$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft File: JmLOFOkF4Y68t1IvkrNoS8SGW00.mft (raw, json) Hash identifier: uqnzop30b+z2Nu4T5IRhzl6KHSuzJNC2jPvu9dVFIy0= Subject key identifier: 68:1D:C5:D5:73:31:06:7A:99:16:EC:56:40:55:7D:5B:9D:D2:FA:2A Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Certificate serial: 6D549B604805CFB6CCD59663B9F6026BE25423B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft Manifest number: E708 Signing time: Sat 26 Apr 2025 15:03:19 +0000 Manifest this update: Sat 26 Apr 2025 15:03:19 +0000 Manifest next update: Wed 30 Apr 2025 15:03:19 +0000 Files and hashes: 1: JmLOFOkF4Y68t1IvkrNoS8SGW00.crl (hash: U983p+HNzvztkx925O9VNzCbW4DXkKoE08/sovPqXH0=) 2: fefdfb86-d54d-46be-a202-690d581b7d51.roa (hash: i93C47BTkCWRQ+lChc18vs9RPtoz09Ya5HgFODYbbms=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:54:9b:60:48:05:cf:b6:cc:d5:96:63:b9:f6:02:6b:e2:54:23:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Validity Not Before: Apr 26 15:03:19 2025 GMT Not After : Apr 30 15:03:19 2025 GMT Subject: serialNumber=788dfba215353e691419c8b4067d35225313faaf875d30b40bfa8c4115e2f133, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:21:4f:6a:77:fa:df:94:ef:a1:ac:d9:1f:56: b1:8e:43:4b:d0:ae:12:d1:95:7d:26:46:da:43:c2: b7:79:8c:58:65:df:bd:ba:b4:ce:9a:fa:cd:73:50: 6f:90:6b:71:f3:2a:f6:4d:e4:87:22:44:3f:4f:f4: 18:93:03:78:dc:8e:9f:25:81:c3:e8:5b:e5:16:58: f2:1b:c1:7e:f3:8d:6d:bd:f0:6b:48:fa:d7:23:e2: d7:00:c4:ed:24:3b:c5:e4:59:03:90:df:f6:9d:8f: 3a:13:bf:9f:a0:2e:0d:90:2a:e2:01:f7:5a:92:22: 0a:fb:b3:76:49:3f:70:2f:ab:0c:5d:ab:ee:8d:46: 79:b0:e1:f2:8b:17:61:e1:ce:9b:4f:2c:2f:ac:55: 1f:81:18:76:bd:81:ca:25:64:5a:70:e3:36:2c:ba: 2a:0b:d0:db:64:61:be:e8:c4:24:ee:ba:42:16:97: ab:37:95:5c:e2:3a:8a:82:a8:3d:34:ee:ff:df:ca: 11:f3:a7:68:b7:37:a4:45:52:ff:30:3a:3b:e1:70: 09:92:ac:6a:b1:c5:42:5f:4c:69:de:da:94:71:40: e7:40:b7:37:12:8f:78:9d:90:f9:89:50:14:32:81: 89:46:7a:bd:50:bc:0b:29:4d:12:63:39:0d:0f:20: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:C5:D5:73:31:06:7A:99:16:EC:56:40:55:7D:5B:9D:D2:FA:2A X509v3 Authority Key Identifier: keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c4:79:81:62:a5:da:ee:63:6e:44:41:3e:94:d1:5a:81:2e: 59:a9:54:cf:bc:63:fd:d9:21:b7:96:43:5a:7e:91:95:44:c3: cf:66:cf:58:eb:9e:3a:c1:28:a9:31:bb:f4:15:1c:86:07:2f: 03:66:e4:60:fb:fd:8d:55:59:69:41:58:bc:9e:77:df:52:4a: fc:b2:f7:6d:67:2e:12:3b:4d:8a:2f:30:9b:4b:29:74:9e:8b: ed:d1:b5:c5:72:ff:cb:73:2a:88:50:4f:02:09:04:23:f1:16: c9:db:2d:d1:e3:bd:77:8f:5e:68:0f:f9:df:f1:c8:40:72:6c: 04:ac:91:d3:0b:bd:83:be:d5:8e:b3:8e:3e:59:df:b4:b5:31: f7:ca:06:40:6c:22:55:83:ba:34:88:25:e4:18:c4:a9:5b:47: 9b:08:25:46:79:1c:7d:2c:45:9d:15:e5:30:c8:c8:3c:76:c7: 9d:8a:e3:62:4d:2e:25:48:54:fe:9b:fc:f0:5e:7a:ac:22:d9: fe:43:69:b7:5a:94:6c:17:74:3e:71:ed:61:c8:e9:a4:42:9f: 20:56:73:9d:ab:36:81:ec:6e:15:e7:30:9c:fd:9c:f8:32:d1: 21:b3:c1:e1:90:f5:c9:dd:dd:6b:4e:e4:2f:44:86:f9:9c:79: bf:97:7c:07 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUbVSbYEgFz7bM1ZZjufYCa+JUI7YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDI2MTUwMzE5WhcNMjUwNDMwMTUwMzE5 WjB6MUkwRwYDVQQFE0A3ODhkZmJhMjE1MzUzZTY5MTQxOWM4YjQwNjdkMzUyMjUz MTNmYWFmODc1ZDMwYjQwYmZhOGM0MTE1ZTJmMTMzMS0wKwYDVQQDEyRjMGNlMjNl YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrIU9qd/rflO+hrNkfVrGOQ0vQrhLRlX0mRtpDwrd5jFhl 3726tM6a+s1zUG+Qa3HzKvZN5IciRD9P9BiTA3jcjp8lgcPoW+UWWPIbwX7zjW29 8GtI+tcj4tcAxO0kO8XkWQOQ3/adjzoTv5+gLg2QKuIB91qSIgr7s3ZJP3Avqwxd q+6NRnmw4fKLF2HhzptPLC+sVR+BGHa9gcolZFpw4zYsuioL0NtkYb7oxCTuukIW l6s3lVziOoqCqD007v/fyhHzp2i3N6RFUv8wOjvhcAmSrGqxxUJfTGne2pRxQOdA tzcSj3idkPmJUBQygYlGer1QvAspTRJjOQ0PILjLAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUaB3F1XMxBnqZFuxWQFV9W53S+iowHwYDVR0jBBgwFoAUVajdRdlEE/nR kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk ZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1LWZkZGVmYTlh MDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCoxHmB YqXa7mNuREE+lNFagS5ZqVTPvGP92SG3lkNafpGVRMPPZs9Y6546wSipMbv0FRyG By8DZuRg+/2NVVlpQVi8nnffUkr8svdtZy4SO02KLzCbSyl0novt0bXFcv/LcyqI UE8CCQQj8RbJ2y3R4713j15oD/nf8chAcmwErJHTC72DvtWOs44+Wd+0tTH3ygZA bCJVg7o0iCXkGMSpW0ebCCVGeRx9LEWdFeUwyMg8dsediuNiTS4lSFT+m/zwXnqs Itn+Q2m3WpRsF3Q+ce1hyOmkQp8gVnOdqzaB7G4V5zCc/Zz4MtEhs8HhkPXJ3d1r TuQvRIb5nHm/l3wH -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:28 2025 by rpki-client