$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft File: 4212A4C43151C156150D9BDED03D7236921BF9B8.mft (raw, json) Hash identifier: TbkUiV7OSdQxJhECMg4vBTKn3cfREwj78PN23sJtvWk= Subject key identifier: 8E:64:FB:35:8B:C7:63:3C:FC:3B:70:90:89:A2:CE:32:E5:3B:CC:4B Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8 Certificate issuer: /CN=4212A4C43151C156150D9BDED03D7236921BF9B8 Certificate serial: 2CEAA1874A47A7832DBADBFCC6B141FA525753F6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft Manifest number: 90 Signing time: Thu 21 Aug 2025 06:48:10 +0000 Manifest this update: Thu 21 Aug 2025 06:43:10 +0000 Manifest next update: Tue 26 Aug 2025 11:06:10 +0000 Files and hashes: 1: 323830333a316265303a3a2f33322d3332203d3e20323733303635.roa (hash: IPIyjHbhkd6lccHhcmm4FYLWsG2pGXBaIL47iF5gaME=) 2: 4212A4C43151C156150D9BDED03D7236921BF9B8.crl (hash: Rq92JOlx3+GFltDaBr673Ojn6LfmfGSCMwmmMsZTgD8=) 3: 3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa (hash: f7c9bcvM/FrtMuCnFu1B5phSyPDPmpffyZEjzw8ZDJk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 11:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ea:a1:87:4a:47:a7:83:2d:ba:db:fc:c6:b1:41:fa:52:57:53:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8 Validity Not Before: Aug 21 06:43:10 2025 GMT Not After : Aug 26 11:06:10 2025 GMT Subject: CN=8E64FB358BC7633CFC3B709089A2CE32E53BCC4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:ad:12:1b:29:5a:e4:f9:78:3e:06:da:79: 68:8f:00:ad:a5:82:fb:96:c2:11:68:7a:8c:cc:2d: ed:d1:dc:ec:8d:5d:f6:7a:b4:3e:05:22:54:56:8e: f6:b6:e9:59:d8:3f:2a:a5:19:02:e6:e6:4d:09:51: f5:74:b8:a6:c9:79:7c:15:a3:7f:5d:66:aa:05:db: da:4f:e5:78:6a:9d:b0:2b:95:4f:da:85:f1:bd:c6: 5e:4a:e4:31:a8:73:f5:25:fe:39:9e:e7:af:cd:b3: ae:9b:de:1d:82:4e:bf:90:a4:cc:0b:f3:64:a9:5f: ce:30:84:ac:9e:69:d7:7e:c3:f1:60:98:8d:09:bc: c7:39:6d:ea:cc:e6:6b:29:a1:fe:29:bf:f1:6b:6e: cd:1f:01:96:4d:0c:a0:58:01:ed:7e:8f:11:75:d9: 70:fb:c3:d7:28:47:c7:4e:ac:2b:06:f5:ea:87:06: 10:b7:9a:48:96:9d:06:2f:d6:20:43:71:22:73:a9: 5a:d5:2e:8d:20:0e:9a:c1:84:2a:76:72:ff:ca:f3: 24:c5:f9:90:71:cb:cb:54:44:75:06:2d:70:66:e1: e2:c1:af:e8:cf:c3:c4:23:a5:80:0d:38:cb:19:0d: 50:20:b1:c6:2a:05:0a:5b:30:d2:39:23:08:ce:18: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:64:FB:35:8B:C7:63:3C:FC:3B:70:90:89:A2:CE:32:E5:3B:CC:4B X509v3 Authority Key Identifier: keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:dc:2f:35:60:a7:96:3b:e7:ba:f1:31:b8:24:5b:22:46:0e: de:a3:f8:46:82:db:0b:4d:e5:77:6c:17:89:9e:38:8e:39:ee: 71:f2:a0:99:c4:13:1f:98:f7:47:2f:f3:47:e9:4a:06:32:23: 62:6c:6c:51:dd:0c:8d:58:4d:19:6b:ed:2a:f8:b7:24:5c:35: a2:a1:56:30:47:d3:e9:bf:d0:bd:4a:4c:4a:0d:71:21:af:53: 4f:05:f6:5e:c3:02:80:95:10:81:91:37:73:cd:d1:3d:ae:8d: 32:b5:78:e3:29:0a:c4:26:2f:ea:58:dd:2a:dc:68:28:5e:54: ab:9e:7b:c1:88:47:d1:3b:d1:b6:33:47:73:e7:ca:53:7d:bd: d7:0d:e7:c0:1d:0a:75:b5:f3:32:43:04:ab:39:a2:cc:6a:f8: 2c:8a:d0:0a:19:14:02:f5:2d:3a:49:1d:d5:1c:3e:f6:c2:79: 5f:c3:9d:2b:28:df:d5:3a:a1:df:07:e7:51:ec:98:c4:f9:c0: 7b:66:76:f9:ea:7d:16:55:7d:1a:76:3a:08:e2:a9:17:ea:8f: ef:ae:f8:b1:48:69:9e:5f:ed:8e:4a:2f:79:8b:52:80:e7:e4: 34:6a:83:ba:67:cc:4c:78:e2:60:08:4f:88:36:c3:13:ca:13: c2:9b:e2:1d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULOqhh0pHp4Mtutv8xrFB+lJXU/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxMkE0QzQzMTUxQzE1NjE1MEQ5QkRFRDAzRDcyMzY5 MjFCRjlCODAeFw0yNTA4MjEwNjQzMTBaFw0yNTA4MjYxMTA2MTBaMDMxMTAvBgNV BAMTKDhFNjRGQjM1OEJDNzYzM0NGQzNCNzA5MDg5QTJDRTMyRTUzQkNDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98K0SGyla5Pl4PgbaeWiPAK2l gvuWwhFoeozMLe3R3OyNXfZ6tD4FIlRWjva26VnYPyqlGQLm5k0JUfV0uKbJeXwV o39dZqoF29pP5XhqnbArlU/ahfG9xl5K5DGoc/Ul/jme56/Ns66b3h2CTr+QpMwL 82SpX84whKyeadd+w/FgmI0JvMc5berM5mspof4pv/Frbs0fAZZNDKBYAe1+jxF1 2XD7w9coR8dOrCsG9eqHBhC3mkiWnQYv1iBDcSJzqVrVLo0gDprBhCp2cv/K8yTF +ZBxy8tURHUGLXBm4eLBr+jPw8QjpYANOMsZDVAgscYqBQpbMNI5IwjOGG+NAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjmT7NYvHYzz8O3CQiaLOMuU7zEswHwYDVR0j BBgwFoAUQhKkxDFRwVYVDZve0D1yNpIb+bgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRDcwNTgyNTM2OTZERkYxRkVDNDY2OTM4NDM2MkQ3NTg2 REEwQTJFRUQ0MDY5MUU4NEEzNzYzMTc1REUxM0YwLzAvNDIxMkE0QzQzMTUxQzE1 NjE1MEQ5QkRFRDAzRDcyMzY5MjFCRjlCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjEyQTRDNDMxNTFDMTU2MTUw RDlCREVEMDNENzIzNjkyMUJGOUI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUQ3MDU4MjUzNjk2REZGMUZFQzQ2NjkzODQzNjJENzU4NkRBMEEyRUVE NDA2OTFFODRBMzc2MzE3NURFMTNGMC8wLzQyMTJBNEM0MzE1MUMxNTYxNTBEOUJE RUQwM0Q3MjM2OTIxQkY5QjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+3C81YKeWO+e68TG4JFsiRg7e o/hGgtsLTeV3bBeJnjiOOe5x8qCZxBMfmPdHL/NH6UoGMiNibGxR3QyNWE0Za+0q +LckXDWioVYwR9Ppv9C9SkxKDXEhr1NPBfZewwKAlRCBkTdzzdE9ro0ytXjjKQrE Ji/qWN0q3GgoXlSrnnvBiEfRO9G2M0dz58pTfb3XDefAHQp1tfMyQwSrOaLMavgs itAKGRQC9S06SR3VHD72wnlfw50rKN/VOqHfB+dR7JjE+cB7Znb56n0WVX0adjoI 4qkX6o/vrvixSGmeX+2OSi95i1KA5+Q0aoO6Z8xMeOJgCE+INsMTyhPCm+Id -----END CERTIFICATE-----Generated at Sat Aug 23 11:04:14 2025 by rpki-client