$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: HqcQ8e/1PbWbwOUlKKRcxMLFgTi2Ie6C6C5VPXGvcJ0= Subject key identifier: 0F:70:E1:D4:B8:02:21:BD:39:0B:E6:9A:3D:4B:0B:BF:CD:39:04:BE Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 4B23575E39E1357BFD470E08AB375D6CA84715CA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 26 Signing time: Fri 22 Aug 2025 15:34:30 +0000 Manifest this update: Fri 22 Aug 2025 15:34:30 +0000 Manifest next update: Tue 26 Aug 2025 15:34:30 +0000 Files and hashes: 1: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: tZEiDs5jEuXJTaGKamk0grQxMRtOgOnyVtFkM6Nimek=) 2: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: lA5ndT2eJer1aZeafWjqT5iAt5Qqm+nXjSPwh/mH7H8=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 15:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:23:57:5e:39:e1:35:7b:fd:47:0e:08:ab:37:5d:6c:a8:47:15:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Aug 22 15:34:30 2025 GMT Not After : Aug 26 15:34:30 2025 GMT Subject: serialNumber=7f3c43d792720c804629cffd9bde60ff5d9cd5ba2e6f79a81f7251cdff148003, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:d7:cc:6a:65:38:18:76:96:0a:67:b8:f6: 31:68:b4:fc:09:6c:49:05:c3:2d:d1:a5:f2:a5:50: 31:ad:6c:a0:be:3d:d5:f3:80:d0:2b:9d:13:21:8b: 1f:24:e6:18:f1:88:aa:44:79:24:0d:7f:8d:a3:7e: a3:f2:05:18:59:a8:2b:05:54:0e:16:3f:59:66:47: c8:15:13:4d:1e:e4:a6:3a:e8:2f:89:33:a6:a3:79: c7:0d:c3:7d:89:b1:0a:51:14:6e:29:4a:77:c7:df: 2f:2d:0e:39:45:d6:25:0e:ea:fc:ce:76:a4:9a:8d: 1e:4a:1d:20:39:49:1f:cc:dc:60:8c:40:cf:ae:dd: ec:d6:34:91:72:40:fa:39:04:27:55:d8:ac:dc:a2: 2d:7f:4d:82:0c:90:9e:36:e6:2f:a7:4e:b7:8b:09: f8:2c:76:6b:20:d1:82:23:01:6c:6d:26:dc:54:3d: c3:0e:72:77:8a:63:06:a1:6b:dd:fd:7b:5e:46:fa: 60:be:2a:92:01:a7:d3:39:b3:dc:b1:6f:b9:89:86: 6b:73:de:a5:42:f0:5d:d3:ec:fa:bb:e3:88:9a:88: 69:ce:18:d4:a8:5d:72:82:2b:23:25:a2:42:f6:d4: c3:ea:21:f6:84:43:2f:c6:ea:e7:a0:df:04:d1:f2: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:70:E1:D4:B8:02:21:BD:39:0B:E6:9A:3D:4B:0B:BF:CD:39:04:BE X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:b7:59:c0:ff:37:1d:1f:2b:b9:a4:d5:92:79:a8:d6:0d:2d: 78:c7:e9:3f:25:a8:10:ce:90:78:a6:c3:ee:2a:8a:0b:00:f6: ba:ba:8d:85:c6:ad:b8:df:b0:5e:d7:15:ae:84:d1:d3:d9:cf: 81:cd:cb:6c:53:03:f9:5f:af:c0:59:37:7a:83:f9:dd:5a:dc: 8a:3c:66:44:ba:f3:1c:d8:6f:9d:53:b3:b5:59:01:6c:74:0e: 29:ed:d7:03:6a:51:d0:b7:aa:98:a9:5c:93:9a:bd:3d:18:ea: 99:8f:90:67:5e:cf:24:20:b8:84:a5:c6:b1:f7:72:ed:82:04: 3b:d2:66:31:5d:98:06:67:8f:c4:01:7d:b9:1d:b3:02:99:b3: a6:ce:4a:8b:19:35:77:93:2a:ff:fc:d8:b4:fe:b9:95:18:cc: 34:d3:f7:77:63:57:74:85:05:93:cd:2e:55:23:d2:17:d2:c0: b1:1b:d0:a8:de:28:24:2f:b2:f5:e3:cc:38:e6:8e:41:a2:e3: 3b:91:52:33:e7:1f:d3:08:ae:e5:d3:96:50:b8:cd:e4:65:4c: 74:50:d9:6c:bd:64:4f:9a:67:02:00:f8:9b:a3:08:84:42:b7: 9b:e4:f1:61:84:f1:8f:d7:dc:79:c7:25:21:03:92:89:43:3b: ed:83:f6:d2 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUSyNXXjnhNXv9Rw4IqzddbKhHFcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNTA4MjIxNTM0MzBaFw0yNTA4MjYxNTM0MzBaMHoxSTBHBgNV BAUTQDdmM2M0M2Q3OTI3MjBjODA0NjI5Y2ZmZDliZGU2MGZmNWQ5Y2Q1YmEyZTZm NzlhODFmNzI1MWNkZmYxNDgwMDMxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDQ18xqZTgYdpYKZ7j2MWi0/AlsSQXDLdGl8qVQMa1soL491fOA0CudEyGL HyTmGPGIqkR5JA1/jaN+o/IFGFmoKwVUDhY/WWZHyBUTTR7kpjroL4kzpqN5xw3D fYmxClEUbilKd8ffLy0OOUXWJQ7q/M52pJqNHkodIDlJH8zcYIxAz67d7NY0kXJA +jkEJ1XYrNyiLX9NggyQnjbmL6dOt4sJ+Cx2ayDRgiMBbG0m3FQ9ww5yd4pjBqFr 3f17Xkb6YL4qkgGn0zmz3LFvuYmGa3PepULwXdPs+rvjiJqIac4Y1KhdcoIrIyWi QvbUw+oh9oRDL8bq56DfBNHyiDkCAwEAAaOCAocwggKDMB0GA1UdDgQWBBQPcOHU uAIhvTkL5po9Swu/zTkEvjAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7dZwP83HR8ruaTVknmo1g0teMfpPyWo EM6QeKbD7iqKCwD2urqNhcatuN+wXtcVroTR09nPgc3LbFMD+V+vwFk3eoP53Vrc ijxmRLrzHNhvnVOztVkBbHQOKe3XA2pR0LeqmKlck5q9PRjqmY+QZ17PJCC4hKXG sfdy7YIEO9JmMV2YBmePxAF9uR2zApmzps5Kixk1d5Mq//zYtP65lRjMNNP3d2NX dIUFk80uVSPSF9LAsRvQqN4oJC+y9ePMOOaOQaLjO5FSM+cf0wiu5dOWULjN5GVM dFDZbL1kT5pnAgD4m6MIhEK3m+TxYYTxj9fcecclIQOSiUM77YP20g== -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:27 2025 by rpki-client