$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft File: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft (raw, json) Hash identifier: GSMzo/yhCQ4KG3Bl1d5CAxMz0G+8tyKwga16y4KepD8= Subject key identifier: 5C:A6:FA:A8:B1:6E:7E:29:07:F8:60:56:18:17:4D:2A:92:59:4A:C9 Authority key identifier: C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8 Certificate issuer: /CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8 Certificate serial: 14169F18FCE1D27D5889FA3943FE8193DE6AC4B8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft Manifest number: 0117 Signing time: Sat 23 Aug 2025 11:16:42 +0000 Manifest this update: Sat 23 Aug 2025 11:11:42 +0000 Manifest next update: Wed 27 Aug 2025 17:21:42 +0000 Files and hashes: 1: 323830313a3137323a3a2f34382d3438203d3e203134303830.roa (hash: mGXnjOmUkivco7UWNXNOXRqozorBrbTRwCXCle8sZ60=) 2: 323830313a3137323a323a3a2f34382d3438203d3e203237393531.roa (hash: Rb9y9DwnR6tHMoVEq1jQr1oPiLPO/N9wM0q5+pYQLp8=) 3: C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl (hash: ay/P4vk3wn4uVdhxeDg/PJy3Bl0Rr6zDoopRn9KJu/4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:16:9f:18:fc:e1:d2:7d:58:89:fa:39:43:fe:81:93:de:6a:c4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B95FE3CE8CD6143789324F89D2791DABBB5AD8 Validity Not Before: Aug 23 11:11:42 2025 GMT Not After : Aug 27 17:21:42 2025 GMT Subject: CN=5CA6FAA8B16E7E2907F8605618174D2A92594AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:68:0f:42:a1:69:41:dd:55:af:a9:cf:64: 6a:e9:67:19:63:07:1e:92:96:bc:98:03:75:43:0d: 31:a9:0f:83:bb:25:a8:2a:f9:4c:87:7d:dd:93:7f: 9d:bb:2d:8b:d8:4a:cd:41:a9:ae:53:41:2f:af:c3: 48:d0:35:b1:37:93:34:9e:42:0a:e8:f5:5b:6b:a7: 1a:3a:4c:00:fd:80:09:7e:2f:43:c0:5b:77:70:7c: cd:b1:75:6c:82:69:4f:18:80:fd:14:50:4b:9d:e1: 67:76:a2:7a:64:24:79:71:69:c8:51:85:49:70:2e: ef:52:60:e4:cd:ef:9c:b8:bc:ab:73:cc:ca:a9:75: bf:74:ca:8a:04:8a:36:e9:f9:65:7d:20:cd:e8:a6: 25:4a:36:9a:b0:1f:f1:3f:b6:35:7a:cb:6d:a3:92: 9b:2b:6e:ce:82:43:65:89:42:60:c9:00:40:a3:3f: 6f:94:c4:25:f5:9c:15:57:6c:4a:c2:e8:f1:02:5f: af:f8:26:3b:06:32:7b:7b:9d:c8:32:7a:e2:86:90: 3f:77:6a:6a:15:d4:1c:a4:ea:97:5a:4d:3d:b9:ee: d1:d4:c7:55:04:a6:8c:a9:58:db:62:8d:c4:f0:37: 5d:95:b4:c1:cf:4c:6a:d2:80:1d:bf:9e:d5:f4:7e: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A6:FA:A8:B1:6E:7E:29:07:F8:60:56:18:17:4D:2A:92:59:4A:C9 X509v3 Authority Key Identifier: keyid:C4:B9:5F:E3:CE:8C:D6:14:37:89:32:4F:89:D2:79:1D:AB:BB:5A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0653CF7224244D73885E34B62A8054D31B523340F5A630C5FD699F299AFF2CD3/0/C4B95FE3CE8CD6143789324F89D2791DABBB5AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ce:de:ef:32:22:81:4c:4d:a8:de:3e:8a:7b:79:df:77:69: b5:65:93:e6:cf:d6:5a:d0:6a:82:5b:18:30:35:fa:17:2f:89: ea:ea:2c:16:85:1d:01:12:df:13:f8:58:10:dc:ec:f7:89:66: cd:f4:74:33:2f:2f:1a:ff:84:91:5f:6b:a9:9c:22:1c:be:8e: 6e:15:c7:f5:c6:70:5a:73:a7:db:88:6a:8e:3a:ba:59:3a:cc: a2:16:c1:b8:17:12:21:1c:cc:85:30:58:dd:92:42:29:50:a8: ea:3d:5c:ba:45:e1:d6:4a:23:ad:eb:60:3b:28:1b:78:54:27: 35:b7:9f:ea:2f:e3:d6:7c:74:32:62:6f:4a:c5:f6:4a:e8:f9: 0a:40:38:d8:ec:33:99:39:f1:e0:49:d5:82:2a:62:43:6b:1a: b5:1c:7c:91:fc:e9:a5:8f:d0:6a:10:9b:9e:19:a5:f7:3e:2d: 3c:67:81:1d:d1:f1:ca:7e:47:6d:00:ad:28:b0:0a:cf:ca:ad: 6b:35:8e:46:17:92:9a:82:68:5c:dc:3a:9a:85:34:be:b7:19: cb:70:31:26:0f:3e:d7:59:66:65:13:66:f0:26:c5:db:06:60: ac:ff:0a:27:af:97:ca:69:7c:34:85:be:5f:c3:a3:05:93:17: ab:e1:f5:24 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFBafGPzh0n1Yifo5Q/6Bk95qxLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRCOTVGRTNDRThDRDYxNDM3ODkzMjRGODlEMjc5MURB QkJCNUFEODAeFw0yNTA4MjMxMTExNDJaFw0yNTA4MjcxNzIxNDJaMDMxMTAvBgNV BAMTKDVDQTZGQUE4QjE2RTdFMjkwN0Y4NjA1NjE4MTc0RDJBOTI1OTRBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBy2gPQqFpQd1Vr6nPZGrpZxlj Bx6SlryYA3VDDTGpD4O7Jagq+UyHfd2Tf527LYvYSs1Bqa5TQS+vw0jQNbE3kzSe Qgro9Vtrpxo6TAD9gAl+L0PAW3dwfM2xdWyCaU8YgP0UUEud4Wd2onpkJHlxachR hUlwLu9SYOTN75y4vKtzzMqpdb90yooEijbp+WV9IM3opiVKNpqwH/E/tjV6y22j kpsrbs6CQ2WJQmDJAECjP2+UxCX1nBVXbErC6PECX6/4JjsGMnt7ncgyeuKGkD93 amoV1Byk6pdaTT257tHUx1UEpoypWNtijcTwN12VtMHPTGrSgB2/ntX0fp4JAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXKb6qLFufikH+GBWGBdNKpJZSskwHwYDVR0j BBgwFoAUxLlf486M1hQ3iTJPidJ5Hau7WtgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNjUzQ0Y3MjI0MjQ0RDczODg1RTM0QjYyQTgwNTREMzFC NTIzMzQwRjVBNjMwQzVGRDY5OUYyOTlBRkYyQ0QzLzAvQzRCOTVGRTNDRThDRDYx NDM3ODkzMjRGODlEMjc5MURBQkJCNUFEOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNEI5NUZFM0NFOENENjE0Mzc4 OTMyNEY4OUQyNzkxREFCQkI1QUQ4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDY1M0NGNzIyNDI0NEQ3Mzg4NUUzNEI2MkE4MDU0RDMxQjUyMzM0MEY1 QTYzMEM1RkQ2OTlGMjk5QUZGMkNEMy8wL0M0Qjk1RkUzQ0U4Q0Q2MTQzNzg5MzI0 Rjg5RDI3OTFEQUJCQjVBRDgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKzt7vMiKBTE2o3j6Ke3nfd2m1 ZZPmz9Za0GqCWxgwNfoXL4nq6iwWhR0BEt8T+FgQ3Oz3iWbN9HQzLy8a/4SRX2up nCIcvo5uFcf1xnBac6fbiGqOOrpZOsyiFsG4FxIhHMyFMFjdkkIpUKjqPVy6ReHW SiOt62A7KBt4VCc1t5/qL+PWfHQyYm9KxfZK6PkKQDjY7DOZOfHgSdWCKmJDaxq1 HHyR/Omlj9BqEJueGaX3Pi08Z4Ed0fHKfkdtAK0osArPyq1rNY5GF5Kagmhc3Dqa hTS+txnLcDEmDz7XWWZlE2bwJsXbBmCs/wonr5fKaXw0hb5fw6MFkxer4fUk -----END CERTIFICATE-----Generated at Sat Aug 23 20:39:26 2025 by rpki-client