$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft File: 11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft (raw, json) Hash identifier: wgxYn8X1HT2GVIM66EeKhYqIyO2lDUyWoXqiOxwBN2s= Subject key identifier: 88:8D:55:80:5F:C0:D7:BE:79:7A:A6:95:58:B5:33:CF:43:EC:35:12 Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2 Certificate issuer: /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2 Certificate serial: 13B627F20B2927F64C763C0585E0DD6A25C6B5CB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft Manifest number: CD Signing time: Sat 23 Aug 2025 04:27:24 +0000 Manifest this update: Sat 23 Aug 2025 04:22:24 +0000 Manifest next update: Wed 27 Aug 2025 10:06:24 +0000 Files and hashes: 1: 11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl (hash: ZQI9eqqwEU9uc1cpV4Bw4Y8+hPBv3wvZiZTbPi+tHTQ=) 2: 3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa (hash: GKbXOAbHGidO1Yag/LWzAQX+aCAoGKtBmuviPdb8ed0=) 3: 3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa (hash: ndw82tgGhD0cbKt8WwbQC3xb6HH1aYiaoyiR62r2kGM=) 4: 3139302e3130342e3130342e302f32312d3234203d3e203237363630.roa (hash: QpgIA+qR6DnHvHoRgWPKdNBL/H1Gete16vwsABBkANE=) 5: 3133382e3235352e3235342e302f32332d3234203d3e20323634363435.roa (hash: WyvT6BKjOffyK/VR/uNd7FhK13KUj1Kut091yP2l0nk=) 6: 3139302e3130342e39362e302f32312d3231203d3e20323634363435.roa (hash: ZImx+kH/QZNptaNJp2uHO7KYtNf11p/HnwGG529wLWk=) 7: 323830333a623634303a3a2f33322d3332203d3e20323634363435.roa (hash: Uvuhc9GuflpxT0ULJMwsdStz2CoaBu58yB6F1ZLgR4I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b6:27:f2:0b:29:27:f6:4c:76:3c:05:85:e0:dd:6a:25:c6:b5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2 Validity Not Before: Aug 23 04:22:24 2025 GMT Not After : Aug 27 10:06:24 2025 GMT Subject: CN=888D55805FC0D7BE797AA69558B533CF43EC3512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:a5:af:de:3a:1b:ae:34:ea:07:eb:d3:81: 5a:df:55:19:9a:13:eb:23:c3:82:a5:6a:24:31:26: c9:ba:d5:21:1e:f3:f0:73:5c:e2:ad:f7:1d:84:b4: eb:4f:24:eb:ce:a5:05:af:54:61:a2:b4:05:2b:ad: 04:74:89:0a:82:7e:0e:02:84:b2:ce:4d:0c:56:37: 24:ce:0a:8b:c4:36:68:e3:67:9c:01:e1:77:2d:44: f5:9f:36:0d:53:94:22:66:e7:fb:65:28:73:7e:91: 30:b3:3f:8b:7c:52:72:29:2e:1b:ae:a9:67:a3:d9: 09:a0:fa:ef:35:aa:50:97:5b:fd:50:a0:1a:28:48: cb:e6:bf:83:df:7b:b0:84:49:05:81:aa:c8:57:14: 0e:04:34:18:2d:2b:41:40:23:1c:46:08:fe:56:38: a3:49:d4:32:6a:de:0a:a3:7c:98:d2:18:05:2a:f7: 69:23:24:79:8a:d6:7a:53:dd:83:13:41:99:05:a1: fc:3d:f3:3f:89:dd:ce:de:25:2b:f6:6a:42:ea:bb: e8:be:ad:c8:c4:5f:bd:a7:74:df:c2:ec:3d:79:7e: 2c:f8:7b:77:6b:85:f2:8d:8e:30:76:0d:d7:b6:4a: 01:c2:f7:78:69:9d:e2:ff:c9:e7:e3:1f:21:42:d0: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8D:55:80:5F:C0:D7:BE:79:7A:A6:95:58:B5:33:CF:43:EC:35:12 X509v3 Authority Key Identifier: keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f1:d0:01:fc:44:8d:63:e7:68:6a:ae:86:aa:f5:ac:ee:53: 3d:30:a2:06:f6:06:84:87:47:18:42:0e:be:5a:7a:00:5e:94: 2e:da:a9:2c:4a:c8:07:8b:5c:94:ea:fc:f1:62:1d:47:71:94: 43:95:43:c4:74:3a:96:7c:e3:8b:bc:5b:c2:73:3e:cb:28:61: e4:de:f5:eb:47:dc:66:bc:85:26:14:10:5e:df:6b:8c:43:73: 00:2c:c3:ce:63:88:f9:90:bd:98:8d:86:a9:21:f7:0b:4d:ea: 4f:cf:b8:81:b3:f5:9f:cd:c6:e0:2b:61:ae:f0:d9:7b:50:f4: c2:38:a0:ad:07:00:09:26:ef:28:0c:fa:5f:84:88:ad:73:13: 65:36:04:21:75:f3:08:6d:9c:0d:05:8a:1c:f0:71:1a:48:28: cc:55:fa:f0:e6:68:d8:bc:3b:0d:d0:e1:15:10:1b:88:85:21: 70:fa:0a:24:54:b7:59:58:ad:2f:5d:81:13:03:99:22:18:0b: 84:a3:c0:30:1c:e6:8d:c6:67:41:02:4b:69:7b:3d:1a:11:e2: 35:4a:5b:7c:f9:63:d9:4b:20:2f:5e:2a:64:3b:01:3c:c3:66: f3:4d:04:63:be:87:c6:ba:30:bf:c9:43:d9:88:03:ba:80:aa: cb:33:ab:44 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUE7Yn8gspJ/ZMdjwFheDdaiXGtcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE3MzFENkE4ODFGOTEwMDhDQUZFRDNCQTBFNkFFQzYx RTYyNUNGMjAeFw0yNTA4MjMwNDIyMjRaFw0yNTA4MjcxMDA2MjRaMDMxMTAvBgNV BAMTKDg4OEQ1NTgwNUZDMEQ3QkU3OTdBQTY5NTU4QjUzM0NGNDNFQzM1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6V6Wv3jobrjTqB+vTgVrfVRma E+sjw4KlaiQxJsm61SEe8/BzXOKt9x2EtOtPJOvOpQWvVGGitAUrrQR0iQqCfg4C hLLOTQxWNyTOCovENmjjZ5wB4XctRPWfNg1TlCJm5/tlKHN+kTCzP4t8UnIpLhuu qWej2Qmg+u81qlCXW/1QoBooSMvmv4Pfe7CESQWBqshXFA4ENBgtK0FAIxxGCP5W OKNJ1DJq3gqjfJjSGAUq92kjJHmK1npT3YMTQZkFofw98z+J3c7eJSv2akLqu+i+ rcjEX72ndN/C7D15fiz4e3drhfKNjjB2Dde2SgHC93hpneL/yefjHyFC0CfZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiI1VgF/A1755eqaVWLUzz0PsNRIwHwYDVR0j BBgwFoAUEXMdaogfkQCMr+07oOauxh5iXPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zREFDNjE0MTZFNUMxOTU1RjIyQUZBNjk5REQ4NTUxODRG NjA5ODRCODI1QTJDMENBMzBDOEU5QUNDRUZFRUUxLzAvMTE3MzFENkE4ODFGOTEw MDhDQUZFRDNCQTBFNkFFQzYxRTYyNUNGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTczMUQ2QTg4MUY5MTAwOENB RkVEM0JBMEU2QUVDNjFFNjI1Q0YyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0RBQzYxNDE2RTVDMTk1NUYyMkFGQTY5OUREODU1MTg0RjYwOTg0Qjgy NUEyQzBDQTMwQzhFOUFDQ0VGRUVFMS8wLzExNzMxRDZBODgxRjkxMDA4Q0FGRUQz QkEwRTZBRUM2MUU2MjVDRjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAj8dAB/ESNY+doaq6GqvWs7lM9 MKIG9gaEh0cYQg6+WnoAXpQu2qksSsgHi1yU6vzxYh1HcZRDlUPEdDqWfOOLvFvC cz7LKGHk3vXrR9xmvIUmFBBe32uMQ3MALMPOY4j5kL2YjYapIfcLTepPz7iBs/Wf zcbgK2Gu8Nl7UPTCOKCtBwAJJu8oDPpfhIitcxNlNgQhdfMIbZwNBYoc8HEaSCjM Vfrw5mjYvDsN0OEVEBuIhSFw+gokVLdZWK0vXYETA5kiGAuEo8AwHOaNxmdBAktp ez0aEeI1Slt8+WPZSyAvXipkOwE8w2bzTQRjvofGujC/yUPZiAO6gKrLM6tE -----END CERTIFICATE-----Generated at Sun Aug 24 03:40:02 2025 by rpki-client