$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft File: 6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft (raw, json) Hash identifier: BAwuoIItSB/PLY3CW9+l7/3iDkYeprt+lvU9FKEE1/Q= Subject key identifier: 66:A2:37:AF:AC:A6:EC:20:AC:C0:7D:6C:C9:AD:BD:06:C6:98:5D:38 Authority key identifier: 68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9 Certificate issuer: /CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9 Certificate serial: 0CB46F433DB6979B2B9A8740E074CE99C26E8513 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft Manifest number: 0109 Signing time: Sat 23 Aug 2025 06:03:33 +0000 Manifest this update: Sat 23 Aug 2025 05:58:33 +0000 Manifest next update: Thu 28 Aug 2025 01:34:33 +0000 Files and hashes: 1: 3137372e3132342e38342e302f32322d3232203d3e203238343332.roa (hash: FlVYzkL34mQ7qjfyCUio3x9mmpEUK/9lvAFevIK49uM=) 2: 3137372e3132342e38362e302f32342d3234203d3e203238343332.roa (hash: 8pY1toGsXrahUyChPa6O5C0oCDA84cukfBrLczJERSg=) 3: 6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl (hash: mBejt3qcjGbdX+x+qDkjGe3eVS5xEBcYactydCw0A3M=) 4: 3137372e3132342e38342e302f32342d3234203d3e203238343332.roa (hash: Xjpn6s/En9ysoFuWzcfNVXBIc+gfP9h2lwiuQwbX5zQ=) 5: 3137372e3132342e38372e302f32342d3234203d3e20323730313532.roa (hash: w3pe6/RyMd+225qYh2miIgXUTb4or/xTJT3Gjhfs6/o=) 6: 3137372e3132342e38352e302f32342d3234203d3e20323730313532.roa (hash: 0mbKu1xZ7+nqKXvTh4RhfqMDUOfUA3NXKTVu2gztBCY=) 7: 3137372e3132342e38372e302f32342d3234203d3e203238343332.roa (hash: 3wIENJj2AYxWFGWT6DauA/SKsAPbKC0mnOeIUH1PaSk=) 8: 3137372e3132342e38352e302f32342d3234203d3e203238343332.roa (hash: lrm+UIjfmfIuTjoAo4MD9po36+uUreI33kUjSPjMCUk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b4:6f:43:3d:b6:97:9b:2b:9a:87:40:e0:74:ce:99:c2:6e:85:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6849B5A5EAE77557BB150A5044601E12FBB39CE9 Validity Not Before: Aug 23 05:58:33 2025 GMT Not After : Aug 28 01:34:33 2025 GMT Subject: CN=66A237AFACA6EC20ACC07D6CC9ADBD06C6985D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:c3:93:ce:b6:52:af:89:aa:4d:9c:f3:1f: 55:8a:19:ce:b9:1f:ba:24:4d:fd:93:d1:41:ba:76: 5e:e2:fb:43:b5:3d:03:dc:e1:4c:a6:85:53:a0:98: 53:82:20:f5:aa:d9:8c:aa:70:aa:54:dc:43:26:ce: d0:8e:bb:f7:dd:d9:7f:8f:a8:f9:df:fb:06:7b:6c: fc:17:25:e4:f3:e0:15:9c:4d:23:3e:77:8d:af:98: 85:2e:ea:4c:87:47:5f:5a:d3:98:a3:55:cf:d5:28: 04:41:6a:d6:ea:36:54:94:c6:3f:4a:83:61:4d:08: f4:5a:58:ab:3e:4a:af:59:93:31:78:2b:7e:9b:24: 88:02:d4:b0:2d:9a:71:d6:d5:ea:60:bb:53:38:21: 23:7f:01:81:17:c8:44:ba:ee:1d:68:09:09:66:e8: 35:c3:17:24:f9:8a:53:f4:81:8b:c2:14:04:8e:ad: ce:6d:9c:d4:e3:74:52:21:e6:7b:ae:0f:6f:7d:a7: e3:45:1f:4b:9d:ed:f0:97:cd:0c:c9:d1:1a:b2:62: 2f:23:9b:30:13:97:70:b5:ed:48:f5:dd:af:54:d2: 00:44:61:69:de:27:2c:34:aa:0b:2b:8c:bb:b8:40: 43:7a:2e:b8:5e:76:27:7f:de:13:42:f4:79:31:62: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:37:AF:AC:A6:EC:20:AC:C0:7D:6C:C9:AD:BD:06:C6:98:5D:38 X509v3 Authority Key Identifier: keyid:68:49:B5:A5:EA:E7:75:57:BB:15:0A:50:44:60:1E:12:FB:B3:9C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4123437DC60BA69F884764D290B59D3C5C41403186FC99E2BFBBC5C15B61235D/0/6849B5A5EAE77557BB150A5044601E12FBB39CE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5d:f4:7a:2c:c5:34:d3:d7:c2:bc:32:77:43:df:df:e0:b9: 18:0b:a0:e5:71:06:9b:22:b4:0d:70:00:c6:55:86:5b:af:2d: a1:a1:1c:9a:8c:03:aa:f8:8c:4d:96:2f:9f:3f:86:19:74:ef: 92:91:63:17:f9:b9:75:66:01:5f:71:e3:02:b7:da:32:28:8f: 86:d1:9c:37:ea:4e:07:c1:c0:0b:67:31:c5:99:27:0f:3f:1c: 1d:ac:27:8c:2b:23:d6:96:7f:87:ed:f1:c4:d6:b8:47:96:6a: c8:2f:7c:2a:e7:89:ac:87:03:c7:24:71:9b:6f:62:50:26:0a: 05:20:3f:d1:52:67:70:f7:c4:2b:7b:0a:9a:6c:10:e2:a6:51: 03:64:58:41:e0:49:91:8c:f3:41:16:16:c2:af:49:50:eb:b6: 60:ce:b9:93:4f:c2:11:4b:0f:34:ac:d1:ad:18:76:be:ab:c8: ec:fa:a9:d2:8e:3e:3a:05:27:3e:9f:60:fe:43:da:6f:9c:12: e7:f0:25:a4:c3:2c:0d:62:9a:f6:9d:86:37:86:2d:0d:72:f3: f5:54:6a:f7:f6:d8:a2:5d:02:3e:c2:24:03:5e:a9:51:c7:4f: 43:c4:8f:2b:7f:f2:60:a9:6f:8f:70:41:dc:83:a5:10:46:09: 1b:7f:20:71 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDLRvQz22l5srmodA4HTOmcJuhRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0OUI1QTVFQUU3NzU1N0JCMTUwQTUwNDQ2MDFFMTJG QkIzOUNFOTAeFw0yNTA4MjMwNTU4MzNaFw0yNTA4MjgwMTM0MzNaMDMxMTAvBgNV BAMTKDY2QTIzN0FGQUNBNkVDMjBBQ0MwN0Q2Q0M5QURCRDA2QzY5ODVEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkMOTzrZSr4mqTZzzH1WKGc65 H7okTf2T0UG6dl7i+0O1PQPc4UymhVOgmFOCIPWq2YyqcKpU3EMmztCOu/fd2X+P qPnf+wZ7bPwXJeTz4BWcTSM+d42vmIUu6kyHR19a05ijVc/VKARBatbqNlSUxj9K g2FNCPRaWKs+Sq9ZkzF4K36bJIgC1LAtmnHW1epgu1M4ISN/AYEXyES67h1oCQlm 6DXDFyT5ilP0gYvCFASOrc5tnNTjdFIh5nuuD299p+NFH0ud7fCXzQzJ0RqyYi8j mzATl3C17Uj13a9U0gBEYWneJyw0qgsrjLu4QEN6Lrhedid/3hNC9HkxYpTxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZqI3r6ym7CCswH1sya29BsaYXTgwHwYDVR0j BBgwFoAUaEm1perndVe7FQpQRGAeEvuznOkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80MTIzNDM3REM2MEJBNjlGODg0NzY0RDI5MEI1OUQzQzVD NDE0MDMxODZGQzk5RTJCRkJCQzVDMTVCNjEyMzVELzAvNjg0OUI1QTVFQUU3NzU1 N0JCMTUwQTUwNDQ2MDFFMTJGQkIzOUNFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODQ5QjVBNUVBRTc3NTU3QkIx NTBBNTA0NDYwMUUxMkZCQjM5Q0U5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDEyMzQzN0RDNjBCQTY5Rjg4NDc2NEQyOTBCNTlEM0M1QzQxNDAzMTg2 RkM5OUUyQkZCQkM1QzE1QjYxMjM1RC8wLzY4NDlCNUE1RUFFNzc1NTdCQjE1MEE1 MDQ0NjAxRTEyRkJCMzlDRTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYXfR6LMU009fCvDJ3Q9/f4LkY C6DlcQabIrQNcADGVYZbry2hoRyajAOq+IxNli+fP4YZdO+SkWMX+bl1ZgFfceMC t9oyKI+G0Zw36k4HwcALZzHFmScPPxwdrCeMKyPWln+H7fHE1rhHlmrIL3wq54ms hwPHJHGbb2JQJgoFID/RUmdw98QrewqabBDiplEDZFhB4EmRjPNBFhbCr0lQ67Zg zrmTT8IRSw80rNGtGHa+q8js+qnSjj46BSc+n2D+Q9pvnBLn8CWkwywNYpr2nYY3 hi0NcvP1VGr39tiiXQI+wiQDXqlRx09DxI8rf/JgqW+PcEHcg6UQRgkbfyBx -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:52 2025 by rpki-client