$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: /Pq0ygleZOGiUstoN405H8LBIQymVul80M0DcySije0= Subject key identifier: 56:E7:DB:1A:D8:E3:C9:3E:98:DE:54:E3:5F:79:CF:8E:BE:F5:63:7A Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 24B0C76C5D0B38CDDDEEB0089C2196DA78446865 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 0340 Signing time: Mon 16 Jun 2025 00:13:41 +0000 Manifest this update: Mon 16 Jun 2025 00:13:41 +0000 Manifest next update: Fri 20 Jun 2025 00:13:41 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: 6lvcyqzMuo3G1FPaK1Q4ZnmOqs2agRmmGpV012f623M=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b0:c7:6c:5d:0b:38:cd:dd:ee:b0:08:9c:21:96:da:78:44:68:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Jun 16 00:13:41 2025 GMT Not After : Jun 20 00:13:41 2025 GMT Subject: serialNumber=7b55e5d3b8cd1ba8021e31da9c3c8996e23bd061049c5c85989d030e48d79dab, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:f1:35:56:64:87:12:5b:4d:73:28:49:6f: 79:3d:ff:1f:3d:63:ee:89:fb:69:83:aa:fe:0a:d5: 08:78:66:03:94:bc:be:3a:f2:15:db:ca:c3:33:79: 57:31:f4:66:37:eb:db:a1:97:2a:33:18:80:45:f4: af:e6:72:11:29:a2:8c:02:cb:fb:5c:1e:af:95:e9: 8c:5e:13:e9:a3:24:f0:55:c4:df:3e:c0:9b:75:0e: 2a:7c:7b:eb:76:43:af:d2:dd:4b:a3:99:df:9e:e1: 70:b5:2d:23:cd:50:ea:b5:75:43:a7:84:bf:8f:af: 27:dd:62:65:7d:dc:49:c0:c2:53:5b:df:ed:d0:89: c7:65:b3:3e:56:31:fb:5d:dd:09:ff:04:78:13:21: bf:c3:dc:cf:fc:0a:12:86:b0:40:5a:cd:6f:dd:fb: a6:89:e9:37:39:76:e5:85:62:5d:c2:78:df:39:34: d7:a7:a2:51:c0:1c:fc:bc:c0:fc:33:45:4b:eb:b4: ef:f8:89:f7:84:3a:ac:38:15:1e:30:d5:8e:fa:57: 17:81:ca:d6:eb:67:ff:ea:8a:1a:14:67:14:9d:39: 94:49:de:86:e8:53:99:c8:47:65:81:4e:c6:00:53: 9b:32:35:a0:94:6a:33:87:bd:f4:8b:c1:95:c6:27: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E7:DB:1A:D8:E3:C9:3E:98:DE:54:E3:5F:79:CF:8E:BE:F5:63:7A X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:41:fb:9a:cc:ee:49:fc:77:3a:b2:aa:e1:9e:c6:2f:20:ab: d0:1e:94:7c:90:c8:72:b7:90:ba:60:76:02:b9:88:93:41:a8: 7a:df:62:7b:22:67:f0:c7:1c:6b:d3:88:ff:ac:ef:d8:ac:37: 3d:3b:81:83:bf:58:de:50:74:6f:72:d8:2c:2e:f0:c9:b5:27: 04:e5:a0:2f:8a:72:9b:6a:a6:65:05:42:12:6f:dd:a0:4b:56: ee:1c:0a:84:46:da:e3:e4:fe:e0:28:49:26:f6:79:72:1e:f7: 93:90:be:47:ee:79:a9:54:aa:63:88:5b:ee:5e:0e:8c:be:41: cb:5e:f6:f2:b2:41:09:46:80:bc:9d:0c:25:6e:f8:27:9f:e3: 14:5c:ca:e7:f4:dd:3a:fb:f5:31:e9:06:9a:0c:d0:02:e9:f0: 2c:75:24:4f:cd:bf:b6:41:f1:06:44:b2:ab:09:2c:02:c8:72: c2:c3:32:6f:c9:00:a0:41:68:a8:ff:57:0e:0d:cb:49:5c:45: df:f2:dc:8b:49:1c:bf:fe:f4:b5:0e:39:d8:d8:81:7f:4e:10: 14:07:89:24:ae:73:73:66:2f:cd:07:b3:bc:1a:d2:8c:a4:e8: 9e:45:9a:ec:5e:05:81:21:28:86:7a:1d:ad:54:bc:37:e6:45: d8:5b:4f:20 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUJLDHbF0LOM3d7rAInCGW2nhEaGUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUwNjE2MDAxMzQxWhcNMjUwNjIwMDAxMzQx WjB6MUkwRwYDVQQFE0A3YjU1ZTVkM2I4Y2QxYmE4MDIxZTMxZGE5YzNjODk5NmUy M2JkMDYxMDQ5YzVjODU5ODlkMDMwZTQ4ZDc5ZGFiMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwKPE1VmSHEltNcyhJb3k9/x89Y+6J+2mDqv4K1Qh4ZgOU vL468hXbysMzeVcx9GY369uhlyozGIBF9K/mchEpoowCy/tcHq+V6YxeE+mjJPBV xN8+wJt1Dip8e+t2Q6/S3Uujmd+e4XC1LSPNUOq1dUOnhL+PryfdYmV93EnAwlNb 3+3Qicdlsz5WMftd3Qn/BHgTIb/D3M/8ChKGsEBazW/d+6aJ6Tc5duWFYl3CeN85 NNenolHAHPy8wPwzRUvrtO/4ifeEOqw4FR4w1Y76VxeBytbrZ//qihoUZxSdOZRJ 3oboU5nIR2WBTsYAU5syNaCUajOHvfSLwZXGJ1SZAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUVufbGtjjyT6Y3lTjX3nPjr71Y3owHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGQfua zO5J/Hc6sqrhnsYvIKvQHpR8kMhyt5C6YHYCuYiTQah632J7Imfwxxxr04j/rO/Y rDc9O4GDv1jeUHRvctgsLvDJtScE5aAvinKbaqZlBUISb92gS1buHAqERtrj5P7g KEkm9nlyHveTkL5H7nmpVKpjiFvuXg6MvkHLXvbyskEJRoC8nQwlbvgnn+MUXMrn 9N06+/Ux6QaaDNAC6fAsdSRPzb+2QfEGRLKrCSwCyHLCwzJvyQCgQWio/1cODctJ XEXf8tyLSRy//vS1DjnY2IF/ThAUB4kkrnNzZi/NB7O8GtKMpOieRZrsXgWBISiG eh2tVLw35kXYW08g -----END CERTIFICATE-----Generated at Mon Jun 16 04:25:37 2025 by rpki-client