$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft File: 9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft (raw, json) Hash identifier: UcowfAaiKLZ/SoeDQUn1XXSbhpfCAtutSL0C6PmyA4Q= Subject key identifier: B7:ED:FE:84:E3:08:06:D4:76:B6:E9:10:28:FF:D3:BD:1B:E1:A4:8A Authority key identifier: 9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F Certificate issuer: /CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F Certificate serial: 16C58FE74BF599FBAF63CFAC7A1D2790FFB314A3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft Manifest number: 0117 Signing time: Sat 23 Aug 2025 17:40:39 +0000 Manifest this update: Sat 23 Aug 2025 17:35:39 +0000 Manifest next update: Thu 28 Aug 2025 15:05:39 +0000 Files and hashes: 1: 3139302e3135312e3133382e302f32332d3234203d3e203532333236.roa (hash: cuNwmeG2+57x0mNdQal6CqF5BBF1aXJRbnYM0fD6srs=) 2: 3139302e3135312e3134302e302f32332d3234203d3e203532333236.roa (hash: 4Nx/Kwyd+dWd6RR/SVClXPudhyl7WHmQIDUx1jmkrVc=) 3: 9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl (hash: B/oE3iTfPnblMMbjbJ7E5en8dx3yhySOdOnXoxe7+ok=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c5:8f:e7:4b:f5:99:fb:af:63:cf:ac:7a:1d:27:90:ff:b3:14:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F Validity Not Before: Aug 23 17:35:39 2025 GMT Not After : Aug 28 15:05:39 2025 GMT Subject: CN=B7EDFE84E30806D476B6E91028FFD3BD1BE1A48A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:a9:c5:f5:54:ab:54:98:70:0f:c0:68:16: f4:22:1c:05:02:a1:05:3f:15:0d:c0:c3:5f:6c:d2: 48:e5:cc:3e:ba:49:6b:d8:66:47:8f:ac:35:56:23: c4:95:0f:cf:16:88:03:ae:1b:70:8a:20:6c:55:c7: 17:a5:a5:7c:c3:6c:62:98:61:e4:a5:d0:95:64:46: 11:2d:6c:9b:e8:61:84:5c:f1:27:87:8f:9a:22:45: 2e:d9:a7:55:08:1d:45:a4:b5:39:25:8c:66:d5:81: ca:f3:a6:fb:b6:4b:ac:26:82:13:5b:2a:80:8d:24: ff:aa:da:b6:a5:43:c2:61:56:79:b7:8f:aa:78:fc: c9:ad:d1:ab:d0:26:58:fe:46:85:5b:79:b0:93:83: ed:f3:10:29:f4:0f:f1:2b:72:a7:93:ce:6c:f9:72: 8a:f6:b6:77:3a:fc:80:2e:e6:af:cd:45:72:51:fb: 6d:0e:f9:ef:a3:be:59:0e:69:9c:a8:c7:a9:27:15: 37:05:26:4f:5a:c7:a5:c6:65:bd:24:20:cd:6e:3f: 2c:eb:17:60:5e:fc:3c:6c:b4:27:6f:aa:8e:d1:23: 02:53:75:50:e3:16:88:61:b2:76:64:da:49:17:99: c5:1a:f5:ec:e0:8f:db:58:e9:4e:c1:4d:74:b1:ba: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:FE:84:E3:08:06:D4:76:B6:E9:10:28:FF:D3:BD:1B:E1:A4:8A X509v3 Authority Key Identifier: keyid:9C:DC:70:D9:BF:52:DC:35:F1:B9:88:BC:8F:7F:6D:B6:2A:20:8E:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D2C09119BFA646541C8AD271B93F5E0E76276E1106121F5490281615AF1D21F/0/9CDC70D9BF52DC35F1B988BC8F7F6DB62A208E5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e0:8a:45:c0:2f:48:77:9d:1f:fe:ca:32:81:f5:19:7d:39: cb:5a:ac:4a:90:ed:53:ef:f9:f9:21:8f:f1:aa:43:59:2d:4c: 20:6e:5f:9c:b8:bd:9f:39:72:a3:73:99:f0:5b:b9:89:96:1a: 6e:63:2a:00:03:48:20:5f:bd:65:e7:15:6c:ed:bc:de:c8:7b: c0:31:99:16:13:da:f2:1c:37:67:d7:41:b8:01:60:a2:21:2c: a3:27:20:03:72:26:28:d9:56:7e:23:b8:ef:78:4c:78:f8:5b: f2:9f:f9:19:28:b8:38:89:a7:ec:9c:ad:b6:18:dc:b7:7f:29: fa:90:20:c9:18:4f:fa:db:8e:c9:dc:cd:55:ae:f7:4e:d2:1a: 1c:33:f8:e5:5e:09:cf:80:3c:eb:c3:f1:55:0d:f8:06:36:44: ee:65:90:4f:e5:69:83:91:45:47:0b:46:ed:82:ad:71:56:df: d2:d0:ed:cc:bf:dd:fe:af:78:d6:4b:18:69:7b:a2:e4:4f:d4: 5d:2d:37:61:ce:5c:c7:fd:d7:2d:06:e0:fe:dc:5d:26:e8:2e: 35:3d:be:41:f4:6d:fd:5d:7c:5c:6d:73:98:40:7e:33:ac:72: 04:3b:c2:94:dd:d0:4f:5b:b0:41:bd:da:ae:2d:f8:22:da:f8: 7b:7d:e9:25 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFsWP50v1mfuvY8+seh0nkP+zFKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNEQzcwRDlCRjUyREMzNUYxQjk4OEJDOEY3RjZEQjYy QTIwOEU1RjAeFw0yNTA4MjMxNzM1MzlaFw0yNTA4MjgxNTA1MzlaMDMxMTAvBgNV BAMTKEI3RURGRTg0RTMwODA2RDQ3NkI2RTkxMDI4RkZEM0JEMUJFMUE0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmKnF9VSrVJhwD8BoFvQiHAUC oQU/FQ3Aw19s0kjlzD66SWvYZkePrDVWI8SVD88WiAOuG3CKIGxVxxelpXzDbGKY YeSl0JVkRhEtbJvoYYRc8SeHj5oiRS7Zp1UIHUWktTkljGbVgcrzpvu2S6wmghNb KoCNJP+q2ralQ8JhVnm3j6p4/Mmt0avQJlj+RoVbebCTg+3zECn0D/ErcqeTzmz5 cor2tnc6/IAu5q/NRXJR+20O+e+jvlkOaZyox6knFTcFJk9ax6XGZb0kIM1uPyzr F2Be/DxstCdvqo7RIwJTdVDjFohhsnZk2kkXmcUa9ezgj9tY6U7BTXSxuiyrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUt+3+hOMIBtR2tukQKP/TvRvhpIowHwYDVR0j BBgwFoAUnNxw2b9S3DXxuYi8j39ttiogjl8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRDJDMDkxMTlCRkE2NDY1NDFDOEFEMjcxQjkzRjVFMEU3 NjI3NkUxMTA2MTIxRjU0OTAyODE2MTVBRjFEMjFGLzAvOUNEQzcwRDlCRjUyREMz NUYxQjk4OEJDOEY3RjZEQjYyQTIwOEU1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Q0RDNzBEOUJGNTJEQzM1RjFC OTg4QkM4RjdGNkRCNjJBMjA4RTVGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0QyQzA5MTE5QkZBNjQ2NTQxQzhBRDI3MUI5M0Y1RTBFNzYyNzZFMTEw NjEyMUY1NDkwMjgxNjE1QUYxRDIxRi8wLzlDREM3MEQ5QkY1MkRDMzVGMUI5ODhC QzhGN0Y2REI2MkEyMDhFNUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB64IpFwC9Id50f/soygfUZfTnL WqxKkO1T7/n5IY/xqkNZLUwgbl+cuL2fOXKjc5nwW7mJlhpuYyoAA0ggX71l5xVs 7bzeyHvAMZkWE9ryHDdn10G4AWCiISyjJyADciYo2VZ+I7jveEx4+Fvyn/kZKLg4 iafsnK22GNy3fyn6kCDJGE/6247J3M1VrvdO0hocM/jlXgnPgDzrw/FVDfgGNkTu ZZBP5WmDkUVHC0btgq1xVt/S0O3Mv93+r3jWSxhpe6LkT9RdLTdhzlzH/dctBuD+ 3F0m6C41Pb5B9G39XXxcbXOYQH4zrHIEO8KU3dBPW7BBvdquLfgi2vh7fekl -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:33 2025 by rpki-client