$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: JguVQ/ZX5qlAhoDaYaAlEAKxQvQvp8pa3gNiEyD+SF0= Subject key identifier: 35:41:7A:8A:6D:97:91:EC:0E:76:21:91:2E:53:5C:14:3A:12:1E:3B Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 215A6DFE362E5CE4007B8C5C501150D625439EA3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 03EB Signing time: Thu 07 Aug 2025 00:04:24 +0000 Manifest this update: Thu 07 Aug 2025 00:04:24 +0000 Manifest next update: Mon 11 Aug 2025 00:04:24 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: eSfPyA5zmQrZOG8JXmnMgq0T/OLok+qL5pyDz9MSaaU=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: p5ib3OheHX3F5iUmVs3tLRGLITqsTFnJtcnEgYJB12E=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5a:6d:fe:36:2e:5c:e4:00:7b:8c:5c:50:11:50:d6:25:43:9e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Aug 7 00:04:24 2025 GMT Not After : Aug 11 00:04:24 2025 GMT Subject: serialNumber=b4708b2b48c9dc3ca65dc975c548c589e4b2e8a1fa046949f94915f34b6a8dac, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:22:dd:c0:70:11:2a:35:43:85:e0:8f:73: 20:46:24:76:64:93:ff:3c:55:f2:62:ad:b2:f1:c9: d8:65:b6:11:e2:58:b2:36:d3:81:7a:b1:9c:70:8d: 8d:4f:39:1d:e0:f7:9c:71:88:10:db:c3:aa:4d:71: c2:77:7a:0c:44:6d:93:c2:28:33:d8:eb:9f:0b:1c: 5b:eb:56:81:5a:c8:d3:2b:26:7c:f2:33:74:41:cb: db:3f:b0:da:e9:75:35:19:c8:ad:49:46:e2:24:06: 72:28:e9:52:a0:37:b8:34:6d:94:48:66:7c:32:b0: 64:04:d6:07:10:a0:79:a9:49:49:f9:43:24:2e:92: 16:0d:6f:d9:84:d7:08:8c:b4:7d:f5:85:4c:2b:17: a2:cd:b9:c1:c0:39:6d:70:3a:73:fa:f0:d6:2b:72: 3a:b5:d3:65:bb:c9:e7:bb:d6:d9:6c:2b:0e:76:13: b6:3a:28:bf:88:7c:59:d7:d8:6e:1f:8e:ba:e8:21: a3:ac:86:af:56:7d:a3:cf:be:51:4e:41:68:6f:1e: 05:ec:8e:36:14:ea:a6:e6:db:62:f3:7d:1a:d7:84: 2a:45:28:f3:bc:5f:3a:20:a8:c7:2f:c0:91:fe:fc: ff:95:92:d7:59:8d:5e:f1:8c:d7:17:45:d3:4c:1d: e6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:7A:8A:6D:97:91:EC:0E:76:21:91:2E:53:5C:14:3A:12:1E:3B X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:34:b8:64:6e:a7:b2:76:68:3b:d8:4e:81:90:2d:32:f5:69: 8d:53:b7:98:db:56:96:c2:88:fe:ab:4b:c6:8a:2f:c9:af:b8: 7b:57:cc:2a:ef:ba:b3:42:a6:06:6d:f4:6f:9f:32:b2:27:48: cf:93:1f:bf:34:3b:01:13:68:6f:61:9d:36:9d:a8:11:ab:31: da:6d:05:0f:a0:74:b0:b6:25:6b:e1:01:3a:3a:16:73:4a:c3: a9:9e:ac:82:eb:c8:79:9f:49:60:89:9c:ff:f3:de:4e:5b:8a: ee:bb:d9:02:a3:5e:c4:50:35:32:27:08:9f:88:4d:9c:68:c9: ac:04:4a:7c:a2:d8:7c:32:9c:d0:75:4f:d4:f3:27:31:57:51: 06:c8:aa:f9:25:70:30:ad:17:8f:2a:de:6f:cd:10:f6:ff:b9: fc:ae:ed:21:24:a8:e2:a7:48:55:59:81:99:cf:c6:65:15:1f: 55:12:6b:b6:45:f3:c2:65:57:b8:1c:fe:c1:c0:9a:35:ee:61: 05:e4:ba:3e:03:f8:dd:70:60:79:b9:66:59:05:c7:d1:4e:40: ef:f0:0a:a9:2f:b3:bd:ef:ee:29:cd:db:10:d1:28:fd:d2:a6: ea:c1:86:d8:a0:c5:60:4e:5f:62:4d:b8:81:57:c1:a3:b3:47: 8d:c2:08:83 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUIVpt/jYuXOQAe4xcUBFQ1iVDnqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjUwODA3MDAwNDI0WhcNMjUwODExMDAwNDI0 WjB6MUkwRwYDVQQFE0BiNDcwOGIyYjQ4YzlkYzNjYTY1ZGM5NzVjNTQ4YzU4OWU0 YjJlOGExZmEwNDY5NDlmOTQ5MTVmMzRiNmE4ZGFjMS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQyCLdwHARKjVDheCPcyBGJHZkk/88VfJirbLxydhlthHi WLI204F6sZxwjY1POR3g95xxiBDbw6pNccJ3egxEbZPCKDPY658LHFvrVoFayNMr JnzyM3RBy9s/sNrpdTUZyK1JRuIkBnIo6VKgN7g0bZRIZnwysGQE1gcQoHmpSUn5 QyQukhYNb9mE1wiMtH31hUwrF6LNucHAOW1wOnP68NYrcjq102W7yee71tlsKw52 E7Y6KL+IfFnX2G4fjrroIaOshq9WfaPPvlFOQWhvHgXsjjYU6qbm22LzfRrXhCpF KPO8XzogqMcvwJH+/P+VktdZjV7xjNcXRdNMHeYLAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUNUF6im2XkewOdiGRLlNcFDoSHjswHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtNLhk bqeydmg72E6BkC0y9WmNU7eY21aWwoj+q0vGii/Jr7h7V8wq77qzQqYGbfRvnzKy J0jPkx+/NDsBE2hvYZ02nagRqzHabQUPoHSwtiVr4QE6OhZzSsOpnqyC68h5n0lg iZz/895OW4ruu9kCo17EUDUyJwifiE2caMmsBEp8oth8MpzQdU/U8ycxV1EGyKr5 JXAwrRePKt5vzRD2/7n8ru0hJKjip0hVWYGZz8ZlFR9VEmu2RfPCZVe4HP7BwJo1 7mEF5Lo+A/jdcGB5uWZZBcfRTkDv8AqpL7O97+4pzdsQ0Sj90qbqwYbYoMVgTl9i TbiBV8Gjs0eNwgiD -----END CERTIFICATE-----Generated at Thu Aug 7 04:39:34 2025 by rpki-client