
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier: 8OK3/jjTAOfqXf5t7MNo1ga4RaXZrCLl4fGspng33RA=
Subject key identifier: 4E:28:8C:A2:3D:8A:DE:FB:12:E7:1B:6D:EA:F0:23:B4:72:ED:D7:26
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial: 4881C9BB473BA6B7E44F16456CAE51014D1E1BD7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number: 0149
Signing time: Sat 06 Jun 2026 00:04:57 +0000
Manifest this update: Sat 06 Jun 2026 00:04:57 +0000
Manifest next update: Wed 10 Jun 2026 00:04:57 +0000
Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: UF2NI9to/ZTHTw76rU42WL5vvIIGRtLRLTutrT8D2g8=)
2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: NF0lpNAvE1ky5X5dXD5+40imIi9Qmyb4N+BqeMW9Xfg=)
3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: D27sebtwjhIzn7+oBHloqEPGwdgeIEBB++3b64HUG3o=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 09 Jun 2026 08:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:81:c9:bb:47:3b:a6:b7:e4:4f:16:45:6c:ae:51:01:4d:1e:1b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Validity
Not Before: Jun 6 00:04:57 2026 GMT
Not After : Jun 10 00:04:57 2026 GMT
Subject: serialNumber=ecf101b895b474b99476eb46f0c8f1a0ddbd1b95824a0508242a512444149204, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:6e:a3:eb:80:92:3e:05:99:d6:53:aa:24:
46:50:fe:64:46:00:19:28:7d:74:0a:b8:71:22:d7:
7c:0f:e0:5e:e3:50:28:42:c3:9a:6b:82:07:38:dc:
dc:a4:89:9f:f0:5a:88:ea:95:57:1b:11:db:e3:b5:
47:6c:01:94:5e:2a:4e:ce:ed:a6:99:58:3e:12:66:
fb:f6:f6:15:92:8d:cd:64:5a:f0:1a:46:35:e8:33:
ef:92:af:c6:a2:13:36:33:18:a0:92:d5:ee:d6:3c:
39:7e:94:f1:e8:fd:6c:23:19:12:6c:f2:38:ba:6d:
ea:ba:fe:a5:e5:ed:41:7d:d5:57:6d:65:54:f3:70:
d5:b8:ff:14:5e:29:bd:d1:56:36:9f:a8:59:91:27:
d3:9a:ee:d6:b0:89:b4:9e:36:6f:f0:be:74:c1:ee:
04:58:6d:82:42:5a:c6:80:5c:86:c9:a2:b7:8b:bf:
a6:0d:ca:83:dd:7c:f9:04:70:fd:41:b1:b9:2e:42:
d3:5f:81:b3:8e:21:b1:12:c4:74:c7:cb:11:52:20:
ae:21:dd:9c:d5:0b:5c:31:bd:b8:9e:67:1d:d5:34:
5a:db:97:4d:da:39:a3:15:6b:07:52:f6:94:dc:cf:
eb:e6:2c:b5:49:86:3c:d0:fe:60:7f:c4:d5:6f:9b:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:28:8C:A2:3D:8A:DE:FB:12:E7:1B:6D:EA:F0:23:B4:72:ED:D7:26
X509v3 Authority Key Identifier:
keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f5:af:dd:f1:ec:17:6d:59:73:1f:93:9e:20:1d:c8:41:72:
64:36:71:04:50:fd:8f:29:ba:6f:d2:14:c6:24:d1:75:b8:f0:
cb:35:ed:83:6e:88:4c:e2:1f:01:dd:d8:f2:af:55:ba:70:93:
ba:ec:61:ee:ce:aa:9a:18:f3:61:3f:9b:3a:cc:26:03:00:c7:
71:9e:da:96:c9:37:3a:c9:d3:21:5a:4d:18:cc:2b:6d:29:91:
8f:3f:cb:24:f6:40:00:5b:9e:ba:ab:34:e7:79:12:41:19:bb:
34:12:fb:df:3a:e3:55:ee:87:77:08:21:54:49:f4:12:96:4e:
bf:e5:32:38:32:6c:11:40:4c:62:c2:a9:c6:99:4c:f5:b2:fd:
fc:6e:a6:6c:a2:55:7d:2e:5b:9b:15:f3:64:f9:96:6a:3f:a7:
11:d6:df:0a:48:c2:8b:20:28:71:27:9e:72:54:a6:17:7c:1f:
69:3b:17:48:3f:f9:bb:5f:89:b4:f7:c7:4b:be:ff:be:42:25:
a9:b5:8d:c1:61:8a:96:53:7f:47:d8:c1:63:23:d6:bb:39:6b:
bf:b7:02:47:73:2e:d6:20:23:a2:ca:76:bc:7f:d5:97:b8:b2:
53:49:ad:3a:29:51:6c:f8:1e:90:57:08:77:b6:76:81:fa:8a:
cd:ec:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 03:18:43 2026 by rpki-client