$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: zZ69OPfwoIEX6e4Bfm2L2Oa4+BQuj5/Re/lu9Tz7DzA= Subject key identifier: 08:0E:8C:AD:A2:01:49:21:36:65:05:C1:8A:67:E5:E3:15:98:A1:A0 Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 1A7C78E00B7187FD9E6670F0B2A7DE8A3B9DC793 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 01B5 Signing time: Mon 21 Sep 2026 00:19:52 +0000 Manifest this update: Mon 21 Sep 2026 00:19:52 +0000 Manifest next update: Fri 25 Sep 2026 00:19:52 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: mizRw7SEPh8dCHhUZhyfVblF0zvAs4XGiS+DkgdHUSU=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: NgP7gRkBr0KKwrc/EznhF1Cd3Hc/z5/lHlKOKPr7tOQ=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: +l8QA1zX2loQ1/ugA4WOpj6WnQYE3k18cTB8N7FvH1s=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Sep 2026 20:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7c:78:e0:0b:71:87:fd:9e:66:70:f0:b2:a7:de:8a:3b:9d:c7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Sep 21 00:19:52 2026 GMT Not After : Sep 25 00:19:52 2026 GMT Subject: serialNumber=04c113622f1833e6a99292e8862ea665dec9cbbf91da12c9eb0d7da7366b4537, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:b9:b0:31:ff:c0:c4:f3:34:57:ed:4f:73: 03:c1:9d:2c:c3:f5:41:9c:3d:1c:db:b7:7e:d1:90: ed:0b:ce:94:de:dc:c3:5d:d6:c0:49:af:68:8c:c4: ec:c6:64:01:dd:ce:74:22:d0:3f:f5:6e:ab:3e:a3: 3d:f7:d9:14:48:ed:67:74:a5:de:87:67:f5:b1:08: b2:35:0d:52:f9:6d:1e:b4:f2:87:0e:56:e8:dc:a6: 37:b2:de:9b:38:32:66:65:b4:d3:9f:20:bc:11:3f: 8d:46:ba:45:e8:e2:78:eb:a1:0e:4b:46:2c:ed:f8: 8b:98:9f:85:a2:50:96:b4:ca:ca:b6:ff:52:df:48: 95:64:e1:4f:42:8a:65:11:c8:ce:1e:30:73:3a:a9: ac:10:9e:4e:75:ff:19:b1:5e:af:d3:52:74:af:9e: dd:25:91:81:40:1c:df:6d:52:70:1d:fa:a6:40:f2: 65:fc:40:23:ec:35:c5:a3:40:fe:d9:8c:4a:87:a4: 61:64:22:eb:a2:16:91:4c:95:e9:09:b0:6a:8a:13: f1:ca:99:58:8f:34:21:47:26:58:d6:2f:22:21:99: 27:4d:04:17:84:89:7c:5b:6d:6f:cd:8a:0c:e6:60: 14:83:df:5a:7d:59:2b:ea:72:1b:eb:59:fa:83:7a: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0E:8C:AD:A2:01:49:21:36:65:05:C1:8A:67:E5:E3:15:98:A1:A0 X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f5:4b:ad:67:00:e5:bc:5f:d9:c1:19:59:2f:90:c1:ab:bf: 61:cc:8f:6f:8a:95:e6:25:06:76:d5:d6:9f:f0:8d:88:f5:9f: c7:e6:ae:2d:44:e5:de:d6:74:14:2d:35:96:bb:3f:28:ff:94: ff:eb:c6:fc:6d:5e:65:2d:13:a1:0a:4f:ac:30:bb:f0:96:cf: b0:77:a6:37:53:89:a8:98:f7:16:2a:c7:11:04:36:d2:9f:bb: 9b:11:bf:90:9f:c1:d7:c7:ad:2a:8c:13:a9:af:fe:df:7c:e4: a6:41:db:aa:5b:58:72:ba:7e:b2:b4:69:26:56:46:52:ea:0b: 7e:c9:44:cc:13:67:a7:ed:76:de:0d:af:77:a6:b5:64:da:1d: 63:67:5b:34:c4:57:1a:32:7f:03:3a:48:67:92:94:85:f6:94: a3:d8:68:11:ce:3b:97:4e:5e:20:59:b2:aa:be:6f:d2:2f:f5: 80:7d:27:86:52:22:bf:ef:5e:48:01:3a:ee:d6:5a:c6:65:09: 7b:36:63:02:e0:b3:16:70:8e:8b:e2:76:73:e2:80:b3:9f:16: 05:d9:e5:0f:55:9e:29:46:33:b5:43:7b:d0:a4:93:64:6e:8e: 9f:34:c7:65:fe:75:74:cb:65:f7:d4:16:da:e5:d9:b0:13:ff: e9:6d:94:f1 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUGnx44Atxh/2eZnDwsqfeijudx5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjA5MjEwMDE5NTJaFw0yNjA5MjUwMDE5NTJaMHoxSTBHBgNV BAUTQDA0YzExMzYyMmYxODMzZTZhOTkyOTJlODg2MmVhNjY1ZGVjOWNiYmY5MWRh MTJjOWViMGQ3ZGE3MzY2YjQ1MzcxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlgubAx/8DE8zRX7U9zA8GdLMP1QZw9HNu3ftGQ7QvOlN7cw13WwEmvaIzE 7MZkAd3OdCLQP/Vuqz6jPffZFEjtZ3Sl3odn9bEIsjUNUvltHrTyhw5W6NymN7Le mzgyZmW0058gvBE/jUa6RejieOuhDktGLO34i5ifhaJQlrTKyrb/Ut9IlWThT0KK ZRHIzh4wczqprBCeTnX/GbFer9NSdK+e3SWRgUAc321ScB36pkDyZfxAI+w1xaNA /tmMSoekYWQi66IWkUyV6QmwaooT8cqZWI80IUcmWNYvIiGZJ00EF4SJfFttb82K DOZgFIPfWn1ZK+pyG+tZ+oN6Gt0CAwEAAaOCAocwggKDMB0GA1UdDgQWBBQIDoyt ogFJITZlBcGKZ+XjFZihoDAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivVLrWcA5bxf2cEZWS+Qwau/YcyPb4qV 5iUGdtXWn/CNiPWfx+auLUTl3tZ0FC01lrs/KP+U/+vG/G1eZS0ToQpPrDC78JbP sHemN1OJqJj3FirHEQQ20p+7mxG/kJ/B18etKowTqa/+33zkpkHbqltYcrp+srRp JlZGUuoLfslEzBNnp+123g2vd6a1ZNodY2dbNMRXGjJ/AzpIZ5KUhfaUo9hoEc47 l05eIFmyqr5v0i/1gH0nhlIiv+9eSAE67tZaxmUJezZjAuCzFnCOi+J2c+KAs58W BdnlD1WeKUYztUN70KSTZG6OnzTHZf51dMtl99QW2uXZsBP/6W2U8Q== -----END CERTIFICATE-----Generated at Mon Sep 21 16:18:45 2026 by rpki-client