$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7E78F5A27E21658A040D41B16F6AC7D4AD5982A5B5E92C559FB0D9143E9172C/0/914352F6071C82AE424F2740F43122F9D595BDB5.mft File: 914352F6071C82AE424F2740F43122F9D595BDB5.mft (raw, json) Hash identifier: iZnhg0S6mr8xH53xnKnlUbmb9t1qzpb1OpEOJ+co0+Q= Subject key identifier: 68:C0:83:3C:47:9C:45:8B:BE:21:88:38:39:FC:D7:34:97:71:07:91 Authority key identifier: 91:43:52:F6:07:1C:82:AE:42:4F:27:40:F4:31:22:F9:D5:95:BD:B5 Certificate issuer: /CN=914352F6071C82AE424F2740F43122F9D595BDB5 Certificate serial: 3D8CB327521614446B5B3DC00C451CA95D95ED98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914352F6071C82AE424F2740F43122F9D595BDB5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A7E78F5A27E21658A040D41B16F6AC7D4AD5982A5B5E92C559FB0D9143E9172C/0/914352F6071C82AE424F2740F43122F9D595BDB5.mft Manifest number: 010A Signing time: Fri 22 Aug 2025 11:10:59 +0000 Manifest this update: Fri 22 Aug 2025 11:05:59 +0000 Manifest next update: Wed 27 Aug 2025 22:22:59 +0000 Files and hashes: 1: 323830363a3363633a3a2f33322d3332203d3e20323635353233.roa (hash: DgfYP2iRnR4qTLzrFyyiCON9FpL+gkkV4J9ipz4hIls=) 2: 914352F6071C82AE424F2740F43122F9D595BDB5.crl (hash: 672FuhwfyNRTlFtPRAJDhbGdnvPHOmIom2rssJfNDOg=) 3: 3137372e3132352e3133362e302f32322d3232203d3e20323635353233.roa (hash: 6x6A9wJJCcTOhOLZWngJr4cdDD0ymsvf+xLicuQ6Kcc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A7E78F5A27E21658A040D41B16F6AC7D4AD5982A5B5E92C559FB0D9143E9172C/0/914352F6071C82AE424F2740F43122F9D595BDB5.crl rsync://repository.lacnic.net/rpki/lacnic/A7E78F5A27E21658A040D41B16F6AC7D4AD5982A5B5E92C559FB0D9143E9172C/0/914352F6071C82AE424F2740F43122F9D595BDB5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914352F6071C82AE424F2740F43122F9D595BDB5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8c:b3:27:52:16:14:44:6b:5b:3d:c0:0c:45:1c:a9:5d:95:ed:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914352F6071C82AE424F2740F43122F9D595BDB5 Validity Not Before: Aug 22 11:05:59 2025 GMT Not After : Aug 27 22:22:59 2025 GMT Subject: CN=68C0833C479C458BBE21883839FCD73497710791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:73:57:6f:0b:45:c1:58:df:18:32:89:49: c0:c3:41:64:dc:d3:14:d0:1c:07:6b:a0:da:de:bd: 1b:6a:3a:d1:2d:7f:76:eb:aa:a4:18:7b:8e:8b:bf: 2b:ad:52:07:9f:71:69:fc:cb:0d:6a:03:ed:ea:c3: 19:5e:1d:6e:df:90:55:6a:09:c6:b2:25:01:01:17: ed:72:74:d9:2b:6b:d5:88:50:f9:15:86:9a:c0:54: 25:be:dc:a2:1c:77:8c:c3:61:36:d1:31:43:72:22: e3:c1:3b:12:88:37:44:3e:76:d8:75:53:b2:48:bd: 4e:2c:d7:a3:55:73:55:85:d8:b0:ba:b6:7b:eb:59: 5c:4a:e5:81:75:9d:24:b5:f0:9d:b1:c7:fa:ea:92: 3e:19:55:2a:bf:3b:f5:ca:59:bd:5d:1f:a9:fb:ed: 23:63:66:2f:c4:9d:39:85:b4:1a:c9:e2:74:51:2c: ee:75:1c:91:91:7e:85:82:bd:d4:9b:7c:6c:dc:7d: f5:d0:e2:ff:0b:41:2c:75:85:c7:42:38:db:40:0b: 03:43:20:c6:60:28:ad:c8:f9:e5:68:c0:e1:42:12: 97:40:10:d5:23:d1:05:83:86:43:08:d1:70:90:15: c4:bf:8d:eb:88:02:c7:99:d2:e1:cc:1d:6f:70:60: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C0:83:3C:47:9C:45:8B:BE:21:88:38:39:FC:D7:34:97:71:07:91 X509v3 Authority Key Identifier: keyid:91:43:52:F6:07:1C:82:AE:42:4F:27:40:F4:31:22:F9:D5:95:BD:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A7E78F5A27E21658A040D41B16F6AC7D4AD5982A5B5E92C559FB0D9143E9172C/0/914352F6071C82AE424F2740F43122F9D595BDB5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/914352F6071C82AE424F2740F43122F9D595BDB5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7E78F5A27E21658A040D41B16F6AC7D4AD5982A5B5E92C559FB0D9143E9172C/0/914352F6071C82AE424F2740F43122F9D595BDB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cb:47:7f:12:02:1b:49:1f:05:93:a6:68:41:98:65:20:bb: 9e:37:5b:ee:9b:a5:e9:3a:6f:a3:9d:04:7f:77:c4:ba:40:11: c2:40:05:c6:2a:24:41:6c:24:1e:1f:ef:8c:26:01:69:b2:27: c5:bd:2b:e7:f8:03:52:09:a7:ae:74:b8:00:f5:99:4d:b1:1f: 86:00:57:0d:db:ef:79:e3:bb:5d:0f:39:ac:a2:46:99:0c:12: 4b:d1:64:a0:5c:9c:25:4a:88:d3:c6:66:8b:88:ac:e8:7b:dd: 50:f7:f1:b6:26:58:fb:39:e8:8b:12:d5:32:ee:87:4e:d3:98: cc:94:10:0f:8b:5d:c8:85:28:5d:45:22:01:47:92:98:1c:a7: bb:46:d4:35:02:a3:38:06:24:95:72:9d:1e:b4:fc:d6:52:68: c8:9f:34:ac:4e:a3:c7:9b:90:fd:32:0c:7b:f8:4e:96:7b:aa: b5:90:ab:97:94:78:98:bb:01:0c:a3:06:b5:74:c5:b4:71:f1: dc:40:75:cd:8a:f3:b1:71:ac:7d:72:6f:1f:93:cd:e9:45:ef: 2b:00:39:0b:4c:3e:5c:43:c1:d3:e4:f4:40:6d:db:a7:a5:56: 02:83:00:d8:59:83:50:41:c2:c5:2e:d0:6a:3d:b0:b3:53:77: 71:25:7e:f8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPYyzJ1IWFERrWz3ADEUcqV2V7ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MzUyRjYwNzFDODJBRTQyNEYyNzQwRjQzMTIyRjlE NTk1QkRCNTAeFw0yNTA4MjIxMTA1NTlaFw0yNTA4MjcyMjIyNTlaMDMxMTAvBgNV BAMTKDY4QzA4MzNDNDc5QzQ1OEJCRTIxODgzODM5RkNENzM0OTc3MTA3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOknNXbwtFwVjfGDKJScDDQWTc 0xTQHAdroNrevRtqOtEtf3brqqQYe46LvyutUgefcWn8yw1qA+3qwxleHW7fkFVq CcayJQEBF+1ydNkra9WIUPkVhprAVCW+3KIcd4zDYTbRMUNyIuPBOxKIN0Q+dth1 U7JIvU4s16NVc1WF2LC6tnvrWVxK5YF1nSS18J2xx/rqkj4ZVSq/O/XKWb1dH6n7 7SNjZi/EnTmFtBrJ4nRRLO51HJGRfoWCvdSbfGzcffXQ4v8LQSx1hcdCONtACwND IMZgKK3I+eVowOFCEpdAENUj0QWDhkMI0XCQFcS/jeuIAseZ0uHMHW9wYF2FAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaMCDPEecRYu+IYg4OfzXNJdxB5EwHwYDVR0j BBgwFoAUkUNS9gccgq5CTydA9DEi+dWVvbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BN0U3OEY1QTI3RTIxNjU4QTA0MEQ0MUIxNkY2QUM3RDRB RDU5ODJBNUI1RTkyQzU1OUZCMEQ5MTQzRTkxNzJDLzAvOTE0MzUyRjYwNzFDODJB RTQyNEYyNzQwRjQzMTIyRjlENTk1QkRCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MTQzNTJGNjA3MUM4MkFFNDI0 RjI3NDBGNDMxMjJGOUQ1OTVCREI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTdFNzhGNUEyN0UyMTY1OEEwNDBENDFCMTZGNkFDN0Q0QUQ1OTgyQTVC NUU5MkM1NTlGQjBEOTE0M0U5MTcyQy8wLzkxNDM1MkY2MDcxQzgyQUU0MjRGMjc0 MEY0MzEyMkY5RDU5NUJEQjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpy0d/EgIbSR8Fk6ZoQZhlILue N1vum6XpOm+jnQR/d8S6QBHCQAXGKiRBbCQeH++MJgFpsifFvSvn+ANSCaeudLgA 9ZlNsR+GAFcN2+9547tdDzmsokaZDBJL0WSgXJwlSojTxmaLiKzoe91Q9/G2Jlj7 OeiLEtUy7odO05jMlBAPi13IhShdRSIBR5KYHKe7RtQ1AqM4BiSVcp0etPzWUmjI nzSsTqPHm5D9Mgx7+E6We6q1kKuXlHiYuwEMowa1dMW0cfHcQHXNivOxcax9cm8f k83pRe8rADkLTD5cQ8HT5PRAbdunpVYCgwDYWYNQQcLFLtBqPbCzU3dxJX74 -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:16 2025 by rpki-client