$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft File: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft (raw, json) Hash identifier: 2td77qKKsdfm3rS4SX8wXpfeyybNZULIiMNUXP/BYKI= Subject key identifier: F9:97:45:48:23:0F:8F:2F:4D:0C:2D:83:16:6F:0D:6C:A4:83:BC:FB Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Certificate serial: 7B77A50AE1C92E5CDA933AC66C334D7B06A7BDC7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft Manifest number: AF Signing time: Wed 05 Nov 2025 00:13:14 +0000 Manifest this update: Wed 05 Nov 2025 00:13:14 +0000 Manifest next update: Sun 09 Nov 2025 00:13:14 +0000 Files and hashes: 1: 05ba9ca5-a9a9-4def-9c71-0cf47d06fe22.roa (hash: 1kP2M++fmWMNdeWHhWRDYGmhyBjDh9eVYNPrBWNpzCg=) 2: 2dde36c0-2f63-460e-82c0-69cf2908a539.roa (hash: m74/Y7AXPmenm4HcEa34J/O3E1khAnnEthHqbf3xaW8=) 3: 490da442-9a78-4422-8ee9-ded4482ab131.roa (hash: 9OM8KMPdNuQjQeB+6VVjTObX2r3L99F+7xJCKpVxJTs=) 4: 4dec765a-fd07-492c-af7f-ec695090cc13.roa (hash: MJN1JHEhaUwlTLPvrqtAMQ+VdxfLuvodxCCLO0JzdLY=) 5: 4f8b332b-bd8e-4f4d-ba5e-c0edd64d9250.roa (hash: 6tz2WoYEgJdALlaW9L6WAI5quBxS5hVl7KGt1Bb3eMg=) 6: 82100f84-33b5-43a7-a078-7090448b8504.roa (hash: y/QH5BQ5TP6dQgZZigiolieZoHguppvZjnuMcYe6t/I=) 7: 84fa2360-b9c6-47bd-85dc-be37cf5205c9.roa (hash: dOtclQZJO3q1euXcFEfm+wyredqxLCAZgMt9j8i7Q/g=) 8: 8a0cac28-29b8-4996-b010-5eab278cc342.roa (hash: bffOYUPP+I3Z4d4rrr+AaX8manKt40dAPnAvKgD4mWU=) 9: 9410b7d2-baa7-4841-a665-55298df4e7b6.roa (hash: TQYUohrElyKM+nn20cVf/Scx+RzBZLDl5Dcj/bhkll0=) 10: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (hash: r1Oc5U0H2kaq5/FrS+/HBFz7gWpgOOAAR4yJZh19fOc=) 11: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (hash: F/4GXpD+h63YLO3CR8UfTK/L0JHtgaTvd+xyFAYQCjo=) 12: b19e5975-1e99-4224-8288-ed3afb4fc704.roa (hash: js7ccmNP950ZxGmvT22+qxxzt2mS9+WhRQ2ZTiKExZE=) 13: b42257a0-4503-414c-9ee6-c20d4a3bf1ae.roa (hash: CDUUxDf7KxKhP4Ighuyr/dViwFNAUfpOGw2bRT2oyCk=) 14: ca3490d0-1e9e-400b-af5e-b8236be17139.roa (hash: 2lwB58UsF9WHsXXWxQ4wIgCalnXLOzk7FhDI0eM6IE4=) 15: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (hash: OzxpJXzDvuhBGzJLwQ7xDJzS93aA5yTPbv0zqhSzuhA=) 16: f02efb1f-8a17-4dc7-9ab4-9cc23bc69b9e.roa (hash: 9MAWyxl8OSjTpr5G41Au4Ao90yyTgPQT21TrA83cC6o=) 17: fd96e119-2761-4573-bdad-0f464228899f.roa (hash: ku3m8+vhIyzxt83KPsvlEt7OPqTXmowAZM+Pmca2uak=) 18: n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl (hash: KTLEganCJE0u8J3nMXTHcjMz/Kxtg44fZW/+eX5AT1k=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:77:a5:0a:e1:c9:2e:5c:da:93:3a:c6:6c:33:4d:7b:06:a7:bd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173 Validity Not Before: Nov 5 00:13:14 2025 GMT Not After : Nov 9 00:13:14 2025 GMT Subject: serialNumber=a4da82b0200445e5b32b6fa93d664b0a3844134685c8399aeaf787c558309d78, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:e7:b2:66:a4:48:57:61:22:e7:ce:a9:bf: fd:3f:6d:52:ec:a3:30:1f:81:e4:47:7f:a8:ae:6d: c6:bc:35:74:eb:ef:49:9f:65:06:4d:64:bd:9f:41: f2:95:f3:c0:49:37:a0:c4:ec:cd:b0:41:42:b4:0e: f6:1f:1a:97:cd:ca:92:95:fb:7d:22:42:5f:e9:c2: 0d:61:17:2c:e6:dc:2e:91:cc:b0:6a:5d:a7:04:ba: b5:79:4b:a3:e7:17:6f:1a:e7:d6:e6:5e:f9:7e:f8: 8d:b7:3d:9f:c3:31:35:85:2c:be:fa:18:0e:56:9f: e4:60:6e:cc:0f:8d:a4:00:6c:08:d7:67:2e:39:7e: 6b:51:86:ac:68:68:f7:19:87:55:4f:50:d5:a0:8d: 94:33:87:96:b4:df:4a:18:47:8a:74:b5:70:8a:98: 6e:2e:5e:b0:35:e5:74:55:6b:a9:ac:52:c2:ca:e6: 83:b7:40:94:43:e4:9d:5d:2e:17:83:e0:5c:94:c1: 51:00:08:90:d3:3a:f9:e0:da:eb:99:d4:d0:a5:37: dc:98:d5:cd:ee:2a:81:be:94:3a:32:72:5f:25:33: be:1a:81:b8:24:bf:ac:87:aa:74:61:0e:e7:03:28: 2f:3b:31:5d:44:8b:6d:14:b5:66:09:70:01:8f:12: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:97:45:48:23:0F:8F:2F:4D:0C:2D:83:16:6F:0D:6C:A4:83:BC:FB X509v3 Authority Key Identifier: keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:3e:0e:cc:91:7b:1a:ce:00:37:0c:c6:e2:22:0f:58:16:da: 82:39:22:69:ea:9b:f0:46:12:3e:f4:84:e1:38:f4:19:c5:7f: 33:d0:28:5d:ed:c9:3d:91:91:18:04:70:4f:9b:9f:28:56:27: bc:91:08:83:82:c6:c7:c6:24:e2:d1:03:b0:c6:5d:1d:9f:b1: 09:2d:d4:d6:30:99:fb:73:01:74:96:e6:0c:1a:90:11:ed:ac: d8:75:8a:4d:c3:fe:1a:2a:90:59:e8:a6:fa:64:8a:81:40:7c: 96:d9:21:98:06:0d:41:1a:e5:b5:a1:58:6e:37:29:9a:eb:32: 1c:7b:03:e3:c2:c3:f8:c5:5b:ec:52:46:f5:b9:00:e8:2f:5e: df:cf:4f:7c:16:24:76:3c:73:78:14:da:bd:aa:e8:6a:16:02: 92:7f:2e:cd:0d:b3:15:ef:38:6a:d5:26:be:b5:3d:d3:82:87: 00:e6:da:88:59:fd:30:18:bf:1d:02:74:a9:70:93:90:3e:2f: e8:ae:d4:2b:c4:ba:ec:26:7c:30:dc:ab:be:9c:97:e6:c7:89: be:b4:b4:a3:43:31:3d:6e:e2:05:c2:c0:0d:f5:5f:47:a9:94: d1:6f:e5:a4:0c:d5:ab:01:b1:11:4c:9e:5b:62:e3:c4:16:c6: fd:9f:12:04 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUe3elCuHJLlzakzrGbDNNewanvccwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzMxOTQyNGUwMzlmODZkNmFkOWZjNGU3MjIzZGY4NDFk MjBhZTZkMGZmMTI0MjgxNzMwHhcNMjUxMTA1MDAxMzE0WhcNMjUxMTA5MDAxMzE0 WjB6MUkwRwYDVQQFE0BhNGRhODJiMDIwMDQ0NWU1YjMyYjZmYTkzZDY2NGIwYTM4 NDQxMzQ2ODVjODM5OWFlYWY3ODdjNTU4MzA5ZDc4MS0wKwYDVQQDEyQ4OGFmN2I5 NS0yZWY3LTQ5ZmMtYTM3ZC0xYjhmMDU0NzE4MGQwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5r+eyZqRIV2Ei586pv/0/bVLsozAfgeRHf6iubca8NXTr 70mfZQZNZL2fQfKV88BJN6DE7M2wQUK0DvYfGpfNypKV+30iQl/pwg1hFyzm3C6R zLBqXacEurV5S6PnF28a59bmXvl++I23PZ/DMTWFLL76GA5Wn+RgbswPjaQAbAjX Zy45fmtRhqxoaPcZh1VPUNWgjZQzh5a030oYR4p0tXCKmG4uXrA15XRVa6msUsLK 5oO3QJRD5J1dLheD4FyUwVEACJDTOvng2uuZ1NClN9yY1c3uKoG+lDoycl8lM74a gbgkv6yHqnRhDucDKC87MV1Ei20UtWYJcAGPEh8JAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQU+ZdFSCMPjy9NDC2DFm8NbKSDvPswHwYDVR0jBBgwFoAUzBBhJz//dj92 0t7ihYPoujsFxDAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lNWRlYTY2MC1i ZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvYzMxOTQyNGUwMzlmODZkNmFkOWZj NGU3MjIzZGY4NDFkMjBhZTZkMGZmMTI0MjgxNzMuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMmRmNTFjZDItZTZhZi00OTNhLWE4OGEtMzIy MWQwMWY3ZDkwL240YldyWl9FNXlJOS1FSFNDdWJRX3hKQ2dYTS5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzJkZjUxY2QyLWU2YWYtNDkzYS1hODhhLTMyMjFkMDFm N2Q5MC9uNGJXclpfRTV5STktRUhTQ3ViUV94SkNnWE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuPg7M kXsazgA3DMbiIg9YFtqCOSJp6pvwRhI+9IThOPQZxX8z0Chd7ck9kZEYBHBPm58o Vie8kQiDgsbHxiTi0QOwxl0dn7EJLdTWMJn7cwF0luYMGpAR7azYdYpNw/4aKpBZ 6Kb6ZIqBQHyW2SGYBg1BGuW1oVhuNyma6zIcewPjwsP4xVvsUkb1uQDoL17fz098 FiR2PHN4FNq9quhqFgKSfy7NDbMV7zhq1Sa+tT3TgocA5tqIWf0wGL8dAnSpcJOQ Pi/ortQrxLrsJnww3Ku+nJfmx4m+tLSjQzE9buIFwsAN9V9HqZTRb+WkDNWrAbER TJ5bYuPEFsb9nxIE -----END CERTIFICATE-----Generated at Wed Nov 5 19:43:05 2025 by rpki-client