$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.mft File: 875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.mft (raw, json) Hash identifier: XZn5nsZc6K3ncOwBS1gPefEPB2UbXiXo7pVEZLF7vHE= Subject key identifier: 80:3B:9E:AA:5A:E3:A9:32:43:08:8E:D2:11:1C:9C:F6:F3:40:E7:B5 Authority key identifier: 87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66 Certificate issuer: /CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66 Certificate serial: 7EC2303A69129B0F5A0F3BA8D9F71B9585DB910C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.mft Manifest number: 0118 Signing time: Fri 22 Aug 2025 12:01:33 +0000 Manifest this update: Fri 22 Aug 2025 11:56:33 +0000 Manifest next update: Thu 28 Aug 2025 06:05:33 +0000 Files and hashes: 1: 323830333a363234303a3a2f33322d3531203d3e20323633383036.roa (hash: 4fY427ImIMbQRCxjQIHA3eHSlgtjRIdyKjAHb5+Fers=) 2: 3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa (hash: 9KNGRUrDZXYDP50D+FFtiF5yFTqpx0K2la0uMoVT8WM=) 3: 875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl (hash: KKpbSZ4nRiQONE2rMYNXnyq2Ix9VHWipdO6x6h0w4xs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c2:30:3a:69:12:9b:0f:5a:0f:3b:a8:d9:f7:1b:95:85:db:91:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66 Validity Not Before: Aug 22 11:56:33 2025 GMT Not After : Aug 28 06:05:33 2025 GMT Subject: CN=803B9EAA5AE3A93243088ED2111C9CF6F340E7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:95:83:06:fb:7a:8d:de:12:35:5a:f4:9b: 37:8a:64:93:1e:24:28:e9:d0:8b:b9:da:98:c5:65: 83:cf:b9:e2:7b:fc:5d:36:93:8f:54:1d:1b:a4:ed: 38:fa:d3:e6:99:55:2d:bd:62:56:21:f1:07:f0:57: ed:93:cf:ef:3f:5c:3e:81:13:27:0f:bf:6f:97:93: a5:9d:e6:21:7d:1a:f6:da:17:73:51:d8:6a:32:7a: ef:e5:26:53:4b:37:06:5e:0f:d1:ef:f0:40:d7:4e: ee:d4:5b:5c:54:f7:5c:c8:39:ef:d7:69:a4:0e:d9: 44:c5:50:1f:b1:7f:c8:e4:cf:b7:1e:9e:bb:3b:e0: 4b:24:1f:74:9c:8f:85:ad:22:73:e2:a3:6a:35:06: a1:9a:2c:44:0f:28:5a:d1:d0:52:db:98:62:bf:0e: 55:a2:db:2f:8e:e5:21:14:aa:80:5b:9d:7d:fb:3f: 1f:2b:da:ef:02:d4:37:ea:47:fe:cc:61:17:27:5d: aa:b2:b6:96:ee:2e:24:8c:7a:0b:dc:12:a0:ba:a9: 82:99:87:36:52:1c:72:0a:fe:71:57:34:26:03:30: b2:a1:2d:8b:49:64:80:28:38:ec:08:d9:b6:29:9d: 43:ee:02:6f:c9:fc:01:b1:8b:e1:48:25:42:47:d9: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3B:9E:AA:5A:E3:A9:32:43:08:8E:D2:11:1C:9C:F6:F3:40:E7:B5 X509v3 Authority Key Identifier: keyid:87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:39:47:5f:40:0d:f2:0c:d2:ca:a7:63:d6:99:7e:02:5c:76: 0a:79:52:26:6c:33:82:5f:1d:19:b8:22:b6:af:80:80:9f:b8: 36:0e:a2:cd:e1:a0:af:39:59:be:6f:59:8c:65:ab:06:8a:53: 6a:57:c6:72:18:1f:49:34:b6:a1:62:68:df:50:93:ee:4c:6f: 02:24:cd:60:d7:65:9e:24:51:b0:e5:29:68:45:cb:54:ed:60: fb:66:fe:79:38:7b:6e:83:13:e0:b6:f5:04:b6:db:d7:f7:25: 1a:1d:d3:b9:56:73:57:d1:f1:02:ed:9c:51:4b:f7:01:b7:45: 9e:da:15:51:ee:63:07:ff:74:14:b6:24:01:15:16:4d:01:be: 3f:39:ee:15:af:59:7f:0b:83:79:4d:08:aa:6e:95:4f:fc:98: 61:37:a9:b3:be:1a:f4:ed:66:82:2a:f5:37:85:7a:01:cc:bb: c7:ca:bf:6c:39:ee:07:fd:1d:d8:5e:64:ab:c1:75:55:54:fe: da:ac:fa:26:3c:7a:29:88:0e:47:8e:9b:9e:fc:d2:ce:45:06: 0b:ae:91:9e:d4:a3:9a:55:89:ae:7e:e5:9e:35:15:00:19:c8: 10:40:08:37:b4:83:10:70:30:46:4d:4e:22:dc:2f:69:c6:19: 77:c5:24:2d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfsIwOmkSmw9aDzuo2fcblYXbkQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc1OTQwQzRGOUI1Q0QzQzFFMTU1ODVBNEI5QjFGRjRC REU5QkQ2NjAeFw0yNTA4MjIxMTU2MzNaFw0yNTA4MjgwNjA1MzNaMDMxMTAvBgNV BAMTKDgwM0I5RUFBNUFFM0E5MzI0MzA4OEVEMjExMUM5Q0Y2RjM0MEU3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ypWDBvt6jd4SNVr0mzeKZJMe JCjp0Iu52pjFZYPPueJ7/F02k49UHRuk7Tj60+aZVS29YlYh8QfwV+2Tz+8/XD6B EycPv2+Xk6Wd5iF9GvbaF3NR2Goyeu/lJlNLNwZeD9Hv8EDXTu7UW1xU91zIOe/X aaQO2UTFUB+xf8jkz7cenrs74EskH3Scj4WtInPio2o1BqGaLEQPKFrR0FLbmGK/ DlWi2y+O5SEUqoBbnX37Px8r2u8C1DfqR/7MYRcnXaqytpbuLiSMegvcEqC6qYKZ hzZSHHIK/nFXNCYDMLKhLYtJZIAoOOwI2bYpnUPuAm/J/AGxi+FIJUJH2TK1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUgDueqlrjqTJDCI7SERyc9vNA57UwHwYDVR0j BBgwFoAUh1lAxPm1zTweFVhaS5sf9L3pvWYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNEJBMzM2M0NDRUUwMDBEMjFFMTI2REQyQjQ3MDExNjc5 RDQ4NzY4REE4MUQ4NDIyMTg0N0I1N0M0RTAxMjJBLzAvODc1OTQwQzRGOUI1Q0Qz QzFFMTU1ODVBNEI5QjFGRjRCREU5QkQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzU5NDBDNEY5QjVDRDNDMUUx NTU4NUE0QjlCMUZGNEJERTlCRDY2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzRCQTMzNjNDQ0VFMDAwRDIxRTEyNkREMkI0NzAxMTY3OUQ0ODc2OERB ODFEODQyMjE4NDdCNTdDNEUwMTIyQS8wLzg3NTk0MEM0RjlCNUNEM0MxRTE1NTg1 QTRCOUIxRkY0QkRFOUJENjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfOUdfQA3yDNLKp2PWmX4CXHYK eVImbDOCXx0ZuCK2r4CAn7g2DqLN4aCvOVm+b1mMZasGilNqV8ZyGB9JNLahYmjf UJPuTG8CJM1g12WeJFGw5SloRctU7WD7Zv55OHtugxPgtvUEttvX9yUaHdO5VnNX 0fEC7ZxRS/cBt0We2hVR7mMH/3QUtiQBFRZNAb4/Oe4Vr1l/C4N5TQiqbpVP/Jhh N6mzvhr07WaCKvU3hXoBzLvHyr9sOe4H/R3YXmSrwXVVVP7arPomPHopiA5Hjpue /NLORQYLrpGe1KOaVYmufuWeNRUAGcgQQAg3tIMQcDBGTU4i3C9pxhl3xSQt -----END CERTIFICATE-----Generated at Sat Aug 23 07:09:19 2025 by rpki-client