$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft File: 9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft (raw, json) Hash identifier: KMB13HAXEQkv7GWFy/tDLZeTarYSOfo9bKqAFBuHL0A= Subject key identifier: 48:DD:ED:69:DC:DF:CE:7F:72:B5:33:18:5D:59:BF:32:94:E0:87:58 Authority key identifier: 9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59 Certificate issuer: /CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459 Certificate serial: 018EA942CD4ED7EC7E4FA2E4EE6D1095935BEFC1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft Manifest number: 010D Signing time: Fri 22 Aug 2025 03:31:11 +0000 Manifest this update: Fri 22 Aug 2025 03:26:11 +0000 Manifest next update: Wed 27 Aug 2025 21:55:11 +0000 Files and hashes: 1: 9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl (hash: s752W8+0XkaFYcWTweK6buxCJ66maRP1eJeOGVcB0/E=) 2: 34352e3139312e38382e302f32322d3234203d3e20323639383837.roa (hash: VDT/XY5NOZj/gSvmmK+cJE3i1st0eAmM04AIslpJwgQ=) 3: 323830333a613465303a3a2f33322d3438203d3e20323639383837.roa (hash: dKLUROvgTYNtqatSGw9C6IddNYwPS3P+dlJdpX5Sct8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:a9:42:cd:4e:d7:ec:7e:4f:a2:e4:ee:6d:10:95:93:5b:ef:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F12506BED8DAFE7AD724FA19BA1A600CB9F1459 Validity Not Before: Aug 22 03:26:11 2025 GMT Not After : Aug 27 21:55:11 2025 GMT Subject: CN=48DDED69DCDFCE7F72B533185D59BF3294E08758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:a0:df:ca:c2:5c:4d:7b:24:1e:29:7d:03: b4:aa:b1:90:61:0a:d8:4a:8a:a8:ad:9c:fd:8c:df: ac:f9:dc:7d:f9:a8:58:96:bb:de:41:3c:19:92:ea: 82:b3:3b:82:50:15:65:3b:33:9d:4c:14:c0:dd:c9: 34:51:ba:73:41:9c:cf:2d:f1:ea:8a:fc:03:c1:e1: fd:57:a6:e2:7f:bc:0f:79:5c:47:15:22:6b:69:11: fc:5c:ac:c4:d3:e2:fb:24:e3:c7:d2:06:9f:0f:f5: 52:e9:f3:f7:d1:ff:01:22:e4:f1:db:cf:7f:f8:1b: 81:be:9c:5a:84:05:4a:78:e8:ff:9e:ca:41:56:52: 4e:90:6d:dc:60:29:04:8c:8f:da:89:ec:1c:8d:f9: 9d:c5:9d:3c:b9:72:ca:6e:24:a9:e4:32:f2:05:b5: a9:5a:bc:f6:4d:fb:8b:30:99:3e:75:0a:46:f3:3a: 45:47:aa:e1:16:1e:87:4a:36:ea:d6:55:e9:a8:5a: 64:e0:79:ae:ac:2d:b8:25:08:73:8c:31:31:ea:d6: a3:2e:3e:04:13:df:5d:6a:93:b6:9f:42:3c:6e:62: f6:b9:4f:70:cd:20:34:59:87:3d:36:94:50:e7:7d: d3:24:29:1d:57:71:05:d0:7c:5f:51:3e:4c:6f:64: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DD:ED:69:DC:DF:CE:7F:72:B5:33:18:5D:59:BF:32:94:E0:87:58 X509v3 Authority Key Identifier: keyid:9F:12:50:6B:ED:8D:AF:E7:AD:72:4F:A1:9B:A1:A6:00:CB:9F:14:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0290CDB140916610D56880836A7CC21314B8D3DD087C7B357D7EAEB9E0C9A082/0/9F12506BED8DAFE7AD724FA19BA1A600CB9F1459.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:59:e2:11:88:56:a3:9b:44:ce:73:69:f1:1c:ac:0f:df:dc: 45:0a:f8:18:a9:56:f7:12:07:92:ad:b7:2d:4a:8b:5d:71:c3: be:e3:02:97:26:e8:38:d1:8c:81:6f:b0:21:6a:53:41:a0:6f: b1:64:a0:f2:6f:b0:75:ab:0b:b6:61:48:2c:66:62:d9:66:31: 02:7f:79:13:ad:a5:24:68:94:74:ff:dc:d7:9e:85:8d:bb:02: f0:af:61:8f:e7:37:e6:34:94:04:18:74:2d:1c:49:7a:b2:bf: 06:00:90:2f:e0:6d:b0:a4:04:cc:b9:64:bf:f1:4a:6e:5d:62: 56:87:c9:9d:fc:0c:1e:e2:33:d5:b9:b7:ec:e3:40:cb:d8:b1: 80:8d:66:02:fd:3c:a9:dc:c1:6d:8b:e3:49:f4:17:b9:93:85: c7:16:32:06:7c:3b:ed:45:d7:8b:20:15:f8:0a:71:e1:0d:c6: ca:df:b0:76:bd:98:01:ad:08:ee:1e:d6:a4:07:6b:7d:88:06: e2:c7:21:64:71:42:95:ad:3b:c7:08:ba:d3:42:15:77:9d:4f: 55:29:8d:ad:74:06:ce:39:ba:4d:2e:c2:e3:eb:9f:92:26:a7: 3b:19:bd:fa:2e:37:fc:e5:9b:94:1f:79:10:9c:88:b4:82:f6: 3e:59:d9:6f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAY6pQs1O1+x+T6Lk7m0QlZNb78EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxMjUwNkJFRDhEQUZFN0FENzI0RkExOUJBMUE2MDBD QjlGMTQ1OTAeFw0yNTA4MjIwMzI2MTFaFw0yNTA4MjcyMTU1MTFaMDMxMTAvBgNV BAMTKDQ4RERFRDY5RENERkNFN0Y3MkI1MzMxODVENTlCRjMyOTRFMDg3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC626DfysJcTXskHil9A7SqsZBh CthKiqitnP2M36z53H35qFiWu95BPBmS6oKzO4JQFWU7M51MFMDdyTRRunNBnM8t 8eqK/APB4f1XpuJ/vA95XEcVImtpEfxcrMTT4vsk48fSBp8P9VLp8/fR/wEi5PHb z3/4G4G+nFqEBUp46P+eykFWUk6QbdxgKQSMj9qJ7ByN+Z3FnTy5cspuJKnkMvIF talavPZN+4swmT51CkbzOkVHquEWHodKNurWVemoWmTgea6sLbglCHOMMTHq1qMu PgQT311qk7afQjxuYva5T3DNIDRZhz02lFDnfdMkKR1XcQXQfF9RPkxvZBlbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSN3tadzfzn9ytTMYXVm/MpTgh1gwHwYDVR0j BBgwFoAUnxJQa+2Nr+etck+hm6GmAMufFFkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMjkwQ0RCMTQwOTE2NjEwRDU2ODgwODM2QTdDQzIxMzE0 QjhEM0REMDg3QzdCMzU3RDdFQUVCOUUwQzlBMDgyLzAvOUYxMjUwNkJFRDhEQUZF N0FENzI0RkExOUJBMUE2MDBDQjlGMTQ1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjEyNTA2QkVEOERBRkU3QUQ3 MjRGQTE5QkExQTYwMENCOUYxNDU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDI5MENEQjE0MDkxNjYxMEQ1Njg4MDgzNkE3Q0MyMTMxNEI4RDNERDA4 N0M3QjM1N0Q3RUFFQjlFMEM5QTA4Mi8wLzlGMTI1MDZCRUQ4REFGRTdBRDcyNEZB MTlCQTFBNjAwQ0I5RjE0NTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAWeIRiFajm0TOc2nxHKwP39xF CvgYqVb3EgeSrbctSotdccO+4wKXJug40YyBb7AhalNBoG+xZKDyb7B1qwu2YUgs ZmLZZjECf3kTraUkaJR0/9zXnoWNuwLwr2GP5zfmNJQEGHQtHEl6sr8GAJAv4G2w pATMuWS/8UpuXWJWh8md/Awe4jPVubfs40DL2LGAjWYC/Typ3MFti+NJ9Be5k4XH FjIGfDvtRdeLIBX4CnHhDcbK37B2vZgBrQjuHtakB2t9iAbixyFkcUKVrTvHCLrT QhV3nU9VKY2tdAbOObpNLsLj65+SJqc7Gb36Ljf85ZuUH3kQnIi0gvY+Wdlv -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:33 2025 by rpki-client