtLSI+iPjc7q HLm7i1ZwKwio58QqCMmlJ47vneAlUezLuOuCqXp5kz2qNg5wDNEjvkoej1XE4Iu7 YM1fFUf08Ba6W09S -----END CERTIFICATE-----Generated at Wed Jun 4 10:19:52 2025 by rpki-client