$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: UFufviJo+9poyZzgkxVvJ6QeeYdQRLG6piE9DRl6h+8= Subject key identifier: AE:9E:77:DE:AC:20:47:E9:D5:B7:7C:DD:B2:BD:B2:EA:DD:18:55:4E Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 0A51C4EF1EDD847344338F686CD68C3C61D1B85F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: 010A Signing time: Thu 21 Aug 2025 08:29:11 +0000 Manifest this update: Thu 21 Aug 2025 08:24:11 +0000 Manifest next update: Tue 26 Aug 2025 21:16:11 +0000 Files and hashes: 1: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: zMjLg2FnFPII1LSnfPbiseNwqsu7uKXmB3l/6gx2HHo=) 2: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=) 3: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 21:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:51:c4:ef:1e:dd:84:73:44:33:8f:68:6c:d6:8c:3c:61:d1:b8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: Aug 21 08:24:11 2025 GMT Not After : Aug 26 21:16:11 2025 GMT Subject: CN=AE9E77DEAC2047E9D5B77CDDB2BDB2EADD18554E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:11:b4:e5:98:f4:12:ce:45:b3:e3:82:43: 9d:52:ab:71:78:f7:c1:24:38:2c:e6:9f:be:ad:a7: 2d:24:cd:e6:ce:f5:eb:f7:1f:a8:40:e9:cc:b8:e4: ed:17:62:68:1f:24:cc:65:71:68:e2:4b:ac:b3:ab: 09:71:0d:5f:36:9c:98:bb:06:80:8a:6b:ec:8c:75: 9c:8e:c7:96:cc:69:1d:ba:fa:7a:c3:a4:38:d7:a0: b9:50:5c:e9:ed:4c:03:19:84:1f:91:4b:11:fe:67: 9d:6a:fb:a4:59:81:a8:9f:aa:4c:dd:1b:57:44:b8: d7:fe:4c:6d:50:67:52:6c:e8:99:f3:3a:e9:f1:d9: 38:f5:67:36:ac:4c:17:7d:71:16:2b:f8:a5:3e:53: 33:a5:7a:ae:50:4a:51:27:4e:69:9a:a4:a7:3a:2c: 93:0f:b5:16:3e:ee:a2:34:64:b2:54:ff:d1:0c:5a: b7:7d:3d:cd:04:c2:e7:9c:cc:21:c9:d5:97:66:09: 99:d9:1a:af:0a:81:c6:de:30:9a:2f:a0:20:4f:2c: 1d:45:57:e8:14:5a:14:c8:38:f9:49:6f:4f:18:02: 73:e2:e5:03:da:84:54:b3:9c:c9:c3:f8:db:80:b5: ee:d6:92:bd:85:26:37:09:5c:d9:40:0d:c9:71:e8: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9E:77:DE:AC:20:47:E9:D5:B7:7C:DD:B2:BD:B2:EA:DD:18:55:4E X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:67:fc:74:a0:91:88:03:98:02:f5:2e:2c:c3:2b:88:e9:cd: d0:b3:82:3d:41:da:75:87:08:b6:01:7d:e7:51:95:1f:77:87: 0a:50:c4:14:08:cf:dd:04:a4:3d:14:46:e4:2c:cd:77:78:af: 14:7c:2a:c7:f6:cd:70:43:7e:de:3e:df:a7:a6:b8:12:70:f0: 47:39:47:fe:91:99:a7:02:8f:61:93:66:10:76:43:52:26:fd: cc:63:44:49:3e:f6:f0:c0:d1:ac:67:68:54:a9:da:2d:ea:a0: da:f1:1a:b3:22:b5:ff:e2:da:b2:22:d0:1c:f9:38:66:19:6f: d8:e6:7c:36:bb:54:9d:09:a8:42:42:34:cd:b4:ea:72:4d:9f: fc:4f:e7:85:d9:e2:41:1f:17:cf:6c:dc:12:31:3b:f9:64:44: 73:fb:cf:ae:61:0f:b9:97:15:64:9b:b7:69:50:df:55:b9:c0: ea:5d:c4:b8:da:e9:1a:96:8a:aa:0a:cb:cc:1b:ab:c2:ed:8b: c7:3e:6e:f8:0d:48:f3:8b:7d:90:70:d1:d0:01:2a:79:32:04: 02:02:4d:a4:4a:c4:1a:a6:70:03:b4:a0:1c:d9:28:6d:1e:3b: 2b:07:d9:f5:3f:a8:65:22:7f:a0:26:31:d2:de:8b:0f:c2:bc: 6d:50:80:84 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUClHE7x7dhHNEM49obNaMPGHRuF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNTA4MjEwODI0MTFaFw0yNTA4MjYyMTE2MTFaMDMxMTAvBgNV BAMTKEFFOUU3N0RFQUMyMDQ3RTlENUI3N0NEREIyQkRCMkVBREQxODU1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyxG05Zj0Es5Fs+OCQ51Sq3F4 98EkOCzmn76tpy0kzebO9ev3H6hA6cy45O0XYmgfJMxlcWjiS6yzqwlxDV82nJi7 BoCKa+yMdZyOx5bMaR26+nrDpDjXoLlQXOntTAMZhB+RSxH+Z51q+6RZgaifqkzd G1dEuNf+TG1QZ1Js6JnzOunx2Tj1ZzasTBd9cRYr+KU+UzOleq5QSlEnTmmapKc6 LJMPtRY+7qI0ZLJU/9EMWrd9Pc0EwueczCHJ1ZdmCZnZGq8KgcbeMJovoCBPLB1F V+gUWhTIOPlJb08YAnPi5QPahFSznMnD+NuAte7Wkr2FJjcJXNlADclx6AGDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrp533qwgR+nVt3zdsr2y6t0YVU4wHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7Z/x0oJGIA5gC9S4swyuI6c3Q s4I9Qdp1hwi2AX3nUZUfd4cKUMQUCM/dBKQ9FEbkLM13eK8UfCrH9s1wQ37ePt+n prgScPBHOUf+kZmnAo9hk2YQdkNSJv3MY0RJPvbwwNGsZ2hUqdot6qDa8RqzIrX/ 4tqyItAc+ThmGW/Y5nw2u1SdCahCQjTNtOpyTZ/8T+eF2eJBHxfPbNwSMTv5ZERz +8+uYQ+5lxVkm7dpUN9VucDqXcS42ukaloqqCsvMG6vC7YvHPm74DUjzi32QcNHQ ASp5MgQCAk2kSsQapnADtKAc2ShtHjsrB9n1P6hlIn+gJjHS3osPwrxtUICE -----END CERTIFICATE-----Generated at Sat Aug 23 11:04:05 2025 by rpki-client