$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: gZljyoe3gVGJQupI1RQDbwlR65pRbQzpB4uZY05E8xc= Subject key identifier: 14:71:1B:FC:64:71:9F:FF:DC:35:32:53:56:5C:6D:87:45:50:55:4D Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 3AC8396959A3FCD31E4DDAC26366F8CAED90C8DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 04BC Signing time: Mon 02 Mar 2026 00:04:02 +0000 Manifest this update: Mon 02 Mar 2026 00:04:02 +0000 Manifest next update: Fri 06 Mar 2026 00:04:02 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: O6XLahvXozd/v92Q6WcNRuqhS81OKEzXHYcciw1bslU=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: x/x5YhRgQ4G64Q3XCnf6akMJiMOFg/OKsQq1LAYwBs8=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c8:39:69:59:a3:fc:d3:1e:4d:da:c2:63:66:f8:ca:ed:90:c8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Mar 2 00:04:02 2026 GMT Not After : Mar 6 00:04:02 2026 GMT Subject: serialNumber=4696b7ee07d8481388528e580d3438ef238e18e495b5421682412fd82fc19b62, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:09:74:2b:cb:f0:86:04:3b:7f:8f:60:40: d3:96:49:7f:74:14:d9:cc:7b:fc:4e:48:1a:67:f7: 92:06:78:00:bc:58:7b:81:e8:90:ab:43:35:f5:0b: 72:85:d6:e4:6c:84:8e:38:7c:94:ef:ed:f5:b0:2c: 5d:66:7c:c0:8c:92:57:43:18:7b:b1:67:d8:18:29: 1d:fc:2f:43:1a:64:1d:ee:31:9c:92:47:c5:60:18: b3:28:44:22:19:26:27:c5:ce:64:5f:23:f1:1a:dc: a7:17:c9:5a:b8:1d:1a:c9:7e:91:a6:f6:a3:fa:87: f9:87:15:92:1f:c7:f4:a6:e6:bc:b0:eb:0e:b0:8d: f8:c0:5e:99:9c:8b:66:1f:df:a0:8a:bf:bb:ec:55: 0c:cf:d4:c6:1f:25:fd:6c:4e:a7:49:c1:47:7b:cb: 31:09:ff:a0:80:03:d0:33:31:b4:cd:9b:76:99:1d: 6b:58:7d:86:19:95:b8:65:8c:d6:7b:5f:38:f7:be: ae:f5:09:71:55:c8:6c:ac:0a:a0:ee:a0:dc:d7:70: 2b:a6:9e:8a:41:f9:0c:86:b0:36:8b:32:ea:6b:30: 43:5a:e7:86:77:7b:6c:e3:80:1e:35:d8:d8:0b:da: 11:d0:ee:b4:0b:96:b5:d2:ed:12:9b:49:de:40:fb: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:71:1B:FC:64:71:9F:FF:DC:35:32:53:56:5C:6D:87:45:50:55:4D X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:54:bc:b7:51:e1:16:b9:2d:68:8d:31:14:b6:54:4e:76:7e: 16:30:02:b1:cd:64:9e:f2:78:0d:dd:04:1f:f2:d5:eb:c1:4d: 0e:02:a8:72:cd:76:cb:a1:73:fa:e4:7a:10:92:3f:64:00:84: fa:20:91:8f:70:16:25:5a:61:a3:b2:c2:e9:d2:7c:21:c3:dd: 15:7c:54:ed:f5:94:3c:c6:6d:e1:17:79:3c:b5:f9:55:b7:9f: d9:35:0d:4e:73:a0:3d:53:80:22:ac:d5:d6:34:2a:45:e6:0b: 2e:a3:e4:a7:ac:cf:15:07:5b:01:3d:59:8a:d2:65:a9:47:94: 89:72:18:9a:94:f7:0a:80:7f:26:2d:88:b7:d4:9c:3c:11:6b: 35:4f:99:4d:d5:5c:17:27:d8:d0:51:f8:12:57:96:dc:a7:d6: c3:0f:fe:67:a0:df:72:4c:a1:5a:72:54:6b:e9:eb:a2:74:23: 6d:57:83:f3:9f:46:4c:b6:5f:13:fe:ae:7c:47:ca:ce:77:a4: d8:91:2a:03:ed:14:b6:99:fd:24:dd:5e:2d:62:bc:14:2d:73: f7:83:be:42:fb:bb:7a:56:be:07:d9:be:75:16:a0:ff:c0:10: 7f:e4:a3:de:a7:8a:44:02:77:6a:81:f8:e0:26:6b:70:31:e0: a8:e3:8f:f8 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUOsg5aVmj/NMeTdrCY2b4yu2QyN4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjYwMzAyMDAwNDAyWhcNMjYwMzA2MDAwNDAy WjB6MUkwRwYDVQQFE0A0Njk2YjdlZTA3ZDg0ODEzODg1MjhlNTgwZDM0MzhlZjIz OGUxOGU0OTViNTQyMTY4MjQxMmZkODJmYzE5YjYyMS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwIwl0K8vwhgQ7f49gQNOWSX90FNnMe/xOSBpn95IGeAC8 WHuB6JCrQzX1C3KF1uRshI44fJTv7fWwLF1mfMCMkldDGHuxZ9gYKR38L0MaZB3u MZySR8VgGLMoRCIZJifFzmRfI/Ea3KcXyVq4HRrJfpGm9qP6h/mHFZIfx/Sm5ryw 6w6wjfjAXpmci2Yf36CKv7vsVQzP1MYfJf1sTqdJwUd7yzEJ/6CAA9AzMbTNm3aZ HWtYfYYZlbhljNZ7Xzj3vq71CXFVyGysCqDuoNzXcCumnopB+QyGsDaLMuprMENa 54Z3e2zjgB412NgL2hHQ7rQLlrXS7RKbSd5A+1wNAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUFHEb/GRxn//cNTJTVlxth0VQVU0wHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVVLy3 UeEWuS1ojTEUtlROdn4WMAKxzWSe8ngN3QQf8tXrwU0OAqhyzXbLoXP65HoQkj9k AIT6IJGPcBYlWmGjssLp0nwhw90VfFTt9ZQ8xm3hF3k8tflVt5/ZNQ1Oc6A9U4Ai rNXWNCpF5gsuo+SnrM8VB1sBPVmK0mWpR5SJchialPcKgH8mLYi31Jw8EWs1T5lN 1VwXJ9jQUfgSV5bcp9bDD/5noN9yTKFaclRr6euidCNtV4Pzn0ZMtl8T/q58R8rO d6TYkSoD7RS2mf0k3V4tYrwULXP3g75C+7t6Vr4H2b51FqD/wBB/5KPep4pEAndq gfjgJmtwMeCo44/4 -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:32 2026 by rpki-client