$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: CH85wflAP3PLoEsE1vGs6RsUCzhyYUjskbujQcOiZro= Subject key identifier: B1:C9:BE:D2:09:DC:F9:71:92:AB:63:71:35:EF:7B:A9:CE:78:1C:9E Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 212CEBEE5B35ED91850153368DFF3029A625A64D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 0179 Signing time: Fri 24 Jul 2026 00:02:27 +0000 Manifest this update: Fri 24 Jul 2026 00:02:27 +0000 Manifest next update: Tue 28 Jul 2026 00:02:27 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: UF2NI9to/ZTHTw76rU42WL5vvIIGRtLRLTutrT8D2g8=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: NgP7gRkBr0KKwrc/EznhF1Cd3Hc/z5/lHlKOKPr7tOQ=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: 3YhJnLqBjCdJ1xQh+vP1PdeFiCrg0xlCgclocs1qM2w=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 27 Jul 2026 23:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2c:eb:ee:5b:35:ed:91:85:01:53:36:8d:ff:30:29:a6:25:a6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Jul 24 00:02:27 2026 GMT Not After : Jul 28 00:02:27 2026 GMT Subject: serialNumber=286997467790e148e562620ba44ca0e091cbf6a0a05cb92d5739ab7defcbe7b9, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:3c:85:fb:a3:7a:43:ac:aa:ba:fd:fb:a7: 8e:cb:07:b9:fd:3b:79:72:e6:78:3e:90:ca:a5:02: 1e:9e:97:ce:32:02:84:bc:89:61:74:2b:6d:a4:b9: c5:f6:53:84:fc:05:cf:77:e9:f2:65:72:d8:bd:f8: d1:3e:aa:4d:6f:9b:2d:b3:4f:fa:61:c0:ea:78:e4: ef:8e:e8:cb:fd:af:08:7a:b3:66:95:81:cc:6e:ba: cb:3c:84:3f:78:cf:3c:ba:dc:12:2d:2c:30:3c:b4: cf:61:01:db:a6:27:df:ea:f2:a8:01:4f:3f:55:9f: 89:3a:d5:2b:22:2e:3e:09:41:84:31:a2:40:05:e9: 0b:0d:08:1c:85:bf:56:fa:fa:54:c0:d3:f4:0b:2a: 78:91:2e:e9:a9:40:ec:b5:f6:e9:63:05:5f:19:3d: b1:b2:41:bc:d9:23:a4:70:3d:55:54:11:2c:25:87: 26:6f:70:84:8a:df:9b:4c:a3:ee:aa:95:de:04:e6: b2:3a:fb:ec:b4:01:5f:12:8e:fb:a7:dd:77:a7:78: 36:e2:47:27:bd:57:9e:d0:80:ab:43:36:bc:be:33: 20:6e:81:ed:5a:38:27:70:b7:b2:30:78:e7:00:6d: dc:5f:49:b2:ba:96:92:07:c3:19:97:ed:fd:70:7c: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C9:BE:D2:09:DC:F9:71:92:AB:63:71:35:EF:7B:A9:CE:78:1C:9E X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9a:aa:45:c8:c9:4b:b7:8f:a5:6f:dd:2f:67:e3:ee:ce:9b: 86:5e:5a:a9:1e:78:44:39:e2:6d:60:10:b5:25:c8:04:94:43: be:dc:a1:8d:0d:0d:57:e1:40:26:fc:eb:cc:e0:b2:90:d9:f0: 9c:bd:e8:23:2f:f7:9b:29:79:8b:d4:0e:28:db:93:b7:1b:48: 6e:2c:4a:e1:e8:91:8d:92:a6:2b:0c:76:32:13:aa:01:08:81: 96:6f:ab:65:e9:df:2b:51:18:83:c0:cc:0a:44:8f:c1:c0:c8: dd:a1:32:c8:b6:50:e0:e7:90:a4:d7:8d:ab:55:56:08:31:e7: 2d:a1:55:25:cb:c9:13:c4:37:a0:c1:43:95:0c:64:e3:4e:f6: 91:5b:ff:ca:9c:05:e8:b0:99:29:04:f2:49:72:49:65:78:5e: f5:20:a8:63:67:e4:14:ff:ad:29:16:7e:75:38:3e:e7:e2:87: 8e:b5:24:fb:91:95:be:0d:7e:d3:f9:46:f8:64:30:c9:2a:85: a2:85:48:c2:97:c8:b0:4c:93:1c:a4:1e:f5:3a:48:cb:61:d2: 0c:d8:71:6f:f0:60:fb:81:9b:fa:9e:1b:28:3a:2e:1a:48:fe: 90:22:2c:9c:9e:55:62:81:81:2f:4d:9a:9c:57:a2:57:d0:e2: 5c:3a:7c:30 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUISzr7ls17ZGFAVM2jf8wKaYlpk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjA3MjQwMDAyMjdaFw0yNjA3MjgwMDAyMjdaMHoxSTBHBgNV BAUTQDI4Njk5NzQ2Nzc5MGUxNDhlNTYyNjIwYmE0NGNhMGUwOTFjYmY2YTBhMDVj YjkyZDU3MzlhYjdkZWZjYmU3YjkxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5EPIX7o3pDrKq6/funjssHuf07eXLmeD6QyqUCHp6XzjIChLyJYXQrbaS5 xfZThPwFz3fp8mVy2L340T6qTW+bLbNP+mHA6njk747oy/2vCHqzZpWBzG66yzyE P3jPPLrcEi0sMDy0z2EB26Yn3+ryqAFPP1WfiTrVKyIuPglBhDGiQAXpCw0IHIW/ Vvr6VMDT9AsqeJEu6alA7LX26WMFXxk9sbJBvNkjpHA9VVQRLCWHJm9whIrfm0yj 7qqV3gTmsjr77LQBXxKO+6fdd6d4NuJHJ71XntCAq0M2vL4zIG6B7Vo4J3C3sjB4 5wBt3F9JsrqWkgfDGZft/XB8RaUCAwEAAaOCAocwggKDMB0GA1UdDgQWBBSxyb7S Cdz5cZKrY3E173upzngcnjAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZqqRcjJS7ePpW/dL2fj7s6bhl5aqR54 RDnibWAQtSXIBJRDvtyhjQ0NV+FAJvzrzOCykNnwnL3oIy/3myl5i9QOKNuTtxtI bixK4eiRjZKmKwx2MhOqAQiBlm+rZenfK1EYg8DMCkSPwcDI3aEyyLZQ4OeQpNeN q1VWCDHnLaFVJcvJE8Q3oMFDlQxk4072kVv/ypwF6LCZKQTySXJJZXhe9SCoY2fk FP+tKRZ+dTg+5+KHjrUk+5GVvg1+0/lG+GQwySqFooVIwpfIsEyTHKQe9TpIy2HS DNhxb/Bg+4Gb+p4bKDouGkj+kCIsnJ5VYoGBL02anFeiV9DiXDp8MA== -----END CERTIFICATE-----Generated at Fri Jul 24 19:15:33 2026 by rpki-client