$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: /axW2ssck1hirWLYDWMMV09+Ic87BFVdN8bT6zFz4GE= Subject key identifier: 78:17:37:DB:69:58:FD:AE:ED:13:38:96:CF:19:3A:DA:A3:63:AA:DF Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 4EA71742192DAED222BB5485FD2941451143E55C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 71 Signing time: Tue 04 Nov 2025 00:02:38 +0000 Manifest this update: Tue 04 Nov 2025 00:02:38 +0000 Manifest next update: Sat 08 Nov 2025 00:02:38 +0000 Files and hashes: 1: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: oSrKaHVc+6/kMDiCkA6si1KnY0UXaFGE2fBdm/mO8kE=) 2: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: +CoTwjY0tmbTnsR859pqFhMtpuVyAlxQe8vYSQVmF3w=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Nov 2025 00:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a7:17:42:19:2d:ae:d2:22:bb:54:85:fd:29:41:45:11:43:e5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Nov 4 00:02:38 2025 GMT Not After : Nov 8 00:02:38 2025 GMT Subject: serialNumber=ae3c3b15495d1f10060bac90207f6177fe73def3141a3ec55bfd578aa5b30e1c, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:30:d1:70:9a:07:f8:fe:e5:14:5a:9a:cf:0d: 01:c1:09:e9:bb:94:cc:b4:fd:3b:a4:22:4b:3a:81: c3:50:b3:1a:0c:ef:cb:70:f1:d2:cf:5e:2b:84:e3: cc:c8:10:98:ef:74:c6:80:33:10:af:25:9a:8b:75: 3d:0a:d7:81:ba:68:8e:d0:f5:ed:9e:2d:d7:d8:e4: 53:6e:5b:4f:42:e2:44:be:86:74:67:51:9a:9b:ef: a4:9f:68:2d:19:20:d4:6b:f2:31:e9:f4:ef:39:82: fb:1b:22:f3:b3:b7:c7:94:ab:99:f4:a5:33:8d:17: dc:43:06:e7:70:b0:fa:2a:94:e0:d0:ec:ae:45:cb: 9a:78:52:90:b7:4a:ed:68:d3:54:8d:03:09:34:ba: 54:7a:9c:6f:f3:c9:7f:7d:34:40:2f:e7:28:0f:ef: 49:e8:ee:8a:63:ad:c6:9e:28:36:c5:6a:39:ba:8a: ca:83:92:eb:76:76:34:71:68:ab:8f:2e:bb:ff:18: 8a:ca:28:3d:f9:e2:70:d9:bf:36:db:26:d4:c7:b9: 7f:94:38:46:62:f6:18:51:1f:16:4b:26:7e:d8:7f: 69:81:63:65:40:82:5f:6a:04:fe:90:a8:f2:a9:d7: 91:da:32:39:47:ba:12:fd:0d:09:f8:eb:71:7c:e4: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:17:37:DB:69:58:FD:AE:ED:13:38:96:CF:19:3A:DA:A3:63:AA:DF X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d5:42:7b:0f:7f:f8:37:e6:c1:80:61:43:ea:bc:c2:22:02: 49:60:1d:b5:70:b5:50:44:f9:df:74:d1:29:0e:7d:c0:49:cf: e6:e6:c6:37:ed:8c:cc:6e:21:bb:83:95:ce:32:9c:94:89:76: ee:dc:32:69:5c:5c:63:28:d4:45:bf:58:cc:e1:c2:00:94:a7: c4:bb:67:e6:cc:05:78:8a:76:f9:d5:35:cb:94:19:17:4a:7b: 2b:d3:d2:4c:7b:60:b9:05:c2:10:13:a9:3c:7a:f9:34:02:16: c9:4d:61:16:78:8a:4e:26:07:f0:9f:1d:60:43:26:53:12:e2: d3:ae:64:ed:00:8e:08:14:7b:77:40:e7:80:03:62:84:57:54: 4c:10:5d:d3:fa:b0:0f:d6:ba:6f:db:55:ab:a3:73:e1:eb:af: b5:df:60:89:aa:77:36:80:3d:99:7c:3e:60:e0:a9:14:be:ac: b7:99:2b:62:45:54:bc:83:34:82:26:06:6a:d6:a0:b7:4e:c0: de:a7:6e:e0:ad:78:e9:67:44:58:07:91:97:a9:77:ec:75:10: 91:d5:6b:63:6e:d7:ec:14:01:ba:94:f0:ae:ec:c2:28:4e:61: 31:dc:e2:8a:97:87:3e:12:ef:76:22:c4:f4:51:8c:8a:a8:7e: 6f:c3:ae:00 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUTqcXQhktrtIiu1SF/SlBRRFD5VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNTExMDQwMDAyMzhaFw0yNTExMDgwMDAyMzhaMHoxSTBHBgNV BAUTQGFlM2MzYjE1NDk1ZDFmMTAwNjBiYWM5MDIwN2Y2MTc3ZmU3M2RlZjMxNDFh M2VjNTViZmQ1NzhhYTViMzBlMWMxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIcw0XCaB/j+5RRams8NAcEJ6buUzLT9O6QiSzqBw1CzGgzvy3Dx0s9eK4Tj zMgQmO90xoAzEK8lmot1PQrXgbpojtD17Z4t19jkU25bT0LiRL6GdGdRmpvvpJ9o LRkg1GvyMen07zmC+xsi87O3x5SrmfSlM40X3EMG53Cw+iqU4NDsrkXLmnhSkLdK 7WjTVI0DCTS6VHqcb/PJf300QC/nKA/vSejuimOtxp4oNsVqObqKyoOS63Z2NHFo q48uu/8YisooPfnicNm/Ntsm1Me5f5Q4RmL2GFEfFksmfth/aYFjZUCCX2oE/pCo 8qnXkdoyOUe6Ev0NCfjrcXzk05sCAwEAAaOCAocwggKDMB0GA1UdDgQWBBR4Fzfb aVj9ru0TOJbPGTrao2Oq3zAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9VCew9/+DfmwYBhQ+q8wiICSWAdtXC1 UET533TRKQ59wEnP5ubGN+2MzG4hu4OVzjKclIl27twyaVxcYyjURb9YzOHCAJSn xLtn5swFeIp2+dU1y5QZF0p7K9PSTHtguQXCEBOpPHr5NAIWyU1hFniKTiYH8J8d YEMmUxLi065k7QCOCBR7d0DngANihFdUTBBd0/qwD9a6b9tVq6Nz4euvtd9giap3 NoA9mXw+YOCpFL6st5krYkVUvIM0giYGatagt07A3qdu4K146WdEWAeRl6l37HUQ kdVrY27X7BQBupTwruzCKE5hMdziipeHPhLvdiLE9FGMiqh+b8OuAA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:49:47 2025 by rpki-client