$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft File: 396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft (raw, json) Hash identifier: B2BRG1gsS6RxNNmD27rZhBchQ6Q9cSzAvXztF3Wb9VE= Subject key identifier: 4C:2B:53:E4:AB:0B:34:05:90:80:75:84:5D:05:ED:A8:A3:FF:58:26 Authority key identifier: 39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C Certificate issuer: /CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C Certificate serial: 77A5E4E7CCAD3A957CAD85B6C99F817D6A8EF1ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft Manifest number: 010C Signing time: Fri 22 Aug 2025 14:38:10 +0000 Manifest this update: Fri 22 Aug 2025 14:33:10 +0000 Manifest next update: Thu 28 Aug 2025 06:23:10 +0000 Files and hashes: 1: 3230302e38392e36342e302f32302d3230203d3e203233313430.roa (hash: MuVkrksN6Nndojm+zBAMSGOH0xql9EWRLP4tu/OiPK8=) 2: 396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl (hash: nhPcGmQZYWTck2iSD5JS9PMu8zd9gf8yBMKwgv35R+Y=) 3: 323830333a376365303a3a2f33322d3332203d3e203233313430.roa (hash: Va1PdbdhRIRzDdOehr3/PCUTjdlWf/YYRaXrVqewYbQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a5:e4:e7:cc:ad:3a:95:7c:ad:85:b6:c9:9f:81:7d:6a:8e:f1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C Validity Not Before: Aug 22 14:33:10 2025 GMT Not After : Aug 28 06:23:10 2025 GMT Subject: CN=4C2B53E4AB0B3405908075845D05EDA8A3FF5826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:b5:37:6d:0a:3d:fd:60:ff:ce:2f:f7:59: de:21:24:cf:f6:c8:0a:c9:41:c9:9b:79:33:a6:ec: bd:d1:21:82:f9:24:34:01:b3:7f:db:54:05:e6:c9: 0d:c3:ed:03:0b:9c:7a:89:59:88:1c:60:ed:34:70: e4:2b:b3:64:0f:7c:97:38:6f:9d:de:1c:74:5e:39: ba:f2:13:e2:d5:fa:b6:2e:85:65:ce:a4:fb:70:07: ba:d1:37:9a:c9:68:a9:41:1d:c7:6e:2c:61:71:ab: 0e:bc:13:57:ce:39:e0:dc:e3:c4:06:50:b0:96:0d: 1d:46:09:6d:14:c6:89:c5:79:e5:c0:21:b4:6f:2f: d0:fc:f1:63:b6:c7:b8:a5:65:07:d3:08:45:54:b8: 3a:a8:c6:43:69:b0:55:4c:b5:db:c3:d0:48:52:6c: 6e:4a:e2:0c:5b:26:12:ed:d5:c5:d8:94:bf:01:81: 40:0a:5f:a4:93:bf:e4:e2:0a:eb:94:8c:f6:03:0a: aa:60:b6:b1:28:6a:88:79:7e:01:04:df:c3:73:4d: 46:f9:ec:e1:fc:e2:bf:bf:47:6c:64:3e:ff:f7:45: ad:7f:65:39:2f:ec:a4:60:53:49:a9:92:98:18:e8: 03:2a:4b:69:d4:e7:3e:b0:93:ef:c7:ce:01:eb:8c: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2B:53:E4:AB:0B:34:05:90:80:75:84:5D:05:ED:A8:A3:FF:58:26 X509v3 Authority Key Identifier: keyid:39:6E:80:8C:91:3B:9F:4B:FC:95:0B:4F:1D:DE:B1:15:9E:5C:9B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9396B23AF8705DC1F1A135270234432ABA016775C17819F67D69BF39C1BE97A8/0/396E808C913B9F4BFC950B4F1DDEB1159E5C9B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:41:e3:50:f3:74:ef:0d:b5:b6:fb:3c:84:f8:a1:39:b7:3a: 77:39:ed:25:6e:21:7f:cb:7b:d0:ff:af:38:58:e9:a4:9a:3b: fd:5c:9b:3c:32:a3:ac:0d:ee:d9:52:54:d3:3d:16:33:ce:81: 95:c4:12:b5:dc:a6:fa:a9:8b:61:3a:d1:af:39:6e:ee:f1:f9: 94:9b:81:34:02:b2:aa:31:c4:85:2e:b2:8d:b2:bb:00:0a:ff: 5f:1e:4a:2d:a7:6c:b8:b6:c3:32:ec:f1:0b:2b:59:9f:bc:af: 9d:5a:15:7a:12:d2:8a:6b:dc:e3:b8:0c:a7:ec:21:0b:f0:94: 89:dd:88:48:72:94:3e:fd:f2:b0:3e:b8:68:6b:d0:c4:86:98: c4:80:7c:be:d2:65:ca:3c:ae:b8:46:96:0d:98:4a:2b:f4:44: 44:b1:bf:24:1c:96:55:d0:75:32:08:86:66:1d:3b:97:bd:d4: 19:1a:7f:82:ec:ca:73:74:40:34:48:4d:4a:70:01:97:05:3a: a6:e1:58:4b:ed:55:97:74:42:5e:4a:bf:65:d8:31:75:46:f1: 3c:67:56:fb:92:f1:27:e5:27:5f:35:d8:9d:95:f6:99:40:e4: 29:7f:a4:1c:32:e2:24:a1:f6:e1:2e:7c:92:3e:dc:c0:12:d5: 2d:3e:07:d7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUd6Xk58ytOpV8rYW2yZ+BfWqO8e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2RTgwOEM5MTNCOUY0QkZDOTUwQjRGMURERUIxMTU5 RTVDOUI1QzAeFw0yNTA4MjIxNDMzMTBaFw0yNTA4MjgwNjIzMTBaMDMxMTAvBgNV BAMTKDRDMkI1M0U0QUIwQjM0MDU5MDgwNzU4NDVEMDVFREE4QTNGRjU4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl87U3bQo9/WD/zi/3Wd4hJM/2 yArJQcmbeTOm7L3RIYL5JDQBs3/bVAXmyQ3D7QMLnHqJWYgcYO00cOQrs2QPfJc4 b53eHHReObryE+LV+rYuhWXOpPtwB7rRN5rJaKlBHcduLGFxqw68E1fOOeDc48QG ULCWDR1GCW0UxonFeeXAIbRvL9D88WO2x7ilZQfTCEVUuDqoxkNpsFVMtdvD0EhS bG5K4gxbJhLt1cXYlL8BgUAKX6STv+TiCuuUjPYDCqpgtrEoaoh5fgEE38NzTUb5 7OH84r+/R2xkPv/3Ra1/ZTkv7KRgU0mpkpgY6AMqS2nU5z6wk+/HzgHrjDcDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTCtT5KsLNAWQgHWEXQXtqKP/WCYwHwYDVR0j BBgwFoAUOW6AjJE7n0v8lQtPHd6xFZ5cm1wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85Mzk2QjIzQUY4NzA1REMxRjFBMTM1MjcwMjM0NDMyQUJB MDE2Nzc1QzE3ODE5RjY3RDY5QkYzOUMxQkU5N0E4LzAvMzk2RTgwOEM5MTNCOUY0 QkZDOTUwQjRGMURERUIxMTU5RTVDOUI1Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zOTZFODA4QzkxM0I5RjRCRkM5 NTBCNEYxRERFQjExNTlFNUM5QjVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTM5NkIyM0FGODcwNURDMUYxQTEzNTI3MDIzNDQzMkFCQTAxNjc3NUMx NzgxOUY2N0Q2OUJGMzlDMUJFOTdBOC8wLzM5NkU4MDhDOTEzQjlGNEJGQzk1MEI0 RjFEREVCMTE1OUU1QzlCNUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGQeNQ83TvDbW2+zyE+KE5tzp3 Oe0lbiF/y3vQ/684WOmkmjv9XJs8MqOsDe7ZUlTTPRYzzoGVxBK13Kb6qYthOtGv OW7u8fmUm4E0ArKqMcSFLrKNsrsACv9fHkotp2y4tsMy7PELK1mfvK+dWhV6EtKK a9zjuAyn7CEL8JSJ3YhIcpQ+/fKwPrhoa9DEhpjEgHy+0mXKPK64RpYNmEor9ERE sb8kHJZV0HUyCIZmHTuXvdQZGn+C7MpzdEA0SE1KcAGXBTqm4VhL7VWXdEJeSr9l 2DF1RvE8Z1b7kvEn5SdfNdidlfaZQOQpf6QcMuIkofbhLnySPtzAEtUtPgfX -----END CERTIFICATE-----Generated at Sun Aug 24 05:22:07 2025 by rpki-client