$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft File: C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft (raw, json) Hash identifier: DRvAghePCbukDrRb3INbm9QzeQ0EgmNV49ltG5jgrgs= Subject key identifier: 1E:10:BE:20:9E:7A:71:FC:EA:3B:1C:E5:74:77:30:16:79:24:3C:BD Authority key identifier: C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D Certificate issuer: /CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D Certificate serial: 2BC43C3EC708BD73F08191CD3D50BB488ED7AB22 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft Manifest number: 010C Signing time: Sat 23 Aug 2025 09:45:51 +0000 Manifest this update: Sat 23 Aug 2025 09:40:51 +0000 Manifest next update: Wed 27 Aug 2025 11:56:51 +0000 Files and hashes: 1: 3134332e3235352e3135362e302f32342d3234203d3e203435343730.roa (hash: 9tLx3BNMBY4yKV+0wRCWdsklF99GjGnQZaHMcSOx6ZQ=) 2: 3134332e3235352e3135362e302f32342d3234203d3e203335343135.roa (hash: ALM/+IDJfda67hMWaLlgIyJgAa8NVsMkTixLG0tkv7s=) 3: C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl (hash: m637yq9lxWI2JGGVn4HxvGtqRT6qvrwQigyKFNmCfsU=) 4: 3134332e3235352e3135362e302f32342d3234203d3e203430383234.roa (hash: 1ou2j/KjjDkWqdkWsWCs7Vfls1uwQD9SK9QakUzMDME=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c4:3c:3e:c7:08:bd:73:f0:81:91:cd:3d:50:bb:48:8e:d7:ab:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D Validity Not Before: Aug 23 09:40:51 2025 GMT Not After : Aug 27 11:56:51 2025 GMT Subject: CN=1E10BE209E7A71FCEA3B1CE57477301679243CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:ca:dc:c9:a9:22:b4:36:3f:15:32:bb:3f: 41:38:7f:69:ed:c6:28:58:15:fc:38:92:11:e9:73: 84:71:37:99:c8:5d:41:10:ac:49:b9:d5:59:6c:82: be:90:9e:57:10:64:72:af:60:f9:48:5c:b6:cc:db: e9:6e:2c:f8:e6:d9:58:e3:71:0d:d9:20:7e:31:c0: 48:39:04:b4:ad:66:d3:8e:4c:f9:fe:e0:4b:f2:35: 35:a7:41:5c:9f:b5:26:f2:33:a8:13:f2:9e:75:e8: 05:ac:ac:a1:59:da:02:44:a6:65:22:52:a4:7a:69: ce:76:4b:7c:ba:8a:7c:e1:da:98:93:5d:59:d9:82: 10:0c:20:ae:42:9e:23:c2:ab:ff:bf:ca:a6:62:26: 88:f5:d3:92:05:39:bd:30:a6:1c:ea:64:2f:2b:e3: f1:76:9c:a8:2e:4d:cc:82:bb:05:69:43:2f:11:05: ec:47:c0:f3:2f:31:5a:7c:00:a0:9c:3a:17:da:9f: 94:4e:21:d6:93:1d:83:44:01:c0:9f:cb:dd:87:65: 11:3f:3d:42:09:d9:89:c8:a7:98:6f:b5:5d:71:0d: 21:c7:61:bc:22:c3:e7:55:3d:bf:0d:76:47:59:0e: cb:d1:cc:cc:50:87:87:7b:30:67:87:19:09:be:37: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:10:BE:20:9E:7A:71:FC:EA:3B:1C:E5:74:77:30:16:79:24:3C:BD X509v3 Authority Key Identifier: keyid:C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:67:d1:6d:35:08:f6:2c:39:aa:68:26:13:ba:18:e5:c2:55: fe:c8:a0:23:cf:1d:98:9b:57:95:fd:76:01:29:c3:92:d2:03: c2:85:a3:ed:74:92:35:cd:e6:6f:c3:2b:f3:9f:f5:ff:34:06: c0:cc:5a:bf:83:b3:22:42:1a:8f:64:0c:a9:7e:75:45:67:80: 34:6d:08:51:73:43:33:2c:73:36:50:6d:3f:a8:24:b4:09:4e: dd:7f:db:cc:b2:a5:37:32:45:29:fd:96:d5:6e:bc:10:68:54: 4b:3c:cb:cd:fc:7f:f9:c8:40:9c:54:e4:6f:f5:05:db:f2:00: 3a:35:e4:02:76:ac:a3:e0:4b:4d:4f:a6:f2:ab:a4:85:62:c5: be:ea:5e:b9:a6:cd:5e:85:96:d4:3a:10:7d:10:3d:60:de:8d: 79:23:bb:6d:15:68:fa:9c:d7:c9:b3:b9:8d:6f:29:67:c2:df: b3:e8:2a:b3:1f:41:f4:00:91:3e:bf:c5:3f:87:18:0b:62:04: 9d:fd:d4:27:6f:00:0e:06:3c:a7:5f:d7:ac:c5:1e:24:c7:d3: 04:3d:d3:65:b7:03:c4:5f:da:60:3d:75:a1:df:04:95:1e:a2: fa:d9:b1:61:0c:b6:ee:1d:ba:8e:43:89:8e:2d:e1:8e:3d:1f: e9:43:16:b5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK8Q8PscIvXPwgZHNPVC7SI7XqyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBCNzg4NjYyMkE1MzhGRDVFM0MzQzkxRDZCNkEwREYy NjY1Qzc4RDAeFw0yNTA4MjMwOTQwNTFaFw0yNTA4MjcxMTU2NTFaMDMxMTAvBgNV BAMTKDFFMTBCRTIwOUU3QTcxRkNFQTNCMUNFNTc0NzczMDE2NzkyNDNDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ98rcyakitDY/FTK7P0E4f2nt xihYFfw4khHpc4RxN5nIXUEQrEm51Vlsgr6QnlcQZHKvYPlIXLbM2+luLPjm2Vjj cQ3ZIH4xwEg5BLStZtOOTPn+4EvyNTWnQVyftSbyM6gT8p516AWsrKFZ2gJEpmUi UqR6ac52S3y6inzh2piTXVnZghAMIK5CniPCq/+/yqZiJoj105IFOb0wphzqZC8r 4/F2nKguTcyCuwVpQy8RBexHwPMvMVp8AKCcOhfan5ROIdaTHYNEAcCfy92HZRE/ PUIJ2YnIp5hvtV1xDSHHYbwiw+dVPb8NdkdZDsvRzMxQh4d7MGeHGQm+N9vhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHhC+IJ56cfzqOxzldHcwFnkkPL0wHwYDVR0j BBgwFoAUwLeIZiKlOP1ePDyR1rag3yZlx40wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xNEM0MkJERTkxMEJBQTYyRURENEU4NzQ2RDI1NTYwMjQ0 MEE1Q0ZFRDNCNEE0ODNCM0UzMEFCODRDQ0ZERTJBLzAvQzBCNzg4NjYyMkE1MzhG RDVFM0MzQzkxRDZCNkEwREYyNjY1Qzc4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMEI3ODg2NjIyQTUzOEZENUUz QzNDOTFENkI2QTBERjI2NjVDNzhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTRDNDJCREU5MTBCQUE2MkVERDRFODc0NkQyNTU2MDI0NDBBNUNGRUQz QjRBNDgzQjNFMzBBQjg0Q0NGREUyQS8wL0MwQjc4ODY2MjJBNTM4RkQ1RTNDM0M5 MUQ2QjZBMERGMjY2NUM3OEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1Z9FtNQj2LDmqaCYTuhjlwlX+ yKAjzx2Ym1eV/XYBKcOS0gPChaPtdJI1zeZvwyvzn/X/NAbAzFq/g7MiQhqPZAyp fnVFZ4A0bQhRc0MzLHM2UG0/qCS0CU7df9vMsqU3MkUp/ZbVbrwQaFRLPMvN/H/5 yECcVORv9QXb8gA6NeQCdqyj4EtNT6byq6SFYsW+6l65ps1ehZbUOhB9ED1g3o15 I7ttFWj6nNfJs7mNbylnwt+z6CqzH0H0AJE+v8U/hxgLYgSd/dQnbwAOBjynX9es xR4kx9MEPdNltwPEX9pgPXWh3wSVHqL62bFhDLbuHbqOQ4mOLeGOPR/pQxa1 -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:31 2025 by rpki-client