$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft File: 220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft (raw, json) Hash identifier: Xq5R1LsN+wDa8eCizlhiupF3Gtreo8YV3HKWs4HlYQs= Subject key identifier: 34:49:F7:69:EE:EB:E3:8B:FC:0C:9F:2E:4C:EC:4C:86:D5:5F:D6:46 Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0 Certificate issuer: /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0 Certificate serial: 310470290875FC3EAA6BFD528AC309CB83024746 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft Manifest number: 010E Signing time: Fri 22 Aug 2025 09:50:12 +0000 Manifest this update: Fri 22 Aug 2025 09:45:12 +0000 Manifest next update: Wed 27 Aug 2025 00:36:12 +0000 Files and hashes: 1: 323830333a646230303a3a2f33322d3438203d3e20323632323334.roa (hash: IJALdVmNN1AgDpzEzbtEykGeHrj3Tgwn0yNVf0UL/aQ=) 2: 3137302e3234352e35362e302f32322d3234203d3e20323632323334.roa (hash: stdoBnPxigW2/tJ+vz7rsMc1H55/cgGPWcQS15sspK4=) 3: 220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl (hash: /B9lmbLPVGN0o1FIntJnEeNxdbBuFyjnbGRw+WA+PGc=) 4: 3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa (hash: R2JSj/c5FCaqtBYdAS6U7R+yqIbLAzmGdEMfhjvfmk0=) 5: 3133312e3130382e3233322e302f32322d3234203d3e20323632323334.roa (hash: HCiEmN4N8WHXla6wIDAk771mUsAzi+3rCmAniYtte+c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 00:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:04:70:29:08:75:fc:3e:aa:6b:fd:52:8a:c3:09:cb:83:02:47:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0 Validity Not Before: Aug 22 09:45:12 2025 GMT Not After : Aug 27 00:36:12 2025 GMT Subject: CN=3449F769EEEBE38BFC0C9F2E4CEC4C86D55FD646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4a:d0:d1:9e:a6:38:7d:cf:7d:e6:87:c1:d8: 4a:05:85:c9:f6:50:2b:55:74:14:84:0f:7a:2c:06: ef:e7:b3:2d:e6:b6:7f:4e:c7:8d:d2:58:59:37:f3: 3e:f0:6a:2f:73:05:f5:be:57:e3:99:42:5a:88:12: eb:b8:95:cb:33:14:1f:2c:b2:45:cf:1c:c5:58:54: 5b:9a:c5:a6:7a:07:34:09:24:da:53:3c:f8:9b:1c: 4f:97:b7:76:da:35:a8:ff:07:9d:38:14:2c:37:5f: 75:2a:af:56:83:f6:35:6e:24:56:69:ad:cd:d6:02: 23:9d:14:13:f4:32:12:b3:7e:25:3f:d9:20:9a:b1: 78:b3:71:29:db:6e:73:42:2c:76:c0:82:5d:a2:98: 3d:36:01:f7:4d:e7:f9:67:23:a8:21:33:18:3b:90: 8f:a8:5d:a4:69:ef:6c:08:c0:a2:f1:ac:b0:84:ae: 68:6f:ca:a7:27:f6:a2:cd:50:6d:93:9c:6e:8f:5c: 99:ee:67:23:b3:d7:f5:c4:29:62:e6:51:ae:44:94: 6f:f8:6f:7b:70:6e:fa:c5:70:c0:01:27:57:9a:06: 9d:3d:db:40:1c:65:cc:6f:05:b4:73:53:a3:db:8f: 0f:08:1b:e6:50:83:4b:da:32:cb:1a:02:e3:bd:2e: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:49:F7:69:EE:EB:E3:8B:FC:0C:9F:2E:4C:EC:4C:86:D5:5F:D6:46 X509v3 Authority Key Identifier: keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:05:a2:3e:73:bf:9d:7f:75:b5:36:c6:72:3d:94:0e:cb:cf: bd:2e:c7:10:c2:71:4c:1d:d7:a2:ed:79:95:a9:86:c6:64:88: 64:4d:97:f0:70:02:46:e4:8e:e0:7b:2e:b3:e8:46:df:37:11: 52:52:90:4c:68:72:f4:6f:af:18:28:e8:06:8a:37:7c:19:ca: 99:7e:38:a2:a9:6b:8e:e4:49:be:b2:1b:66:ab:81:16:bf:66: ee:06:da:5c:fb:a2:50:e6:3e:a7:d8:cc:53:0d:6e:59:d8:8e: 69:2c:03:16:2b:81:f6:1a:0c:87:e7:56:f0:84:83:37:81:01: ff:3d:44:ae:ec:59:b6:09:14:cb:86:b0:5f:5d:46:6b:93:86: 69:f2:67:1d:3c:a7:1f:cc:3e:f9:0c:3a:d6:88:af:fd:e8:ae: 3f:4d:a8:bd:80:43:f5:18:59:e5:0c:e4:17:20:b1:92:34:54: 63:73:9c:5d:bc:e8:59:7f:b1:74:5f:f4:3d:a1:0d:ed:4a:ed: c1:f0:2b:b8:34:d0:3f:26:82:54:7c:06:79:49:4e:4f:d2:04: 18:54:3b:b1:41:a8:b3:96:96:e4:8d:56:de:58:87:3f:98:98: 23:3b:52:0c:e3:63:82:3d:5f:11:5f:cc:86:64:35:ec:be:86: b2:09:a9:65 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMQRwKQh1/D6qa/1SisMJy4MCR0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjIwQUU0MjYzRUM0NTEwQkRFRURBOTBCMkU1NkY1MEM2 MzkxOURGMDAeFw0yNTA4MjIwOTQ1MTJaFw0yNTA4MjcwMDM2MTJaMDMxMTAvBgNV BAMTKDM0NDlGNzY5RUVFQkUzOEJGQzBDOUYyRTRDRUM0Qzg2RDU1RkQ2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuStDRnqY4fc995ofB2EoFhcn2 UCtVdBSED3osBu/nsy3mtn9Ox43SWFk38z7wai9zBfW+V+OZQlqIEuu4lcszFB8s skXPHMVYVFuaxaZ6BzQJJNpTPPibHE+Xt3baNaj/B504FCw3X3Uqr1aD9jVuJFZp rc3WAiOdFBP0MhKzfiU/2SCasXizcSnbbnNCLHbAgl2imD02AfdN5/lnI6ghMxg7 kI+oXaRp72wIwKLxrLCErmhvyqcn9qLNUG2TnG6PXJnuZyOz1/XEKWLmUa5ElG/4 b3twbvrFcMABJ1eaBp0920AcZcxvBbRzU6Pbjw8IG+ZQg0vaMssaAuO9LtrnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNEn3ae7r44v8DJ8uTOxMhtVf1kYwHwYDVR0j BBgwFoAUIgrkJj7EUQve7akLLlb1DGORnfAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMjdCNzMzOUE1N0YyQTREMTk4QkJENkM1RDVGNjRDRTFB RjgxNEI0MDkzNTQ3NzFBMjMwQTJGMDIxOTg1MzlGLzAvMjIwQUU0MjYzRUM0NTEw QkRFRURBOTBCMkU1NkY1MEM2MzkxOURGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMjBBRTQyNjNFQzQ1MTBCREVF REE5MEIyRTU2RjUwQzYzOTE5REYwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTI3QjczMzlBNTdGMkE0RDE5OEJCRDZDNUQ1RjY0Q0UxQUY4MTRCNDA5 MzU0NzcxQTIzMEEyRjAyMTk4NTM5Ri8wLzIyMEFFNDI2M0VDNDUxMEJERUVEQTkw QjJFNTZGNTBDNjM5MTlERjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDQBaI+c7+df3W1NsZyPZQOy8+9 LscQwnFMHdei7XmVqYbGZIhkTZfwcAJG5I7gey6z6EbfNxFSUpBMaHL0b68YKOgG ijd8GcqZfjiiqWuO5Em+shtmq4EWv2buBtpc+6JQ5j6n2MxTDW5Z2I5pLAMWK4H2 GgyH51bwhIM3gQH/PUSu7Fm2CRTLhrBfXUZrk4Zp8mcdPKcfzD75DDrWiK/96K4/ Tai9gEP1GFnlDOQXILGSNFRjc5xdvOhZf7F0X/Q9oQ3tSu3B8Cu4NNA/JoJUfAZ5 SU5P0gQYVDuxQaizlpbkjVbeWIc/mJgjO1IM42OCPV8RX8yGZDXsvoayCall -----END CERTIFICATE-----Generated at Sat Aug 23 11:02:57 2025 by rpki-client