$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: R/qotT4O/kF1Al6YVuAlwmOhXOLXgTKQAqF9TyeVVB4= Subject key identifier: 56:18:3A:FC:7F:D2:12:A8:24:35:16:84:90:B8:79:AE:FE:94:9C:4E Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 6DDFB46F9B8F05551F4966DFFA2EFD421BE6F63F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 63 Signing time: Tue 21 Oct 2025 00:50:58 +0000 Manifest this update: Tue 21 Oct 2025 00:50:58 +0000 Manifest next update: Sat 25 Oct 2025 00:50:58 +0000 Files and hashes: 1: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: 9CB/IJ0q4pKr9d3miRCR6IobKvf5Hq41SXWFbUF5jPU=) 2: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: 6f6GNe81/XG6IWpE32HoVCEj61RcAAkXwboB3WMZ5U8=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Oct 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:df:b4:6f:9b:8f:05:55:1f:49:66:df:fa:2e:fd:42:1b:e6:f6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Oct 21 00:50:58 2025 GMT Not After : Oct 25 00:50:58 2025 GMT Subject: serialNumber=39da0342a6ca4648b12fd656e1eb94156110154be041d7368f645608fbbb8db5, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:65:83:1f:7b:14:63:bd:9a:ef:3f:1a:8d: bd:ef:88:38:b6:7a:25:f9:52:55:02:8f:03:77:dd: 4c:f8:31:06:f7:21:50:52:29:ce:65:82:6c:23:26: 23:fa:7b:dc:e0:c7:14:35:f8:0f:7f:1c:cd:46:b4: 69:65:39:14:ae:f5:ae:ad:bf:74:ab:48:c8:a5:ee: 98:34:60:b7:3b:f8:10:c5:56:06:f1:d6:bf:b4:d7: d6:53:9c:36:30:e7:3c:2e:4e:3e:2b:1f:43:b2:e2: df:8f:65:f4:9b:fb:e4:26:70:45:d9:19:a1:2d:c3: a7:aa:cf:27:b8:a4:eb:0f:6c:89:ac:4d:c0:3b:ba: 7f:88:80:11:09:46:83:a6:83:d1:3c:28:fe:82:a4: 03:59:1e:7f:60:ca:a0:ea:9b:8b:e6:ea:22:7f:22: ad:6f:94:82:0d:9d:8c:f2:78:43:65:fc:f3:ad:f7: 0e:f1:b5:ff:59:7e:54:29:07:66:1e:a9:89:22:35: 17:62:13:9f:8e:e7:38:d1:30:44:d4:48:18:70:fa: 6e:4d:7b:dd:fa:38:2b:22:07:94:ed:34:f5:cb:68: c5:78:a8:4c:9d:bd:f2:a7:e4:ef:69:e7:58:90:22: 0d:30:47:5a:f4:ab:1b:1e:32:81:a4:c2:86:aa:0b: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:18:3A:FC:7F:D2:12:A8:24:35:16:84:90:B8:79:AE:FE:94:9C:4E X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:90:5c:32:ab:5b:59:ae:5e:8c:76:db:b9:bf:06:58:8a:ee: 88:a7:d2:e9:92:9b:c6:26:86:f3:bb:59:b0:7f:d5:47:d2:43: 06:1c:84:8f:6b:4c:17:e4:aa:c3:08:30:ec:57:05:12:11:cc: 55:8f:94:ed:50:43:96:69:a1:db:31:88:81:ae:d7:48:c8:fb: 0c:00:78:a0:d0:dd:4a:91:95:e5:7e:c5:a4:4d:ac:d6:da:34: f9:79:54:a4:49:f2:86:04:f7:6f:d7:ff:66:3b:7d:79:ac:5a: bc:d3:0f:c2:11:d8:47:d9:dd:4c:37:d8:2c:94:89:4a:f5:80: 30:f0:21:47:06:61:20:20:5f:d3:4a:d7:c4:d7:c6:37:06:58: de:64:ea:9a:99:39:98:fa:1b:37:74:18:74:98:77:43:09:d0: dc:e0:f8:08:37:e1:29:cc:98:8e:a2:8a:3d:f9:4a:12:84:89: 3b:96:91:9a:2f:c3:ce:b6:c4:69:ce:24:08:8b:19:af:3c:e2: 8a:8d:55:5d:89:6f:92:11:1a:9b:ee:ed:d2:4a:c5:6e:28:11: 84:73:5c:37:3c:d7:5e:01:2b:50:81:2a:1c:36:fd:7c:a3:9f: 08:b4:d7:c2:88:78:76:a1:9b:70:5f:fa:87:c9:bf:27:ca:9c: b9:f3:8f:c3 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUbd+0b5uPBVUfSWbf+i79Qhvm9j8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNTEwMjEwMDUwNThaFw0yNTEwMjUwMDUwNThaMHoxSTBHBgNV BAUTQDM5ZGEwMzQyYTZjYTQ2NDhiMTJmZDY1NmUxZWI5NDE1NjExMDE1NGJlMDQx ZDczNjhmNjQ1NjA4ZmJiYjhkYjUxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqRZYMfexRjvZrvPxqNve+IOLZ6JflSVQKPA3fdTPgxBvchUFIpzmWCbCMm I/p73ODHFDX4D38czUa0aWU5FK71rq2/dKtIyKXumDRgtzv4EMVWBvHWv7TX1lOc NjDnPC5OPisfQ7Li349l9Jv75CZwRdkZoS3Dp6rPJ7ik6w9siaxNwDu6f4iAEQlG g6aD0Two/oKkA1kef2DKoOqbi+bqIn8irW+Ugg2djPJ4Q2X88633DvG1/1l+VCkH Zh6piSI1F2ITn47nONEwRNRIGHD6bk173fo4KyIHlO009ctoxXioTJ298qfk72nn WJAiDTBHWvSrGx4ygaTChqoLIoMCAwEAAaOCAocwggKDMB0GA1UdDgQWBBRWGDr8 f9ISqCQ1FoSQuHmu/pScTjAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJBcMqtbWa5ejHbbub8GWIruiKfS6ZKb xiaG87tZsH/VR9JDBhyEj2tMF+Sqwwgw7FcFEhHMVY+U7VBDlmmh2zGIga7XSMj7 DAB4oNDdSpGV5X7FpE2s1to0+XlUpEnyhgT3b9f/Zjt9eaxavNMPwhHYR9ndTDfY LJSJSvWAMPAhRwZhICBf00rXxNfGNwZY3mTqmpk5mPobN3QYdJh3QwnQ3OD4CDfh KcyYjqKKPflKEoSJO5aRmi/DzrbEac4kCIsZrzziio1VXYlvkhEam+7t0krFbigR hHNcNzzXXgErUIEqHDb9fKOfCLTXwoh4dqGbcF/6h8m/J8qcufOPww== -----END CERTIFICATE-----Generated at Tue Oct 21 07:09:59 2025 by rpki-client