$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: 9ZsBiUE4xhwoL0U66fTk6Az6eu/ILL02Wjbpj1u8J9k= Subject key identifier: E7:56:60:6A:0E:69:22:64:3F:AA:1F:FC:48:2D:D1:22:02:AF:F4:61 Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 034DC5F1E1B006EBA35E5E120D881DB6CE87149C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 0176 Signing time: Tue 21 Jul 2026 00:01:41 +0000 Manifest this update: Tue 21 Jul 2026 00:01:41 +0000 Manifest next update: Sat 25 Jul 2026 00:01:41 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: UF2NI9to/ZTHTw76rU42WL5vvIIGRtLRLTutrT8D2g8=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: NgP7gRkBr0KKwrc/EznhF1Cd3Hc/z5/lHlKOKPr7tOQ=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: /cv/DHfgOcDJoqrQNVkUdXGdRrBeS/EwVrw+afXRa6U=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4d:c5:f1:e1:b0:06:eb:a3:5e:5e:12:0d:88:1d:b6:ce:87:14:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Jul 21 00:01:41 2026 GMT Not After : Jul 25 00:01:41 2026 GMT Subject: serialNumber=5839d5e22aebca457e23ff755fa0d061d58a87095b2e8131d0ab1888eea4bd36, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:5f:d5:ca:90:40:f0:bd:2c:a7:e0:9a:c5: 3e:bd:b3:4b:56:56:6d:a7:dc:56:05:22:d8:ed:56: 18:00:92:5f:32:05:4f:f8:1b:ff:b5:4a:f7:cd:cf: a0:ff:da:0a:81:5b:fc:c9:a2:aa:b9:97:a6:2a:cf: 79:b9:9c:a8:f8:c8:b0:79:d6:29:22:dc:18:3f:a2: d8:c9:e1:25:a4:db:38:4e:e5:bc:de:b8:a9:17:a1: d9:e8:29:83:21:de:45:ec:fa:38:17:49:84:24:64: 3f:fd:8f:9c:a1:ec:e5:d6:83:0e:88:5c:bc:d0:db: 35:d8:99:36:43:23:21:21:25:c3:33:b8:0c:19:a4: e7:91:d9:cb:45:39:5c:2c:a1:3f:a1:93:c2:b8:bf: 5b:a4:c9:33:d2:28:df:ed:37:ec:91:ef:48:3b:03: bf:fb:05:80:8c:7e:54:8a:2a:f8:a2:d3:19:15:f3: d7:6c:61:04:65:d3:c3:d4:4e:9b:e0:07:92:bf:f7: 62:4e:99:87:36:bf:2c:2e:2c:e5:71:4d:38:37:79: 83:c2:14:69:84:57:95:75:3f:ac:bb:36:11:61:b4: 90:e5:94:b0:ac:af:20:8a:a8:46:11:d4:d5:1d:d6: 1d:58:b4:ee:40:dd:b8:ab:6c:ce:b4:9d:f3:e0:38: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:56:60:6A:0E:69:22:64:3F:AA:1F:FC:48:2D:D1:22:02:AF:F4:61 X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:05:73:07:68:6d:35:71:e4:40:da:60:47:5a:eb:6e:92:af: 79:1d:0f:a4:34:c4:d2:d4:b5:e6:89:8f:7d:b9:b5:b6:85:6b: d0:89:65:41:11:e6:2a:2d:36:5b:26:c2:14:d1:13:7a:ed:74: 04:27:4c:1a:9b:3d:94:19:80:c9:26:b8:3a:b4:71:8f:95:8b: dd:63:76:3a:36:46:65:f4:1b:ee:5e:f8:32:df:e2:30:3b:a2: 58:3b:7d:e0:d0:1a:66:41:11:98:69:e4:d4:3e:16:c4:4d:35: 0a:e9:0f:dd:61:bb:34:cc:82:38:35:16:9b:f3:3a:8e:f5:4b: cf:89:16:05:0c:9e:03:6d:fc:b5:72:8e:af:7c:74:a5:b3:ec: 29:dd:11:d4:85:ee:d6:31:a6:3d:5f:1e:d9:d7:07:1b:02:28: 1d:22:21:94:e6:36:08:67:c6:46:ab:0c:79:39:90:2a:46:37: 1e:37:4f:04:74:ff:8c:5f:92:00:2f:09:16:80:bc:8d:4f:11: b3:b6:3c:af:ef:a3:33:74:f1:06:7e:dc:f3:18:47:e1:fb:34: a4:b0:db:cb:9d:0c:75:c1:7f:b0:3e:9d:e5:45:3f:d8:b6:c0: 7b:d1:93:0d:da:b6:01:ae:9d:fc:2d:ce:37:a2:9f:9f:70:b8: 97:7a:54:fa -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUA03F8eGwBuujXl4SDYgdts6HFJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjA3MjEwMDAxNDFaFw0yNjA3MjUwMDAxNDFaMHoxSTBHBgNV BAUTQDU4MzlkNWUyMmFlYmNhNDU3ZTIzZmY3NTVmYTBkMDYxZDU4YTg3MDk1YjJl ODEzMWQwYWIxODg4ZWVhNGJkMzYxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmiX9XKkEDwvSyn4JrFPr2zS1ZWbafcVgUi2O1WGACSXzIFT/gb/7VK983P oP/aCoFb/MmiqrmXpirPebmcqPjIsHnWKSLcGD+i2MnhJaTbOE7lvN64qReh2egp gyHeRez6OBdJhCRkP/2PnKHs5daDDohcvNDbNdiZNkMjISElwzO4DBmk55HZy0U5 XCyhP6GTwri/W6TJM9Io3+037JHvSDsDv/sFgIx+VIoq+KLTGRXz12xhBGXTw9RO m+AHkr/3Yk6Zhza/LC4s5XFNODd5g8IUaYRXlXU/rLs2EWG0kOWUsKyvIIqoRhHU 1R3WHVi07kDduKtszrSd8+A4wvECAwEAAaOCAocwggKDMB0GA1UdDgQWBBTnVmBq DmkiZD+qH/xILdEiAq/0YTAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAVzB2htNXHkQNpgR1rrbpKveR0PpDTE 0tS15omPfbm1toVr0IllQRHmKi02WybCFNETeu10BCdMGps9lBmAySa4OrRxj5WL 3WN2OjZGZfQb7l74Mt/iMDuiWDt94NAaZkERmGnk1D4WxE01CukP3WG7NMyCODUW m/M6jvVLz4kWBQyeA238tXKOr3x0pbPsKd0R1IXu1jGmPV8e2dcHGwIoHSIhlOY2 CGfGRqsMeTmQKkY3HjdPBHT/jF+SAC8JFoC8jU8Rs7Y8r++jM3TxBn7c8xhH4fs0 pLDby50MdcF/sD6d5UU/2LbAe9GTDdq2Aa6d/C3ON6Kfn3C4l3pU+g== -----END CERTIFICATE-----Generated at Tue Jul 21 18:17:28 2026 by rpki-client