$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft File: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft (raw, json) Hash identifier: kv5l0vj7cwa2bJq9pKpQX78xoScl9X1uL8gwc+ToT8o= Subject key identifier: C0:CF:2C:86:AF:C9:03:68:15:C9:02:25:7F:65:1F:49:A2:48:4F:33 Authority key identifier: D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C Certificate issuer: /CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C Certificate serial: 20FED421C85E40E31BF9F6476FC82336103ADD04 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft Manifest number: 0111 Signing time: Fri 22 Aug 2025 08:29:24 +0000 Manifest this update: Fri 22 Aug 2025 08:24:24 +0000 Manifest next update: Wed 27 Aug 2025 19:23:24 +0000 Files and hashes: 1: D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl (hash: GCDqWWtVovidpIU2Wa1HzydabQqaSVUhIiAoHmuWITs=) 2: 34352e37302e3138312e3232342f32372d3237203d3e20323635383134.roa (hash: 0A7i94jTbUoP2cfm7TdMPv+bVBJxVqMSEHN1Kg3Ojx4=) 3: 323830333a333832303a3a2f33322d3332203d3e20323635383134.roa (hash: JzvgMJvQy8H80UwSvphA3clT68+3AsxpsiwjJ+J10lo=) 4: 34352e37302e3138302e302f32322d3232203d3e20323635383134.roa (hash: BQdwxtgo5L1T0UilqKluFvqRRHzFjkB9p9gPX/wbUVY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fe:d4:21:c8:5e:40:e3:1b:f9:f6:47:6f:c8:23:36:10:3a:dd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C Validity Not Before: Aug 22 08:24:24 2025 GMT Not After : Aug 27 19:23:24 2025 GMT Subject: CN=C0CF2C86AFC9036815C902257F651F49A2484F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1c:f1:2c:d1:10:ac:37:cd:56:ce:93:55:29: 0b:ac:7f:9a:b8:00:a3:cd:f5:65:ba:b2:74:e5:d1: f8:8f:2f:d7:78:71:75:5d:dc:e3:a4:d5:25:05:be: 56:26:8c:20:b6:63:01:69:43:75:dc:07:5a:8e:1d: ac:57:69:4c:b5:97:6f:92:37:48:d9:3c:2a:02:bf: f1:06:09:7f:ff:5f:0a:13:36:f9:ed:2b:f4:c9:21: 3c:4b:d3:a9:22:13:87:4f:56:16:be:70:ed:1e:f5: ea:e9:d2:e2:40:c2:17:65:2b:f1:c8:ee:59:c8:f0: 86:0b:18:aa:80:0c:e8:5d:e2:2c:56:5d:49:2a:a3: 13:4a:9a:44:85:10:48:0b:8d:87:31:78:ec:51:42: 93:b6:76:c6:31:75:9c:2d:da:73:aa:fe:82:39:a0: 65:90:0a:41:33:31:c2:fb:96:c3:f2:cd:23:f6:27: 3e:fa:c2:18:ae:ee:8f:ff:d3:6b:3d:90:c1:7c:0a: 01:53:33:dd:d6:1e:b1:96:43:ff:14:71:8c:02:c9: e4:7b:b8:e2:49:ee:6e:5b:2e:f7:38:e7:59:73:6d: a9:d4:7f:92:39:f7:d0:55:b1:49:17:aa:93:03:65: 96:ec:b0:06:db:85:8e:72:84:eb:8f:b5:0e:6b:10: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CF:2C:86:AF:C9:03:68:15:C9:02:25:7F:65:1F:49:A2:48:4F:33 X509v3 Authority Key Identifier: keyid:D9:D3:E0:DB:C4:C3:EB:0E:E7:CA:56:4F:0F:91:A0:38:A1:D5:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F60AAF13285B7403D43BE1446378B60239A247FC1350A27E3746436B4530756/0/D9D3E0DBC4C3EB0EE7CA564F0F91A038A1D5877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c5:22:d2:ed:e1:9a:1f:30:fe:25:48:34:5e:4e:56:1e:72: 57:49:7a:ff:3b:db:52:cc:d3:7e:4f:7a:c4:05:e2:da:4b:6d: 51:63:08:f6:9c:04:de:a1:2c:3b:56:94:f5:13:a3:1e:ef:35: 61:11:2c:54:c9:75:85:1d:31:04:d7:43:7e:c5:2f:37:43:c1: d3:6e:04:46:cf:f2:bf:6c:d1:fa:1a:ea:4e:53:e5:96:0d:47: e2:c6:ef:f3:ae:f9:40:3f:81:23:b8:30:4c:d2:96:7e:94:f3: 30:f9:b1:5e:56:15:2d:13:79:b8:7f:0b:26:5c:a6:e4:d9:f2: be:c9:b6:c6:47:62:42:f1:fa:cd:ce:b2:2b:f1:8d:a6:b2:ae: dd:0d:ed:48:9a:3b:32:26:84:d6:39:6d:e3:c5:8c:fb:17:df: 9a:49:4c:11:ea:b8:68:43:da:53:03:0f:69:d7:dd:3f:c4:fc: db:f8:b1:b7:96:97:0e:a8:ef:3d:45:55:05:b0:05:93:ef:91: d8:b5:84:04:15:4f:82:f5:6f:46:b4:4f:c8:10:d4:96:48:4b: 14:7c:68:fe:d4:21:b5:9b:8a:5e:b4:2a:64:ba:78:ee:f4:e8: de:9c:9f:46:d1:37:e4:ed:c2:00:4a:1a:30:b8:fe:d9:02:86: e1:35:52:51 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIP7UIcheQOMb+fZHb8gjNhA63QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlEM0UwREJDNEMzRUIwRUU3Q0E1NjRGMEY5MUEwMzhB MUQ1ODc3QzAeFw0yNTA4MjIwODI0MjRaFw0yNTA4MjcxOTIzMjRaMDMxMTAvBgNV BAMTKEMwQ0YyQzg2QUZDOTAzNjgxNUM5MDIyNTdGNjUxRjQ5QTI0ODRGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHPEs0RCsN81WzpNVKQusf5q4 AKPN9WW6snTl0fiPL9d4cXVd3OOk1SUFvlYmjCC2YwFpQ3XcB1qOHaxXaUy1l2+S N0jZPCoCv/EGCX//XwoTNvntK/TJITxL06kiE4dPVha+cO0e9erp0uJAwhdlK/HI 7lnI8IYLGKqADOhd4ixWXUkqoxNKmkSFEEgLjYcxeOxRQpO2dsYxdZwt2nOq/oI5 oGWQCkEzMcL7lsPyzSP2Jz76whiu7o//02s9kMF8CgFTM93WHrGWQ/8UcYwCyeR7 uOJJ7m5bLvc451lzbanUf5I599BVsUkXqpMDZZbssAbbhY5yhOuPtQ5rED8ZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUwM8shq/JA2gVyQIlf2UfSaJITzMwHwYDVR0j BBgwFoAU2dPg28TD6w7nylZPD5GgOKHVh3wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RjYwQUFGMTMyODVCNzQwM0Q0M0JFMTQ0NjM3OEI2MDIz OUEyNDdGQzEzNTBBMjdFMzc0NjQzNkI0NTMwNzU2LzAvRDlEM0UwREJDNEMzRUIw RUU3Q0E1NjRGMEY5MUEwMzhBMUQ1ODc3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOUQzRTBEQkM0QzNFQjBFRTdD QTU2NEYwRjkxQTAzOEExRDU4NzdDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUY2MEFBRjEzMjg1Qjc0MDNENDNCRTE0NDYzNzhCNjAyMzlBMjQ3RkMx MzUwQTI3RTM3NDY0MzZCNDUzMDc1Ni8wL0Q5RDNFMERCQzRDM0VCMEVFN0NBNTY0 RjBGOTFBMDM4QTFENTg3N0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjxSLS7eGaHzD+JUg0Xk5WHnJX SXr/O9tSzNN+T3rEBeLaS21RYwj2nATeoSw7VpT1E6Me7zVhESxUyXWFHTEE10N+ xS83Q8HTbgRGz/K/bNH6GupOU+WWDUfixu/zrvlAP4EjuDBM0pZ+lPMw+bFeVhUt E3m4fwsmXKbk2fK+ybbGR2JC8frNzrIr8Y2msq7dDe1ImjsyJoTWOW3jxYz7F9+a SUwR6rhoQ9pTAw9p190/xPzb+LG3lpcOqO89RVUFsAWT75HYtYQEFU+C9W9GtE/I ENSWSEsUfGj+1CG1m4petCpkunju9OjenJ9G0Tfk7cIAShowuP7ZAobhNVJR -----END CERTIFICATE-----Generated at Sat Aug 23 11:02:34 2025 by rpki-client