$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft File: 3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft (raw, json) Hash identifier: z45UQ3r+8gbiUiqeAPGt0C34xyKbgtNLdglGVsTrrr8= Subject key identifier: 6B:3E:F5:01:3D:6A:C0:44:49:52:67:76:AE:9F:44:A9:1F:47:38:07 Authority key identifier: 38:02:AD:95:B7:CA:CA:97:DD:F1:7A:EB:D1:AA:A9:14:EE:98:8E:98 Certificate issuer: /CN=3802AD95B7CACA97DDF17AEBD1AAA914EE988E98 Certificate serial: 51415395420B26EBACB4CA1B26C5C1434E9D6E65 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft Manifest number: 010A Signing time: Thu 21 Aug 2025 16:09:05 +0000 Manifest this update: Thu 21 Aug 2025 16:04:05 +0000 Manifest next update: Wed 27 Aug 2025 04:58:05 +0000 Files and hashes: 1: 3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl (hash: SOQ1o8YuVFW3Ml/kcveJWhcLVrTJZiTJzeI9o9ilq4Y=) 2: 323830313a31663a373030303a3a2f34382d3438203d3e203532333138.roa (hash: Kfvr5R9prHiIS6VB2ko57uvQAn4L4NXIsOgke+ci+k0=) 3: 34352e3233372e35322e302f32332d3233203d3e203532333138.roa (hash: Qpc8Xafi+7AHWwwtWYDUOqS8hu5mKTz8j5YiTyl4194=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 04:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:41:53:95:42:0b:26:eb:ac:b4:ca:1b:26:c5:c1:43:4e:9d:6e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3802AD95B7CACA97DDF17AEBD1AAA914EE988E98 Validity Not Before: Aug 21 16:04:05 2025 GMT Not After : Aug 27 04:58:05 2025 GMT Subject: CN=6B3EF5013D6AC04449526776AE9F44A91F473807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:49:b7:97:fe:87:bc:6d:75:76:5e:3d:bb: 44:65:68:1e:21:bc:1b:8a:87:3d:7c:08:6f:81:f3: 1c:82:04:99:7f:f1:40:07:5a:63:f2:d0:42:ff:0b: 31:c8:5a:4a:19:b0:ed:9e:47:c6:22:15:c0:0f:7e: a8:ad:ca:a3:90:68:1b:0c:17:97:7f:54:b5:95:8f: 2e:61:17:2c:49:29:ab:ff:b4:45:72:bd:5e:02:83: 9b:b5:c3:37:f1:fb:ca:fe:9c:fa:1a:42:2c:64:06: 09:49:5d:68:0a:45:d9:08:17:97:f9:fa:25:99:83: 02:a9:2c:36:5a:80:af:7a:1f:30:88:7b:f4:98:3e: 8d:32:e1:29:5b:cf:b0:ac:df:d0:fa:1b:bb:08:b4: f0:5c:34:4b:b8:46:d5:f9:c6:0e:4f:fd:a7:f8:cf: 15:4d:4d:62:c3:c3:8f:39:64:1f:28:bf:7e:61:8a: 2c:bd:66:a9:af:dd:1f:02:40:19:01:45:de:49:85: 61:91:32:6c:f5:79:18:4a:9f:01:a8:fc:8e:42:e4: e7:6c:d9:be:b5:33:58:66:6c:fd:2f:96:d7:b8:f2: 5e:3c:b1:10:bd:94:58:89:e7:f8:a6:be:58:84:6e: 93:45:49:a8:1e:20:93:89:28:7c:70:a7:cb:27:87: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:F5:01:3D:6A:C0:44:49:52:67:76:AE:9F:44:A9:1F:47:38:07 X509v3 Authority Key Identifier: keyid:38:02:AD:95:B7:CA:CA:97:DD:F1:7A:EB:D1:AA:A9:14:EE:98:8E:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4e:18:60:28:4c:64:7f:ae:25:8e:3f:29:1b:fa:cb:24:88: 1a:9d:a0:de:e7:0e:7c:c1:18:b2:56:a9:86:c5:45:c2:f2:a5: c0:3d:f1:95:d6:76:53:f0:a6:c3:43:9e:cf:e0:58:13:45:c8: 1a:c0:d9:b1:22:6f:2c:b6:2e:a1:5c:96:c4:70:48:7a:9c:4b: 32:2b:44:8d:b2:93:4c:ce:2a:28:5f:88:4a:2b:26:24:dd:9d: af:32:6f:bb:30:65:cb:84:aa:7c:44:f5:bf:7c:6d:75:00:5b: 1c:16:97:59:6a:b4:e3:7c:8c:54:1b:5f:cf:95:2e:13:ea:9f: b7:a4:6c:63:ab:cd:1f:0e:c2:3e:fe:8e:ca:f8:08:3c:12:78: 99:35:b3:a5:3f:97:1a:cf:c8:43:04:8a:20:eb:5a:0e:ab:c9: aa:d3:a3:0b:64:89:4b:d9:79:e1:e7:37:89:0b:a1:66:11:2a: c7:d6:94:6b:91:3b:54:90:d5:7f:38:ad:97:da:33:df:2e:a0: 8c:bc:8b:72:f6:d9:64:e7:bf:5b:bf:70:e2:ef:4a:62:2a:98: 87:17:5c:05:b8:11:cf:50:7e:07:de:c4:dd:77:35:e8:10:8c: 46:0d:68:cd:f0:73:74:9e:2c:09:77:c6:ef:d3:dd:07:a2:ca: 22:e1:b2:d5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUUFTlUILJuustMobJsXBQ06dbmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwMkFEOTVCN0NBQ0E5N0RERjE3QUVCRDFBQUE5MTRF RTk4OEU5ODAeFw0yNTA4MjExNjA0MDVaFw0yNTA4MjcwNDU4MDVaMDMxMTAvBgNV BAMTKDZCM0VGNTAxM0Q2QUMwNDQ0OTUyNjc3NkFFOUY0NEE5MUY0NzM4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSkm3l/6HvG11dl49u0RlaB4h vBuKhz18CG+B8xyCBJl/8UAHWmPy0EL/CzHIWkoZsO2eR8YiFcAPfqityqOQaBsM F5d/VLWVjy5hFyxJKav/tEVyvV4Cg5u1wzfx+8r+nPoaQixkBglJXWgKRdkIF5f5 +iWZgwKpLDZagK96HzCIe/SYPo0y4Slbz7Cs39D6G7sItPBcNEu4RtX5xg5P/af4 zxVNTWLDw485ZB8ov35hiiy9Zqmv3R8CQBkBRd5JhWGRMmz1eRhKnwGo/I5C5Ods 2b61M1hmbP0vlte48l48sRC9lFiJ5/imvliEbpNFSageIJOJKHxwp8snh1zfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaz71AT1qwERJUmd2rp9EqR9HOAcwHwYDVR0j BBgwFoAUOAKtlbfKypfd8Xrr0aqpFO6YjpgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDVCREM0MDA2QjJEN0VBOUU1OUQ1NEI0NTIwMDVDNTFB MjYwREQ0N0NDNkNBQkE3RDU3N0QxQ0UyRDEzODAxLzAvMzgwMkFEOTVCN0NBQ0E5 N0RERjE3QUVCRDFBQUE5MTRFRTk4OEU5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODAyQUQ5NUI3Q0FDQTk3RERG MTdBRUJEMUFBQTkxNEVFOTg4RTk4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQ1QkRDNDAwNkIyRDdFQTlFNTlENTRCNDUyMDA1QzUxQTI2MERENDdD QzZDQUJBN0Q1NzdEMUNFMkQxMzgwMS8wLzM4MDJBRDk1QjdDQUNBOTdEREYxN0FF QkQxQUFBOTE0RUU5ODhFOTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIThhgKExkf64ljj8pG/rLJIga naDe5w58wRiyVqmGxUXC8qXAPfGV1nZT8KbDQ57P4FgTRcgawNmxIm8sti6hXJbE cEh6nEsyK0SNspNMziooX4hKKyYk3Z2vMm+7MGXLhKp8RPW/fG11AFscFpdZarTj fIxUG1/PlS4T6p+3pGxjq80fDsI+/o7K+Ag8EniZNbOlP5caz8hDBIog61oOq8mq 06MLZIlL2Xnh5zeJC6FmESrH1pRrkTtUkNV/OK2X2jPfLqCMvIty9tlk579bv3Di 70piKpiHF1wFuBHPUH4H3sTddzXoEIxGDWjN8HN0niwJd8bv090Hosoi4bLV -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:53 2025 by rpki-client