$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: tndqFjO+FWnj3t5YAUqPRSBfwqpWciMcBlvp2b3GYgo= Subject key identifier: C4:A9:69:E4:32:FD:CC:5D:FE:4D:24:3F:95:D6:A7:7B:D2:76:0A:3B Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 2DB76FD86CD42E57CEA9965B6C1E6A0B12410240 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: EC Signing time: Thu 05 Mar 2026 00:02:36 +0000 Manifest this update: Thu 05 Mar 2026 00:02:36 +0000 Manifest next update: Mon 09 Mar 2026 00:02:36 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: cr4oikUg6zUv2Eup8p6QJxQvA+W7tc2515d+Bx4bTi8=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: zMij5sOHhIyIY2xPTp819MwktL2bSrUOnZkzkiK7YeI=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: nXYsg/hkxIPIFJj4ceV14G/P88xe+uOwvGq3ruoMbGs=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Mar 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b7:6f:d8:6c:d4:2e:57:ce:a9:96:5b:6c:1e:6a:0b:12:41:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Mar 5 00:02:36 2026 GMT Not After : Mar 9 00:02:36 2026 GMT Subject: serialNumber=576001b1644fc498b527fc6eac9225604480200a6c51881e7383ce6e4305b4e7, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:b7:12:57:19:ab:4b:61:ee:a5:f9:c6:ec: ac:4e:92:4e:68:bd:8c:6b:51:17:e2:4c:59:6f:2a: 1a:53:1e:7c:ac:68:21:d7:e3:06:a2:b4:8f:f8:44: e7:28:0c:c8:04:df:b7:e5:a0:77:63:4e:07:4d:6b: 6a:00:c3:4e:2b:49:c9:a8:da:c5:a2:c5:c1:52:80: ed:cc:62:f3:03:7f:d4:87:08:ce:2b:c7:e4:08:ee: e0:c8:aa:92:73:23:7d:10:14:f9:e8:e9:96:06:14: 95:5b:f0:c8:6f:08:4a:21:8a:9d:1e:7f:86:3a:9e: ff:c9:67:dd:e5:b2:d2:fe:a9:c9:39:e7:06:ce:7d: 24:70:e8:01:f4:37:44:00:a7:1f:32:e8:cc:0f:00: c3:f3:f6:98:18:7e:c9:80:eb:30:41:5a:db:8f:3a: 62:91:cd:cc:18:3c:70:83:36:f7:4b:5e:61:44:2a: 34:aa:26:48:03:25:25:bc:9a:e0:2b:e9:4a:4f:48: ef:2d:c9:56:31:5e:21:6f:ec:c2:ab:1f:e2:39:3f: 74:2d:d4:22:be:f2:8d:58:0e:e1:b7:cd:2f:85:f7: e3:3d:9b:39:2b:ae:66:80:88:98:fb:f3:bb:66:a5: 1c:1d:51:f6:2f:59:d4:d3:ab:d1:80:0f:90:74:6e: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A9:69:E4:32:FD:CC:5D:FE:4D:24:3F:95:D6:A7:7B:D2:76:0A:3B X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:70:83:e4:64:4f:38:46:47:c8:78:fe:c2:32:dd:ae:b8:0c: c3:e8:04:b7:b9:c5:ec:6a:38:2e:41:d8:e7:68:f9:5b:9e:47: b3:cc:19:3e:de:9b:da:bd:5a:f2:0c:21:48:80:f7:52:e4:79: ce:b0:c0:94:36:3e:4e:07:b6:65:50:70:eb:1b:44:09:51:8e: 00:63:c5:72:4e:0d:be:73:24:42:50:da:a3:9a:ca:d8:89:9a: 05:d2:ca:d7:a4:52:3f:2e:86:9c:98:85:cd:2e:d0:54:8f:b7: 2b:d6:71:c2:87:dc:ba:53:67:0c:f6:5b:a6:aa:6e:e5:88:24: 56:cc:be:7d:8f:7c:41:b6:c2:1b:15:da:62:ee:7c:9e:98:fe: c0:a8:9a:50:a6:79:fb:a9:77:c7:7d:ea:1c:c8:93:91:52:3a: af:04:25:a5:fd:97:5d:06:d8:f7:20:76:70:2a:8a:14:20:ed: 5f:00:8a:85:96:a8:5b:0e:6a:a4:89:4d:b7:88:af:b5:65:6e: 63:15:77:05:1a:fd:01:47:04:50:ee:86:67:c7:79:ca:49:d0: 9a:e2:07:72:1b:77:88:f2:21:7f:d1:69:c8:cc:35:09:6e:2f: 6e:6f:98:2c:4a:c1:34:45:10:dd:cd:23:a1:d3:b8:4e:a9:b6: 17:21:55:60 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIULbdv2GzULlfOqZZbbB5qCxJBAkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjAzMDUwMDAyMzZaFw0yNjAzMDkwMDAyMzZaMHoxSTBHBgNV BAUTQDU3NjAwMWIxNjQ0ZmM0OThiNTI3ZmM2ZWFjOTIyNTYwNDQ4MDIwMGE2YzUx ODgxZTczODNjZTZlNDMwNWI0ZTcxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXFtxJXGatLYe6l+cbsrE6STmi9jGtRF+JMWW8qGlMefKxoIdfjBqK0j/hE 5ygMyATft+Wgd2NOB01ragDDTitJyajaxaLFwVKA7cxi8wN/1IcIzivH5Aju4Miq knMjfRAU+ejplgYUlVvwyG8ISiGKnR5/hjqe/8ln3eWy0v6pyTnnBs59JHDoAfQ3 RACnHzLozA8Aw/P2mBh+yYDrMEFa2486YpHNzBg8cIM290teYUQqNKomSAMlJbya 4CvpSk9I7y3JVjFeIW/swqsf4jk/dC3UIr7yjVgO4bfNL4X34z2bOSuuZoCImPvz u2alHB1R9i9Z1NOr0YAPkHRuPVMCAwEAAaOCAocwggKDMB0GA1UdDgQWBBTEqWnk Mv3MXf5NJD+V1qd70nYKOzAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnCD5GRPOEZHyHj+wjLdrrgMw+gEt7nF 7Go4LkHY52j5W55Hs8wZPt6b2r1a8gwhSID3UuR5zrDAlDY+Tge2ZVBw6xtECVGO AGPFck4NvnMkQlDao5rK2ImaBdLK16RSPy6GnJiFzS7QVI+3K9ZxwofculNnDPZb pqpu5YgkVsy+fY98QbbCGxXaYu58npj+wKiaUKZ5+6l3x33qHMiTkVI6rwQlpf2X XQbY9yB2cCqKFCDtXwCKhZaoWw5qpIlNt4ivtWVuYxV3BRr9AUcEUO6GZ8d5yknQ muIHcht3iPIhf9FpyMw1CW4vbm+YLErBNEUQ3c0jodO4Tqm2FyFVYA== -----END CERTIFICATE-----Generated at Fri Mar 6 01:08:36 2026 by rpki-client