$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft File: 2AC489AA343746243A2A3A97A473CEE27756EAA1.mft (raw, json) Hash identifier: xQgVP+Uu4E1TPhUqvKFf4rRt+U4xXLajDj3Id3nfn+Y= Subject key identifier: E1:E3:1A:A2:65:59:04:CB:E9:CE:5A:A6:56:22:99:A6:14:45:CD:6B Authority key identifier: 2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1 Certificate issuer: /CN=2AC489AA343746243A2A3A97A473CEE27756EAA1 Certificate serial: 3E7B20F44F3C0FB8CDB9FF010D649759A6AB322B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft Manifest number: 0113 Signing time: Sat 23 Aug 2025 02:00:41 +0000 Manifest this update: Sat 23 Aug 2025 01:55:41 +0000 Manifest next update: Thu 28 Aug 2025 07:12:41 +0000 Files and hashes: 1: 323830313a31393a313830303a3a2f34382d3438203d3e203134303830.roa (hash: Aq19bHGezD8Uw7TFu4tX5et4obxnS6jNdf+zmERjlBI=) 2: 2AC489AA343746243A2A3A97A473CEE27756EAA1.crl (hash: MERSGol5t2KhDPG9/xgo3ZURlOzN6w5CUGEGxi1oFXo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7b:20:f4:4f:3c:0f:b8:cd:b9:ff:01:0d:64:97:59:a6:ab:32:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AC489AA343746243A2A3A97A473CEE27756EAA1 Validity Not Before: Aug 23 01:55:41 2025 GMT Not After : Aug 28 07:12:41 2025 GMT Subject: CN=E1E31AA2655904CBE9CE5AA6562299A61445CD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:fb:2c:4f:ae:38:f6:c7:dc:71:6d:c4:02: 21:4e:84:48:f0:ca:01:f4:4f:24:63:b6:0b:94:1e: 1e:a2:ac:70:3f:8c:25:82:12:64:d8:2d:a5:d3:aa: 5f:ae:b5:53:bd:48:c4:96:dc:27:5d:44:23:d5:a8: e5:c4:af:2b:02:27:46:10:d2:8d:d2:30:da:61:93: b3:04:5a:05:f5:52:b5:e6:5c:34:7e:7e:69:3b:4d: 60:3a:d4:3d:64:03:a9:ca:54:f5:45:b1:74:26:05: 27:e4:9c:9b:54:4f:3f:8d:22:19:26:31:7c:b0:63: eb:2c:60:63:73:2d:f7:8a:f4:a0:be:b7:6d:d1:55: ab:53:45:1f:5c:ab:c1:3f:77:a8:ce:45:b8:93:85: 65:01:8f:3b:5b:3e:2c:57:e1:8c:26:71:ff:9d:29: 08:17:21:1e:ef:f0:c8:55:6e:14:fd:aa:5b:0a:40: 59:3d:95:0b:8f:c0:44:64:cf:09:91:ae:13:99:a1: 5a:15:68:39:67:30:f6:58:fa:d8:1c:a6:4e:a5:55: be:ca:0c:70:49:cb:df:46:62:32:ef:b6:99:bb:3a: d5:68:63:fe:f0:41:f2:d9:76:55:fe:df:e1:76:28: 98:fd:c0:c7:4b:62:50:72:2c:96:c7:16:c6:60:de: f5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E3:1A:A2:65:59:04:CB:E9:CE:5A:A6:56:22:99:A6:14:45:CD:6B X509v3 Authority Key Identifier: keyid:2A:C4:89:AA:34:37:46:24:3A:2A:3A:97:A4:73:CE:E2:77:56:EA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4756027C021D2D65D9273A4038EA423D7608C05211E36481460B8D2762BC70F7/0/2AC489AA343746243A2A3A97A473CEE27756EAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:19:c3:2c:a9:54:7c:8f:02:e7:bb:91:00:0c:35:e2:b1:30: a5:38:d6:6d:55:dc:cd:b2:08:b2:22:b7:81:51:1b:47:f0:ef: 29:38:4d:df:78:e2:67:08:40:03:49:82:48:7a:46:60:2c:18: ef:b1:4e:d6:40:8a:76:1b:8f:09:22:b6:2b:ef:b6:a1:de:70: f7:fc:0e:f0:a5:bd:fe:50:38:48:c2:9d:80:45:b4:da:2a:bb: 3f:e5:ae:e1:13:ac:2d:8d:19:3d:ef:4e:17:1f:b5:10:bc:60: 14:4d:44:3d:78:58:10:d9:ce:dc:0b:a7:64:01:df:7e:dc:65: ca:ea:06:05:02:68:3c:b3:b1:7c:88:c5:9d:e4:b2:25:55:a9: 93:cc:54:74:14:3c:0d:e2:11:af:9e:aa:0f:16:b7:93:f7:e4: cd:8f:72:a2:27:12:78:3f:ef:d5:cb:8c:2d:e2:11:97:ef:49: d4:40:05:a8:3d:01:09:ff:69:ae:a3:24:3e:b8:4a:4b:a4:9a: dc:b2:79:46:0a:8e:b6:d5:7c:59:88:53:b9:3f:9f:3a:4e:d4: cf:a2:02:76:e2:60:61:6a:73:c4:6b:77:c8:2b:c3:5a:f3:63: 08:26:9f:35:df:2e:15:5f:64:69:f1:fb:a4:b7:0f:ff:15:76: af:74:27:a0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPnsg9E88D7jNuf8BDWSXWaarMiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFDNDg5QUEzNDM3NDYyNDNBMkEzQTk3QTQ3M0NFRTI3 NzU2RUFBMTAeFw0yNTA4MjMwMTU1NDFaFw0yNTA4MjgwNzEyNDFaMDMxMTAvBgNV BAMTKEUxRTMxQUEyNjU1OTA0Q0JFOUNFNUFBNjU2MjI5OUE2MTQ0NUNENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O/ssT6449sfccW3EAiFOhEjw ygH0TyRjtguUHh6irHA/jCWCEmTYLaXTql+utVO9SMSW3CddRCPVqOXErysCJ0YQ 0o3SMNphk7MEWgX1UrXmXDR+fmk7TWA61D1kA6nKVPVFsXQmBSfknJtUTz+NIhkm MXywY+ssYGNzLfeK9KC+t23RVatTRR9cq8E/d6jORbiThWUBjztbPixX4Ywmcf+d KQgXIR7v8MhVbhT9qlsKQFk9lQuPwERkzwmRrhOZoVoVaDlnMPZY+tgcpk6lVb7K DHBJy99GYjLvtpm7OtVoY/7wQfLZdlX+3+F2KJj9wMdLYlByLJbHFsZg3vWRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4eMaomVZBMvpzlqmViKZphRFzWswHwYDVR0j BBgwFoAUKsSJqjQ3RiQ6KjqXpHPO4ndW6qEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NzU2MDI3QzAyMUQyRDY1RDkyNzNBNDAzOEVBNDIzRDc2 MDhDMDUyMTFFMzY0ODE0NjBCOEQyNzYyQkM3MEY3LzAvMkFDNDg5QUEzNDM3NDYy NDNBMkEzQTk3QTQ3M0NFRTI3NzU2RUFBMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUM0ODlBQTM0Mzc0NjI0M0Ey QTNBOTdBNDczQ0VFMjc3NTZFQUExLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDc1NjAyN0MwMjFEMkQ2NUQ5MjczQTQwMzhFQTQyM0Q3NjA4QzA1MjEx RTM2NDgxNDYwQjhEMjc2MkJDNzBGNy8wLzJBQzQ4OUFBMzQzNzQ2MjQzQTJBM0E5 N0E0NzNDRUUyNzc1NkVBQTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCyGcMsqVR8jwLnu5EADDXisTCl ONZtVdzNsgiyIreBURtH8O8pOE3feOJnCEADSYJIekZgLBjvsU7WQIp2G48JIrYr 77ah3nD3/A7wpb3+UDhIwp2ARbTaKrs/5a7hE6wtjRk9704XH7UQvGAUTUQ9eFgQ 2c7cC6dkAd9+3GXK6gYFAmg8s7F8iMWd5LIlVamTzFR0FDwN4hGvnqoPFreT9+TN j3KiJxJ4P+/Vy4wt4hGX70nUQAWoPQEJ/2muoyQ+uEpLpJrcsnlGCo621XxZiFO5 P586TtTPogJ24mBhanPEa3fIK8Na82MIJp813y4VX2Rp8fuktw//FXavdCeg -----END CERTIFICATE-----Generated at Sat Aug 23 11:04:41 2025 by rpki-client