$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: DJHBxU3F3cylrLFhJ8FfowjUsM4fouP+GXz8kD5d4+E= Subject key identifier: 30:71:73:44:A7:A2:2E:09:77:86:9B:78:76:AF:CD:FE:10:46:A2:E1 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 543FD5C4EF60A3B9025FAB4001DD991936CC5864 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 0543 Signing time: Tue 28 Jul 2026 00:00:51 +0000 Manifest this update: Tue 28 Jul 2026 00:00:51 +0000 Manifest next update: Sat 01 Aug 2026 00:00:51 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: /pdboBT8qF/yzDKyCGmwn+VTaDHp//kmB9wDq2bAsm8=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: v/FOskV6CEx2q9LFgjQ3kQ5BnchxfCxK1ETLWjacDp4=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: nQ2VisFbxxqEJ70XRveXluCQy7tUXMnJRIhZgrdn6u0=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: WDU4j0AOaXQw1JFbi5U7LiKyIS6dMUe9nCtuv1+lG6c=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: q5jaTXLm/93f7kPcJ/McR6dIG61cNolkwZgIIw8ln/k=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: OmMXKsiMCQdVOTu9tsXxWBJQWn5Is+Q6YPZ2j1H5ZF4=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: nW+blMHfsLK4mRoGMr6xJd+ZxNJ5j05D7KXkNBfGMoQ=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: MH5VAleEB8QDycDfAgLCTfSjM21aZqY+6ghgWG9m3rA=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3f:d5:c4:ef:60:a3:b9:02:5f:ab:40:01:dd:99:19:36:cc:58:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Jul 28 00:00:51 2026 GMT Not After : Aug 1 00:00:51 2026 GMT Subject: serialNumber=e4123fbfdedbffecd5f7ee3884c34183b4e73f98b0a9545e522b30045fa7169a, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:10:bf:fa:80:3d:f4:56:b4:11:c0:67:25: 67:68:cc:67:31:10:fb:87:09:bb:5b:b8:ab:5b:80: d8:46:c3:d1:52:83:1f:d1:08:19:e4:77:33:24:24: 24:25:83:dc:87:61:5b:c2:0e:3e:26:37:56:19:bc: ef:80:ab:b7:3b:a0:45:a7:db:a6:b2:f6:29:a6:5d: e4:01:f1:70:0a:ec:80:20:d4:78:da:01:77:72:b6: 1a:ec:2b:e0:3c:d8:4b:1b:1b:8e:0e:1c:25:ff:29: 1d:63:bc:23:bb:c6:12:73:42:59:3c:91:1a:e3:27: 59:70:e8:91:c4:21:8e:7c:de:fd:6a:07:8c:97:48: 92:9e:a7:a3:3d:ba:50:a8:6b:ae:1b:ba:51:4b:f7: 20:cb:93:96:d2:17:7f:ed:98:c3:16:f6:1b:8c:c4: 7f:0c:6f:4b:01:55:a9:63:98:5f:2f:74:9c:68:09: 42:0f:10:84:d7:08:c4:77:98:f4:b9:0b:73:4d:17: 33:9f:cb:13:b5:d4:9d:8e:26:c4:e2:55:a6:be:e9: a2:3b:93:be:ab:0f:56:04:e0:78:90:8a:e4:49:0a: bf:d1:07:f9:90:dc:47:08:00:72:28:53:05:aa:5e: b0:e2:1b:22:d3:e6:08:50:d8:1c:c0:b2:73:74:42: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:71:73:44:A7:A2:2E:09:77:86:9B:78:76:AF:CD:FE:10:46:A2:E1 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:63:64:8d:45:ad:37:af:4d:11:45:94:d7:0f:aa:e1:7a:31: a6:d5:c0:bc:59:37:9f:be:8a:38:16:8e:11:64:d6:df:bf:ee: b8:b1:e2:d9:7f:2f:d1:d2:06:c3:e4:10:e0:cd:e5:ab:f9:40: 76:8a:c2:bb:9f:ca:48:b3:be:34:20:b9:2a:c7:5d:89:f4:f0: aa:b5:ac:d0:89:80:b7:5d:05:25:2e:9f:f4:26:33:68:88:9b: 40:6c:ce:32:d8:c1:55:14:1c:e7:40:f4:9b:0f:4b:38:28:fa: 72:44:3f:6d:38:18:30:6f:71:e9:af:5b:9b:27:a4:b9:71:19: 20:ff:ec:45:51:d1:38:bd:99:40:6e:c8:35:c4:c4:2d:c8:8c: ed:09:42:2b:44:3c:f2:7b:a2:bc:51:1f:8e:72:53:2e:1c:32: 59:d7:31:77:5d:75:53:cc:06:75:bb:d6:48:3b:db:06:7e:e9: ba:49:07:e1:b3:b8:a3:88:e5:ef:5e:61:9d:ef:46:86:0a:37: 5d:1c:7c:59:de:1a:e2:a5:e0:3b:17:fd:e0:1c:a8:ac:df:b8: d3:44:9f:29:aa:3c:49:ae:bd:8e:1c:53:f6:8b:a8:90:5a:69: ff:64:57:74:b6:c3:c6:d6:ae:50:51:7f:d8:b7:52:89:11:71: de:ee:6f:59 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUVD/VxO9go7kCX6tAAd2ZGTbMWGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjYwNzI4MDAwMDUxWhcNMjYwODAxMDAwMDUx WjB6MUkwRwYDVQQFE0BlNDEyM2ZiZmRlZGJmZmVjZDVmN2VlMzg4NGMzNDE4M2I0 ZTczZjk4YjBhOTU0NWU1MjJiMzAwNDVmYTcxNjlhMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNhBC/+oA99Fa0EcBnJWdozGcxEPuHCbtbuKtbgNhGw9FS gx/RCBnkdzMkJCQlg9yHYVvCDj4mN1YZvO+Aq7c7oEWn26ay9immXeQB8XAK7IAg 1HjaAXdythrsK+A82EsbG44OHCX/KR1jvCO7xhJzQlk8kRrjJ1lw6JHEIY583v1q B4yXSJKep6M9ulCoa64bulFL9yDLk5bSF3/tmMMW9huMxH8Mb0sBValjmF8vdJxo CUIPEITXCMR3mPS5C3NNFzOfyxO11J2OJsTiVaa+6aI7k76rD1YE4HiQiuRJCr/R B/mQ3EcIAHIoUwWqXrDiGyLT5ghQ2BzAsnN0QrrPAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUMHFzRKeiLgl3hpt4dq/N/hBGouEwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADY2SN Ra03r00RRZTXD6rhejGm1cC8WTefvoo4Fo4RZNbfv+64seLZfy/R0gbD5BDgzeWr +UB2isK7n8pIs740ILkqx12J9PCqtazQiYC3XQUlLp/0JjNoiJtAbM4y2MFVFBzn QPSbD0s4KPpyRD9tOBgwb3Hpr1ubJ6S5cRkg/+xFUdE4vZlAbsg1xMQtyIztCUIr RDzye6K8UR+OclMuHDJZ1zF3XXVTzAZ1u9ZIO9sGfum6SQfhs7ijiOXvXmGd70aG CjddHHxZ3hripeA7F/3gHKis37jTRJ8pqjxJrr2OHFP2i6iQWmn/ZFd0tsPG1q5Q UX/Yt1KJEXHe7m9Z -----END CERTIFICATE-----Generated at Tue Jul 28 21:27:40 2026 by rpki-client