$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.mft File: CB8CD2550789B77DC4B972AE0BBC01A92255500D.mft (raw, json) Hash identifier: rtbT+ANpbVsyj8FJp0iRIGXKGGTutYP44sSyKI/HZ7Q= Subject key identifier: DE:EA:2F:9F:72:B6:F9:75:09:3C:77:E5:E3:29:FF:07:86:AE:80:83 Authority key identifier: CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D Certificate issuer: /CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D Certificate serial: 42B162874F5727F8369EF2AAA85163DAEA92927B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.mft Manifest number: 0108 Signing time: Fri 22 Aug 2025 01:24:40 +0000 Manifest this update: Fri 22 Aug 2025 01:19:40 +0000 Manifest next update: Wed 27 Aug 2025 19:37:40 +0000 Files and hashes: 1: CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl (hash: S0fPsP+SMlsfOofGRaI4YtHT6BWucp24zPnWyFPL2C8=) 2: 3133382e39372e3134302e302f32322d3234203d3e203237373239.roa (hash: NCTR09p6byZCshwLENfYUF8BC4lFErOVDp4k85booWM=) 3: 323830333a383834303a3a2f33322d3438203d3e203237373239.roa (hash: nYqUF933kWu3jlcRNFTK2dtNjtW8AryLSDTERrkcnxU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b1:62:87:4f:57:27:f8:36:9e:f2:aa:a8:51:63:da:ea:92:92:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D Validity Not Before: Aug 22 01:19:40 2025 GMT Not After : Aug 27 19:37:40 2025 GMT Subject: CN=DEEA2F9F72B6F975093C77E5E329FF0786AE8083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:f2:61:71:0a:6a:0c:0e:ef:e8:96:1a:5f: ef:7a:59:a1:bb:7e:91:32:ab:99:35:41:f2:aa:ae: 5e:09:d2:1d:3a:57:bf:8d:7e:0f:6e:66:b4:c6:8e: 17:11:62:ac:62:01:e0:66:ef:0a:74:f9:41:66:cb: e3:1b:0e:3d:5b:69:84:a0:1b:55:ad:10:66:80:65: 2a:bb:f1:9d:35:f2:33:39:5d:2c:9e:23:45:f3:6f: 1e:09:13:8c:91:94:33:b6:26:e3:4a:3c:a2:9e:ed: 45:b4:7b:f7:75:d7:05:56:91:37:24:9c:df:42:4b: f6:09:60:6e:9b:bd:71:58:93:ad:28:6a:65:15:17: 09:8f:4e:82:a6:b4:f7:01:7f:71:84:ae:df:46:46: c4:71:1b:97:78:61:66:0b:3d:20:5e:87:4d:63:e3: 91:ec:d8:f4:35:1b:4c:a8:9c:b9:54:19:5f:3a:61: 6f:d5:8b:36:ad:2b:37:9d:9e:29:8a:bf:4b:1d:e7: 4e:20:31:2d:7e:ac:85:bc:30:de:a7:52:4d:ed:0a: 4d:cd:37:04:ba:ab:d2:4e:fd:e0:d9:cb:1d:71:3f: 2e:14:16:bc:9c:50:41:be:d3:be:90:04:76:c0:93: 6f:08:11:c8:dd:c1:19:e4:15:90:28:6d:ed:32:1b: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EA:2F:9F:72:B6:F9:75:09:3C:77:E5:E3:29:FF:07:86:AE:80:83 X509v3 Authority Key Identifier: keyid:CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:80:c5:72:2f:25:5d:8c:2b:49:ff:ca:4b:83:be:18:7e:73: 0e:18:4b:c0:dc:99:71:5b:b0:61:0a:73:ae:d5:f6:ed:52:07: 4d:28:b2:0f:60:81:ca:fa:dc:98:e9:f9:60:8f:15:e2:36:4a: cf:93:84:31:54:7d:49:28:7e:12:0a:22:26:43:51:25:97:a5: 5f:e9:d3:c7:0e:82:19:55:be:13:27:6c:9a:a3:ea:11:98:ca: 6b:75:a8:d1:69:7c:e1:e8:50:6b:d0:0b:57:ce:3f:98:ff:a3: 44:fb:50:7f:e7:93:ec:54:e7:65:03:e9:85:3b:85:1c:c9:19: b3:57:f5:49:04:09:3a:24:c1:e7:bc:96:84:a0:5d:1a:35:e4: 15:32:fe:9e:9b:92:84:7b:09:31:9f:0b:25:97:de:85:e7:5d: 93:98:17:a5:3a:de:81:17:3a:4f:93:c5:9e:29:98:1f:e6:4a: cb:4f:c9:44:80:dd:84:e8:f7:dd:48:cd:a7:52:4f:c7:6a:30: ed:8c:b7:a9:b7:d2:56:21:50:e2:24:36:99:b0:a9:d2:b1:91: 34:e9:1f:88:28:ce:de:1b:91:a6:cf:31:3c:35:a5:92:33:b9: 7f:5f:9f:ff:5b:3a:79:29:04:ae:bb:cb:5e:c8:53:39:77:0e: 4f:fa:97:01 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQrFih09XJ/g2nvKqqFFj2uqSknswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4Q0QyNTUwNzg5Qjc3REM0Qjk3MkFFMEJCQzAxQTky MjU1NTAwRDAeFw0yNTA4MjIwMTE5NDBaFw0yNTA4MjcxOTM3NDBaMDMxMTAvBgNV BAMTKERFRUEyRjlGNzJCNkY5NzUwOTNDNzdFNUUzMjlGRjA3ODZBRTgwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+fJhcQpqDA7v6JYaX+96WaG7 fpEyq5k1QfKqrl4J0h06V7+Nfg9uZrTGjhcRYqxiAeBm7wp0+UFmy+MbDj1baYSg G1WtEGaAZSq78Z018jM5XSyeI0Xzbx4JE4yRlDO2JuNKPKKe7UW0e/d11wVWkTck nN9CS/YJYG6bvXFYk60oamUVFwmPToKmtPcBf3GErt9GRsRxG5d4YWYLPSBeh01j 45Hs2PQ1G0yonLlUGV86YW/VizatKzednimKv0sd504gMS1+rIW8MN6nUk3tCk3N NwS6q9JO/eDZyx1xPy4UFrycUEG+076QBHbAk28IEcjdwRnkFZAobe0yG3gBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU3uovn3K2+XUJPHfl4yn/B4augIMwHwYDVR0j BBgwFoAUy4zSVQeJt33EuXKuC7wBqSJVUA0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNkFCQzMwQjhGRDFFOUQ4QkFDNjZCRDQ2QjNEQzZFRTU3 ODU3QzRGM0ZGOEMxQjM4NjE4RkFDQkFDNzk5Qzk1LzAvQ0I4Q0QyNTUwNzg5Qjc3 REM0Qjk3MkFFMEJCQzAxQTkyMjU1NTAwRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjhDRDI1NTA3ODlCNzdEQzRC OTcyQUUwQkJDMDFBOTIyNTU1MDBELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzZBQkMzMEI4RkQxRTlEOEJBQzY2QkQ0NkIzREM2RUU1Nzg1N0M0RjNG RjhDMUIzODYxOEZBQ0JBQzc5OUM5NS8wL0NCOENEMjU1MDc4OUI3N0RDNEI5NzJB RTBCQkMwMUE5MjI1NTUwMEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQgMVyLyVdjCtJ/8pLg74YfnMO GEvA3JlxW7BhCnOu1fbtUgdNKLIPYIHK+tyY6flgjxXiNkrPk4QxVH1JKH4SCiIm Q1Ell6Vf6dPHDoIZVb4TJ2yao+oRmMprdajRaXzh6FBr0AtXzj+Y/6NE+1B/55Ps VOdlA+mFO4UcyRmzV/VJBAk6JMHnvJaEoF0aNeQVMv6em5KEewkxnwsll96F512T mBelOt6BFzpPk8WeKZgf5krLT8lEgN2E6PfdSM2nUk/HajDtjLept9JWIVDiJDaZ sKnSsZE06R+IKM7eG5GmzzE8NaWSM7l/X5//Wzp5KQSuu8teyFM5dw5P+pcB -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:23 2025 by rpki-client