$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft File: 8CECD8998683594E93B9972D95397E3623CDB7A8.mft (raw, json) Hash identifier: Jkufxl6F5IXeBwpYUWBWZkDuj2jcniQj2l+cKxirOvY= Subject key identifier: A8:C1:C4:13:AA:F7:C7:9C:61:43:3E:0D:8D:15:85:7D:DC:2C:90:DB Authority key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8 Certificate issuer: /CN=8CECD8998683594E93B9972D95397E3623CDB7A8 Certificate serial: 722819E2F9111FCFE905E8307DF5D145D1CE11D7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft Manifest number: EF Signing time: Sat 23 Aug 2025 05:53:23 +0000 Manifest this update: Sat 23 Aug 2025 05:48:23 +0000 Manifest next update: Thu 28 Aug 2025 17:05:23 +0000 Files and hashes: 1: 3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa (hash: +DFzi9xgHlw57h5KMxGRsk/tBwNLgrrMth+O5GVl6Vs=) 2: 8CECD8998683594E93B9972D95397E3623CDB7A8.crl (hash: MzmjbPzyK7W1Sq+YSEkeMUJqelqVnVrMdBccikU91T0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:28:19:e2:f9:11:1f:cf:e9:05:e8:30:7d:f5:d1:45:d1:ce:11:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CECD8998683594E93B9972D95397E3623CDB7A8 Validity Not Before: Aug 23 05:48:23 2025 GMT Not After : Aug 28 17:05:23 2025 GMT Subject: CN=A8C1C413AAF7C79C61433E0D8D15857DDC2C90DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:44:03:3d:f9:c9:3b:2b:c2:99:bf:37:89: 6a:1d:00:d2:ec:d1:a9:b3:6b:45:34:58:29:37:f5: a1:91:b2:92:c8:c4:c6:45:83:5e:45:c3:be:72:af: 6f:da:90:d7:33:83:c8:79:14:ac:57:ed:96:b3:4d: 93:d3:b0:2d:ce:8e:08:50:64:ae:42:dd:49:de:50: ad:64:4e:0f:d8:8f:06:67:e3:21:10:38:48:bb:82: c6:17:fc:4e:74:76:a0:96:96:a0:18:af:c3:0f:3b: fd:11:33:74:78:9a:dd:7b:c6:1b:d6:ec:bf:bd:4d: 50:71:e1:09:c9:17:f8:63:81:0d:69:c2:f2:bc:19: 5f:d8:17:1c:a0:0a:63:5e:18:e0:af:a4:83:86:74: f6:61:1d:c3:0a:38:74:7e:a6:f3:ec:cd:49:a5:9d: e6:2a:ff:db:b8:91:38:f2:e9:99:59:b3:78:76:fa: f4:56:fd:80:ef:8d:40:f2:c1:5b:54:02:8d:83:84: b5:d0:8c:b9:75:7e:34:a5:d8:50:a5:38:0d:c8:0e: c1:9b:77:64:c7:7c:6e:67:1c:89:4d:83:70:b2:41: fd:13:fd:6f:eb:e6:2d:f1:68:69:8e:80:11:81:d3: a7:ec:a8:34:fd:81:26:20:e1:df:56:5b:17:a6:44: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C1:C4:13:AA:F7:C7:9C:61:43:3E:0D:8D:15:85:7D:DC:2C:90:DB X509v3 Authority Key Identifier: keyid:8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:23:bc:58:12:31:b8:33:6d:9a:b8:f3:4e:a7:ac:95:d4:26: 87:e5:07:1b:58:89:31:32:d2:69:5c:65:ba:bf:b6:00:fa:87: 23:fb:43:b4:03:29:f3:93:51:9b:e3:f6:bd:19:0b:9f:07:f6: f1:97:d4:2e:f1:5d:15:b9:65:92:89:bc:6d:3f:a3:f6:a1:13: 49:a0:86:7a:2e:01:8c:1c:90:0e:1a:9e:7c:80:f7:84:d2:7d: a4:59:df:7c:7c:48:fc:8e:3b:eb:dc:d9:4c:2a:5c:93:5c:49: 1e:00:38:e7:1f:a5:ca:72:a2:0f:7c:43:32:89:fb:81:8c:58: be:fa:a0:7a:ca:05:66:1e:5c:ca:12:8e:b8:37:96:d1:b2:86: d1:d7:6f:c4:1d:35:65:41:17:9b:99:ec:f7:29:98:92:c0:f3: 3c:b6:90:41:5b:ab:6d:25:bf:43:20:c3:dc:87:9f:20:7e:50: 20:00:01:00:51:38:44:4e:57:27:48:c0:9c:66:99:b7:c1:e2: 2d:84:1b:93:49:60:fc:1c:f9:da:14:23:ba:5d:34:9e:ae:e9: aa:24:b2:39:d8:b7:22:20:f9:fd:5b:11:b1:f0:a9:cc:08:f5: ce:a1:c3:5c:f4:74:db:3e:d5:39:a0:44:0c:30:c8:91:35:9a: 53:f4:fd:6f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcigZ4vkRH8/pBegwffXRRdHOEdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENFQ0Q4OTk4NjgzNTk0RTkzQjk5NzJEOTUzOTdFMzYy M0NEQjdBODAeFw0yNTA4MjMwNTQ4MjNaFw0yNTA4MjgxNzA1MjNaMDMxMTAvBgNV BAMTKEE4QzFDNDEzQUFGN0M3OUM2MTQzM0UwRDhEMTU4NTdEREMyQzkwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYr0QDPfnJOyvCmb83iWodANLs 0amza0U0WCk39aGRspLIxMZFg15Fw75yr2/akNczg8h5FKxX7ZazTZPTsC3OjghQ ZK5C3UneUK1kTg/YjwZn4yEQOEi7gsYX/E50dqCWlqAYr8MPO/0RM3R4mt17xhvW 7L+9TVBx4QnJF/hjgQ1pwvK8GV/YFxygCmNeGOCvpIOGdPZhHcMKOHR+pvPszUml neYq/9u4kTjy6ZlZs3h2+vRW/YDvjUDywVtUAo2DhLXQjLl1fjSl2FClOA3IDsGb d2THfG5nHIlNg3CyQf0T/W/r5i3xaGmOgBGB06fsqDT9gSYg4d9WWxemRLNRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqMHEE6r3x5xhQz4NjRWFfdwskNswHwYDVR0j BBgwFoAUjOzYmYaDWU6TuZctlTl+NiPNt6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0U4NDk3QkUyODExRkJBNkQyQzVEMUNBMTM1NkQwN0I4 MzlENzFEOEUxODZDRkUxRUUzQTI0MjMwRjdGNEZGLzAvOENFQ0Q4OTk4NjgzNTk0 RTkzQjk5NzJEOTUzOTdFMzYyM0NEQjdBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84Q0VDRDg5OTg2ODM1OTRFOTNC OTk3MkQ5NTM5N0UzNjIzQ0RCN0E4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdFODQ5N0JFMjgxMUZCQTZEMkM1RDFDQTEzNTZEMDdCODM5RDcxRDhF MTg2Q0ZFMUVFM0EyNDIzMEY3RjRGRi8wLzhDRUNEODk5ODY4MzU5NEU5M0I5OTcy RDk1Mzk3RTM2MjNDREI3QTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbI7xYEjG4M22auPNOp6yV1CaH 5QcbWIkxMtJpXGW6v7YA+ocj+0O0Aynzk1Gb4/a9GQufB/bxl9Qu8V0VuWWSibxt P6P2oRNJoIZ6LgGMHJAOGp58gPeE0n2kWd98fEj8jjvr3NlMKlyTXEkeADjnH6XK cqIPfEMyifuBjFi++qB6ygVmHlzKEo64N5bRsobR12/EHTVlQRebmez3KZiSwPM8 tpBBW6ttJb9DIMPch58gflAgAAEAUThETlcnSMCcZpm3weIthBuTSWD8HPnaFCO6 XTSerumqJLI52LciIPn9WxGx8KnMCPXOocNc9HTbPtU5oEQMMMiRNZpT9P1v -----END CERTIFICATE-----Generated at Sat Aug 23 22:25:47 2025 by rpki-client