$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: 4UkbYJ5PBX6XbgqWvY5+XRvkGU2S+PbhShO6Vuweido= Subject key identifier: EC:F5:26:67:1D:3E:A4:51:57:F8:9D:3F:44:84:DC:56:5D:27:81:72 Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 739F4B364D8D92721CC20F2941342F15B1B1C75C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 011A Signing time: Mon 20 Apr 2026 00:13:48 +0000 Manifest this update: Mon 20 Apr 2026 00:13:48 +0000 Manifest next update: Fri 24 Apr 2026 00:13:48 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: cr4oikUg6zUv2Eup8p6QJxQvA+W7tc2515d+Bx4bTi8=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: zMij5sOHhIyIY2xPTp819MwktL2bSrUOnZkzkiK7YeI=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: bhCI6MtJA2Pp8rKA0SF4a9xK6lyZDJLbr21ZI4uKNVU=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Apr 2026 00:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9f:4b:36:4d:8d:92:72:1c:c2:0f:29:41:34:2f:15:b1:b1:c7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Apr 20 00:13:48 2026 GMT Not After : Apr 24 00:13:48 2026 GMT Subject: serialNumber=fab6ef79c29af1dcb89392432dd5784cee16dc30a28b8e37beb269820a2e6d7a, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:9e:c2:3b:e3:41:18:78:33:a7:34:7e:e8: 28:7d:7a:21:64:af:73:2d:db:3a:f8:a5:bb:2b:9b: 8b:64:84:af:6c:2e:a5:ff:df:50:49:08:1f:af:05: d7:2f:f4:46:d7:26:98:ac:d8:33:e2:ec:72:de:df: 56:33:a6:5e:4f:21:df:ee:15:88:55:46:79:28:bd: 6a:36:9e:d8:0f:a8:93:4b:92:1a:e2:17:64:ad:70: 7e:40:58:7d:11:54:66:f4:9f:80:62:7f:6e:64:86: a4:7c:01:36:f2:d9:a9:86:9d:d2:11:85:71:6a:d1: 8f:ff:d7:9d:e6:5b:a3:a1:b6:78:8b:05:fc:e5:0e: d5:c9:e2:4e:a9:e3:f2:28:99:f4:d4:64:c0:0f:30: 4f:82:75:f7:78:d2:b1:71:79:e8:02:59:fb:c0:15: 31:9c:2a:4b:07:08:f8:33:31:7e:e7:95:85:80:0f: 84:1d:60:54:14:2e:91:89:3e:d6:f3:5b:bc:bd:82: a4:26:c6:20:ca:c0:35:88:7a:d2:61:77:e4:d2:49: be:29:7e:38:69:a1:14:e6:ee:c9:10:63:a4:97:31: 97:8d:e5:b3:cb:1f:ca:84:00:03:55:87:dd:7c:c1: 16:2d:27:2e:f4:f6:b6:bb:ae:15:8b:2b:6a:5c:51: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F5:26:67:1D:3E:A4:51:57:F8:9D:3F:44:84:DC:56:5D:27:81:72 X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9e:5c:ba:c2:cb:73:be:54:24:0e:a0:07:e5:14:35:a2:9e: 52:c8:4b:a9:8f:ee:50:56:25:cb:ca:ab:f1:6a:87:9a:d1:77: 25:af:2e:e2:af:dd:c7:ff:f3:56:d3:10:50:9e:aa:a5:9e:8b: 25:cc:cf:08:25:d0:31:fa:67:f1:04:06:bf:e8:37:48:57:a0: 4b:d5:1f:bf:50:a7:5b:4b:a6:c3:96:da:4b:59:eb:b7:3c:4e: 03:9a:46:7f:fd:22:59:db:41:c1:5d:51:a7:fd:54:05:30:7f: b1:1c:e9:33:ec:af:fe:c2:8e:73:60:23:d0:bf:9d:bf:4a:a0: 1a:3a:47:d4:98:91:fc:22:be:d3:f9:d8:cf:7f:33:d0:3a:aa: 50:93:85:36:20:7f:6f:5a:67:03:66:35:1f:24:cb:82:e6:2e: 03:a6:1d:e5:78:d0:fa:61:95:1c:60:93:c1:99:36:66:7b:c2: 0a:f7:c1:8d:3b:10:95:78:82:75:2f:91:6b:f1:db:aa:41:00: 90:64:d4:18:c5:49:0f:0c:db:79:d6:58:45:e9:d8:c1:27:48: bb:68:df:d1:31:d3:38:c5:19:2e:71:eb:65:2e:66:4e:55:cb: be:1c:20:45:92:e0:5a:f8:2f:df:be:69:f9:76:a6:e4:8d:d9: ea:48:e9:60 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUc59LNk2NknIcwg8pQTQvFbGxx1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjA0MjAwMDEzNDhaFw0yNjA0MjQwMDEzNDhaMHoxSTBHBgNV BAUTQGZhYjZlZjc5YzI5YWYxZGNiODkzOTI0MzJkZDU3ODRjZWUxNmRjMzBhMjhi OGUzN2JlYjI2OTgyMGEyZTZkN2ExLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKunsI740EYeDOnNH7oKH16IWSvcy3bOviluyubi2SEr2wupf/fUEkIH68F 1y/0RtcmmKzYM+Lsct7fVjOmXk8h3+4ViFVGeSi9ajae2A+ok0uSGuIXZK1wfkBY fRFUZvSfgGJ/bmSGpHwBNvLZqYad0hGFcWrRj//XneZbo6G2eIsF/OUO1cniTqnj 8iiZ9NRkwA8wT4J193jSsXF56AJZ+8AVMZwqSwcI+DMxfueVhYAPhB1gVBQukYk+ 1vNbvL2CpCbGIMrANYh60mF35NJJvil+OGmhFObuyRBjpJcxl43ls8sfyoQAA1WH 3XzBFi0nLvT2truuFYsralxRN+kCAwEAAaOCAocwggKDMB0GA1UdDgQWBBTs9SZn HT6kUVf4nT9EhNxWXSeBcjAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJ5cusLLc75UJA6gB+UUNaKeUshLqY/u UFYly8qr8WqHmtF3Ja8u4q/dx//zVtMQUJ6qpZ6LJczPCCXQMfpn8QQGv+g3SFeg S9Ufv1CnW0umw5baS1nrtzxOA5pGf/0iWdtBwV1Rp/1UBTB/sRzpM+yv/sKOc2Aj 0L+dv0qgGjpH1JiR/CK+0/nYz38z0DqqUJOFNiB/b1pnA2Y1HyTLguYuA6Yd5XjQ +mGVHGCTwZk2ZnvCCvfBjTsQlXiCdS+Ra/HbqkEAkGTUGMVJDwzbedZYRenYwSdI u2jf0THTOMUZLnHrZS5mTlXLvhwgRZLgWvgv375p+Xam5I3Z6kjpYA== -----END CERTIFICATE-----Generated at Mon Apr 20 06:17:55 2026 by rpki-client