$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft File: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft (raw, json) Hash identifier: +4UkOfA8TDbQU62bXiuCsdxSbeNJEWKTOu9WxACEkVM= Subject key identifier: C7:E1:33:57:4C:6A:F7:F1:F1:F3:2D:B8:56:92:7D:94:B5:55:3C:8B Authority key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 Certificate issuer: /CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Certificate serial: 29EEB6468B9EC6FD5D65BD635726D733FC33130C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft Manifest number: 010E Signing time: Sat 23 Aug 2025 01:15:06 +0000 Manifest this update: Sat 23 Aug 2025 01:10:06 +0000 Manifest next update: Thu 28 Aug 2025 11:46:06 +0000 Files and hashes: 1: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl (hash: zK0HBv0BOLafiy5ZaRb8IHbbGHpqpr8KoiZ162prZEE=) 2: 323830333a386261303a3a2f33322d3430203d3e203631353132.roa (hash: KfhwmNkUX722XLKGo9HfzZHmGemaga5VvyUW9EoQpLk=) 3: 34352e3137302e3132382e302f32322d3234203d3e203631353132.roa (hash: APOmoNKTFye/WKny8Moj2ePsiAP8sSxzy/Nk1SfzBZc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ee:b6:46:8b:9e:c6:fd:5d:65:bd:63:57:26:d7:33:fc:33:13:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Validity Not Before: Aug 23 01:10:06 2025 GMT Not After : Aug 28 11:46:06 2025 GMT Subject: CN=C7E133574C6AF7F1F1F32DB856927D94B5553C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:91:01:b5:59:39:9e:38:f8:2e:dc:47:5b: f0:8a:8e:68:78:dc:9d:2d:79:63:d6:dc:8f:27:40: 67:9f:65:5a:74:7c:d4:e9:13:0a:50:a1:9b:17:33: 86:f3:07:95:d9:9c:91:15:6a:51:e5:f3:61:ec:fe: c3:05:69:7a:67:a2:f1:84:c3:2c:98:ab:f0:f0:d6: 6f:28:09:ff:25:6c:81:0a:fe:a9:19:bd:3d:9b:0d: 98:87:ce:22:57:26:63:e4:d6:69:92:01:70:ed:c9: 75:83:90:cb:0a:3e:aa:aa:c1:08:87:b7:a4:41:9d: 52:7f:23:93:b5:cd:8b:43:09:bb:2e:52:9a:be:bc: e2:4c:6b:09:2d:d6:e9:08:ec:da:e0:0e:74:ac:2e: e3:6e:0e:f8:ad:eb:f2:5b:87:a2:ff:ca:d1:4c:be: 43:71:71:f2:c8:9a:30:80:55:92:01:43:5d:a8:5b: 4d:34:5d:ef:68:c8:89:4c:ce:46:f7:67:5e:d1:29: 38:d3:e0:cb:56:4b:d4:1f:31:fc:91:2d:76:ee:64: 3b:6f:49:f9:66:f1:14:e4:98:b3:b4:4e:6c:58:31: f7:67:01:ed:06:df:c6:8e:e8:fb:27:39:5d:e1:ea: 79:bc:40:a0:e5:7c:ac:c7:42:44:ca:d9:53:62:ec: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E1:33:57:4C:6A:F7:F1:F1:F3:2D:B8:56:92:7D:94:B5:55:3C:8B X509v3 Authority Key Identifier: keyid:34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:af:aa:63:50:1e:2f:73:3d:e4:55:b6:22:3a:46:36:47:89: ba:c5:4a:04:18:53:86:82:b8:f7:4a:87:ef:6c:66:be:79:f4: e8:07:60:3a:49:6b:db:5b:cc:d3:8b:e5:03:d6:a0:5c:ac:90: 1f:d8:bb:da:31:8f:2d:43:1b:63:29:2f:e5:44:e0:64:e6:5a: 9f:07:0f:08:ed:95:ac:72:ac:fa:86:4a:49:36:38:87:81:f7: 8c:1e:85:29:8f:14:91:8b:6f:2b:f3:8a:68:44:d9:5b:9f:c9: b2:41:c5:47:4b:4a:04:98:b7:c7:60:b9:3b:18:83:e3:bc:2c: 54:c6:df:1b:13:79:4e:b9:be:4a:c9:ed:1a:90:c2:69:99:f9: dd:18:8e:ce:8f:ec:69:d7:00:a4:ef:da:2a:b2:c8:e3:6f:b8: 02:d1:d6:6b:22:8f:a5:09:cc:df:9c:c4:b5:41:71:de:44:82: 1e:7e:1c:37:07:06:98:a9:e7:82:65:0d:ae:ff:c1:b6:a7:d3: 2c:e8:90:1f:c1:26:3e:fe:47:80:3d:2c:64:d5:2f:09:a9:8c: 2e:08:37:6f:0a:4c:00:e6:96:30:22:99:ff:e2:33:37:a6:b8: 83:f9:d3:90:4b:9b:88:17:3c:02:dd:a2:ef:69:a4:fc:f8:19: 5d:47:2d:b9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKe62Rouexv1dZb1jVybXM/wzEwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0OERFQjZCNEYw MkJERkJDNzAeFw0yNTA4MjMwMTEwMDZaFw0yNTA4MjgxMTQ2MDZaMDMxMTAvBgNV BAMTKEM3RTEzMzU3NEM2QUY3RjFGMUYzMkRCODU2OTI3RDk0QjU1NTNDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyJEBtVk5njj4LtxHW/CKjmh4 3J0teWPW3I8nQGefZVp0fNTpEwpQoZsXM4bzB5XZnJEValHl82Hs/sMFaXpnovGE wyyYq/Dw1m8oCf8lbIEK/qkZvT2bDZiHziJXJmPk1mmSAXDtyXWDkMsKPqqqwQiH t6RBnVJ/I5O1zYtDCbsuUpq+vOJMawkt1ukI7NrgDnSsLuNuDvit6/Jbh6L/ytFM vkNxcfLImjCAVZIBQ12oW000Xe9oyIlMzkb3Z17RKTjT4MtWS9QfMfyRLXbuZDtv Sflm8RTkmLO0TmxYMfdnAe0G38aO6PsnOV3h6nm8QKDlfKzHQkTK2VNi7FnRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUx+EzV0xq9/Hx8y24VpJ9lLVVPIswHwYDVR0j BBgwFoAUNHLh/xgYlir7na1EjetrTwK9+8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1 MTFBREE2NTBEQzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYy QUZCOURBRDQ0OERFQjZCNEYwMkJERkJDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDcyRTFGRjE4MTg5NjJBRkI5 REFENDQ4REVCNkI0RjAyQkRGQkM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0NTAwRjYzRkU3NTExQURBNjUw REMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzM0NzJFMUZGMTgxODk2MkFGQjlEQUQ0 NDhERUI2QjRGMDJCREZCQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIr6pjUB4vcz3kVbYiOkY2R4m6 xUoEGFOGgrj3SofvbGa+efToB2A6SWvbW8zTi+UD1qBcrJAf2LvaMY8tQxtjKS/l ROBk5lqfBw8I7ZWscqz6hkpJNjiHgfeMHoUpjxSRi28r84poRNlbn8myQcVHS0oE mLfHYLk7GIPjvCxUxt8bE3lOub5Kye0akMJpmfndGI7Oj+xp1wCk79oqssjjb7gC 0dZrIo+lCczfnMS1QXHeRIIefhw3BwaYqeeCZQ2u/8G2p9Ms6JAfwSY+/keAPSxk 1S8JqYwuCDdvCkwA5pYwIpn/4jM3priD+dOQS5uIFzwC3aLvaaT8+BldRy25 -----END CERTIFICATE-----Generated at Sat Aug 23 10:58:16 2025 by rpki-client