$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: KrIXDoCLppXchzBHsq6Jy8VW6G504wk5vzO0Ea/d9mE= Subject key identifier: E3:52:3E:2A:85:A1:E4:ED:C4:87:EB:C0:B5:4C:0F:2D:F8:C1:55:9A Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 6550C677CF5D2C363B09928C95FB5F82DAFA79E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 0101 Signing time: Thu 26 Mar 2026 00:07:45 +0000 Manifest this update: Thu 26 Mar 2026 00:07:45 +0000 Manifest next update: Mon 30 Mar 2026 00:07:45 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: cr4oikUg6zUv2Eup8p6QJxQvA+W7tc2515d+Bx4bTi8=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: zMij5sOHhIyIY2xPTp819MwktL2bSrUOnZkzkiK7YeI=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: ABXvrY1H8sif2mzb2PUkws45DrOwZF1FEhBnXrV6W88=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 29 Mar 2026 13:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:50:c6:77:cf:5d:2c:36:3b:09:92:8c:95:fb:5f:82:da:fa:79:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Mar 26 00:07:45 2026 GMT Not After : Mar 30 00:07:45 2026 GMT Subject: serialNumber=e9598cb5d8928e57dc477445914a4fe6a0c6d6dffb28d1683ab65f2e0c2b032c, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:d9:a4:60:62:35:c5:5d:e3:40:06:3d:1a: e7:df:0c:29:56:e1:81:f7:e0:bf:4f:5e:06:12:01: 65:07:e7:d1:58:bc:a3:fc:8d:f2:86:6c:39:c3:52: e1:c5:60:5c:56:7e:2a:3b:34:f3:af:34:81:ec:87: 5b:b1:14:53:f9:1b:bc:bf:1c:1d:88:46:0b:6b:aa: 70:3c:b1:21:58:15:e9:8f:ad:6b:bf:16:54:98:68: 8c:56:4f:da:46:16:36:38:2c:43:d6:b9:bb:cb:bf: 59:31:e8:81:cc:db:50:0f:60:4b:20:64:1c:74:26: 57:d3:d2:c0:eb:df:1e:c0:a1:0c:bf:5d:1f:6e:06: 9a:47:8a:bb:3a:01:26:e9:c2:4b:a1:44:fc:e6:09: 34:79:93:47:ff:91:61:9a:5f:59:9a:34:77:40:d5: da:eb:e2:bf:b4:84:af:f4:5e:f9:13:ef:e7:2a:e7: 1d:07:06:d4:90:3f:07:e1:cb:8e:56:96:0c:22:71: 21:8c:b2:f8:aa:cc:0b:57:9e:9d:04:ac:5a:e3:c0: 1e:c3:ca:e2:60:9a:7d:02:36:c3:55:6c:36:65:0c: ae:ea:16:59:da:da:bf:da:2c:9b:8a:fe:b1:1e:45: 6a:e9:02:85:64:0e:87:98:47:9c:e8:24:c9:13:84: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:52:3E:2A:85:A1:E4:ED:C4:87:EB:C0:B5:4C:0F:2D:F8:C1:55:9A X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:84:9e:e6:05:31:d4:1e:26:b0:ab:8b:3b:2a:75:6b:fa:82: 64:98:4b:d8:79:a5:e8:eb:00:00:63:f3:6a:fa:87:8c:4c:3b: 1b:f5:05:4d:69:3a:db:35:70:ba:86:2e:c2:7d:71:aa:4a:3d: f2:8c:08:2e:c7:a0:f1:42:43:53:78:d3:e2:11:de:1e:c4:1b: 20:a3:b1:fe:90:b6:02:fe:de:dd:13:d5:5c:23:69:e4:48:ee: cc:3f:c4:a8:77:69:ec:19:ea:27:38:fc:29:99:b3:25:97:29: 55:ba:40:fa:bc:b2:dd:69:67:8c:26:62:32:35:da:64:85:84: 6b:2e:68:97:23:30:f7:a7:06:92:36:d0:be:6d:49:7f:d8:69: 1c:e1:27:e8:41:7b:10:0c:9c:5d:29:ca:ca:f2:a8:1d:25:46: ec:ea:cf:d6:b6:1b:6b:e3:8e:d2:40:54:c0:97:b0:40:5c:5d: 64:36:28:eb:7d:00:49:78:46:af:32:f2:f0:15:e2:67:f7:7b: c0:a4:7c:0b:24:77:cb:ba:a5:d1:13:0b:7a:74:08:65:85:77: a9:e6:af:52:5b:89:48:a3:8d:43:76:fd:72:a8:b1:0d:59:bf: 91:48:36:c0:e8:55:23:d4:22:6e:01:0b:41:f3:62:5f:58:6f: b9:4a:a9:80 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUZVDGd89dLDY7CZKMlftfgtr6eeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjAzMjYwMDA3NDVaFw0yNjAzMzAwMDA3NDVaMHoxSTBHBgNV BAUTQGU5NTk4Y2I1ZDg5MjhlNTdkYzQ3NzQ0NTkxNGE0ZmU2YTBjNmQ2ZGZmYjI4 ZDE2ODNhYjY1ZjJlMGMyYjAzMmMxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUT2aRgYjXFXeNABj0a598MKVbhgffgv09eBhIBZQfn0Vi8o/yN8oZsOcNS 4cVgXFZ+Kjs08680geyHW7EUU/kbvL8cHYhGC2uqcDyxIVgV6Y+ta78WVJhojFZP 2kYWNjgsQ9a5u8u/WTHogczbUA9gSyBkHHQmV9PSwOvfHsChDL9dH24GmkeKuzoB JunCS6FE/OYJNHmTR/+RYZpfWZo0d0DV2uviv7SEr/Re+RPv5yrnHQcG1JA/B+HL jlaWDCJxIYyy+KrMC1eenQSsWuPAHsPK4mCafQI2w1VsNmUMruoWWdrav9osm4r+ sR5FaukChWQOh5hHnOgkyROEcNcCAwEAAaOCAocwggKDMB0GA1UdDgQWBBTjUj4q haHk7cSH68C1TA8t+MFVmjAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfISe5gUx1B4msKuLOyp1a/qCZJhL2Hml 6OsAAGPzavqHjEw7G/UFTWk62zVwuoYuwn1xqko98owILseg8UJDU3jT4hHeHsQb IKOx/pC2Av7e3RPVXCNp5EjuzD/EqHdp7BnqJzj8KZmzJZcpVbpA+ryy3WlnjCZi MjXaZIWEay5olyMw96cGkjbQvm1Jf9hpHOEn6EF7EAycXSnKyvKoHSVG7OrP1rYb a+OO0kBUwJewQFxdZDYo630ASXhGrzLy8BXiZ/d7wKR8CyR3y7ql0RMLenQIZYV3 qeavUluJSKONQ3b9cqixDVm/kUg2wOhVI9QibgELQfNiX1hvuUqpgA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:22:15 2026 by rpki-client