$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft File: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json) Hash identifier: I8qks3tu5WESPEYylpROE0eQpSKsmjHruCgq4IRGLzY= Subject key identifier: 98:71:FC:34:09:74:6D:0E:35:26:72:BB:70:76:A1:A8:91:46:27:E4 Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 64D07E7024CD5653845720F02F7787095C769BA9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft Manifest number: 1E Signing time: Sat 14 Jun 2025 00:10:28 +0000 Manifest this update: Sat 14 Jun 2025 00:10:28 +0000 Manifest next update: Wed 18 Jun 2025 00:10:28 +0000 Files and hashes: 1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: QHJ3jvype6iNVRbu4LIyzC2WqUBUEN8K7ma+gdemEY4=) 2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: OuWiwzEsh3/Q35XoUFHEEwFEcQDfAPIlL5A9OWx8lFg=) 3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: qkHbUXdljYQ+GPKEXUWUOXH4VNPwZM1vwj+ASVEQ5xY=) 4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: G39pew0WoWf6hc2AkTCVnBa8CU5SimlyF/pGO7Rg6yE=) 5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: bFcoMmTvdHqz/jRcFFEiAMCbtpkONxwHAu1JEsPpT3I=) 6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: M3CslnyqrKAFWNDU/0FCHqpAGbKbt0BEnZkXgjQtbwc=) 7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: 7gLrv3/ovX6p/2APm2TGZP0qYAu9Y0U7PmyxuQ8vGgo=) 8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: t0tTY48UZx2KqHw2rqhgfeuXnDGPmkri0uZ3uIMvAsc=) 9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: YKdE4wI/TZalbm4acqfbjGz2qAE69fX6sV5TJxdOSis=) 10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: UOZIiWRP+G4/SnJeCohtcteciAw+XAjbeB8bgCwW1gk=) 11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: SxqCgcIAY7pohCYlLTJMraEQVmj1fIvhpBnVbVu4ju4=) 12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: Q63zHounLwmJGl2oEQkr+5f4jxWStDaczXuMY9Hm6gM=) 13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: d+kYzQcOO5jPBwkKjqz7EwWWevdQWPr5Wy6uupT/xtI=) 14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: HE5sw0m9K+BfsGI3j9/18N7aCGgZT8x9zpfeD5nXpT0=) 15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: AeP/B3oSvu9UdzZ9OkKel8Yuk1XTSBttmY7dUQG7xbo=) 16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: 0Ne++b4splq1HGdau+n8GkeaBce5K76iLG+eOZexl6o=) 17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: cYGDnTBe7L68N7uA8vAnjoeHtvjq4HjY+SPQhg0t8wA=) 18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: SQfPNEbTuWLFDWVQogWugs2ywiVx+SVgoUfUEjdrNog=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d0:7e:70:24:cd:56:53:84:57:20:f0:2f:77:87:09:5c:76:9b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Jun 14 00:10:28 2025 GMT Not After : Jun 18 00:10:28 2025 GMT Subject: serialNumber=fdc34854885f56747fa53688241df10532c51263dbf3ff8388fb2faf2e24c53f, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:8b:f9:bf:75:fe:f0:ba:00:7b:bb:07:a3: 04:a5:2a:47:d0:92:02:b8:1f:a2:4b:7b:d4:88:5c: 7d:e5:c5:61:2e:03:73:49:29:0c:b5:dd:67:2d:9b: a6:27:fc:4f:aa:7a:ca:9c:d3:c7:9c:33:8b:2f:96: da:09:82:64:9c:17:49:68:b1:1f:bd:44:99:e4:59: b4:2e:df:98:10:f7:2f:91:39:66:51:b2:97:f2:db: c8:1c:0f:7d:c7:d1:c2:1e:97:8d:c2:6d:52:1f:e9: 61:9c:a5:08:e4:db:7f:82:0f:f4:6a:0a:f5:da:bf: 14:84:82:74:c9:c3:c9:cc:b2:28:83:a8:da:c2:1a: 23:de:67:49:fd:0d:64:33:92:1f:b0:c1:8d:4c:79: ad:6e:20:30:e5:bb:ba:a4:1a:88:ce:24:6f:62:06: 2e:80:e4:ae:0d:dc:ce:6a:a2:41:c0:46:1a:ab:b7: 9d:3e:89:1f:7b:e2:34:0c:fc:c7:00:1b:c7:56:de: d5:b3:d7:39:89:a0:f0:cc:08:e0:c2:f8:1d:bf:1c: 5f:3a:5d:c3:fe:a2:cb:bf:07:07:6e:c9:f2:f7:fd: 2a:3a:a9:d6:d4:de:b4:35:3e:0c:99:95:90:5f:5d: 3d:59:26:b0:ff:e1:67:4a:98:bf:a2:53:a8:de:45: d5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:71:FC:34:09:74:6D:0E:35:26:72:BB:70:76:A1:A8:91:46:27:E4 X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:81:82:f4:a1:ea:85:76:ad:d3:7a:64:4d:02:25:9c:0c:7e: d1:c2:c4:f7:46:4b:7e:23:41:db:85:96:c8:92:ef:84:65:d6: b3:60:06:50:ad:eb:51:90:05:9c:28:a1:ad:7e:da:68:22:f7: 04:e1:cb:6e:cd:c1:e3:73:12:9d:0a:0b:96:09:9a:b7:c8:c0: 07:4e:b4:f6:4d:30:73:53:8e:24:de:0d:1d:3e:16:b5:10:f2: 06:68:69:31:d7:f8:1b:a4:99:ca:73:16:c9:78:e6:1b:ea:ad: af:52:e3:0c:08:4c:c4:1b:1d:6c:e1:75:a8:5b:7d:3d:9c:7e: 3f:7e:f3:e1:ab:b1:68:c2:f2:7e:54:25:18:1e:43:63:ae:11: 83:4c:ce:58:a5:64:d0:79:16:fd:c5:6c:65:dc:38:e0:8f:77: 64:f6:0e:86:2c:8d:d8:38:de:cb:99:15:92:fc:55:fd:61:7e: 04:9f:3b:28:e9:b5:ec:e1:22:1d:80:53:00:33:12:0c:da:18: 79:9d:73:f4:bf:1b:e6:c5:8e:96:85:56:d5:01:c8:9a:95:0f: 1b:ce:c0:63:54:bb:4f:6b:2d:c7:6f:06:b2:94:fb:7d:a3:04: e1:c7:6f:ae:60:dd:2c:e6:f6:58:94:85:43:50:58:23:e4:52: aa:dd:59:70 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUZNB+cCTNVlOEVyDwL3eHCVx2m6kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwNjE0MDAxMDI4WhcNMjUwNjE4MDAxMDI4 WjB6MUkwRwYDVQQFE0BmZGMzNDg1NDg4NWY1Njc0N2ZhNTM2ODgyNDFkZjEwNTMy YzUxMjYzZGJmM2ZmODM4OGZiMmZhZjJlMjRjNTNmMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtpov5v3X+8LoAe7sHowSlKkfQkgK4H6JLe9SIXH3lxWEu A3NJKQy13Wctm6Yn/E+qesqc08ecM4svltoJgmScF0losR+9RJnkWbQu35gQ9y+R OWZRspfy28gcD33H0cIel43CbVIf6WGcpQjk23+CD/RqCvXavxSEgnTJw8nMsiiD qNrCGiPeZ0n9DWQzkh+wwY1Mea1uIDDlu7qkGojOJG9iBi6A5K4N3M5qokHARhqr t50+iR974jQM/McAG8dW3tWz1zmJoPDMCODC+B2/HF86XcP+osu/BwduyfL3/So6 qdbU3rQ1PgyZlZBfXT1ZJrD/4WdKmL+iU6jeRdXpAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUmHH8NAl0bQ41JnK7cHahqJFGJ+QwHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL240YldyWl9FNXlJOS1FSFNDdWJRX3hKQ2dYTS5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhhLTMyMjFkMDFm N2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEgYL0 oeqFdq3TemRNAiWcDH7RwsT3Rkt+I0HbhZbIku+EZdazYAZQretRkAWcKKGtftpo IvcE4ctuzcHjcxKdCguWCZq3yMAHTrT2TTBzU44k3g0dPha1EPIGaGkx1/gbpJnK cxbJeOYb6q2vUuMMCEzEGx1s4XWoW309nH4/fvPhq7FowvJ+VCUYHkNjrhGDTM5Y pWTQeRb9xWxl3Djgj3dk9g6GLI3YON7LmRWS/FX9YX4Enzso6bXs4SIdgFMAMxIM 2hh5nXP0vxvmxY6WhVbVAcialQ8bzsBjVLtPay3HbwaylPt9owThx2+uYN0s5vZY lIVDUFgj5FKq3Vlw -----END CERTIFICATE-----Generated at Sat Jun 14 18:34:22 2025 by rpki-client