$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: 5NkFko8vxUU6g60qS4kyt6idbaTJxrb+kVd2TCfl4Ws= Subject key identifier: 35:E6:9F:36:48:26:9E:EB:CD:CD:4E:2F:CA:06:6A:44:B4:2A:BE:AB Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 32ECCDDF8CE17196C1A0A1A388873B000A5D05EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 0447 Signing time: Wed 05 Nov 2025 00:01:11 +0000 Manifest this update: Wed 05 Nov 2025 00:01:11 +0000 Manifest next update: Sun 09 Nov 2025 00:01:11 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: 64h3T83HnAKd+HsAU/3X5HC7mkgLiCDyvf/PgZqXR6Q=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: 44bJHgXlgV5bmQBanl0PC7/PUL70MidU9TWHiTnAZWk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ec:cd:df:8c:e1:71:96:c1:a0:a1:a3:88:87:3b:00:0a:5d:05:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Nov 5 00:01:11 2025 GMT Not After : Nov 9 00:01:11 2025 GMT Subject: serialNumber=5d4b8950520c2b1d53c6fc005b9fac8f4f93b3e44c53bd8d5616585132dce1fb, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:12:f1:0f:6b:4b:bc:9d:1b:ea:59:27:09: 82:6e:74:65:dc:3d:70:9f:df:63:e3:b0:77:58:77: 34:71:17:5c:16:d8:3a:7b:26:f1:de:4a:b0:ff:d9: a6:db:fe:fe:85:60:39:eb:e9:d7:c3:48:43:0f:e5: b2:ce:bd:9b:38:9b:89:54:42:54:27:cd:67:83:28: 04:4e:63:24:ad:0b:66:b6:ca:4e:8f:8a:7d:38:be: c1:ed:c9:3e:c0:0f:bd:7f:4c:b3:f7:84:a1:b0:2d: 3a:ce:a8:fc:3e:58:a1:19:03:38:c3:e5:ac:7e:8a: 6e:82:7a:d9:e7:11:fe:3a:bd:78:9b:09:2c:34:7f: 68:31:f4:4b:0f:9e:96:b3:14:03:31:2a:82:2f:d4: 45:5d:d0:d0:5c:8a:5b:79:0e:48:97:8d:7c:11:e8: 2b:5b:a5:ae:a4:ad:fb:26:d6:da:33:9b:04:62:c3: 3d:7f:5e:67:ef:61:c4:eb:4d:e5:95:d2:18:27:ff: d6:9d:60:a5:05:52:23:92:4e:a1:81:a1:cf:ce:5a: 3a:ec:8c:fc:3b:13:85:7e:a3:93:bb:d0:e2:90:0d: 95:5f:7f:c5:eb:62:d7:57:be:68:55:af:6e:7a:88: ad:ae:49:02:ce:6c:86:2d:d5:22:92:7d:01:1f:ee: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E6:9F:36:48:26:9E:EB:CD:CD:4E:2F:CA:06:6A:44:B4:2A:BE:AB X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:65:d1:07:90:bd:c5:55:d8:60:33:11:17:22:e6:1e:7f:60: b3:06:fb:be:7c:41:58:f3:93:e3:a1:f4:2b:9a:61:c9:32:a1: 3c:88:89:36:29:ab:33:23:e0:73:49:12:6b:f1:40:d6:5a:57: c7:68:80:f2:d6:46:01:54:b1:7e:e3:29:a3:77:76:a1:b9:df: 35:10:db:19:e2:ac:9f:be:84:31:ca:2d:9c:19:98:8f:38:ab: e0:4a:c9:3a:d0:c8:69:94:4f:bb:71:b5:19:e3:30:18:ba:04: 16:c0:ae:c8:ce:ca:e8:53:ac:7a:43:d8:f5:a1:73:d9:44:d4: 6e:d4:76:69:89:8c:12:fb:f2:b8:20:38:58:58:1c:aa:f1:a2: ae:ef:5f:1c:a6:54:a4:20:a0:5a:d6:5c:e6:39:d5:fa:99:86: 8e:7b:4e:91:4f:4f:32:23:c3:8c:4a:d1:b9:cd:3e:6f:31:c6: e6:f1:ac:42:dc:79:57:33:05:60:94:39:98:39:45:96:01:d3: b7:53:fc:24:55:0d:9d:3f:dc:2e:f2:87:c6:9c:cb:ad:6d:c8: d5:ea:60:37:8f:46:d9:d8:df:4a:85:da:ba:b1:70:69:9b:fb: 02:0b:93:0e:12:fc:90:94:83:4d:11:78:99:f1:24:0d:57:42: 84:26:a8:0b -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUMuzN34zhcZbBoKGjiIc7AApdBe8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjUxMTA1MDAwMTExWhcNMjUxMTA5MDAwMTEx WjB6MUkwRwYDVQQFE0A1ZDRiODk1MDUyMGMyYjFkNTNjNmZjMDA1YjlmYWM4ZjRm OTNiM2U0NGM1M2JkOGQ1NjE2NTg1MTMyZGNlMWZiMS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJUBLxD2tLvJ0b6lknCYJudGXcPXCf32PjsHdYdzRxF1wW 2Dp7JvHeSrD/2abb/v6FYDnr6dfDSEMP5bLOvZs4m4lUQlQnzWeDKAROYyStC2a2 yk6Pin04vsHtyT7AD71/TLP3hKGwLTrOqPw+WKEZAzjD5ax+im6CetnnEf46vXib CSw0f2gx9EsPnpazFAMxKoIv1EVd0NBcilt5DkiXjXwR6Ctbpa6krfsm1tozmwRi wz1/XmfvYcTrTeWV0hgn/9adYKUFUiOSTqGBoc/OWjrsjPw7E4V+o5O70OKQDZVf f8XrYtdXvmhVr256iK2uSQLObIYt1SKSfQEf7g6tAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUNeafNkgmnuvNzU4vygZqRLQqvqswHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjZdEH kL3FVdhgMxEXIuYef2CzBvu+fEFY85PjofQrmmHJMqE8iIk2KaszI+BzSRJr8UDW WlfHaIDy1kYBVLF+4ymjd3ahud81ENsZ4qyfvoQxyi2cGZiPOKvgSsk60MhplE+7 cbUZ4zAYugQWwK7IzsroU6x6Q9j1oXPZRNRu1HZpiYwS+/K4IDhYWByq8aKu718c plSkIKBa1lzmOdX6mYaOe06RT08yI8OMStG5zT5vMcbm8axC3HlXMwVglDmYOUWW AdO3U/wkVQ2dP9wu8ofGnMutbcjV6mA3j0bZ2N9Khdq6sXBpm/sCC5MOEvyQlINN EXiZ8SQNV0KEJqgL -----END CERTIFICATE-----Generated at Wed Nov 5 09:42:18 2025 by rpki-client