
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier: C/sVgc/Qr7Gg9L8N2ISY78nZ91V7alD1SY7zclvrViM=
Subject key identifier: 89:AA:C3:BD:89:21:50:45:04:F2:00:7D:1E:BC:33:D6:BD:EA:C6:64
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial: 2D38F88CE4617FB891E9377B7B0B6322FD4109E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number: 01CC
Signing time: Wed 14 Oct 2026 00:01:52 +0000
Manifest this update: Wed 14 Oct 2026 00:01:52 +0000
Manifest next update: Sun 18 Oct 2026 00:01:52 +0000
Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: mizRw7SEPh8dCHhUZhyfVblF0zvAs4XGiS+DkgdHUSU=)
2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: sLfhaquCadTlwI/xVGTbj11vctb2w10uHvrSn5Bu4PM=)
3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: vda6jLblzXfTsJDcjiy2HjuCm4z/eJpdbPCVAGcGzOk=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 00:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:38:f8:8c:e4:61:7f:b8:91:e9:37:7b:7b:0b:63:22:fd:41:09:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Validity
Not Before: Oct 14 00:01:52 2026 GMT
Not After : Oct 18 00:01:52 2026 GMT
Subject: serialNumber=9c2846476362f4cfb542e13d9f9ce915a8d497c73bd31862232149cbca1ba713, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:02:3c:28:9c:ad:00:98:d3:26:ee:ee:5a:
21:21:09:64:36:ac:06:b3:a0:6c:11:fd:fc:fa:fd:
77:77:32:cd:1e:d6:dc:b1:0e:8b:11:d5:02:fc:12:
3a:d4:31:81:23:75:1f:a7:bc:ae:cb:1a:32:1a:a3:
5c:a5:80:72:93:e5:1c:b2:43:c4:c0:f9:a0:d5:d0:
12:ca:0b:83:08:0a:d7:d3:94:02:56:f4:9b:83:c6:
8f:11:f5:6c:b4:a6:71:12:19:cb:d2:2c:2c:a5:67:
88:cc:63:4a:ae:08:3f:16:0c:14:11:23:80:fd:bb:
13:fe:0a:c8:0e:4d:58:b6:db:ec:f7:b4:56:d3:c3:
5d:b9:14:72:26:26:e8:ea:53:34:1d:86:33:2f:cc:
2e:a2:40:97:e4:fd:12:10:14:ef:1f:07:9c:2c:8e:
49:12:8f:f2:10:7b:93:a5:8e:10:c6:ee:e1:64:83:
f6:85:67:91:0e:7b:0b:9c:2a:b6:69:98:92:b2:3e:
b3:58:5f:09:a2:73:9d:12:bb:cc:04:40:71:79:60:
76:88:c1:ff:79:af:5f:df:84:cb:db:a2:b9:eb:65:
ed:55:93:82:84:5d:cb:6e:a2:d9:9a:5b:ca:0e:4d:
a1:d9:0f:6f:fd:4c:e9:9e:51:c6:7f:d2:7d:5b:51:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AA:C3:BD:89:21:50:45:04:F2:00:7D:1E:BC:33:D6:BD:EA:C6:64
X509v3 Authority Key Identifier:
keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ce:d1:7a:48:67:f7:14:07:3f:4d:de:35:26:71:17:03:68:
a7:02:ec:fe:5d:cb:fc:90:c9:14:52:6a:f4:a2:6e:e2:72:62:
68:69:6b:b6:3a:2a:de:f8:a8:53:cc:fa:23:24:8a:bb:92:a8:
de:16:b0:9c:9e:26:ef:cc:2f:ed:5b:fe:06:eb:a1:de:43:5b:
87:7f:d0:ed:a8:1e:ad:3e:68:2a:c8:d6:76:4b:fb:d2:d5:07:
06:ad:4f:4c:d9:e8:9f:de:e3:47:c1:0d:fc:9a:6a:8b:6e:9d:
41:05:92:0d:f9:52:1c:34:0c:bc:b7:4a:49:2f:c5:d8:8e:a4:
5b:f6:e6:23:c8:74:00:dc:0e:6d:4c:8a:0c:76:2c:9a:24:e4:
d3:39:8d:bd:ab:77:99:5b:0e:cd:47:fe:83:3a:cf:e6:cd:5c:
93:16:0a:92:58:27:51:c4:c6:49:73:3f:ac:b1:49:00:21:d4:
c1:c0:76:2c:8a:26:a3:5e:76:69:ca:0e:ae:ba:5a:a3:fc:9e:
cc:10:15:b4:80:23:6b:c1:7b:29:27:a7:12:90:13:bb:66:59:
0e:a6:58:b1:f8:87:c1:98:5a:33:e6:f6:51:f3:b6:c0:e3:e4:
ca:b7:73:2b:fd:13:33:95:c3:ef:90:9e:8c:b2:a3:68:24:9f:
fc:9a:7a:c5
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIULTj4jORhf7iR6Td7ewtjIv1BCeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG
RjlGMTc5ODAeFw0yNjEwMTQwMDAxNTJaFw0yNjEwMTgwMDAxNTJaMHoxSTBHBgNV
BAUTQDljMjg0NjQ3NjM2MmY0Y2ZiNTQyZTEzZDlmOWNlOTE1YThkNDk3YzczYmQz
MTg2MjIzMjE0OWNiY2ExYmE3MTMxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj
YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJuQAjwonK0AmNMm7u5aISEJZDasBrOgbBH9/Pr9d3cyzR7W3LEOixHVAvwS
OtQxgSN1H6e8rssaMhqjXKWAcpPlHLJDxMD5oNXQEsoLgwgK19OUAlb0m4PGjxH1
bLSmcRIZy9IsLKVniMxjSq4IPxYMFBEjgP27E/4KyA5NWLbb7Pe0VtPDXbkUciYm
6OpTNB2GMy/MLqJAl+T9EhAU7x8HnCyOSRKP8hB7k6WOEMbu4WSD9oVnkQ57C5wq
tmmYkrI+s1hfCaJznRK7zARAcXlgdojB/3mvX9+Ey9uiuetl7VWTgoRdy26i2Zpb
yg5NodkPb/1M6Z5Rxn/SfVtRJhMCAwEAAaOCAocwggKDMB0GA1UdDgQWBBSJqsO9
iSFQRQTyAH0evDPWverGZDAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X
mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw
AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex
NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3
MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx
RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy
c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l
L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw
ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6
Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0
ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w
NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE
oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs7Rekhn9xQHP03eNSZxFwNopwLs/l3L
/JDJFFJq9KJu4nJiaGlrtjoq3vioU8z6IySKu5Ko3hawnJ4m78wv7Vv+Buuh3kNb
h3/Q7agerT5oKsjWdkv70tUHBq1PTNnon97jR8EN/Jpqi26dQQWSDflSHDQMvLdK
SS/F2I6kW/bmI8h0ANwObUyKDHYsmiTk0zmNvat3mVsOzUf+gzrP5s1ckxYKklgn
UcTGSXM/rLFJACHUwcB2LIomo152acoOrrpao/yezBAVtIAja8F7KSenEpATu2ZZ
DqZYsfiHwZhaM+b2UfO2wOPkyrdzK/0TM5XD75CejLKjaCSf/Jp6xQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 14:43:15 2026 by rpki-client