
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json)
Hash identifier: Ai0+jkDDd5jXIm9UY7U+Y4KMJzWF0KvP/YuDtDklKAQ=
Subject key identifier: 55:41:C2:21:0A:4D:C9:34:65:56:12:DE:79:F1:20:C0:69:BE:F0:8C
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial: 495F51F02FCC6CCC1D94EDEE99C0E05E67B241EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
Manifest number: 01DC
Signing time: Thu 29 Oct 2026 00:11:37 +0000
Manifest this update: Thu 29 Oct 2026 00:11:37 +0000
Manifest next update: Mon 02 Nov 2026 00:11:37 +0000
Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: /5i0CBtWtIr2f+LyVMLO74BzD14crgZu7EgayTvzu/s=)
2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: sLfhaquCadTlwI/xVGTbj11vctb2w10uHvrSn5Bu4PM=)
3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: ch+DQHiePaXZ8hnVPajCL3epru5Y4qf+EPqxRiZjFyw=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Mon 02 Nov 2026 00:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5f:51:f0:2f:cc:6c:cc:1d:94:ed:ee:99:c0:e0:5e:67:b2:41:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Validity
Not Before: Oct 29 00:11:37 2026 GMT
Not After : Nov 2 00:11:37 2026 GMT
Subject: serialNumber=b8040adcd5d1b756f4df15cbec3b206f5cb248a08c35c36b039431e0216b6292, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:f6:7f:5a:1e:0c:11:47:54:60:b8:a8:bc:
77:19:20:58:fd:4d:65:73:b7:21:e4:90:8a:72:09:
d9:4e:44:ca:68:42:b6:da:7f:c0:e2:2a:45:51:b5:
aa:d6:a8:53:97:f0:aa:3b:ae:1a:6d:45:11:a5:05:
02:53:3e:d5:07:6e:85:49:61:2f:d2:af:61:0b:35:
e8:02:ef:65:ed:d5:d7:e7:b1:f1:44:ac:c5:0e:91:
b5:55:5d:b9:c1:43:69:bb:4f:da:42:81:bb:d5:45:
19:3f:70:c8:25:22:ef:9d:09:1b:bb:78:75:0c:d2:
99:52:40:75:99:82:fe:2b:7c:4c:7f:76:94:f8:61:
3c:c0:81:b5:18:64:df:77:be:06:57:ec:dc:db:40:
08:eb:d3:ef:aa:d0:4a:83:4c:b5:cb:b7:f7:05:f2:
23:03:8a:44:f5:9d:d2:4e:a7:d0:12:9e:42:21:9b:
1f:93:d9:a2:bf:71:e9:b7:6a:ce:fd:1e:74:12:0f:
64:03:e7:76:9b:bd:3c:71:95:35:8b:da:01:aa:d4:
bd:56:32:e1:6f:d2:08:9c:d9:47:30:0c:79:c4:be:
ee:b3:8f:e9:ce:cd:16:b6:76:0e:0d:8b:4b:27:24:
95:7c:a8:32:b5:07:65:22:eb:48:35:6e:0e:a6:96:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:C2:21:0A:4D:C9:34:65:56:12:DE:79:F1:20:C0:69:BE:F0:8C
X509v3 Authority Key Identifier:
keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a8:56:91:f6:c0:46:c5:b8:2a:87:b3:f0:49:04:74:ef:f3:
a3:2f:b0:6d:7a:ac:c2:cb:a4:b2:1d:23:fa:4b:b1:04:6e:22:
65:18:1b:db:07:25:e5:6e:d0:ec:e9:82:e1:13:9b:56:53:e8:
d6:e2:23:e9:70:f6:83:ac:4c:24:2d:f4:fb:de:55:c8:41:e6:
d5:0d:6d:9a:7c:57:6d:a2:42:6d:5b:4b:e8:8d:6d:2d:49:74:
2f:e3:fe:bf:3d:0e:48:da:dd:80:94:c1:96:23:1d:8c:e5:eb:
c2:9e:ad:3b:47:b1:3a:57:94:d4:59:96:b8:55:75:d2:4d:45:
b6:da:9d:6f:a4:16:e6:e5:f8:f5:fa:e9:48:4f:61:07:85:95:
00:09:4d:28:c8:0e:f2:e9:c5:6d:cd:59:c7:d9:f2:65:3a:e5:
db:9b:90:0c:5d:aa:c8:8b:fa:7a:db:c1:02:b3:00:0c:91:ec:
c2:01:e1:11:95:06:42:c5:ca:98:f4:9e:1c:84:96:ef:ce:1d:
95:a3:bd:4f:2b:a4:21:ea:b0:6a:60:69:70:a0:6c:39:71:c2:
9a:de:a8:57:ad:96:e4:c8:f3:60:43:35:05:fa:be:2b:04:fb:
b0:0a:38:42:79:dc:d0:e3:52:b1:d3:31:7e:c6:65:ae:78:da:
8a:82:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:29:31 2026 by rpki-client