$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft File: z2afnCt1NpzA_dOMFjxYsdQtAQc.mft (raw, json) Hash identifier: kLpxD0gXdLr/5uuiBMjS6bcCFG/EYZco7xPC2g1IR34= Subject key identifier: 93:8A:91:24:13:DB:47:19:D7:94:20:AB:52:77:20:B0:C7:28:37:0B Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 22D87AFF6A8D83D958222D287CE038BB9187999C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft Manifest number: 0471 Signing time: Fri 17 Apr 2026 01:56:03 +0000 Manifest this update: Fri 17 Apr 2026 01:56:03 +0000 Manifest next update: Tue 21 Apr 2026 01:56:03 +0000 Files and hashes: 1: z2afnCt1NpzA_dOMFjxYsdQtAQc.crl (hash: 3mpQ51HmixfF4nn4stM1Ahk2OBQL/sERFv6wEUZqKjw=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d8:7a:ff:6a:8d:83:d9:58:22:2d:28:7c:e0:38:bb:91:87:99:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 17 01:56:03 2026 GMT Not After : Apr 21 01:56:03 2026 GMT Subject: serialNumber=155460df4c3ef072276b88d9b64a4d2bc11e8bcf2f11339feda576221e954c8a, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:eb:ce:25:be:69:f3:b7:13:49:04:c3:4e: 42:11:8f:bc:57:e1:34:07:ff:36:fb:0b:01:08:76: 28:c0:b6:7d:cd:e6:28:46:ce:9d:89:0b:fd:e1:d0: 16:10:88:f9:1d:49:88:15:43:b9:14:26:69:24:d6: 38:6d:12:c2:db:02:ed:4d:31:a7:e0:27:36:83:3a: 5e:18:cc:19:9a:6d:f6:58:fb:6f:c4:47:ac:8d:ab: 9b:a8:ab:c1:13:aa:d6:1a:ad:56:b5:53:bb:a5:4f: bd:f1:37:51:24:1f:75:28:d7:16:46:b9:e1:a2:21: 86:5b:07:5a:57:f0:6a:a8:9b:92:c4:4b:23:71:ed: 09:f2:c9:09:30:63:c0:66:8c:0f:4c:71:34:59:21: 02:8d:5e:cc:2b:7f:e0:ba:81:24:fe:ef:af:15:48: 5a:03:dc:4c:d4:02:af:ef:e7:6d:ce:43:8e:3e:67: f1:d1:76:26:20:55:d5:c3:ca:a8:8d:7d:3c:88:11: de:6b:6c:f0:bd:60:b2:c9:92:d5:a3:8c:be:14:d7: 08:b7:c9:13:8e:63:fd:59:46:57:b5:b8:a7:0b:b4: 19:5c:c5:b2:c0:41:71:db:ab:2d:23:67:8f:e5:69: db:c6:e0:ec:7a:c7:72:8e:3d:b2:de:58:6d:c3:e3: 55:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8A:91:24:13:DB:47:19:D7:94:20:AB:52:77:20:B0:C7:28:37:0B X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:20:db:31:62:b5:37:fe:6b:02:01:20:7b:6d:21:7d:33:22: 05:3a:b5:ab:b6:0c:2b:06:33:e1:31:43:15:26:08:a0:1c:4d: c4:f1:42:9e:33:27:d6:77:fd:15:d6:a9:74:57:53:ea:9c:a8: 72:27:5b:55:61:2d:b8:c3:0a:ae:cf:a4:de:79:bd:ae:37:27: 01:9c:a1:cc:0f:83:7d:ba:82:42:59:17:ee:3c:ae:cf:45:3c: a0:54:a9:56:45:e2:b9:e5:0b:93:15:35:66:02:48:a4:88:97: de:49:3a:9e:db:d3:e8:ff:d8:ab:c8:fe:53:6e:c1:b9:74:8c: c3:35:a0:6d:d4:88:56:70:e7:79:37:4e:0d:56:86:f8:73:ce: 21:2c:56:68:3d:99:77:2b:6c:10:7e:2c:36:95:4b:e9:ac:6e: 0d:6e:f6:99:40:d9:fe:9e:b5:d4:6d:7c:ad:71:cb:71:04:11: 2e:21:45:5e:55:4b:3f:0e:55:2a:e7:0d:b8:95:c2:f1:4d:74: b3:ad:b2:b6:3d:95:70:13:4c:bf:b1:7b:70:5e:e7:25:e8:86: ab:16:c1:ab:d3:a1:e0:bc:69:05:99:ee:f8:5a:1c:61:8b:dd: 65:b4:36:90:78:71:60:69:20:45:24:2d:52:84:ba:c1:42:30: 75:ed:36:dd -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUIth6/2qNg9lYIi0ofOA4u5GHmZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjYwNDE3MDE1NjAzWhcNMjYwNDIxMDE1NjAz WjB6MUkwRwYDVQQFE0AxNTU0NjBkZjRjM2VmMDcyMjc2Yjg4ZDliNjRhNGQyYmMx MWU4YmNmMmYxMTMzOWZlZGE1NzYyMjFlOTU0YzhhMS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6QevOJb5p87cTSQTDTkIRj7xX4TQH/zb7CwEIdijAtn3N 5ihGzp2JC/3h0BYQiPkdSYgVQ7kUJmkk1jhtEsLbAu1NMafgJzaDOl4YzBmabfZY +2/ER6yNq5uoq8ETqtYarVa1U7ulT73xN1EkH3Uo1xZGueGiIYZbB1pX8Gqom5LE SyNx7QnyyQkwY8BmjA9McTRZIQKNXswrf+C6gST+768VSFoD3EzUAq/v523OQ44+ Z/HRdiYgVdXDyqiNfTyIEd5rbPC9YLLJktWjjL4U1wi3yROOY/1ZRle1uKcLtBlc xbLAQXHbqy0jZ4/ladvG4Ox6x3KOPbLeWG3D41UzAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUk4qRJBPbRxnXlCCrUncgsMcoNwswHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzL3oyYWZuQ3QxTnB6QV9kT01GanhZc2RRdEFRYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQz M2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlINsx YrU3/msCASB7bSF9MyIFOrWrtgwrBjPhMUMVJgigHE3E8UKeMyfWd/0V1ql0V1Pq nKhyJ1tVYS24wwquz6Teeb2uNycBnKHMD4N9uoJCWRfuPK7PRTygVKlWReK55QuT FTVmAkikiJfeSTqe29Po/9iryP5TbsG5dIzDNaBt1IhWcOd5N04NVob4c84hLFZo PZl3K2wQfiw2lUvprG4NbvaZQNn+nrXUbXytcctxBBEuIUVeVUs/DlUq5w24lcLx TXSzrbK2PZVwE0y/sXtwXucl6IarFsGr06HgvGkFme74Whxhi91ltDaQeHFgaSBF JC1ShLrBQjB17Tbd -----END CERTIFICATE-----Generated at Fri Apr 17 23:35:05 2026 by rpki-client