$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: 1PaJQQr8bj6a1lQGy3W3v6yYkEqRZkaopzcPCYFfevA= Subject key identifier: E6:9D:5A:7E:40:79:A2:CF:D8:E3:96:23:C9:B4:B1:EA:4C:5F:E3:A5 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 10CDF3A6C6997A1A0D97EBA93036C1307E267617 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 039F Signing time: Fri 19 Sep 2025 00:52:48 +0000 Manifest this update: Fri 19 Sep 2025 00:52:48 +0000 Manifest next update: Tue 23 Sep 2025 00:52:48 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: 1Qf+yaKE4ped3QwjW1nvpKpYBko6msFYFuHyM5vxWfI=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cd:f3:a6:c6:99:7a:1a:0d:97:eb:a9:30:36:c1:30:7e:26:76:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Sep 19 00:52:48 2025 GMT Not After : Sep 23 00:52:48 2025 GMT Subject: serialNumber=93d78eb687012312951f036aa938cc65ed4c4904e9f23fa93ad30be901173e85, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:26:1e:6f:79:85:32:7d:ac:c3:dd:f1:1e:2f: 8c:b5:7f:d7:ac:69:47:e4:b2:72:3d:cd:12:5f:51: 41:c4:6a:29:5b:cc:be:80:1c:55:ad:aa:00:05:f3: 01:15:03:56:7e:f0:52:2e:1b:1e:40:1f:49:85:9d: 13:67:15:c6:66:b1:0f:e8:40:c5:05:3f:28:fb:14: 3a:d0:fd:35:8f:32:ca:54:58:62:81:b7:4a:3e:1c: 7e:6a:5a:26:17:9a:84:a8:e7:e2:bf:8a:d0:0e:26: b5:48:19:08:f0:e9:06:e7:dc:38:27:7b:ad:09:ee: 9e:2f:83:5b:ee:ac:f9:ea:b0:c0:1d:2d:27:84:ac: 37:ea:c3:8f:fe:ee:ab:6c:69:01:e2:04:62:a9:43: 55:e7:05:19:fe:f7:f0:32:90:ed:6e:de:9c:d9:9e: 8d:97:1b:4f:4b:5d:dc:94:e7:cb:4c:83:ce:e5:24: d9:ac:33:f8:2d:fc:96:54:a2:0e:41:a7:af:5a:ec: 2c:73:cb:bd:61:b8:7e:7f:81:18:a9:f0:11:45:0c: e6:86:a9:c0:4f:c7:bc:ab:69:d4:8e:e7:89:ac:91: 10:bc:4c:71:98:a1:b2:12:e5:d4:9f:2c:e2:f3:9f: 53:71:17:1c:be:21:d6:49:a4:f2:08:95:58:41:f1: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:5A:7E:40:79:A2:CF:D8:E3:96:23:C9:B4:B1:EA:4C:5F:E3:A5 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:79:bc:42:61:65:e2:b6:9d:d6:63:57:fa:66:be:e6:91:1b: c8:27:7b:00:d5:6b:14:14:7c:b4:15:50:95:fa:09:97:ad:74: ad:c2:74:de:f6:11:8a:3f:ff:05:ca:dd:13:c3:94:4d:c5:1b: 28:30:40:08:b9:04:e2:75:54:1f:df:c0:15:92:4a:26:a2:2a: 30:61:f0:c9:48:10:4b:59:c2:5f:4c:64:af:74:df:34:cf:5c: 1d:2a:db:ce:e7:fd:51:9e:31:74:34:63:44:3a:d0:2a:6f:d8: 73:93:45:03:19:e0:71:24:ec:cd:5f:4c:d4:38:bf:2d:23:4e: 96:91:d1:c6:e1:57:79:24:e5:8d:67:03:06:8f:2c:32:35:fa: 78:53:8a:8b:b2:38:eb:8b:ef:85:7d:67:44:8d:71:8f:7d:f8: f4:a3:00:75:32:1d:bd:2e:9d:17:77:0e:6e:32:cc:f6:4a:47: bc:e3:56:ee:f1:24:22:42:96:45:45:f8:55:04:ca:08:9e:d2: 27:9e:a4:86:9c:6d:1a:1d:78:6f:e8:31:c8:4c:9b:29:6b:51: 5e:de:08:7f:aa:ac:23:3e:40:c0:5a:12:7a:76:4d:a0:79:58: 3b:87:55:bf:60:f4:f1:50:7d:b7:cd:99:0a:7b:06:44:8f:90: eb:da:c1:b0 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUEM3zpsaZehoNl+upMDbBMH4mdhcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUwOTE5MDA1MjQ4WhcNMjUwOTIzMDA1MjQ4 WjB6MUkwRwYDVQQFE0A5M2Q3OGViNjg3MDEyMzEyOTUxZjAzNmFhOTM4Y2M2NWVk NGM0OTA0ZTlmMjNmYTkzYWQzMGJlOTAxMTczZTg1MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdJh5veYUyfazD3fEeL4y1f9esaUfksnI9zRJfUUHEailb zL6AHFWtqgAF8wEVA1Z+8FIuGx5AH0mFnRNnFcZmsQ/oQMUFPyj7FDrQ/TWPMspU WGKBt0o+HH5qWiYXmoSo5+K/itAOJrVIGQjw6Qbn3Dgne60J7p4vg1vurPnqsMAd LSeErDfqw4/+7qtsaQHiBGKpQ1XnBRn+9/AykO1u3pzZno2XG09LXdyU58tMg87l JNmsM/gt/JZUog5Bp69a7Cxzy71huH5/gRip8BFFDOaGqcBPx7yradSO54mskRC8 THGYobIS5dSfLOLzn1NxFxy+IdZJpPIIlVhB8RfHAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU5p1afkB5os/Y45YjybSx6kxf46UwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByebxC YWXitp3WY1f6Zr7mkRvIJ3sA1WsUFHy0FVCV+gmXrXStwnTe9hGKP/8Fyt0Tw5RN xRsoMEAIuQTidVQf38AVkkomoiowYfDJSBBLWcJfTGSvdN80z1wdKtvO5/1RnjF0 NGNEOtAqb9hzk0UDGeBxJOzNX0zUOL8tI06WkdHG4Vd5JOWNZwMGjywyNfp4U4qL sjjri++FfWdEjXGPffj0owB1Mh29Lp0Xdw5uMsz2Ske841bu8SQiQpZFRfhVBMoI ntInnqSGnG0aHXhv6DHITJspa1Fe3gh/qqwjPkDAWhJ6dk2geVg7h1W/YPTxUH23 zZkKewZEj5Dr2sGw -----END CERTIFICATE-----Generated at Fri Sep 19 17:58:23 2025 by rpki-client