$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: qAx0+TU6G6ked30pIOzL0C69xRjeSQjXTUIwU9Qc7mM= Subject key identifier: BD:F2:45:11:3B:71:3D:66:92:18:49:C4:B7:53:CD:07:B7:3F:4C:2B Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 65D19DCDBD0FFC445358E278ADFE26F12FE4E97B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 06 Signing time: Mon 21 Jul 2025 17:54:38 +0000 Manifest this update: Mon 21 Jul 2025 17:54:38 +0000 Manifest next update: Fri 25 Jul 2025 17:54:38 +0000 Files and hashes: 1: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: 9EtpUAtyskZh3MSgWEJQ5udG2Nps7JodHcnqePo0Xj4=) 2: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: S1/DGe3mBk9SU1sZ5UPNJ9/Z2dliPJ4r5VIXCTdthQM=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d1:9d:cd:bd:0f:fc:44:53:58:e2:78:ad:fe:26:f1:2f:e4:e9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Jul 21 17:54:38 2025 GMT Not After : Jul 25 17:54:38 2025 GMT Subject: serialNumber=f2acb948020c483c15e91cfecf480aa088976e0872ec24486e392cbd5479f0c9, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:c3:25:e9:61:4c:6a:2d:f3:01:80:6f:e5: 9d:bc:83:59:a0:8b:bf:6a:ad:f1:be:89:7c:cb:56: 72:51:8b:28:15:ce:9c:d1:f0:2b:e6:3f:19:9b:e3: cc:6b:ba:1b:68:c0:40:91:1f:33:f1:20:d3:f3:d4: f8:d1:fc:eb:db:31:6b:57:25:47:2a:25:7a:30:81: d9:92:75:06:ed:7f:61:24:b2:b3:d9:18:7e:a2:ad: 5a:e2:47:b6:b3:48:bc:75:33:59:a0:c8:fe:aa:fc: af:1f:94:44:46:74:95:c5:8b:0c:43:58:4b:5a:6e: 9f:23:a8:d0:09:85:f0:b9:8f:f4:3a:27:a0:13:16: ef:ff:e2:45:bd:b5:fb:1a:a5:4b:e2:7a:2f:28:b0: dd:26:f2:47:95:d7:c2:81:65:e9:3d:f1:76:ca:36: ac:e5:e1:c5:7d:43:1a:0e:77:25:b7:54:fc:a7:72: 57:5b:3b:4d:e6:42:d1:e1:a8:b4:c1:99:67:71:04: 9b:ca:fc:78:dc:e1:0a:4e:23:5a:d0:50:32:70:3b: 34:25:ed:2c:8e:c3:80:17:49:33:fe:99:ee:ab:9c: 79:74:a9:34:93:06:b0:19:2e:92:fd:57:1b:70:6c: 32:91:16:00:84:5e:a5:f9:0e:f3:37:7a:27:0d:ef: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F2:45:11:3B:71:3D:66:92:18:49:C4:B7:53:CD:07:B7:3F:4C:2B X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:aa:47:ab:9b:e1:12:cf:5b:43:b0:9b:97:db:45:92:63:ce: 2a:c9:f4:81:5b:bb:c4:56:a7:1d:a4:2a:1e:34:60:78:9f:d5: c4:27:57:0f:a9:d0:f5:f4:c3:11:bd:b4:b1:f7:9b:46:84:19: 06:66:2f:c0:e8:a5:aa:ad:69:41:b6:e3:8c:43:6d:0d:4d:3e: 50:7c:35:f4:18:19:06:59:1e:77:56:ab:cc:4e:18:1e:87:36: f6:74:ac:3a:bf:ce:f9:50:3a:3f:fd:97:a9:37:a1:fa:3c:b0: 86:b6:b9:ce:b7:5d:9f:6d:9b:f1:a5:a9:ef:e0:88:3d:94:58: 5a:36:00:fe:48:dc:aa:0c:f1:11:b0:ff:54:69:2f:29:cc:34: be:07:44:41:41:43:ea:9f:37:51:5c:97:07:87:77:a2:56:6a: 2e:24:b8:13:44:0a:5b:92:95:c8:83:1b:80:b2:c9:83:31:31: ca:13:12:9e:01:27:0c:b0:1a:c0:b8:9c:41:f2:6b:12:7c:19: 16:c2:c9:71:c5:31:f3:c7:a6:d2:00:88:8c:b1:3f:ff:f9:50: 89:ab:d6:de:18:24:19:8a:b6:bb:c4:12:aa:5e:48:11:0d:ff: 79:3c:14:33:ab:37:81:7b:39:cb:e4:36:65:70:99:c3:97:b9: c9:f9:64:9e -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUZdGdzb0P/ERTWOJ4rf4m8S/k6XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNTA3MjExNzU0MzhaFw0yNTA3MjUxNzU0MzhaMHoxSTBHBgNV BAUTQGYyYWNiOTQ4MDIwYzQ4M2MxNWU5MWNmZWNmNDgwYWEwODg5NzZlMDg3MmVj MjQ0ODZlMzkyY2JkNTQ3OWYwYzkxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKRFwyXpYUxqLfMBgG/lnbyDWaCLv2qt8b6JfMtWclGLKBXOnNHwK+Y/GZvj zGu6G2jAQJEfM/Eg0/PU+NH869sxa1clRyolejCB2ZJ1Bu1/YSSys9kYfqKtWuJH trNIvHUzWaDI/qr8rx+UREZ0lcWLDENYS1punyOo0AmF8LmP9DonoBMW7//iRb21 +xqlS+J6Lyiw3SbyR5XXwoFl6T3xdso2rOXhxX1DGg53JbdU/KdyV1s7TeZC0eGo tMGZZ3EEm8r8eNzhCk4jWtBQMnA7NCXtLI7DgBdJM/6Z7quceXSpNJMGsBkukv1X G3BsMpEWAIRepfkO8zd6Jw3vqL8CAwEAAaOCAocwggKDMB0GA1UdDgQWBBS98kUR O3E9ZpIYScS3U80Htz9MKzAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKpHq5vhEs9bQ7Cbl9tFkmPOKsn0gVu7 xFanHaQqHjRgeJ/VxCdXD6nQ9fTDEb20sfebRoQZBmYvwOilqq1pQbbjjENtDU0+ UHw19BgZBlked1arzE4YHoc29nSsOr/O+VA6P/2XqTeh+jywhra5zrddn22b8aWp 7+CIPZRYWjYA/kjcqgzxEbD/VGkvKcw0vgdEQUFD6p83UVyXB4d3olZqLiS4E0QK W5KVyIMbgLLJgzExyhMSngEnDLAawLicQfJrEnwZFsLJccUx88em0gCIjLE///lQ iavW3hgkGYq2u8QSql5IEQ3/eTwUM6s3gXs5y+Q2ZXCZw5e5yflkng== -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:06 2025 by rpki-client