$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: XlcTf8H8Cmf4A9ov3j15jET5kCXeQ3aCLgwJbLAYpZY= Subject key identifier: 95:5E:3D:A9:E1:29:CE:8F:6A:EB:60:FD:11:A2:22:F3:C9:7C:50:6C Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 762203CB215830D0E346793640A2206CD1644B2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: 010C Signing time: Fri 22 Aug 2025 15:38:53 +0000 Manifest this update: Fri 22 Aug 2025 15:33:53 +0000 Manifest next update: Thu 28 Aug 2025 10:22:53 +0000 Files and hashes: 1: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: Mu1aiZbTuKob4P/uHzlI5H1bWCj0RfxIyLfLzn5wSP0=) 2: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: OEP9oRb5YK8L8SQxhjnRiwbarP0/6vhXZoLfXpjN91Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:22:03:cb:21:58:30:d0:e3:46:79:36:40:a2:20:6c:d1:64:4b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Aug 22 15:33:53 2025 GMT Not After : Aug 28 10:22:53 2025 GMT Subject: CN=955E3DA9E129CE8F6AEB60FD11A222F3C97C506C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:ed:75:9d:ad:00:03:e3:9e:6e:83:1b:90: c8:0e:3b:fc:ca:6d:7f:66:f3:28:59:ae:77:5f:11: 7d:15:71:89:47:51:88:47:23:8b:e5:dd:d5:b1:37: 1d:7f:c3:e4:06:55:b7:8c:0e:a8:e1:dc:3d:6f:b3: ef:c0:ba:83:43:7a:ce:06:73:84:ac:34:fe:57:3f: 8d:75:e1:b0:06:63:e2:5b:c1:b3:92:fa:dd:1f:d3: 4a:93:87:6c:6a:de:37:c8:ea:88:17:f3:73:23:91: 70:93:cf:d0:3a:58:99:73:0c:1b:1f:aa:ef:8d:6c: 18:7b:69:01:cf:ea:83:c7:cf:ac:27:b5:ab:e6:7e: 7e:b8:a6:65:48:8b:65:d8:32:bc:88:80:b4:92:bb: 65:f3:c0:17:42:71:f6:6c:d7:1f:7d:e1:bf:00:25: 15:26:bb:ae:0a:cf:d9:25:5c:6b:a8:31:eb:bd:c6: d4:d9:29:00:f2:c7:a0:8e:1e:92:47:bf:1a:bc:65: 39:ac:db:37:ea:49:e6:c2:e9:4d:dd:dd:ca:46:da: c8:31:2c:d6:d9:15:36:57:0c:36:ff:c9:b8:28:bf: e6:6a:ea:26:e3:7f:99:61:9b:11:ff:6f:75:48:18: 78:e5:a6:e2:4c:7d:07:74:97:3d:80:89:e6:b7:57: 4e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:3D:A9:E1:29:CE:8F:6A:EB:60:FD:11:A2:22:F3:C9:7C:50:6C X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:df:8b:70:6d:3d:51:36:58:66:12:43:13:86:e8:3f:17:d2: 5e:22:f9:d9:9c:28:ae:85:17:6e:32:b6:f4:52:37:31:cc:0d: 0d:87:eb:a5:2e:43:de:39:d7:ce:b3:82:28:c0:ec:df:f9:4b: 88:1f:ba:7e:21:22:65:c2:b9:38:81:b9:47:5f:9e:85:a3:b7: bf:66:df:5a:62:50:1c:a3:5b:05:6e:43:f6:e6:58:16:3e:eb: d7:da:02:fd:c5:2e:9d:24:3f:36:70:c7:0b:23:11:75:aa:64: 2a:35:b6:37:87:33:5b:fd:01:91:31:8f:6c:23:20:cd:11:53: c9:42:73:65:34:e7:77:5e:ab:49:56:a0:db:fa:e4:ec:8f:8b: 8f:8b:6b:f5:f4:71:31:57:6a:61:a2:07:f7:d2:4e:8b:77:3b: 00:30:f2:86:d4:60:47:c3:60:24:bc:03:ff:1c:e7:39:fb:19: 38:d5:b6:35:5b:fd:8d:e8:8c:c4:35:db:3e:b5:71:16:99:47: d2:8e:ee:23:51:bd:d9:93:0c:a2:c6:81:7d:a8:08:3e:a2:ed: 0a:76:c7:0f:54:3a:a7:95:82:e8:d1:7e:36:dd:0f:c8:0a:d5: 0d:ac:81:40:61:f8:9e:b0:9c:55:3d:8c:d8:5f:66:1d:28:33: 29:25:ca:76 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdiIDyyFYMNDjRnk2QKIgbNFkSy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNTA4MjIxNTMzNTNaFw0yNTA4MjgxMDIyNTNaMDMxMTAvBgNV BAMTKDk1NUUzREE5RTEyOUNFOEY2QUVCNjBGRDExQTIyMkYzQzk3QzUwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjg+11na0AA+OeboMbkMgOO/zK bX9m8yhZrndfEX0VcYlHUYhHI4vl3dWxNx1/w+QGVbeMDqjh3D1vs+/AuoNDes4G c4SsNP5XP4114bAGY+JbwbOS+t0f00qTh2xq3jfI6ogX83MjkXCTz9A6WJlzDBsf qu+NbBh7aQHP6oPHz6wntavmfn64pmVIi2XYMryIgLSSu2XzwBdCcfZs1x994b8A JRUmu64Kz9klXGuoMeu9xtTZKQDyx6COHpJHvxq8ZTms2zfqSebC6U3d3cpG2sgx LNbZFTZXDDb/ybgov+Zq6ibjf5lhmxH/b3VIGHjlpuJMfQd0lz2Aiea3V07vAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlV49qeEpzo9q62D9EaIi88l8UGwwHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBk34twbT1RNlhmEkMThug/F9Je IvnZnCiuhRduMrb0UjcxzA0Nh+ulLkPeOdfOs4IowOzf+UuIH7p+ISJlwrk4gblH X56Fo7e/Zt9aYlAco1sFbkP25lgWPuvX2gL9xS6dJD82cMcLIxF1qmQqNbY3hzNb /QGRMY9sIyDNEVPJQnNlNOd3XqtJVqDb+uTsj4uPi2v19HExV2phogf30k6LdzsA MPKG1GBHw2AkvAP/HOc5+xk41bY1W/2N6IzENds+tXEWmUfSju4jUb3ZkwyixoF9 qAg+ou0KdscPVDqnlYLo0X423Q/ICtUNrIFAYfiesJxVPYzYX2YdKDMpJcp2 -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:32 2025 by rpki-client