$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft File: 85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft (raw, json) Hash identifier: 34nxgiiX+Ka1rOKxckMo+XzeJtphC0YK6ygz+cH5eAk= Subject key identifier: 6B:53:2B:89:D9:D1:02:46:EA:06:68:DA:52:18:07:25:62:78:27:FD Authority key identifier: 85:C6:1D:B0:CE:C2:C1:FB:C7:FB:4E:26:BE:02:00:14:71:77:B7:EA Certificate issuer: /CN=85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA Certificate serial: 574ECD25F6C81102A04DFF54A65ED4D0E57EB0D2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft Manifest number: 010D Signing time: Thu 21 Aug 2025 18:00:20 +0000 Manifest this update: Thu 21 Aug 2025 17:55:20 +0000 Manifest next update: Wed 27 Aug 2025 07:18:20 +0000 Files and hashes: 1: 85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.crl (hash: TdBF0Ya+ltEiI99BjlsE63IFmnoUi5IJeilMsnkSq6o=) 2: 323830333a373231303a3a2f33322d3438203d3e20323731393135.roa (hash: j6b/IpqSZ0tzZBWgkiBpjEjaoCramVfn+i/P+43zn6s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.crl rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:4e:cd:25:f6:c8:11:02:a0:4d:ff:54:a6:5e:d4:d0:e5:7e:b0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA Validity Not Before: Aug 21 17:55:20 2025 GMT Not After : Aug 27 07:18:20 2025 GMT Subject: CN=6B532B89D9D10246EA0668DA52180725627827FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:85:71:6c:b4:7f:e3:b9:2c:47:bd:0c:6f: 39:56:7c:e4:a8:ff:85:95:7b:1a:6d:09:d7:cf:96: bd:3c:5d:a5:c4:87:e0:fb:4f:12:0e:7f:02:0b:59: 84:b5:71:ce:55:46:c3:15:d9:44:46:ad:e6:56:b0: 9d:2a:98:5c:93:28:f2:0b:74:58:5b:fa:e2:c3:5b: 5a:b4:2f:21:eb:37:af:18:f2:d8:92:89:f0:a2:d3: fb:8a:d0:56:0b:f2:2b:45:63:0a:31:91:14:d1:b1: 5d:57:1a:14:84:11:99:17:ab:59:ed:40:dc:e7:39: 0a:3c:a5:7e:ec:37:d3:d0:07:55:9f:a7:31:40:fb: d4:f9:a5:ed:b6:1d:cd:c0:12:b2:fd:ce:42:ed:5f: 39:c5:79:49:89:c1:7d:d9:c7:ac:62:7f:aa:01:d4: 5b:0d:10:f2:b3:de:64:f6:cb:d0:fe:39:f4:f8:d0: eb:9d:31:8d:9e:b3:33:d7:b1:56:e5:ca:e6:c9:18: b7:81:02:b8:3a:9d:67:de:08:10:25:8d:30:45:6b: 87:04:16:36:54:f9:d5:68:9c:29:6f:58:b4:af:eb: c7:7e:ce:5a:1c:1c:7d:e4:8a:5a:5e:e7:cb:b3:a8: d1:d2:6b:52:21:92:e5:f0:15:07:1d:2d:f7:e1:58: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:53:2B:89:D9:D1:02:46:EA:06:68:DA:52:18:07:25:62:78:27:FD X509v3 Authority Key Identifier: keyid:85:C6:1D:B0:CE:C2:C1:FB:C7:FB:4E:26:BE:02:00:14:71:77:B7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:8e:2a:4b:f4:d7:03:a2:d5:b5:1e:b7:81:17:70:0f:a3: c3:46:62:de:39:2e:72:7f:ca:70:b8:1f:0d:01:1b:0a:50:15: e4:ea:30:46:d5:63:a9:c8:c4:ed:cd:5b:4d:21:c6:91:3c:90: ff:37:67:33:8c:8c:aa:28:7f:6c:c0:83:fe:dc:9b:2f:bf:5f: 7e:57:5d:35:7c:b6:68:dd:48:26:ad:4c:ff:6d:dc:e3:e5:9c: f3:5e:b4:7d:13:a1:ab:d9:af:b4:ee:a0:e3:81:8d:8e:83:ec: 2e:b9:42:be:3f:6e:ff:ab:ed:51:78:be:55:02:52:40:07:5a: 54:41:de:78:21:3f:39:16:44:87:51:7d:6d:bf:de:d7:38:7f: 10:df:67:64:3e:b4:4a:2b:a5:e2:08:36:43:5c:a0:7d:af:e8: d6:8a:f2:ea:a3:0b:33:2f:c0:31:18:98:1f:89:8e:c7:5b:8b: 2e:f2:ab:9c:9e:fb:62:c1:87:3d:7a:15:45:5c:dd:29:aa:73: 24:ff:a0:40:07:40:fe:99:98:74:d4:ad:9b:19:dc:2b:94:2a: 56:b5:e9:52:b3:63:41:be:84:0f:da:97:ab:85:3e:22:c0:6e: 4e:2e:16:14:a4:d5:b8:df:98:78:73:28:ee:8c:bc:85:9d:fe: a1:36:27:07 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUV07NJfbIEQKgTf9Upl7U0OV+sNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVDNjFEQjBDRUMyQzFGQkM3RkI0RTI2QkUwMjAwMTQ3 MTc3QjdFQTAeFw0yNTA4MjExNzU1MjBaFw0yNTA4MjcwNzE4MjBaMDMxMTAvBgNV BAMTKDZCNTMyQjg5RDlEMTAyNDZFQTA2NjhEQTUyMTgwNzI1NjI3ODI3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WoVxbLR/47ksR70MbzlWfOSo /4WVexptCdfPlr08XaXEh+D7TxIOfwILWYS1cc5VRsMV2URGreZWsJ0qmFyTKPIL dFhb+uLDW1q0LyHrN68Y8tiSifCi0/uK0FYL8itFYwoxkRTRsV1XGhSEEZkXq1nt QNznOQo8pX7sN9PQB1WfpzFA+9T5pe22Hc3AErL9zkLtXznFeUmJwX3Zx6xif6oB 1FsNEPKz3mT2y9D+OfT40OudMY2eszPXsVblyubJGLeBArg6nWfeCBAljTBFa4cE FjZU+dVonClvWLSv68d+zlocHH3kilpe58uzqNHSa1IhkuXwFQcdLffhWLpxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUa1MridnRAkbqBmjaUhgHJWJ4J/0wHwYDVR0j BBgwFoAUhcYdsM7CwfvH+04mvgIAFHF3t+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQTMwMTZDRTVEOUFCNjk3NzAxQzEzRUM5RkYxQThGRTc2 MzY1Rjc1MjMxM0ExMTQ5NEQyQ0VCMjNDOTQ0N0Y5LzAvODVDNjFEQjBDRUMyQzFG QkM3RkI0RTI2QkUwMjAwMTQ3MTc3QjdFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUM2MURCMENFQzJDMUZCQzdG QjRFMjZCRTAyMDAxNDcxNzdCN0VBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkEzMDE2Q0U1RDlBQjY5NzcwMUMxM0VDOUZGMUE4RkU3NjM2NUY3NTIz MTNBMTE0OTREMkNFQjIzQzk0NDdGOS8wLzg1QzYxREIwQ0VDMkMxRkJDN0ZCNEUy NkJFMDIwMDE0NzE3N0I3RUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6JY4qS/TXA6LVtR63gRdwD6PD RmLeOS5yf8pwuB8NARsKUBXk6jBG1WOpyMTtzVtNIcaRPJD/N2czjIyqKH9swIP+ 3Jsvv19+V101fLZo3UgmrUz/bdzj5ZzzXrR9E6Gr2a+07qDjgY2Og+wuuUK+P27/ q+1ReL5VAlJAB1pUQd54IT85FkSHUX1tv97XOH8Q32dkPrRKK6XiCDZDXKB9r+jW ivLqowszL8AxGJgfiY7HW4su8qucnvtiwYc9ehVFXN0pqnMk/6BAB0D+mZh01K2b GdwrlCpWtelSs2NBvoQP2perhT4iwG5OLhYUpNW435h4cyjujLyFnf6hNicH -----END CERTIFICATE-----Generated at Sat Aug 23 10:57:46 2025 by rpki-client