$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json) Hash identifier: APJlgG5K62j9yFqpASe4a0hNd3sFN3Y36S+sZYKVtmc= Subject key identifier: 38:7E:2A:9B:45:B9:8F:FB:A4:87:58:5B:3D:F9:4C:30:95:CF:7B:F9 Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5 Certificate serial: 18D1CC6BF55F8AA87F1FCC8B1CEFE6D19C35857C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft Manifest number: 010D Signing time: Sat 23 Aug 2025 09:00:22 +0000 Manifest this update: Sat 23 Aug 2025 08:55:22 +0000 Manifest next update: Fri 29 Aug 2025 07:55:22 +0000 Files and hashes: 1: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: YCM1oXKAOqvvmUFyPpzwfn80NaYV4PR/y9/a34CTUWE=) 2: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: 8lwH4l4YUuQzHAjYuqrj6wleZfGKpdHmSCc1sv4snIs=) 3: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: 0wG8UAY7ipzPPU6H/Qn8ayAErVsbpJ3ILXn1Xxmg05c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d1:cc:6b:f5:5f:8a:a8:7f:1f:cc:8b:1c:ef:e6:d1:9c:35:85:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5 Validity Not Before: Aug 23 08:55:22 2025 GMT Not After : Aug 29 07:55:22 2025 GMT Subject: CN=387E2A9B45B98FFBA487585B3DF94C3095CF7BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:1c:ef:f4:84:bb:0d:f7:3c:3b:a6:e1:fc: 56:53:6e:a9:6c:0c:d9:55:73:c3:6d:72:d6:8a:76: 33:64:16:ba:b3:ce:ed:ad:3a:61:5f:10:fd:b4:28: 7b:33:5e:81:6a:ec:90:d7:2e:7f:74:dd:09:22:c3: a9:58:ec:f8:e2:4a:d7:6b:91:4d:f0:c5:80:4d:b2: b8:a6:a5:ff:e2:04:54:03:5e:9f:a3:09:a3:f3:bc: 71:9d:f9:9c:97:37:9f:e4:a1:71:f0:60:56:fd:d7: 26:2d:24:49:b5:08:19:1a:e3:72:ae:6a:48:a0:59: a4:02:72:bc:42:9a:85:69:5c:61:31:b7:77:9a:93: 23:7b:20:7c:12:d2:e4:52:af:9b:57:4c:1b:ad:25: 15:d6:3d:e1:ca:1b:66:1f:9f:1c:bb:8d:6b:a8:51: 8d:1d:bf:37:d9:c9:27:50:a1:f4:d0:91:1f:58:69: da:94:d6:5f:cf:af:b4:82:9e:24:07:62:e6:0e:6d: c1:bc:b9:d6:bd:4a:e3:11:73:b7:a1:ca:83:36:28: 29:31:ee:e2:f1:a4:bf:15:8d:75:0a:20:3d:be:c6: fb:77:d8:59:89:d2:ae:9d:dd:dd:80:7f:4d:92:e5: 71:86:6e:e6:dc:7c:9b:a2:82:e5:ff:46:94:e6:6c: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7E:2A:9B:45:B9:8F:FB:A4:87:58:5B:3D:F9:4C:30:95:CF:7B:F9 X509v3 Authority Key Identifier: keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:42:22:13:ab:77:8e:64:d2:10:ff:86:d5:20:5a:dc:2e:ff: 53:2c:1a:df:e8:17:59:8e:6e:a7:43:45:9b:a7:22:fe:a8:f0: b3:1b:20:24:35:e3:bd:57:86:ad:2b:44:24:7a:13:13:7a:c1: 71:99:21:83:6b:5e:c5:0f:3b:d0:c4:f8:ea:7a:12:2a:f6:e4: 57:3a:81:cf:c6:bd:d9:b8:c7:a9:7d:ce:c3:7e:fe:4c:85:47: b8:65:c9:53:f0:f8:ba:88:98:7a:4c:06:c2:08:6c:d9:c5:87: 34:db:a5:b2:f1:48:a6:ff:36:be:38:8b:64:20:55:45:83:f7: dc:7a:bd:18:77:7d:37:4d:b4:67:1b:ce:cf:54:a8:dc:17:21: 42:27:a1:13:79:b9:33:1b:bd:5f:12:13:8b:f9:c8:59:0f:f9: d2:2c:c8:72:05:e3:f2:8c:ca:69:03:39:fe:09:0a:65:f7:8c: 17:dc:74:47:d9:1c:45:cb:dd:a2:03:4a:f7:6c:74:f1:56:52: e0:65:63:25:1d:32:cf:4e:73:09:a8:50:97:41:74:de:2e:64: 20:00:c2:dc:6e:d3:de:fa:d6:bc:99:7a:05:e4:dd:90:e6:bc: b3:58:c8:13:7a:14:d3:e7:f9:e3:4c:38:b1:f9:d4:24:58:47: 56:66:5c:f5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGNHMa/Vfiqh/H8yLHO/m0Zw1hXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4 OEZGMzZFNTAeFw0yNTA4MjMwODU1MjJaFw0yNTA4MjkwNzU1MjJaMDMxMTAvBgNV BAMTKDM4N0UyQTlCNDVCOThGRkJBNDg3NTg1QjNERjk0QzMwOTVDRjdCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ihzv9IS7Dfc8O6bh/FZTbqls DNlVc8NtctaKdjNkFrqzzu2tOmFfEP20KHszXoFq7JDXLn903Qkiw6lY7PjiStdr kU3wxYBNsrimpf/iBFQDXp+jCaPzvHGd+ZyXN5/koXHwYFb91yYtJEm1CBka43Ku akigWaQCcrxCmoVpXGExt3eakyN7IHwS0uRSr5tXTButJRXWPeHKG2Yfnxy7jWuo UY0dvzfZySdQofTQkR9YadqU1l/Pr7SCniQHYuYObcG8uda9SuMRc7ehyoM2KCkx 7uLxpL8VjXUKID2+xvt32FmJ0q6d3d2Af02S5XGGbubcfJuiguX/RpTmbCxjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOH4qm0W5j/ukh1hbPflMMJXPe/kwHwYDVR0j BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5 QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3 OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzJBQTk0OTIzMzI1MTg0OUI1Rjc5MDg1 RkE4MTQwNkU1ODhGRjM2RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2QiITq3eOZNIQ/4bVIFrcLv9T LBrf6BdZjm6nQ0WbpyL+qPCzGyAkNeO9V4atK0QkehMTesFxmSGDa17FDzvQxPjq ehIq9uRXOoHPxr3ZuMepfc7Dfv5MhUe4ZclT8Pi6iJh6TAbCCGzZxYc026Wy8Uim /za+OItkIFVFg/fcer0Yd303TbRnG87PVKjcFyFCJ6ETebkzG71fEhOL+chZD/nS LMhyBePyjMppAzn+CQpl94wX3HRH2RxFy92iA0r3bHTxVlLgZWMlHTLPTnMJqFCX QXTeLmQgAMLcbtPe+ta8mXoF5N2Q5ryzWMgTehTT5/njTDix+dQkWEdWZlz1 -----END CERTIFICATE-----Generated at Sat Aug 23 11:04:02 2025 by rpki-client