$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft File: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft (raw, json) Hash identifier: bn5cewfJDz2miSypS+2/zaKbuMKEonXcIogUptNgJys= Subject key identifier: 36:09:A4:2E:42:48:2A:B5:A4:46:7D:35:D5:DE:B4:DC:FA:2B:A5:8B Authority key identifier: 2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B Certificate issuer: /CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B Certificate serial: 2A16A0FB0B20AAD9D4599F5789CD9D33F1228F08 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft Manifest number: 010F Signing time: Fri 22 Aug 2025 19:41:28 +0000 Manifest this update: Fri 22 Aug 2025 19:36:28 +0000 Manifest next update: Tue 26 Aug 2025 22:19:28 +0000 Files and hashes: 1: 323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa (hash: pCCwwwI4kK35qb09IHCCQu4MrgMz9s784gSsBRbVivw=) 2: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl (hash: ycKv1jg0y8yn54dgch0rGXbv5qGJVv0p8DW1jX4xCQ8=) 3: 323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa (hash: kkafS8rLlGBeQ6VUx0AiD6jnTOHLthXrAqZWKLP0AKs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 22:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:16:a0:fb:0b:20:aa:d9:d4:59:9f:57:89:cd:9d:33:f1:22:8f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B Validity Not Before: Aug 22 19:36:28 2025 GMT Not After : Aug 26 22:19:28 2025 GMT Subject: CN=3609A42E42482AB5A4467D35D5DEB4DCFA2BA58B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:6b:6b:33:bf:d8:92:86:fd:86:51:5b:90: 68:bd:55:9c:3c:9e:73:4d:52:92:dd:88:27:e7:c9: f7:cd:ec:f7:ae:b2:47:24:1e:e0:d3:12:6a:ea:4b: bf:a6:6e:8d:8d:4f:b8:57:d0:49:da:3e:20:ce:95: fa:73:76:68:d5:f0:91:be:61:a9:22:56:b1:68:88: cc:bd:b7:85:58:37:91:07:e6:b4:1e:57:2d:f7:ee: 4c:43:61:59:49:ea:a0:c2:4e:07:f2:86:5c:ed:dd: 9a:1b:50:b9:d1:78:6e:33:52:77:f6:70:d4:be:ec: c1:66:fd:d5:81:51:e6:d4:b9:25:3e:00:fa:15:9a: e5:47:56:26:67:a4:5b:04:45:ea:31:24:29:44:50: b1:ce:b7:60:91:72:8f:65:b7:c9:e4:32:ed:91:44: 2d:12:51:d3:62:ca:c0:7f:a8:67:05:e4:c9:ae:9f: a7:23:d0:57:7d:db:37:2f:7d:14:fc:83:75:d7:1d: 88:96:c7:96:96:1f:06:3f:8a:42:85:39:9a:97:e9: 7f:29:8d:97:29:54:01:65:d5:94:a1:3d:f3:d7:0c: 9f:6d:5e:28:fc:8d:25:7c:89:6f:71:d5:ee:72:d7: 42:01:98:3f:73:c0:a6:d3:1a:10:ad:1b:0f:20:2d: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:09:A4:2E:42:48:2A:B5:A4:46:7D:35:D5:DE:B4:DC:FA:2B:A5:8B X509v3 Authority Key Identifier: keyid:2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:26:93:20:1f:66:d4:5b:ab:06:7d:61:ce:a4:a8:59:e5:b5: 73:54:c9:c4:26:52:34:40:42:0b:29:c2:86:4a:e6:59:df:43: 91:72:44:3f:87:d0:b8:a2:15:d2:85:2f:22:a1:6a:59:c0:46: 2f:6b:f2:ec:92:c0:5d:fc:7b:0c:ee:5d:86:e7:76:31:45:da: 4e:8a:e3:cb:c4:05:b1:97:d5:aa:1c:a4:95:52:d6:b0:c3:9b: bf:9b:d9:3d:98:5a:56:49:45:64:ea:4d:1b:f0:9b:56:fc:e7: e7:7c:3a:46:2e:e4:77:68:4d:48:1f:4e:66:09:19:ab:75:a5: ab:0d:7c:8c:cd:e8:6a:53:31:61:cd:93:21:dd:80:8a:53:96: fd:d5:19:13:47:08:09:d4:cf:30:7e:35:fa:41:fc:ef:95:fd: a2:d3:2e:9e:6b:4f:df:49:a2:30:d5:18:2d:69:7a:1f:d9:fa: a0:d3:51:ee:86:23:0e:67:6c:a9:a7:9e:47:a4:f9:ea:be:78: 7e:db:9e:e1:94:e2:31:79:d7:19:81:4d:6f:d2:bd:97:21:c2: 04:3c:fe:aa:9a:5e:5a:b6:7f:48:bf:15:8d:3d:32:e2:d1:6c: dc:19:d3:d9:b4:10:67:41:c8:f4:4d:f6:6c:7e:3e:d4:c0:42: d5:08:ef:c2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKhag+wsgqtnUWZ9Xic2dM/EijwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRENTNCRDY5RDNBMzQ3N0Y1MzcyRUYzNjg5RDNBQzZC Q0M1RDExQjAeFw0yNTA4MjIxOTM2MjhaFw0yNTA4MjYyMjE5MjhaMDMxMTAvBgNV BAMTKDM2MDlBNDJFNDI0ODJBQjVBNDQ2N0QzNUQ1REVCNERDRkEyQkE1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaGtrM7/Ykob9hlFbkGi9VZw8 nnNNUpLdiCfnyffN7PeuskckHuDTEmrqS7+mbo2NT7hX0EnaPiDOlfpzdmjV8JG+ YakiVrFoiMy9t4VYN5EH5rQeVy337kxDYVlJ6qDCTgfyhlzt3ZobULnReG4zUnf2 cNS+7MFm/dWBUebUuSU+APoVmuVHViZnpFsEReoxJClEULHOt2CRco9lt8nkMu2R RC0SUdNiysB/qGcF5Mmun6cj0Fd92zcvfRT8g3XXHYiWx5aWHwY/ikKFOZqX6X8p jZcpVAFl1ZShPfPXDJ9tXij8jSV8iW9x1e5y10IBmD9zwKbTGhCtGw8gLfJjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNgmkLkJIKrWkRn011d603PorpYswHwYDVR0j BBgwFoAULdU71p06NHf1Ny7zaJ06xrzF0RswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85REE4QzgwODA1QkNBNENGNjNEREE0RkJBRTczRTYxODUx RDcyNEI2RTc2MTkxOTY4MUEzMkZGODIxMjIzM0JFLzAvMkRENTNCRDY5RDNBMzQ3 N0Y1MzcyRUYzNjg5RDNBQzZCQ0M1RDExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREQ1M0JENjlEM0EzNDc3RjUz NzJFRjM2ODlEM0FDNkJDQzVEMTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOURBOEM4MDgwNUJDQTRDRjYzRERBNEZCQUU3M0U2MTg1MUQ3MjRCNkU3 NjE5MTk2ODFBMzJGRjgyMTIyMzNCRS8wLzJERDUzQkQ2OUQzQTM0NzdGNTM3MkVG MzY4OUQzQUM2QkNDNUQxMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBJpMgH2bUW6sGfWHOpKhZ5bVz VMnEJlI0QEILKcKGSuZZ30ORckQ/h9C4ohXShS8ioWpZwEYva/LsksBd/HsM7l2G 53YxRdpOiuPLxAWxl9WqHKSVUtaww5u/m9k9mFpWSUVk6k0b8JtW/OfnfDpGLuR3 aE1IH05mCRmrdaWrDXyMzehqUzFhzZMh3YCKU5b91RkTRwgJ1M8wfjX6Qfzvlf2i 0y6ea0/fSaIw1RgtaXof2fqg01HuhiMOZ2ypp55HpPnqvnh+257hlOIxedcZgU1v 0r2XIcIEPP6qml5atn9IvxWNPTLi0WzcGdPZtBBnQcj0TfZsfj7UwELVCO/C -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:17 2025 by rpki-client