$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft File: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft (raw, json) Hash identifier: HcrHmPf3/rZW3qPeNaSaLXUgCynML6QCykZoR6hWXcs= Subject key identifier: 28:19:43:C4:2F:3C:12:0A:2F:01:D2:43:B5:15:87:40:F0:B4:0F:83 Authority key identifier: D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0 Certificate issuer: /CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0 Certificate serial: 38F1E7B1153A2B2B0777DD9FC3687E13959CF688 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft Manifest number: 0C Signing time: Thu 21 Aug 2025 21:32:23 +0000 Manifest this update: Thu 21 Aug 2025 21:27:23 +0000 Manifest next update: Wed 27 Aug 2025 06:22:23 +0000 Files and hashes: 1: 3230302e3130382e3139312e302f32342d3234203d3e20323639393935.roa (hash: HTar7+pZfbldc2ylEfFBE6h06Z0KculQNaqKWJvTnig=) 2: D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl (hash: ExzXF+xS9x6E1evyeM5kpQfifmcIW99N86OnRBJRHWE=) 3: 323830333a343165303a3a2f33322d3332203d3e20323639393935.roa (hash: 9a73hHXsUpINg4/Jlvrnj1XEPuNRON7CSa8QHkSYsnI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 06:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f1:e7:b1:15:3a:2b:2b:07:77:dd:9f:c3:68:7e:13:95:9c:f6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0 Validity Not Before: Aug 21 21:27:23 2025 GMT Not After : Aug 27 06:22:23 2025 GMT Subject: CN=281943C42F3C120A2F01D243B5158740F0B40F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:13:7f:2e:c1:ae:26:d4:79:02:68:21:9f: 9c:24:65:b3:fd:f6:de:dc:e3:19:ca:11:4d:60:e8: 2f:92:3d:3b:bf:00:87:32:96:3d:63:f7:f2:bb:85: b6:08:d2:db:c3:f4:3a:d0:23:4a:4c:de:15:2f:6c: be:0b:03:b5:5f:21:af:c8:98:f1:97:cc:fa:d2:dc: 7e:25:54:b9:ba:8b:17:73:f2:69:a8:b4:02:cc:2e: bd:bf:09:51:8f:2b:7f:dc:b8:8b:9c:c1:1e:cc:41: 0b:a3:54:78:64:36:ae:d7:35:01:0b:80:a5:35:ee: 59:b6:77:68:30:1c:e9:eb:79:3a:a3:c1:c6:87:96: 67:b0:55:b1:5c:e3:d4:82:b3:f8:49:e0:51:45:e8: 82:47:69:2a:8b:0e:39:55:f4:98:f0:e2:b3:a9:6f: 9d:6a:1c:c5:b3:7b:78:46:64:4a:02:45:03:01:c9: 7d:4f:5d:26:cf:20:fc:b6:0e:f9:38:e4:80:bc:e6: 53:14:bf:aa:21:84:4e:35:22:b7:c6:84:0a:b6:10: b8:5d:69:0c:b9:f5:16:11:fe:c9:0b:3f:c9:e6:ec: 73:8d:5d:23:f5:c0:08:54:f3:57:60:6d:f3:af:ec: 2c:26:36:36:71:d9:23:74:bd:8e:f4:aa:88:8b:9d: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:19:43:C4:2F:3C:12:0A:2F:01:D2:43:B5:15:87:40:F0:B4:0F:83 X509v3 Authority Key Identifier: keyid:D8:A9:0A:3E:82:37:FF:B6:1A:1E:5F:F5:A3:35:95:D4:AB:4D:C9:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F870E07E0E233EA8EC96EA7F49077B758EF5164A5C97F30642AB5782A699B2/0/D8A90A3E8237FFB61A1E5FF5A33595D4AB4DC9E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:23:d4:20:3d:3b:54:ba:dd:e7:b0:38:16:71:13:b5:01:e7: 4f:a4:53:23:94:81:78:84:00:75:1d:af:e5:77:ce:d4:8e:51: ea:cf:0f:9f:ac:0a:77:d6:89:2d:26:55:6d:26:1d:71:de:1e: ec:1e:16:83:99:90:5f:d5:b3:d2:68:28:36:e3:1a:30:c0:4a: 7e:c5:be:cb:97:d7:ed:5b:ea:31:01:02:1b:ff:74:8f:a2:b6: af:2c:88:41:f5:0f:91:73:42:a8:4c:9a:aa:77:6b:47:d9:20: 97:48:5e:69:55:67:bf:78:9a:46:16:2e:8e:03:9c:96:fe:59: 0d:79:13:44:75:5b:31:82:a6:ab:13:c8:9d:a1:55:47:86:89: 4e:02:6f:cd:1c:9b:91:dd:69:f2:85:2a:65:61:2f:59:0c:93: 0d:e3:4b:ed:88:d1:f0:b6:2c:00:c9:af:c9:42:15:9e:78:dc: 2e:d6:c4:96:56:0e:37:92:33:36:09:53:b6:13:a1:e4:a7:b7: 2d:4c:de:d9:58:69:f0:f3:4a:76:af:75:ef:ac:c0:80:55:9f: ea:7a:76:fb:35:df:0b:81:4d:cc:e9:9a:f0:9c:d1:f6:2e:5c: 8a:6b:6f:78:52:0f:b2:88:37:10:48:34:9a:24:8b:ba:9b:b2: f8:1a:1d:3f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOPHnsRU6KysHd92fw2h+E5Wc9ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTBBM0U4MjM3RkZCNjFBMUU1RkY1QTMzNTk1RDRB QjREQzlFMDAeFw0yNTA4MjEyMTI3MjNaFw0yNTA4MjcwNjIyMjNaMDMxMTAvBgNV BAMTKDI4MTk0M0M0MkYzQzEyMEEyRjAxRDI0M0I1MTU4NzQwRjBCNDBGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zBN/LsGuJtR5Amghn5wkZbP9 9t7c4xnKEU1g6C+SPTu/AIcylj1j9/K7hbYI0tvD9DrQI0pM3hUvbL4LA7VfIa/I mPGXzPrS3H4lVLm6ixdz8mmotALMLr2/CVGPK3/cuIucwR7MQQujVHhkNq7XNQEL gKU17lm2d2gwHOnreTqjwcaHlmewVbFc49SCs/hJ4FFF6IJHaSqLDjlV9Jjw4rOp b51qHMWze3hGZEoCRQMByX1PXSbPIPy2Dvk45IC85lMUv6ohhE41IrfGhAq2ELhd aQy59RYR/skLP8nm7HONXSP1wAhU81dgbfOv7CwmNjZx2SN0vY70qoiLnTxLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKBlDxC88EgovAdJDtRWHQPC0D4MwHwYDVR0j BBgwFoAU2KkKPoI3/7YaHl/1ozWV1KtNyeAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMEY4NzBFMDdFMEUyMzNFQThFQzk2RUE3RjQ5MDc3Qjc1 OEVGNTE2NEE1Qzk3RjMwNjQyQUI1NzgyQTY5OUIyLzAvRDhBOTBBM0U4MjM3RkZC NjFBMUU1RkY1QTMzNTk1RDRBQjREQzlFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEE5MEEzRTgyMzdGRkI2MUEx RTVGRjVBMzM1OTVENEFCNERDOUUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDBGODcwRTA3RTBFMjMzRUE4RUM5NkVBN0Y0OTA3N0I3NThFRjUxNjRB NUM5N0YzMDY0MkFCNTc4MkE2OTlCMi8wL0Q4QTkwQTNFODIzN0ZGQjYxQTFFNUZG NUEzMzU5NUQ0QUI0REM5RTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfI9QgPTtUut3nsDgWcRO1AedP pFMjlIF4hAB1Ha/ld87UjlHqzw+frAp31oktJlVtJh1x3h7sHhaDmZBf1bPSaCg2 4xowwEp+xb7Ll9ftW+oxAQIb/3SPoravLIhB9Q+Rc0KoTJqqd2tH2SCXSF5pVWe/ eJpGFi6OA5yW/lkNeRNEdVsxgqarE8idoVVHholOAm/NHJuR3WnyhSplYS9ZDJMN 40vtiNHwtiwAya/JQhWeeNwu1sSWVg43kjM2CVO2E6Hkp7ctTN7ZWGnw80p2r3Xv rMCAVZ/qenb7Nd8LgU3M6ZrwnNH2LlyKa294Ug+yiDcQSDSaJIu6m7L4Gh0/ -----END CERTIFICATE-----Generated at Sat Aug 23 22:22:46 2025 by rpki-client