$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: 2+k8Q0HhcWc3CxN4UtdmLYDNE/Gn/BmCRHHDe0cEAwY= Subject key identifier: B5:98:19:60:8B:3A:52:B1:98:98:7F:C2:E5:72:5A:7A:7E:67:28:F7 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 577071DDCF88ED474DB60AC983B0A83011292F05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 0374 Signing time: Thu 07 Aug 2025 00:26:37 +0000 Manifest this update: Thu 07 Aug 2025 00:26:37 +0000 Manifest next update: Mon 11 Aug 2025 00:26:37 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: SfnEiRr5KCKsUeqyB4ET58MBDaYV6AsCSobsb4/9ni4=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:70:71:dd:cf:88:ed:47:4d:b6:0a:c9:83:b0:a8:30:11:29:2f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Aug 7 00:26:37 2025 GMT Not After : Aug 11 00:26:37 2025 GMT Subject: serialNumber=d40dbd8679729c9b440df84c2d3efb223c431117f618616646e76c3e1b3c315b, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:0f:00:1c:4f:64:57:00:fb:da:91:f1:c9: 24:eb:30:8b:4b:50:89:0d:a9:22:db:56:3b:08:97: 2c:18:ce:5b:ae:60:7f:a0:1e:e5:c1:8e:2c:ad:fe: d7:99:ee:b1:2c:bf:70:1e:67:63:a7:be:bc:c5:54: b2:2b:de:97:03:87:89:93:f9:58:f6:7c:d3:dd:98: 26:d9:a2:11:c5:9e:c0:3c:6b:19:2e:ac:b9:95:84: 04:7a:b9:5f:5e:dd:a5:de:cc:7e:e5:60:be:88:f6: 95:b8:f3:7f:6c:1d:d7:61:b0:66:d0:b6:aa:ce:52: c2:ae:15:e5:0f:0d:6e:0f:6e:16:58:c2:1b:ea:00: c3:7d:b1:4c:70:a6:19:9f:ff:2a:4c:29:3f:71:fe: 55:c5:30:bb:8a:1a:0a:1b:5c:64:45:38:8f:c0:b6: 87:1d:ed:66:a7:e7:7f:af:cd:51:57:fb:20:40:94: be:58:3d:eb:d9:07:88:30:e3:6d:d1:f6:ec:03:28: f2:8b:c4:59:d4:4d:a9:a7:f2:33:0c:e7:45:fb:a4: d6:3d:83:08:ae:6e:31:24:ba:55:50:25:20:31:bd: d2:82:65:28:4f:b7:f2:1e:dc:ea:f5:ed:ff:8e:df: e6:13:34:57:dd:ad:42:8b:9f:be:57:27:5d:1b:e4: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:98:19:60:8B:3A:52:B1:98:98:7F:C2:E5:72:5A:7A:7E:67:28:F7 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2a:d5:1a:28:04:35:0e:8f:55:86:25:36:05:06:b8:fd:b4: e0:39:a2:9f:ec:8c:6d:72:7a:8f:94:4a:75:6f:0d:cc:32:9f: 39:98:b9:29:d2:cb:3b:56:c8:60:d8:ab:fa:2d:24:f9:91:4a: 11:d7:50:9b:b3:cf:5e:a1:50:75:b8:64:93:92:8e:29:67:4c: 02:79:79:bf:6f:49:14:68:49:da:bf:c4:de:71:c4:b6:df:88: cb:42:ee:d5:a6:79:2f:a5:95:c7:6e:94:a3:ad:58:f5:5e:65: 81:7d:29:d3:42:e8:e2:40:41:7b:e8:79:25:2f:5e:b3:1a:e8: be:78:39:6d:66:8c:67:cf:9e:bf:2f:22:a0:99:65:7e:f8:8b: e7:18:00:2b:1a:c2:04:09:eb:3c:29:b5:20:dc:8e:4e:75:90: ff:10:0f:9b:de:95:80:b7:61:92:0f:36:82:9e:33:c6:fc:68: 91:14:43:a9:7c:25:3f:fe:3f:b4:2f:01:f3:c8:8d:15:3b:e1: 32:f9:05:04:8d:4b:be:80:f0:6e:4f:d6:3a:d6:ad:af:49:e8: 0a:3d:8b:40:0b:4f:1c:d8:27:9f:8e:a1:9b:81:bc:bd:1f:ad: ea:e4:f5:77:d6:54:b5:1c:c2:11:b2:50:55:de:8f:94:3e:a5: e8:71:ed:d9 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUV3Bx3c+I7UdNtgrJg7CoMBEpLwUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjUwODA3MDAyNjM3WhcNMjUwODExMDAyNjM3 WjB6MUkwRwYDVQQFE0BkNDBkYmQ4Njc5NzI5YzliNDQwZGY4NGMyZDNlZmIyMjNj NDMxMTE3ZjYxODYxNjY0NmU3NmMzZTFiM2MzMTViMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLmg8AHE9kVwD72pHxySTrMItLUIkNqSLbVjsIlywYzluu YH+gHuXBjiyt/teZ7rEsv3AeZ2OnvrzFVLIr3pcDh4mT+Vj2fNPdmCbZohHFnsA8 axkurLmVhAR6uV9e3aXezH7lYL6I9pW4839sHddhsGbQtqrOUsKuFeUPDW4PbhZY whvqAMN9sUxwphmf/ypMKT9x/lXFMLuKGgobXGRFOI/Atocd7Wan53+vzVFX+yBA lL5YPevZB4gw423R9uwDKPKLxFnUTamn8jMM50X7pNY9gwiubjEkulVQJSAxvdKC ZShPt/Ie3Or17f+O3+YTNFfdrUKLn75XJ10b5N5dAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUtZgZYIs6UrGYmH/C5XJaen5nKPcwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxKtUa KAQ1Do9VhiU2BQa4/bTgOaKf7IxtcnqPlEp1bw3MMp85mLkp0ss7Vshg2Kv6LST5 kUoR11Cbs89eoVB1uGSTko4pZ0wCeXm/b0kUaEnav8TeccS234jLQu7VpnkvpZXH bpSjrVj1XmWBfSnTQujiQEF76HklL16zGui+eDltZoxnz56/LyKgmWV++IvnGAAr GsIECes8KbUg3I5OdZD/EA+b3pWAt2GSDzaCnjPG/GiRFEOpfCU//j+0LwHzyI0V O+Ey+QUEjUu+gPBuT9Y61q2vSegKPYtAC08c2CefjqGbgby9H63q5PV31lS1HMIR slBV3o+UPqXoce3Z -----END CERTIFICATE-----Generated at Thu Aug 7 11:07:41 2025 by rpki-client