$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: uU3uLHYzzoyP7T4b1n1C9dAFikZHf5MY73FaZNVXeWs= Subject key identifier: F1:75:73:F2:3B:2A:5B:B4:EB:ED:12:37:52:24:69:13:FC:39:F9:BF Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 66723CF2C98029B8785A6EEE263337297A7B858A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: E8 Signing time: Sun 01 Mar 2026 00:01:51 +0000 Manifest this update: Sun 01 Mar 2026 00:01:51 +0000 Manifest next update: Thu 05 Mar 2026 00:01:51 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: cr4oikUg6zUv2Eup8p6QJxQvA+W7tc2515d+Bx4bTi8=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: zMij5sOHhIyIY2xPTp819MwktL2bSrUOnZkzkiK7YeI=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: vio/SqyoATZ5XPaINs7fxbsJsHC3GKDa5DgYLNX6I7g=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Mar 2026 00:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:72:3c:f2:c9:80:29:b8:78:5a:6e:ee:26:33:37:29:7a:7b:85:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Mar 1 00:01:51 2026 GMT Not After : Mar 5 00:01:51 2026 GMT Subject: serialNumber=7105e92dd246bab25dc53f77c8a14c9be3534151c19a9cbb21698d0c9fb366b5, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0d:c3:50:fd:cd:ac:55:13:ca:38:01:a4:8c: 3c:1d:1a:65:f9:67:de:4f:70:54:9f:11:9e:60:dc: c1:23:e9:b1:3f:ba:94:29:22:84:79:ea:07:fe:c5: 55:3a:a8:dd:32:99:69:77:80:4d:c3:b9:3c:84:27: 60:02:32:6c:c8:05:5a:16:1e:8e:cb:db:c0:f6:29: 0e:86:f9:e3:73:80:5c:d4:e9:f1:3f:d6:0f:02:da: 7c:0f:c6:b3:84:c2:80:d2:08:89:56:d3:ce:89:a5: 7f:ee:45:13:ff:4a:35:55:68:3e:52:56:1c:8a:8f: 8c:a3:b5:48:5c:d2:52:44:32:4c:8f:0c:76:64:be: cb:63:2b:8e:34:7b:e3:cf:4e:de:9f:46:ba:52:0d: b7:27:e4:77:85:0e:58:c0:60:fa:6b:97:92:ea:80: 7f:b4:56:64:45:e6:ca:e4:38:6a:45:4b:03:c8:f6: a8:ce:d0:4c:f9:b1:2c:72:59:c5:9e:e1:f9:aa:ad: 71:f9:27:a3:b6:b7:73:54:48:d7:e5:eb:5a:88:da: e3:f2:c4:8a:0d:91:ab:7d:cf:b8:50:cf:cc:b9:a4: 13:41:eb:da:33:d0:21:a4:f9:82:73:fe:f2:ed:2f: 36:97:68:58:78:63:f8:fc:a3:7f:5a:6d:67:88:ce: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:73:F2:3B:2A:5B:B4:EB:ED:12:37:52:24:69:13:FC:39:F9:BF X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:35:08:e2:c7:58:d7:20:9e:b9:e3:d3:2c:40:00:6d:d1:d1: 18:4c:01:0b:d5:cb:c3:74:b5:82:93:16:28:79:b8:aa:be:5b: 57:fa:0a:fe:13:a3:bb:4e:4a:6c:d1:d5:2b:2c:6d:50:18:c1: 7d:68:f5:4c:e4:8f:45:a9:d9:f7:8b:3a:34:9e:f6:68:0c:f0: e3:cb:c3:69:15:46:c9:07:10:4d:d4:b2:13:44:a6:c9:7f:22: 57:bb:63:77:ba:59:3a:3e:c4:37:6c:8b:e5:47:bd:16:bd:e6: 3b:c6:0f:92:68:9a:b9:b4:09:fe:e1:c8:79:d7:f5:15:af:c1: 9c:c1:c9:85:b8:2b:76:d7:77:d3:63:ed:65:21:25:0e:4f:8b: a1:f1:05:93:b8:ab:3b:56:d1:94:e6:64:d2:29:b5:0a:e7:71: 2c:9b:25:a5:c5:8e:98:07:03:a6:c3:b4:0a:5d:b0:92:d4:f5: df:28:f0:30:26:b4:53:2b:15:8d:08:2d:55:64:7f:19:ec:7f: 14:1d:08:6c:0b:d5:90:26:dc:a2:29:2a:85:7a:1b:19:5c:63: f3:dd:68:18:2b:7f:9d:35:61:63:0b:91:67:d2:3a:71:22:47: e3:ac:51:cb:e2:de:f1:a0:87:b6:43:bb:ac:7d:7c:38:c2:c0: 84:d7:63:17 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUZnI88smAKbh4Wm7uJjM3KXp7hYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjAzMDEwMDAxNTFaFw0yNjAzMDUwMDAxNTFaMHoxSTBHBgNV BAUTQDcxMDVlOTJkZDI0NmJhYjI1ZGM1M2Y3N2M4YTE0YzliZTM1MzQxNTFjMTlh OWNiYjIxNjk4ZDBjOWZiMzY2YjUxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcNw1D9zaxVE8o4AaSMPB0aZfln3k9wVJ8RnmDcwSPpsT+6lCkihHnqB/7F VTqo3TKZaXeATcO5PIQnYAIybMgFWhYejsvbwPYpDob543OAXNTp8T/WDwLafA/G s4TCgNIIiVbTzomlf+5FE/9KNVVoPlJWHIqPjKO1SFzSUkQyTI8MdmS+y2MrjjR7 489O3p9GulINtyfkd4UOWMBg+muXkuqAf7RWZEXmyuQ4akVLA8j2qM7QTPmxLHJZ xZ7h+aqtcfkno7a3c1RI1+XrWoja4/LEig2Rq33PuFDPzLmkE0Hr2jPQIaT5gnP+ 8u0vNpdoWHhj+Pyjf1ptZ4jO0VcCAwEAAaOCAocwggKDMB0GA1UdDgQWBBTxdXPy OypbtOvtEjdSJGkT/Dn5vzAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzUI4sdY1yCeuePTLEAAbdHRGEwBC9XL w3S1gpMWKHm4qr5bV/oK/hOju05KbNHVKyxtUBjBfWj1TOSPRanZ94s6NJ72aAzw 48vDaRVGyQcQTdSyE0SmyX8iV7tjd7pZOj7EN2yL5Ue9Fr3mO8YPkmiaubQJ/uHI edf1Fa/BnMHJhbgrdtd302PtZSElDk+LofEFk7irO1bRlOZk0im1CudxLJslpcWO mAcDpsO0Cl2wktT13yjwMCa0UysVjQgtVWR/Gex/FB0IbAvVkCbcoikqhXobGVxj 891oGCt/nTVhYwuRZ9I6cSJH46xRy+Le8aCHtkO7rH18OMLAhNdjFw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:14:10 2026 by rpki-client