$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft File: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft (raw, json) Hash identifier: 4WlBn7ScWQl8rkkHz1VN+w7yzb02tSuJMSRLq4v6wdM= Subject key identifier: 8A:6C:C5:76:8F:36:6B:5A:31:0D:E1:04:ED:A0:F1:25:01:97:55:7B Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59 Certificate issuer: /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59 Certificate serial: 59D9B205E34D464821E43A3F9F2AE8674AE69360 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft Manifest number: 0112 Signing time: Fri 22 Aug 2025 01:04:24 +0000 Manifest this update: Fri 22 Aug 2025 00:59:24 +0000 Manifest next update: Tue 26 Aug 2025 18:27:24 +0000 Files and hashes: 1: 3138352e37342e31392e302f32342d3234203d3e203532333335.roa (hash: 2dAG7U5n47XTp12aSGxvzNB0rrTxyRySK9VodyiPoqQ=) 2: CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl (hash: 7WlsoDWkOhdDhqKZ/bsN3GYzoYvsu497lmLcpXP5Mzc=) 3: 3138352e37342e31382e302f32342d3234203d3e203532333335.roa (hash: LECpA5bPBejVOnzCUoO1kdwDq77N413G1QKuYnH703M=) 4: 3138352e37342e31362e302f32332d3233203d3e203532333335.roa (hash: AA9n1lVR5HX9REgcEvpVDwT20zFoSkoU8JDEA1qlUsc=) 5: 3139302e382e3137362e302f32322d3232203d3e203532333335.roa (hash: vREyyI+AZN7N3SkaHJXvgZvl0PshHIYkwZO60lmC2W0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 18:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d9:b2:05:e3:4d:46:48:21:e4:3a:3f:9f:2a:e8:67:4a:e6:93:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59 Validity Not Before: Aug 22 00:59:24 2025 GMT Not After : Aug 26 18:27:24 2025 GMT Subject: CN=8A6CC5768F366B5A310DE104EDA0F1250197557B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:b9:45:26:08:a4:8b:69:5f:6e:b3:1b:10: 88:d0:e0:9b:b4:a5:df:86:fd:23:c4:f0:de:05:07: 61:4d:c7:69:1f:2b:9d:2f:2a:73:f6:1f:a3:da:c3: 60:dd:dc:be:5e:a6:94:09:74:d1:75:ee:9a:3c:df: 36:f0:14:eb:5d:b2:71:9c:fd:e2:8c:7f:f1:2c:34: 9c:f5:5c:b3:bd:4c:e5:56:c3:34:b3:c5:4f:c2:b4: 6d:5d:d8:9b:cc:f7:30:67:c1:ba:22:f0:ce:e4:19: 66:58:20:34:dc:c2:74:1b:9d:c4:a9:6e:19:b2:64: 80:6b:59:6b:68:05:bd:48:97:87:a0:70:42:2d:3a: 19:3b:d4:69:18:07:20:25:8e:a7:94:e0:a2:c7:51: b1:d3:67:b5:6f:03:87:b9:ad:41:d0:1a:a0:1f:9d: 62:c9:a8:62:67:aa:51:78:f5:b1:54:0d:ab:20:8e: 59:ae:37:1c:7d:fe:45:82:a2:60:4c:e7:bf:ca:2d: 2f:a7:ff:35:60:21:4c:36:d5:28:07:e0:be:2c:d2: 5a:de:92:3b:58:c4:b7:6a:90:65:3b:39:d0:6c:1e: 0e:9d:00:eb:53:46:82:7c:61:6a:26:a9:a8:58:86: db:71:7d:b5:f4:05:7b:f1:2b:2c:00:b0:2f:8a:72: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6C:C5:76:8F:36:6B:5A:31:0D:E1:04:ED:A0:F1:25:01:97:55:7B X509v3 Authority Key Identifier: keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:84:46:5f:5f:a2:8b:85:20:65:c1:56:f9:d2:cf:04:cd:c3: 93:0d:17:41:cd:40:06:ce:da:51:3f:ce:7a:01:a1:b3:f5:82: 2a:bc:2e:c7:c9:3a:a8:ff:69:05:ba:23:70:12:fc:64:15:2b: b5:88:82:44:78:67:07:f8:8f:6e:37:96:6b:73:e8:f9:5f:41: c0:97:8d:26:fe:ef:29:e2:9b:bf:ec:a3:24:33:da:a9:69:98: 04:9d:37:73:d0:69:d6:a6:de:ed:45:da:4d:e0:02:cd:4b:4b: 12:12:96:e8:6e:48:81:e2:b8:ce:b5:8c:f4:7d:a0:4f:07:9d: 00:f5:e2:b9:aa:15:16:94:1a:23:30:86:e3:fb:f0:43:fe:4c: 6e:c4:28:49:56:28:4a:58:26:f6:7e:c7:7f:0f:5b:c2:00:f6: 43:c9:71:60:e3:4c:37:c2:d3:c4:98:0d:2b:5e:62:8c:ea:3b: 84:61:c6:f2:c7:0d:b4:d2:22:db:68:03:c8:1f:29:34:5f:e4: c4:08:e3:43:ad:79:37:3c:d5:3a:5e:b4:43:62:39:3f:33:4d: 56:3b:d5:94:7f:23:63:25:38:cf:aa:48:ba:d4:e7:65:31:f3: 16:6f:85:2e:c9:8e:45:63:20:0d:47:9a:54:1d:93:4a:d8:67: 51:57:d3:c0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWdmyBeNNRkgh5Do/nyroZ0rmk2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGNEVCOTRBM0NBNDI0MEU5OUQ1MTVGODE4QzcwMDkw QTVCRUY1OTAeFw0yNTA4MjIwMDU5MjRaFw0yNTA4MjYxODI3MjRaMDMxMTAvBgNV BAMTKDhBNkNDNTc2OEYzNjZCNUEzMTBERTEwNEVEQTBGMTI1MDE5NzU1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVGblFJgiki2lfbrMbEIjQ4Ju0 pd+G/SPE8N4FB2FNx2kfK50vKnP2H6Paw2Dd3L5eppQJdNF17po83zbwFOtdsnGc /eKMf/EsNJz1XLO9TOVWwzSzxU/CtG1d2JvM9zBnwboi8M7kGWZYIDTcwnQbncSp bhmyZIBrWWtoBb1Il4egcEItOhk71GkYByAljqeU4KLHUbHTZ7VvA4e5rUHQGqAf nWLJqGJnqlF49bFUDasgjlmuNxx9/kWComBM57/KLS+n/zVgIUw21SgH4L4s0lre kjtYxLdqkGU7OdBsHg6dAOtTRoJ8YWomqahYhttxfbX0BXvxKywAsC+KcsdJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUimzFdo82a1oxDeEE7aDxJQGXVXswHwYDVR0j BBgwFoAUz/TrlKPKQkDpnVFfgYxwCQpb71kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80RDA5NjYxRjZBNTUwQjNFMjE2MjdFNTQ5NTdEOENEOEU4 QzdDNUZFREQ5MjIyNkMxRkIwMTk2MUUyNTkzRjEwLzAvQ0ZGNEVCOTRBM0NBNDI0 MEU5OUQ1MTVGODE4QzcwMDkwQTVCRUY1OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkY0RUI5NEEzQ0E0MjQwRTk5 RDUxNUY4MThDNzAwOTBBNUJFRjU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEQwOTY2MUY2QTU1MEIzRTIxNjI3RTU0OTU3RDhDRDhFOEM3QzVGRURE OTIyMjZDMUZCMDE5NjFFMjU5M0YxMC8wL0NGRjRFQjk0QTNDQTQyNDBFOTlENTE1 RjgxOEM3MDA5MEE1QkVGNTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7hEZfX6KLhSBlwVb50s8EzcOT DRdBzUAGztpRP856AaGz9YIqvC7HyTqo/2kFuiNwEvxkFSu1iIJEeGcH+I9uN5Zr c+j5X0HAl40m/u8p4pu/7KMkM9qpaZgEnTdz0GnWpt7tRdpN4ALNS0sSEpbobkiB 4rjOtYz0faBPB50A9eK5qhUWlBojMIbj+/BD/kxuxChJVihKWCb2fsd/D1vCAPZD yXFg40w3wtPEmA0rXmKM6juEYcbyxw200iLbaAPIHyk0X+TECONDrXk3PNU6XrRD Yjk/M01WO9WUfyNjJTjPqki61OdlMfMWb4UuyY5FYyANR5pUHZNK2GdRV9PA -----END CERTIFICATE-----Generated at Sat Aug 23 11:06:15 2025 by rpki-client