$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft File: cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft (raw, json) Hash identifier: Pmz0Pgz0M6NSA72lzipvd9a9yEzxOjpgrH9+dWsFwkA= Subject key identifier: 54:D4:92:BA:A9:1C:88:EC:24:37:BB:F8:BB:96:C6:E3:5C:D6:41:E2 Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Certificate serial: 1CC76582732E420199BF8FE3565D1992314F7F07 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft Manifest number: 0119 Signing time: Sun 19 Apr 2026 00:13:26 +0000 Manifest this update: Sun 19 Apr 2026 00:13:26 +0000 Manifest next update: Thu 23 Apr 2026 00:13:26 +0000 Files and hashes: 1: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (hash: cr4oikUg6zUv2Eup8p6QJxQvA+W7tc2515d+Bx4bTi8=) 2: 79de1a10-540a-49e4-92f2-b8e81488ffd1.roa (hash: zMij5sOHhIyIY2xPTp819MwktL2bSrUOnZkzkiK7YeI=) 3: cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl (hash: e9PQPVbwHpayqoqWzDIuv+d8n3ftRBZ+6z+QoU3VQic=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 Apr 2026 00:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c7:65:82:73:2e:42:01:99:bf:8f:e3:56:5d:19:92:31:4f:7f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798 Validity Not Before: Apr 19 00:13:26 2026 GMT Not After : Apr 23 00:13:26 2026 GMT Subject: serialNumber=7aa6608e0c225b4855772c60202c08f9b529afafb8310b7b146b101c8b09f517, CN=7b7e81e4-c981-4cca-be35-ec61f732415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:3e:e1:1f:2b:95:83:e7:c3:91:7d:4d:66: b6:03:34:67:54:66:5b:5c:6f:53:79:ec:e9:a7:c8: f8:71:5a:61:77:19:3b:e2:cb:80:4a:24:14:78:cf: 7a:ee:eb:90:3d:b6:70:4f:3e:04:7e:ce:4d:41:60: 7e:00:82:21:7b:7a:43:89:36:39:40:d0:65:98:db: bb:ae:82:d0:79:4a:74:1f:2f:03:58:ae:82:a6:8e: 88:61:4b:2f:1e:89:03:bd:32:c0:b5:31:11:98:94: 4b:c0:dd:ab:40:df:5e:04:67:df:09:2e:87:d4:ac: 0f:1f:08:ea:20:87:e6:0a:10:6e:1d:66:34:f7:79: 5a:56:86:ae:58:98:24:6a:34:b7:24:13:e7:27:5e: a4:a2:f4:a9:1d:89:70:fa:a6:fc:f6:3f:ab:8f:e0: 9b:27:df:9a:3e:db:d9:a6:70:6d:a7:99:a7:51:18: 27:59:99:7f:87:bc:99:8d:07:e4:c5:0b:2f:4a:8c: 4f:5a:fe:e8:20:ec:15:b5:19:d3:f3:63:e9:7c:cc: 09:36:45:43:9f:0f:bf:2d:03:9c:5b:f6:22:50:b9: f9:ed:d5:47:4a:96:b6:21:14:d7:f6:3d:08:84:1f: 49:03:2a:eb:aa:05:c6:b5:47:d1:ce:53:14:4b:3c: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D4:92:BA:A9:1C:88:EC:24:37:BB:F8:BB:96:C6:E3:5C:D6:41:E2 X509v3 Authority Key Identifier: keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e2:cf:75:9c:85:93:00:71:91:44:be:d0:2f:25:1c:75:5e: 1a:d2:b0:dd:8e:b6:32:33:b3:28:d4:d4:c1:6e:ec:4b:2a:cf: f7:cf:83:65:ed:6c:2f:31:f5:6b:a1:be:f1:7c:29:02:a2:fa: 4a:db:e2:7e:ac:df:76:f3:e5:34:b2:59:75:7e:c9:f7:61:44: 2e:a2:30:97:9f:1b:e1:7a:90:25:97:e2:25:df:9e:ee:1d:c3: 76:e1:09:27:35:ec:b6:22:c7:84:51:ac:a3:27:43:3f:55:6d: b0:f8:68:52:ad:06:d9:51:59:ec:c8:10:cb:33:74:ff:ba:7e: 0d:d1:95:d9:61:0d:43:2b:b3:f3:7a:94:16:2f:a5:22:bd:9d: f5:80:89:14:51:58:5b:f3:47:88:8f:3f:d5:a3:a6:3f:d3:7f: 43:45:85:7b:31:13:a0:d8:1f:38:a5:27:27:9a:74:c4:71:1c: 6e:b2:cd:f4:33:bc:2d:b2:be:ae:d4:64:67:01:dd:59:a3:db: 4e:96:be:05:1b:9f:af:f4:d1:06:23:e2:81:14:ec:f3:77:8a: 3d:70:9b:5f:0e:2d:89:67:8d:97:8b:0a:ee:79:39:0d:f3:7a: c8:2a:3b:42:16:92:a9:70:97:3d:73:89:b2:dd:74:b0:00:1d: 08:e0:8e:81 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUHMdlgnMuQgGZv4/jVl0ZkjFPfwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG RjlGMTc5ODAeFw0yNjA0MTkwMDEzMjZaFw0yNjA0MjMwMDEzMjZaMHoxSTBHBgNV BAUTQDdhYTY2MDhlMGMyMjViNDg1NTc3MmM2MDIwMmMwOGY5YjUyOWFmYWZiODMx MGI3YjE0NmIxMDFjOGIwOWY1MTcxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALS6PuEfK5WD58ORfU1mtgM0Z1RmW1xvU3ns6afI+HFaYXcZO+LLgEokFHjP eu7rkD22cE8+BH7OTUFgfgCCIXt6Q4k2OUDQZZjbu66C0HlKdB8vA1iugqaOiGFL Lx6JA70ywLUxEZiUS8Ddq0DfXgRn3wkuh9SsDx8I6iCH5goQbh1mNPd5WlaGrliY JGo0tyQT5ydepKL0qR2JcPqm/PY/q4/gmyffmj7b2aZwbaeZp1EYJ1mZf4e8mY0H 5MULL0qMT1r+6CDsFbUZ0/Nj6XzMCTZFQ58Pvy0DnFv2IlC5+e3VR0qWtiEU1/Y9 CIQfSQMq66oFxrVH0c5TFEs8V+0CAwEAAaOCAocwggKDMB0GA1UdDgQWBBRU1JK6 qRyI7CQ3u/i7lsbjXNZB4jAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3 MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx RUZGOUYxNzk4LmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZy c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy9jV3kzTE9Yc1Bw ank2LXA0amxWUVJSRE1kLWMubWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6 Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9jNDc0 ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xPWHNQcGp5Ni1w NGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeLPdZyFkwBxkUS+0C8lHHVeGtKw3Y62 MjOzKNTUwW7sSyrP98+DZe1sLzH1a6G+8XwpAqL6StvifqzfdvPlNLJZdX7J92FE LqIwl58b4XqQJZfiJd+e7h3DduEJJzXstiLHhFGsoydDP1VtsPhoUq0G2VFZ7MgQ yzN0/7p+DdGV2WENQyuz83qUFi+lIr2d9YCJFFFYW/NHiI8/1aOmP9N/Q0WFezET oNgfOKUnJ5p0xHEcbrLN9DO8LbK+rtRkZwHdWaPbTpa+BRufr/TRBiPigRTs83eK PXCbXw4tiWeNl4sK7nk5DfN6yCo7QhaSqXCXPXOJst10sAAdCOCOgQ== -----END CERTIFICATE-----Generated at Sun Apr 19 11:27:31 2026 by rpki-client