$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft File: 2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json) Hash identifier: jPnMZLj2OvbageC/rBMly8TZBcOSW7YxoGq86pTXSqs= Subject key identifier: C1:AA:F1:8E:AA:5E:A9:0B:4F:09:CE:86:A3:D2:50:31:C3:4C:E0:79 Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 099CEE10D6B75C178997BB885DE9E3F95004588C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft Manifest number: 03A9 Signing time: Sat 14 Jun 2025 00:22:51 +0000 Manifest this update: Sat 14 Jun 2025 00:22:51 +0000 Manifest next update: Wed 18 Jun 2025 00:22:51 +0000 Files and hashes: 1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: 5UT4Uqr7phYznEn5T/Nxp8X0Bon7it6eyrU4ecIPHpw=) 2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: +so24B7ZYGxm9nQE27gnASCGrNouyhskcSaFEk8LLzM=) 3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: HZYk44SLEa7erJfYF/afwzwUHwPxWiraXhtiGs4AIwc=) 4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: MDBVpUjZY8aWaTJNwdtlYFdevPTDNR9Fn4uVNFe7fdQ=) 5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: ob84O2kG6WP3A5Io1QpgiNMhkpi5lPbyk9WQ0OpTvNE=) 6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: S30Q64TzuLYgZuawXzqg/yMIiW9WzmScgAwuv5xlvDE=) 7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: nsa60KIYAL9eIEw2VC62S2j5IxsXNjmdpeYY1q/qZw4=) 8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: pG4fCzbjyPd7mhHs/CN5+NFS/zwVtiBUsODJbVgccMQ=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9c:ee:10:d6:b7:5c:17:89:97:bb:88:5d:e9:e3:f9:50:04:58:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Jun 14 00:22:51 2025 GMT Not After : Jun 18 00:22:51 2025 GMT Subject: serialNumber=69e686023f27d5b93ba818f91a6cfc4660a4e3ae9ff6c1b247b8b667b3d21509, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:77:44:07:b3:e0:3f:18:69:5b:f0:b3:2b: 9e:36:a2:c8:d3:f7:bb:82:5a:d1:ca:b5:a3:a7:ee: 84:da:05:a4:fb:cb:7c:94:ca:dc:be:87:fb:a1:47: ab:42:bf:2b:b6:71:37:7d:73:c2:36:72:7f:db:c1: e8:63:1a:70:31:39:30:2e:05:67:f4:20:67:05:31: 15:4e:90:38:88:ac:c5:e3:cb:af:22:e5:db:9d:61: 7f:fd:f0:de:85:d6:7f:e1:43:43:9c:f6:a1:48:24: 3d:b5:9b:c3:82:50:4e:32:43:13:98:16:f8:be:45: f2:6d:59:df:f5:13:1f:a9:8c:d8:6f:1f:bc:1b:13: 4b:f0:02:37:9d:62:8b:68:22:f6:47:16:6b:83:f4: f5:41:8f:cb:85:ea:04:23:1f:cf:22:54:c3:7b:79: ef:ce:4d:d5:4d:b9:b8:42:a2:25:e5:a0:78:7d:d5: 42:50:e8:df:e3:c3:8a:eb:21:bc:cb:37:35:78:3d: e5:23:4c:98:89:b8:ea:e5:66:60:82:e3:5a:87:b4: ab:4a:d3:ae:46:0d:d8:a1:12:00:3d:66:fb:83:78: 3b:db:d6:a3:2c:6d:0c:22:ed:80:a4:7a:54:5f:99: e0:27:eb:fc:84:c1:2a:8d:a3:92:9c:80:e3:b5:f9: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AA:F1:8E:AA:5E:A9:0B:4F:09:CE:86:A3:D2:50:31:C3:4C:E0:79 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:9d:0a:7d:bc:3e:72:db:6e:1f:50:5a:e1:d4:b3:6d:1a:88: 6b:c2:f5:ce:8e:2c:52:39:85:bf:ba:9f:55:52:3a:df:9a:42: b4:52:fb:b9:63:a7:73:3c:6b:e9:96:69:a1:dc:5b:31:d0:f9: fa:b1:db:1e:f1:9a:8f:14:b8:c8:88:b1:96:43:81:b0:2a:9e: e9:6b:ff:ef:62:12:1d:5e:13:2f:c4:0a:00:36:65:c3:01:a6: 3f:0d:31:bf:06:fe:e0:2a:a7:7b:ad:ee:46:d4:71:18:94:0b: 4e:f0:02:93:78:12:52:29:90:95:42:66:43:43:9b:6d:37:20: cb:84:2f:f8:60:05:52:6d:60:8d:75:94:c4:b1:60:01:84:9c: 3d:9a:be:e2:db:b6:f8:66:e9:8f:3a:c9:20:1d:ed:a5:df:6c: 9a:b5:ae:b3:72:c2:61:d9:79:33:b5:23:b6:e6:56:e0:ae:91: 06:41:cb:16:3d:61:1f:6e:a2:d0:1c:93:73:49:f4:55:9e:e1: 7e:2b:7a:ae:cb:4f:95:ad:99:e0:33:8c:0e:7e:67:f6:79:58: 56:5c:17:c3:97:a7:da:fb:c8:d9:01:46:3d:27:ec:f8:7d:ec: 38:4e:c4:98:a7:21:bb:32:74:2d:b4:6c:bb:17:e8:bf:8f:00: b3:d3:71:28 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUCZzuENa3XBeJl7uIXenj+VAEWIwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjUwNjE0MDAyMjUxWhcNMjUwNjE4MDAyMjUx WjB6MUkwRwYDVQQFE0A2OWU2ODYwMjNmMjdkNWI5M2JhODE4ZjkxYTZjZmM0NjYw YTRlM2FlOWZmNmMxYjI0N2I4YjY2N2IzZDIxNTA5MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKSXdEB7PgPxhpW/CzK542osjT97uCWtHKtaOn7oTaBaT7 y3yUyty+h/uhR6tCvyu2cTd9c8I2cn/bwehjGnAxOTAuBWf0IGcFMRVOkDiIrMXj y68i5dudYX/98N6F1n/hQ0Oc9qFIJD21m8OCUE4yQxOYFvi+RfJtWd/1Ex+pjNhv H7wbE0vwAjedYotoIvZHFmuD9PVBj8uF6gQjH88iVMN7ee/OTdVNubhCoiXloHh9 1UJQ6N/jw4rrIbzLNzV4PeUjTJiJuOrlZmCC41qHtKtK065GDdihEgA9ZvuDeDvb 1qMsbQwi7YCkelRfmeAn6/yEwSqNo5KcgOO1+UVrAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUwarxjqpeqQtPCc6Go9JQMcNM4HkwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4LzJiVHdna3k0QzZqOEVrQzBlVXRSVUhIcGRSMC5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3LWQwNTJjNTM1 Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvnQp9 vD5y224fUFrh1LNtGohrwvXOjixSOYW/up9VUjrfmkK0Uvu5Y6dzPGvplmmh3Fsx 0Pn6sdse8ZqPFLjIiLGWQ4GwKp7pa//vYhIdXhMvxAoANmXDAaY/DTG/Bv7gKqd7 re5G1HEYlAtO8AKTeBJSKZCVQmZDQ5ttNyDLhC/4YAVSbWCNdZTEsWABhJw9mr7i 27b4ZumPOskgHe2l32yata6zcsJh2XkztSO25lbgrpEGQcsWPWEfbqLQHJNzSfRV nuF+K3quy0+VrZngM4wOfmf2eVhWXBfDl6fa+8jZAUY9J+z4few4TsSYpyG7MnQt tGy7F+i/jwCz03Eo -----END CERTIFICATE-----Generated at Sat Jun 14 20:42:05 2025 by rpki-client