$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: owPl9lSIrea8iwf84dtm4landDUZtzlsnAe14ei0DzA= Subject key identifier: 13:7D:12:CA:08:A2:35:50:31:B1:3F:61:1D:E9:C6:64:B7:93:0C:DF Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 7F3CB9C436F004767A0621ACB73A2E7F1AD865CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 0377 Signing time: Sat 26 Apr 2025 00:12:52 +0000 Manifest this update: Sat 26 Apr 2025 00:12:52 +0000 Manifest next update: Wed 30 Apr 2025 00:12:52 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: xsbjILZDSxwD7AJXZ2+WmoFkgqb/ZxQxFqLbOGSBUlU=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: r8Qrpuz7peEnmrp+qgojAw9Zhpl1z2w94lGaelii64M=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: gRkJFZBipBsn7+sq00aPPGkEV+YWF1Lve+4gKe+7juA=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: WaTADevfvgyQuqC+x/vgKTfboADbdxu6rB5i8BOH58g=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: Dv9hURagZrOVYsj6cDCUGn+2JQiPGtdTfEINqBm+zWs=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: S0yNlhOBRmCNxMOK8ST7rqClIVPQA7S++elUbBn3210=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: Hq0zKjvhHERXBvoSvlxToroT7MXRsoMFYbbq+Sosenw=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: NKqWpLVF3pUZNwQg8vdS7JZKwaEEl0kfFhpHa4AShUk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3c:b9:c4:36:f0:04:76:7a:06:21:ac:b7:3a:2e:7f:1a:d8:65:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Apr 26 00:12:52 2025 GMT Not After : Apr 30 00:12:52 2025 GMT Subject: serialNumber=88613f97a52021b53908bf8ac4a0b14ddae579dcd78ca714b01887e129348d1f, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:7f:e3:77:11:13:6a:52:8b:78:a8:63:eb: cb:ac:fe:5a:b5:e3:9a:c6:b5:cb:9c:af:31:6b:97: e8:7b:b1:d8:c5:93:0a:e4:2c:16:dd:cb:9e:43:9a: d4:a1:26:71:8f:5c:fa:50:d4:38:ae:9c:ef:1b:82: ac:39:09:78:1e:43:3d:0a:b9:e6:da:89:3a:a5:ff: f8:9d:33:26:65:b2:3d:9a:5b:7c:85:e7:a0:28:67: 92:cb:1f:4c:80:23:b4:f5:95:43:2b:ee:df:a5:6b: 22:c5:c1:7d:5c:54:95:c9:f2:65:87:cf:6a:61:d2: fa:d3:c3:a0:71:1c:0a:1e:26:fb:4a:d7:fc:40:18: 87:a6:fd:13:70:57:97:e0:34:90:91:0b:50:6b:37: ca:d7:f7:4e:fa:5d:c9:bf:e9:43:ed:e3:67:a6:15: e7:da:4c:22:c3:76:55:84:a6:d1:d8:81:20:f9:33: e1:b1:af:f4:a4:48:53:55:ee:13:b0:98:56:ae:89: 4d:bd:2e:5f:a6:33:49:e9:78:41:87:19:b1:6b:f2: 5d:65:67:77:b8:b5:30:82:63:0a:49:85:5c:95:83: a5:7b:35:4c:72:fd:ec:03:dd:b5:7f:a3:d5:32:8d: a0:2d:35:3d:ba:dd:06:e0:68:78:6e:7a:48:e4:7b: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7D:12:CA:08:A2:35:50:31:B1:3F:61:1D:E9:C6:64:B7:93:0C:DF X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cb:a0:17:50:c6:69:08:2a:92:18:bb:60:9c:b5:d7:a7:7a: 1f:89:c6:3f:4c:43:53:d9:27:c8:72:7f:67:79:e9:43:e1:71: dc:34:be:89:4c:8b:2a:12:06:8c:57:b3:9d:c6:1c:7a:53:7a: 12:43:3f:51:dc:8e:bd:40:dc:e2:da:3f:66:97:e9:aa:95:cd: 13:96:7f:f4:67:70:3a:ca:21:7c:01:f8:68:0e:54:ab:a4:6b: 9f:1d:65:be:f1:76:1b:f8:f7:16:1f:42:64:b1:fd:a6:73:eb: e9:cc:14:3c:70:00:01:53:29:1c:6e:94:73:b2:50:80:35:03: 4a:e7:5f:e2:02:f6:86:7b:8d:fb:a4:68:95:7a:83:ab:ed:5b: 82:d9:d1:58:a4:8c:c5:2c:29:79:15:69:cd:6b:09:02:7c:38: fa:84:31:6c:7e:02:65:89:28:7e:9c:36:71:4c:09:45:01:0f: 8c:4d:66:fe:d2:c4:7a:ec:d2:bc:76:8f:84:ca:b1:a6:39:bc: 9f:c2:6c:cd:15:a8:6d:c4:89:46:ed:e4:04:8c:5b:6a:24:aa: 14:09:1a:bc:ab:cd:33:2a:02:de:5f:27:ca:e4:98:2d:0f:c9: 96:1e:1d:0a:6a:6d:fc:03:45:2e:94:92:ec:27:03:42:67:d4: c5:93:b9:5c -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUfzy5xDbwBHZ6BiGstzoufxrYZcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwNDI2MDAxMjUyWhcNMjUwNDMwMDAxMjUy WjB6MUkwRwYDVQQFE0A4ODYxM2Y5N2E1MjAyMWI1MzkwOGJmOGFjNGEwYjE0ZGRh ZTU3OWRjZDc4Y2E3MTRiMDE4ODdlMTI5MzQ4ZDFmMS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9Z3/jdxETalKLeKhj68us/lq145rGtcucrzFrl+h7sdjF kwrkLBbdy55DmtShJnGPXPpQ1DiunO8bgqw5CXgeQz0KuebaiTql//idMyZlsj2a W3yF56AoZ5LLH0yAI7T1lUMr7t+layLFwX1cVJXJ8mWHz2ph0vrTw6BxHAoeJvtK 1/xAGIem/RNwV5fgNJCRC1BrN8rX9076Xcm/6UPt42emFefaTCLDdlWEptHYgSD5 M+Gxr/SkSFNV7hOwmFauiU29Ll+mM0npeEGHGbFr8l1lZ3e4tTCCYwpJhVyVg6V7 NUxy/ewD3bV/o9UyjaAtNT263QbgaHhuekjke2aVAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUE30SygiiNVAxsT9hHenGZLeTDN8wHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzy6AX UMZpCCqSGLtgnLXXp3oficY/TENT2SfIcn9neelD4XHcNL6JTIsqEgaMV7Odxhx6 U3oSQz9R3I69QNzi2j9ml+mqlc0Tln/0Z3A6yiF8AfhoDlSrpGufHWW+8XYb+PcW H0Jksf2mc+vpzBQ8cAABUykcbpRzslCANQNK51/iAvaGe437pGiVeoOr7VuC2dFY pIzFLCl5FWnNawkCfDj6hDFsfgJliSh+nDZxTAlFAQ+MTWb+0sR67NK8do+EyrGm ObyfwmzNFahtxIlG7eQEjFtqJKoUCRq8q80zKgLeXyfK5JgtD8mWHh0Kam38A0Uu lJLsJwNCZ9TFk7lc -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:10 2025 by rpki-client