$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: A+KfRBGZS13l3pu4/JtrvNLAmsHWh2g/PK58Ps8A6E8= Subject key identifier: 5C:56:BB:80:00:67:04:B8:AB:1A:0F:8C:6E:7C:1B:B5:0E:29:BE:41 Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 1776673B0AA8F2716DF93A932C96C3DCD287BDBB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 0384 Signing time: Sat 26 Apr 2025 15:04:03 +0000 Manifest this update: Sat 26 Apr 2025 15:04:03 +0000 Manifest next update: Wed 30 Apr 2025 15:04:03 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: 6cLCgETOH443YXi3qrafBr89JS0oX5mDZlsHAE7qzt0=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: QbP3vXma6Cmy6JC8ZH+/h8gIC86+vlkYolEsAXfjpmI=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:76:67:3b:0a:a8:f2:71:6d:f9:3a:93:2c:96:c3:dc:d2:87:bd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Apr 26 15:04:03 2025 GMT Not After : Apr 30 15:04:03 2025 GMT Subject: serialNumber=6a24d3556a14a510a064df9731be3ae1d6aea5fc48f8756758b46a3d0b8c22ee, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:26:0d:ab:a5:de:d4:53:a5:4b:de:d8:d3: 04:d1:ac:1a:ee:f2:e5:a4:3a:24:9b:81:05:7e:db: b9:ee:3d:0c:a7:96:eb:0f:87:e4:74:e4:65:98:3e: b3:a6:da:02:c5:ca:39:09:d8:f0:44:14:b4:34:ea: ea:7d:d2:4a:46:7d:4e:a6:09:40:08:66:3c:35:fc: 97:e0:4f:11:47:2d:a1:50:d6:10:f5:7a:d6:0a:05: 86:c2:86:5c:eb:ee:9e:ab:a9:5d:17:a2:7d:c0:33: ee:e7:0c:17:e2:19:50:14:2c:60:2d:4e:c2:af:e6: a4:96:b2:8a:13:49:1e:e2:ae:85:59:ee:f6:db:94: 46:e8:71:76:96:d4:b2:03:db:b1:59:b9:02:8b:dc: e9:f8:23:74:66:f2:ff:d7:6f:86:5e:45:e9:52:c3: 78:ea:b7:77:57:d0:74:2d:ee:f3:3f:23:b0:8e:74: 48:9c:04:e4:4e:12:a3:19:67:3f:19:a9:2f:16:73: ac:e4:47:ab:d4:b4:48:e9:e2:0f:65:d2:76:0a:0a: 39:7d:41:46:bf:f5:26:3f:ee:6d:14:54:0e:e9:ff: 9d:f7:4f:79:a1:38:d8:dd:6f:e5:23:8b:74:d3:b6: 5b:49:3e:82:02:71:54:9a:23:5e:47:4f:4c:83:b2: e6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:56:BB:80:00:67:04:B8:AB:1A:0F:8C:6E:7C:1B:B5:0E:29:BE:41 X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5e:18:f9:79:ae:99:91:eb:d1:7c:72:7f:d8:19:4e:cb:cb: 0c:00:9f:1c:c0:35:5f:ff:d5:29:1e:04:ed:79:19:fd:7a:e6: 0d:f9:53:b5:fe:dd:47:d1:7e:ec:91:84:2b:5d:7c:72:bb:f2: 41:c1:45:55:2b:87:51:3c:44:bc:4d:60:73:ea:31:86:d0:ff: 9d:88:e9:49:50:3b:9d:8f:bc:f4:0d:b1:c0:55:e0:61:eb:ed: 22:46:e4:7c:61:bb:6d:5c:bb:4c:df:d2:3b:7f:de:10:fd:60: 1b:21:f6:11:99:4c:51:52:4f:e5:22:5c:06:a7:c6:3f:ce:7d: 7d:c4:4b:de:b5:e8:47:10:8a:50:c1:f1:af:27:bc:bd:0e:80: d4:8b:f2:69:40:7b:1a:16:55:62:74:86:f6:dc:61:22:88:86: 6d:62:cb:fe:9e:cb:67:72:5d:01:3a:14:3a:c4:42:96:76:a1: 1a:d8:eb:35:b3:c1:fb:22:fb:58:29:0d:90:f6:f0:80:fe:ef: 6e:e6:0b:01:45:b6:77:4b:5b:ea:29:b8:66:2f:44:b1:6b:fe: 46:f3:62:d4:fe:13:f9:3c:e5:44:00:c0:19:46:d7:7f:28:79: 6e:79:ca:ac:16:95:4f:03:1f:8c:51:ce:fa:a9:69:cf:d5:92: 1e:88:71:7b -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUF3ZnOwqo8nFt+TqTLJbD3NKHvbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjUwNDI2MTUwNDAzWhcNMjUwNDMwMTUwNDAz WjB6MUkwRwYDVQQFE0A2YTI0ZDM1NTZhMTRhNTEwYTA2NGRmOTczMWJlM2FlMWQ2 YWVhNWZjNDhmODc1Njc1OGI0NmEzZDBiOGMyMmVlMS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnxCYNq6Xe1FOlS97Y0wTRrBru8uWkOiSbgQV+27nuPQyn lusPh+R05GWYPrOm2gLFyjkJ2PBEFLQ06up90kpGfU6mCUAIZjw1/JfgTxFHLaFQ 1hD1etYKBYbChlzr7p6rqV0Xon3AM+7nDBfiGVAULGAtTsKv5qSWsooTSR7iroVZ 7vbblEbocXaW1LID27FZuQKL3On4I3Rm8v/Xb4ZeRelSw3jqt3dX0HQt7vM/I7CO dEicBOROEqMZZz8ZqS8Wc6zkR6vUtEjp4g9l0nYKCjl9QUa/9SY/7m0UVA7p/533 T3mhONjdb+Uji3TTtltJPoICcVSaI15HT0yDsuavAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUXFa7gABnBLirGg+MbnwbtQ4pvkEwHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMXhj5 ea6ZkevRfHJ/2BlOy8sMAJ8cwDVf/9UpHgTteRn9euYN+VO1/t1H0X7skYQrXXxy u/JBwUVVK4dRPES8TWBz6jGG0P+diOlJUDudj7z0DbHAVeBh6+0iRuR8YbttXLtM 39I7f94Q/WAbIfYRmUxRUk/lIlwGp8Y/zn19xEvetehHEIpQwfGvJ7y9DoDUi/Jp QHsaFlVidIb23GEiiIZtYsv+nstncl0BOhQ6xEKWdqEa2Os1s8H7IvtYKQ2Q9vCA /u9u5gsBRbZ3S1vqKbhmL0Sxa/5G82LU/hP5POVEAMAZRtd/KHluecqsFpVPAx+M Uc76qWnP1ZIeiHF7 -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:50 2025 by rpki-client