$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft File: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json) Hash identifier: Ri6JRoMw90sEerNRZLS4tQgfM2vu/9Y2y3Bwqv/yqBg= Subject key identifier: 7B:93:8D:C4:9F:27:D5:E5:A9:FE:4F:BD:37:66:91:32:93:09:88:CD Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 23FAFA3E9F96CAB9A637EC8330A6FB9645C70E1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft Manifest number: 52 Signing time: Mon 04 Aug 2025 15:00:20 +0000 Manifest this update: Mon 04 Aug 2025 15:00:20 +0000 Manifest next update: Fri 08 Aug 2025 15:00:20 +0000 Files and hashes: 1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: tM4dtxf5TpAzCDMbETz5eWDUj1tCP3qQGVTF7zF933M=) 2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: Vz6pcDGm8YDNBrekXOQC7h+7HQahCTgSvXm9PeTWRKY=) 3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: OKF5yJL6u2iH9la6JjVpmTfWlwRTmkF4j8EEjAH5oUA=) 4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: MnI8L3t+FcObK4LyGHY2+/W6Sl3hZqkB5/Mg6yi/7OU=) 5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: dNcgHoxpUat6/6qJt+AsnILJJ5ICMITS9h+/SKKIuJA=) 6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: ReEmrmuRQsFuRQ4rrvH94TV/xsHrr/QLlUAYKzQ2rJc=) 7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: kbCx9Oe1P+cyMyblbFuQ+ePcjKClMv1dp5C/DbVl8tE=) 8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: 08C8VT4Qv4kksrxdIn3DIEQhzYjWwtVvCACaRx1pHGs=) 9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: vuy/D0Z4OS13VdXBaEx7WQyafvjZitoaCGkogrcIeYM=) 10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: 1+dDfhy5dmLtQTvSqmfQGOETjpvFT0C7dXM1hA1D7ds=) 11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: OHcvzEWWhz8CLGZLM4X5VIC/uKRrDXOtkHsfRJbS1Zw=) 12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: izDKDy45L4T5je1YdnWy/DF/isRSWK4pkS60IQLFfq4=) 13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: SmSDAOupotfr8OSGIUOM0fhWMKndRoDAYIhyMyOmg70=) 14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: iaufOBzVD4BrhThX07vPB0q1uKorV89MpYEVOyMkBdk=) 15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: qHvIQRG+sIAbmBViAvGABnFuh+CD5hAx2PBtUkQ2VK0=) 16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: Op5lIEV/fzacmHqDeNHJqqH5VkYlqRHVgjVcIw7BqRg=) 17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: zDk3Ag8jlLmpRZkODK1eW81Ju9tTzfqOLr1/4I/egPA=) 18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: IMuigdVZWCH9vJwhy+SywAccY+A88cX/a7duL2SwuGo=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:fa:fa:3e:9f:96:ca:b9:a6:37:ec:83:30:a6:fb:96:45:c7:0e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Aug 4 15:00:20 2025 GMT Not After : Aug 8 15:00:20 2025 GMT Subject: serialNumber=c90d6203d68279eef547ac08f5694f2f1ff396efd720e7335807ad645f55f24f, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:8d:21:da:73:86:ae:c4:9f:9a:88:17:6c: f6:21:a3:a6:95:b2:ba:4c:f5:a4:b7:59:1a:99:cc: f8:24:f2:06:9b:d8:87:91:e4:6a:ca:81:60:28:9f: 88:9e:d7:09:f3:1f:b4:49:9a:06:d2:da:8c:bf:3d: 25:fd:10:49:5b:2f:c8:24:9c:51:c7:4a:ff:2a:b0: 45:ca:d0:4b:0e:86:40:d2:81:76:7b:f0:56:fe:03: 0d:a5:08:67:55:68:7e:67:26:df:3a:f8:f4:ae:2d: 9e:74:d9:c1:e9:e4:9e:dc:88:92:33:e8:03:fb:b8: dd:fb:b1:0d:95:ae:0f:92:90:7e:71:bd:0d:f2:36: 6f:eb:6f:a5:df:07:63:06:d9:6f:90:ff:3c:b6:00: 51:db:de:e7:8a:e0:b2:a6:84:48:30:7b:1f:6d:df: 92:59:a8:14:24:26:c9:52:9d:0a:0a:23:64:4f:00: cd:80:b1:9c:9e:04:63:2c:a4:9e:37:e7:10:c0:bc: 59:4b:69:51:77:bd:52:a2:4f:f1:24:de:9b:43:e4: 54:9e:fa:2c:7d:4c:94:a1:15:6a:10:6f:c5:44:da: 0b:31:f6:2a:31:72:b8:88:87:84:89:d4:af:8a:4b: 5d:0b:84:f2:d3:a5:50:65:d8:f7:7d:c8:01:50:8f: 9b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:93:8D:C4:9F:27:D5:E5:A9:FE:4F:BD:37:66:91:32:93:09:88:CD X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3f:16:6c:a1:fd:d8:0c:09:06:44:b9:3e:18:c6:39:14:64: be:32:71:30:d8:24:fa:bb:c9:50:78:c6:1b:63:e3:0e:35:cf: 29:50:79:bb:24:d3:49:2b:26:97:86:ac:31:dc:62:cf:f7:5c: f1:94:5b:0e:c3:61:ff:0c:1a:d8:fb:0b:8d:80:b1:e0:dd:43: ed:35:78:d3:46:4e:dd:8a:79:9c:85:27:7f:b2:87:d2:f5:7a: 41:52:f2:58:09:14:fa:5a:a6:0a:d1:72:f7:81:2a:a0:db:78: 5d:f2:c3:68:48:8e:66:74:9e:43:1b:e7:a9:fa:d0:1c:43:a9: 66:ca:ee:ed:e6:9a:2d:b9:f4:0f:92:fd:33:29:78:a6:59:1b: 51:ab:45:7a:9c:f1:ec:07:f6:98:3b:95:9b:3f:a7:e9:33:7d: 9d:86:14:42:d7:35:b8:a4:38:e8:cf:de:1f:52:76:6b:25:2c: b0:7b:7d:ac:7b:0e:8d:06:ca:ad:1e:ce:b1:e1:1d:42:b2:ff: cf:f7:1e:97:a6:53:9c:b1:ac:bd:6d:fe:4e:e1:cc:b3:4c:df: 7f:b8:f5:53:46:a3:28:14:59:d4:05:24:4c:e1:76:e9:43:ad: ec:56:11:9f:30:db:b9:35:c9:9a:07:ce:2c:c5:fe:5d:50:cf: d3:c9:9e:ea -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUI/r6Pp+WyrmmN+yDMKb7lkXHDhowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUwODA0MTUwMDIwWhcNMjUwODA4MTUwMDIw WjB6MUkwRwYDVQQFE0BjOTBkNjIwM2Q2ODI3OWVlZjU0N2FjMDhmNTY5NGYyZjFm ZjM5NmVmZDcyMGU3MzM1ODA3YWQ2NDVmNTVmMjRmMS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtcI0h2nOGrsSfmogXbPYho6aVsrpM9aS3WRqZzPgk8gab 2IeR5GrKgWAon4ie1wnzH7RJmgbS2oy/PSX9EElbL8gknFHHSv8qsEXK0EsOhkDS gXZ78Fb+Aw2lCGdVaH5nJt86+PSuLZ502cHp5J7ciJIz6AP7uN37sQ2Vrg+SkH5x vQ3yNm/rb6XfB2MG2W+Q/zy2AFHb3ueK4LKmhEgwex9t35JZqBQkJslSnQoKI2RP AM2AsZyeBGMspJ435xDAvFlLaVF3vVKiT/Ek3ptD5FSe+ix9TJShFWoQb8VE2gsx 9ioxcriIh4SJ1K+KS10LhPLTpVBl2Pd9yAFQj5tVAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUe5ONxJ8n1eWp/k+9N2aRMpMJiM0wHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL240YldyWl9FNXlJOS1FSFNDdWJRX3hKQ2dYTS5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhhLTMyMjFkMDFm N2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcPxZs of3YDAkGRLk+GMY5FGS+MnEw2CT6u8lQeMYbY+MONc8pUHm7JNNJKyaXhqwx3GLP 91zxlFsOw2H/DBrY+wuNgLHg3UPtNXjTRk7dinmchSd/sofS9XpBUvJYCRT6WqYK 0XL3gSqg23hd8sNoSI5mdJ5DG+ep+tAcQ6lmyu7t5potufQPkv0zKXimWRtRq0V6 nPHsB/aYO5WbP6fpM32dhhRC1zW4pDjoz94fUnZrJSywe32sew6NBsqtHs6x4R1C sv/P9x6XplOcsay9bf5O4cyzTN9/uPVTRqMoFFnUBSRM4XbpQ63sVhGfMNu5Ncma B84sxf5dUM/TyZ7q -----END CERTIFICATE-----Generated at Mon Aug 4 18:18:53 2025 by rpki-client