$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft File: A8BD34F2B469A2D97364857900B9F36A1297D50E.mft (raw, json) Hash identifier: 0AUY4x60iJI9xERbar8zPQC6yJUo+tJD1/t8FHFSc7M= Subject key identifier: AA:84:CA:E9:C1:ED:D2:D9:0C:09:F5:78:D9:2F:15:4A:B5:41:BE:E6 Authority key identifier: A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E Certificate issuer: /CN=A8BD34F2B469A2D97364857900B9F36A1297D50E Certificate serial: 438B4E07DDBAF1D8843BD529D11710B1C15E76AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft Manifest number: 010B Signing time: Thu 21 Aug 2025 20:41:56 +0000 Manifest this update: Thu 21 Aug 2025 20:36:56 +0000 Manifest next update: Tue 26 Aug 2025 20:06:56 +0000 Files and hashes: 1: A8BD34F2B469A2D97364857900B9F36A1297D50E.crl (hash: A8qXpjkhGeSvQQQZInB+XufFxsaEYJ++KMcaNA1qbHI=) 2: 3139302e3137312e38302e302f32322d3234203d3e203532343638.roa (hash: qGkgiqEIbTM4VF0NRhrpZGzQWcm4Yl6BAIYZKLLklTU=) 3: 323830333a313765303a3a2f33322d3438203d3e203532343638.roa (hash: PoUOOIRYg+JbJkg42cRuj004KIHQ54oscI25MvJqEP8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 20:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8b:4e:07:dd:ba:f1:d8:84:3b:d5:29:d1:17:10:b1:c1:5e:76:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8BD34F2B469A2D97364857900B9F36A1297D50E Validity Not Before: Aug 21 20:36:56 2025 GMT Not After : Aug 26 20:06:56 2025 GMT Subject: CN=AA84CAE9C1EDD2D90C09F578D92F154AB541BEE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:84:9c:1b:5c:8d:24:cd:de:f5:9d:de:11: ea:34:03:8f:ba:a5:89:65:1f:c3:fc:ba:4a:93:b9: ac:1c:be:13:b8:50:89:79:1a:83:74:8d:f0:b4:58: ef:85:b8:d9:69:0a:7f:08:3d:d3:85:03:61:66:36: 75:cf:7a:2c:5e:0b:fa:92:39:e6:b1:fb:78:26:b2: 58:4e:33:10:4b:1f:7f:c8:44:c5:f9:99:89:f7:e8: 48:cf:1f:72:17:9f:3b:95:30:06:84:c0:7d:e7:4b: 26:e4:9a:74:08:11:b1:30:6a:72:26:f2:c0:66:9c: 95:6f:07:8a:5a:4b:1f:ea:44:f9:54:ba:db:03:92: 45:9f:b2:52:6a:cd:f1:8e:02:68:ae:35:c6:03:61: 07:e2:5a:cb:7d:59:ac:6c:58:1e:2c:c7:ee:40:a8: 2c:40:10:bb:27:c1:ff:4f:e3:19:e8:ff:23:8a:d4: 2a:cd:9e:71:0d:f3:ad:3c:8d:36:87:ea:f2:47:5c: b0:93:07:5e:cc:7f:6c:67:65:9b:f2:9d:b4:91:eb: b8:f7:8d:e4:47:53:bf:bb:37:33:96:ba:89:25:bc: e1:cb:91:65:b6:94:56:66:00:cf:ed:0e:a8:64:ac: 54:d2:f3:1e:5d:15:65:ae:78:6b:3f:e0:54:43:21: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:84:CA:E9:C1:ED:D2:D9:0C:09:F5:78:D9:2F:15:4A:B5:41:BE:E6 X509v3 Authority Key Identifier: keyid:A8:BD:34:F2:B4:69:A2:D9:73:64:85:79:00:B9:F3:6A:12:97:D5:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65A52F5280C6FAA27A2F11A9F8A684876A22458797F162DBE9A73E420C40339B/0/A8BD34F2B469A2D97364857900B9F36A1297D50E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:e4:58:ec:0b:03:56:30:09:16:a2:37:ca:29:ef:9a:02: c4:29:ab:51:de:32:46:65:0d:26:a4:e8:e5:0f:3d:21:f9:b6: 7b:70:c6:5c:f1:33:16:10:12:09:68:a8:fb:9d:4d:b0:94:d5: 97:10:93:a5:7e:65:a2:8a:96:51:f9:ac:f8:bd:24:eb:22:f2: 26:7f:95:5d:f2:c8:74:bf:1c:c7:f2:43:ce:1e:47:f7:8f:ef: b1:63:49:6f:bc:d4:35:17:c0:f3:5e:81:f6:f3:d6:a7:66:6d: 9c:cd:61:5e:a4:78:10:e3:38:af:a8:73:05:43:37:c1:d8:bb: 5b:6a:91:87:7b:83:b9:c5:ee:1e:59:62:bc:2f:35:62:f4:45: b8:b5:5f:d9:05:b2:91:54:75:36:60:96:30:4f:91:5d:f6:94: ac:5a:fd:e4:28:d9:18:c9:95:84:16:f3:26:61:68:91:b4:a0: 21:b7:4e:d4:4d:89:92:09:d0:dc:e8:ef:38:33:a3:38:66:cc: d3:ea:df:e9:8a:67:ba:b6:0c:d8:f0:4c:c0:cb:6b:6a:9a:8d: 81:a3:7c:92:89:e2:80:fb:4e:b6:06:96:63:12:23:4f:91:c1: dc:f5:9e:d1:d2:3e:0f:77:69:e9:c0:11:bf:b8:15:a4:21:28: 7b:af:d0:5d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQ4tOB9268diEO9Up0RcQscFedq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCRDM0RjJCNDY5QTJEOTczNjQ4NTc5MDBCOUYzNkEx Mjk3RDUwRTAeFw0yNTA4MjEyMDM2NTZaFw0yNTA4MjYyMDA2NTZaMDMxMTAvBgNV BAMTKEFBODRDQUU5QzFFREQyRDkwQzA5RjU3OEQ5MkYxNTRBQjU0MUJFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/oScG1yNJM3e9Z3eEeo0A4+6 pYllH8P8ukqTuawcvhO4UIl5GoN0jfC0WO+FuNlpCn8IPdOFA2FmNnXPeixeC/qS Oeax+3gmslhOMxBLH3/IRMX5mYn36EjPH3IXnzuVMAaEwH3nSybkmnQIEbEwanIm 8sBmnJVvB4paSx/qRPlUutsDkkWfslJqzfGOAmiuNcYDYQfiWst9WaxsWB4sx+5A qCxAELsnwf9P4xno/yOK1CrNnnEN8608jTaH6vJHXLCTB17Mf2xnZZvynbSR67j3 jeRHU7+7NzOWuoklvOHLkWW2lFZmAM/tDqhkrFTS8x5dFWWueGs/4FRDIRkzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqoTK6cHt0tkMCfV42S8VSrVBvuYwHwYDVR0j BBgwFoAUqL008rRpotlzZIV5ALnzahKX1Q4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82NUE1MkY1MjgwQzZGQUEyN0EyRjExQTlGOEE2ODQ4NzZB MjI0NTg3OTdGMTYyREJFOUE3M0U0MjBDNDAzMzlCLzAvQThCRDM0RjJCNDY5QTJE OTczNjQ4NTc5MDBCOUYzNkExMjk3RDUwRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOEJEMzRGMkI0NjlBMkQ5NzM2 NDg1NzkwMEI5RjM2QTEyOTdENTBFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjVBNTJGNTI4MEM2RkFBMjdBMkYxMUE5RjhBNjg0ODc2QTIyNDU4Nzk3 RjE2MkRCRTlBNzNFNDIwQzQwMzM5Qi8wL0E4QkQzNEYyQjQ2OUEyRDk3MzY0ODU3 OTAwQjlGMzZBMTI5N0Q1MEUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAblORY7AsDVjAJFqI3yinvmgLE KatR3jJGZQ0mpOjlDz0h+bZ7cMZc8TMWEBIJaKj7nU2wlNWXEJOlfmWiipZR+az4 vSTrIvImf5Vd8sh0vxzH8kPOHkf3j++xY0lvvNQ1F8DzXoH289anZm2czWFepHgQ 4zivqHMFQzfB2LtbapGHe4O5xe4eWWK8LzVi9EW4tV/ZBbKRVHU2YJYwT5Fd9pSs Wv3kKNkYyZWEFvMmYWiRtKAht07UTYmSCdDc6O84M6M4ZszT6t/pime6tgzY8EzA y2tqmo2Bo3ySieKA+062BpZjEiNPkcHc9Z7R0j4Pd2npwBG/uBWkISh7r9Bd -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:39 2025 by rpki-client