$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft File: 9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft (raw, json) Hash identifier: NPyVy8CAy659pGKVGSmPef3Mi56r6PLYVOVJS3/7ZzI= Subject key identifier: 3B:6F:32:44:53:E9:50:0D:65:92:19:AD:31:DF:9A:7E:07:5B:DE:7C Authority key identifier: 9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84 Certificate issuer: /CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184 Certificate serial: 5BBA2630138176A7FEA1B2EAF6BD8C1675CC7512 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft Manifest number: 0110 Signing time: Sat 23 Aug 2025 13:28:06 +0000 Manifest this update: Sat 23 Aug 2025 13:23:06 +0000 Manifest next update: Wed 27 Aug 2025 14:50:06 +0000 Files and hashes: 1: 9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl (hash: waAfPVRoeJGecxU/peF/kSeABRPGeOvYmk7hq/2dOTo=) 2: 3230302e35392e3138302e302f32342d3234203d3e203237393934.roa (hash: vm+wSC/c/onsBWzngN+erAqy8IieiIkQsFD8I4HbEjM=) 3: 3230302e35392e3138312e302f32342d3234203d3e203237393934.roa (hash: g7woRsm4w1nNWHdXyzzdlHbEwbTXPVqsgXhT9PZsZf4=) 4: 3230302e35392e3137362e302f32322d3234203d3e203237393934.roa (hash: UAPHi3rz+TIeAlC72Us5kDaZte2WM5h3xNHARbQvCQk=) 5: 3230302e35392e3138322e302f32332d3234203d3e203237393934.roa (hash: JwpjKR2mH6GJXuXahnMf/5AbJUHlmst8up5WWy2ex0I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ba:26:30:13:81:76:a7:fe:a1:b2:ea:f6:bd:8c:16:75:cc:75:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184 Validity Not Before: Aug 23 13:23:06 2025 GMT Not After : Aug 27 14:50:06 2025 GMT Subject: CN=3B6F324453E9500D659219AD31DF9A7E075BDE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:2b:60:2f:90:dc:63:08:4d:cb:4b:fc:cf: 8f:f6:dc:57:e6:65:7d:17:da:b5:02:ef:35:c4:1e: bb:95:e3:28:43:68:b0:ea:c1:10:26:a7:a9:78:00: a7:1f:a4:d7:77:b2:d4:b4:30:ef:d5:77:8a:6f:3b: 13:08:36:5f:c9:77:af:99:e9:52:11:2e:ad:1d:08: 75:f9:96:7c:7b:70:ea:a5:7c:7d:8e:6b:78:fe:51: 59:06:82:62:61:f4:9e:47:97:98:9c:a1:68:26:37: 34:10:5b:08:b1:ca:9e:b3:24:6a:95:aa:e9:b7:dd: 42:36:d5:8a:cb:64:e0:a8:39:1e:a9:1c:d3:fd:3e: 5f:f6:07:b0:23:b6:f6:3b:1a:f6:55:44:3d:cd:e7: 4a:81:fd:8e:a6:eb:b0:c3:d8:51:97:1d:51:53:24: 90:8c:8d:8f:16:ba:54:e6:26:9c:3a:ed:d0:7a:82: a4:fe:96:99:f8:24:88:40:7c:a8:fa:b8:6e:32:6d: 00:8d:69:ab:dd:55:46:78:27:f9:0a:ea:81:91:6b: 8a:a8:34:8d:fc:55:a6:37:63:61:02:5b:df:5d:cf: 77:41:0a:82:ec:3a:8b:ee:77:b0:b2:dd:e5:01:e7: 6e:40:7b:de:53:cd:fd:4a:9c:47:6f:7f:d3:ce:42: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6F:32:44:53:E9:50:0D:65:92:19:AD:31:DF:9A:7E:07:5B:DE:7C X509v3 Authority Key Identifier: keyid:9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:48:74:fe:49:ad:13:19:4f:43:64:aa:e2:1c:a7:c9:30:d3: d6:55:4e:6e:b4:70:cb:b5:78:d2:e0:bb:32:01:2c:0c:cc:8c: 98:97:94:8c:e4:46:91:27:95:64:d2:cb:44:c2:a1:f4:b0:62: 0d:bd:54:da:3c:bf:f6:ef:75:87:41:38:9f:da:12:52:d5:0e: 2a:b3:fb:81:61:25:f9:7f:0d:09:23:47:0b:84:75:3d:94:3a: 9e:18:5d:bb:42:fa:9e:1d:cd:80:92:05:4d:cd:a3:17:e2:fc: a4:f5:e5:30:77:de:8f:d9:f0:f7:95:66:89:89:1d:b1:f3:8e: 4c:66:c3:ec:fd:26:1a:50:e3:2b:f5:dc:b0:99:a3:98:96:77: fc:61:24:07:e7:5c:d4:63:52:d4:64:cc:76:61:53:2b:35:bc: 42:e5:1f:ef:5d:f5:52:6d:30:9b:6b:44:0e:a7:0c:99:82:22: 9e:fa:36:d8:7a:13:a4:ce:25:9d:26:f0:75:4a:1b:0d:ab:5d: e3:ec:48:89:69:be:0d:7c:5d:e0:bd:12:d1:31:3f:9d:46:e7: 03:08:66:15:a4:5a:36:b8:23:5b:ec:74:4c:1b:18:24:60:b4: 0f:41:a7:7d:87:ab:36:f9:f8:a7:cc:50:47:85:09:87:ff:22: 9f:3a:6c:65 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUW7omMBOBdqf+obLq9r2MFnXMdRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0QUMyMEYzOENDQjdFM0U1RTlDODNFNTU0MEQzRDE3 RkNDMDE4NDAeFw0yNTA4MjMxMzIzMDZaFw0yNTA4MjcxNDUwMDZaMDMxMTAvBgNV BAMTKDNCNkYzMjQ0NTNFOTUwMEQ2NTkyMTlBRDMxREY5QTdFMDc1QkRFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo1CtgL5DcYwhNy0v8z4/23Ffm ZX0X2rUC7zXEHruV4yhDaLDqwRAmp6l4AKcfpNd3stS0MO/Vd4pvOxMINl/Jd6+Z 6VIRLq0dCHX5lnx7cOqlfH2Oa3j+UVkGgmJh9J5Hl5icoWgmNzQQWwixyp6zJGqV qum33UI21YrLZOCoOR6pHNP9Pl/2B7AjtvY7GvZVRD3N50qB/Y6m67DD2FGXHVFT JJCMjY8WulTmJpw67dB6gqT+lpn4JIhAfKj6uG4ybQCNaavdVUZ4J/kK6oGRa4qo NI38VaY3Y2ECW99dz3dBCoLsOovud7Cy3eUB525Ae95Tzf1KnEdvf9POQiQnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUO28yRFPpUA1lkhmtMd+afgdb3nwwHwYDVR0j BBgwFoAUmkrCDzjMt+Pl6cg+VUDT0X/MAYQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQTI0QjQyOTEwMzU2M0JEMEI3RDI3QTI0NzkzNzg1REQ4 RDE4MzNCMEI0QjBBRTQwQjhBNUY4QzE2MUU5NDdFLzAvOUE0QUMyMEYzOENDQjdF M0U1RTlDODNFNTU0MEQzRDE3RkNDMDE4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTRBQzIwRjM4Q0NCN0UzRTVF OUM4M0U1NTQwRDNEMTdGQ0MwMTg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUEyNEI0MjkxMDM1NjNCRDBCN0QyN0EyNDc5Mzc4NUREOEQxODMzQjBC NEIwQUU0MEI4QTVGOEMxNjFFOTQ3RS8wLzlBNEFDMjBGMzhDQ0I3RTNFNUU5Qzgz RTU1NDBEM0QxN0ZDQzAxODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8SHT+Sa0TGU9DZKriHKfJMNPW VU5utHDLtXjS4LsyASwMzIyYl5SM5EaRJ5Vk0stEwqH0sGINvVTaPL/273WHQTif 2hJS1Q4qs/uBYSX5fw0JI0cLhHU9lDqeGF27QvqeHc2AkgVNzaMX4vyk9eUwd96P 2fD3lWaJiR2x845MZsPs/SYaUOMr9dywmaOYlnf8YSQH51zUY1LUZMx2YVMrNbxC 5R/vXfVSbTCba0QOpwyZgiKe+jbYehOkziWdJvB1ShsNq13j7EiJab4NfF3gvRLR MT+dRucDCGYVpFo2uCNb7HRMGxgkYLQPQad9h6s2+finzFBHhQmH/yKfOmxl -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:45 2025 by rpki-client