$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft File: 5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft (raw, json) Hash identifier: F6zeEC2ixcrxRkRtcTwyi1iqAA4G/vqjHJQqh6pngZ4= Subject key identifier: D2:36:23:8D:A0:87:8B:BC:1B:AE:52:82:59:D9:05:1C:FD:B9:EA:E6 Authority key identifier: 5C:A9:B7:20:4E:C5:BF:0F:17:89:3E:6C:6F:C3:AE:A1:EB:38:32:BA Certificate issuer: /CN=5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA Certificate serial: 0CAA163C7CFA49359EC03BABAF10D6323CBC3C0E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft Manifest number: 010C Signing time: Sat 23 Aug 2025 03:41:50 +0000 Manifest this update: Sat 23 Aug 2025 03:36:50 +0000 Manifest next update: Wed 27 Aug 2025 08:12:50 +0000 Files and hashes: 1: 5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.crl (hash: aIP+X9IqIOVGjjzINbLqpigItSFDA50R13CplTiWB9M=) 2: 3138372e3130322e3233362e302f32322d3234203d3e20323730313134.roa (hash: YhwhLlPige5hlOKUpbP41/aJApwr7M9ZKEmrpb233Lk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.crl rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:aa:16:3c:7c:fa:49:35:9e:c0:3b:ab:af:10:d6:32:3c:bc:3c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA Validity Not Before: Aug 23 03:36:50 2025 GMT Not After : Aug 27 08:12:50 2025 GMT Subject: CN=D236238DA0878BBC1BAE528259D9051CFDB9EAE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:0d:ab:46:92:0b:14:3f:d2:7d:1e:c8:5a: 67:db:93:06:27:e0:b2:ef:5d:e1:e6:6b:35:7b:e8: 5b:62:ca:eb:d2:f9:1a:da:dd:a0:7a:0b:3d:ca:e2: 75:56:c1:66:73:80:f4:ee:9f:27:41:c7:f7:43:86: ad:9f:09:07:9b:7a:13:29:d7:c1:7a:9c:10:2c:5e: 10:3c:fb:cd:36:1e:50:84:18:8a:58:e9:d0:71:62: 53:8b:b1:5a:be:35:7e:d3:41:a2:09:08:b7:59:3c: 27:8c:66:13:6d:4f:e4:32:53:95:f3:85:a5:7a:6f: 62:21:89:4b:9c:6a:6e:1d:51:c2:f5:ab:15:47:54: fd:45:bf:77:98:c2:b1:30:7e:a1:71:60:5f:3b:ff: f6:20:ff:06:ec:39:78:df:96:d4:98:00:0f:86:8e: 32:45:e5:2d:e5:e0:db:91:2a:66:a5:61:b7:7e:ef: bc:0f:ba:62:58:e6:4e:19:80:58:d0:d9:db:93:44: ad:9d:8a:ad:5e:e0:db:f1:a3:04:f1:1f:36:b2:21: 00:8b:4d:8e:45:00:5f:70:4a:62:c4:1b:c7:64:95: e3:58:07:3a:06:ae:78:01:3f:b1:05:44:30:89:30: cc:13:73:7f:87:a2:ae:c3:a8:b6:92:87:81:a3:1b: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:36:23:8D:A0:87:8B:BC:1B:AE:52:82:59:D9:05:1C:FD:B9:EA:E6 X509v3 Authority Key Identifier: keyid:5C:A9:B7:20:4E:C5:BF:0F:17:89:3E:6C:6F:C3:AE:A1:EB:38:32:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3a:99:79:b1:95:b9:f1:bb:4c:1f:45:37:91:bd:a6:bc:d1: e6:5f:16:8c:77:de:7d:d4:a9:bb:41:55:ad:e1:2e:60:95:96: e1:05:af:8f:fc:e2:5a:e1:c1:38:84:f4:6b:2a:50:12:75:49: 1a:9e:46:0b:6f:1a:0e:d2:94:03:2f:e7:27:b0:54:53:30:53: bb:d5:b7:b5:d7:06:d2:03:38:6b:ad:87:33:17:9f:80:ea:70: 35:1c:8f:3e:10:c1:0d:b7:46:49:70:08:2b:d9:b3:f4:16:8a: 03:26:ac:e3:88:78:30:a7:87:29:c1:64:08:69:4a:36:1b:3f: 4e:89:d9:e4:6f:33:41:d0:b9:6d:d7:bb:25:8d:97:ec:3c:80: 5c:f5:b5:db:ad:15:fe:10:1c:38:43:eb:03:b3:ef:22:d7:94: 88:e4:6d:b7:af:a7:2f:dd:97:7b:b7:75:ec:eb:eb:0c:99:13: dc:20:cc:64:7c:61:d8:04:4b:1d:60:9c:26:bb:c9:94:ab:0f: 33:8b:d3:56:2a:36:4b:f9:5a:83:00:a1:e4:28:51:21:c1:08: ff:08:2e:42:df:26:37:da:c8:10:5c:d4:ec:91:16:56:f4:11: a7:d5:85:24:33:bb:7f:1b:df:c9:f0:ea:8c:0d:74:b4:9b:2f: ed:a8:bd:c3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDKoWPHz6STWewDurrxDWMjy8PA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNBOUI3MjA0RUM1QkYwRjE3ODkzRTZDNkZDM0FFQTFF QjM4MzJCQTAeFw0yNTA4MjMwMzM2NTBaFw0yNTA4MjcwODEyNTBaMDMxMTAvBgNV BAMTKEQyMzYyMzhEQTA4NzhCQkMxQkFFNTI4MjU5RDkwNTFDRkRCOUVBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZA2rRpILFD/SfR7IWmfbkwYn 4LLvXeHmazV76FtiyuvS+Rra3aB6Cz3K4nVWwWZzgPTunydBx/dDhq2fCQebehMp 18F6nBAsXhA8+802HlCEGIpY6dBxYlOLsVq+NX7TQaIJCLdZPCeMZhNtT+QyU5Xz haV6b2IhiUucam4dUcL1qxVHVP1Fv3eYwrEwfqFxYF87//Yg/wbsOXjfltSYAA+G jjJF5S3l4NuRKmalYbd+77wPumJY5k4ZgFjQ2duTRK2diq1e4NvxowTxHzayIQCL TY5FAF9wSmLEG8dkleNYBzoGrngBP7EFRDCJMMwTc3+Hoq7DqLaSh4GjG3KZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0jYjjaCHi7wbrlKCWdkFHP256uYwHwYDVR0j BBgwFoAUXKm3IE7Fvw8XiT5sb8Ouoes4MrowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DNUVFMDA0NDkxQUY0MDAxNkQyRUUwMDQ2NTU2OEIxRTQz MUI5MzIzNDMyMzJBNUQxRjlGMDJENDMyMzM1N0U3LzAvNUNBOUI3MjA0RUM1QkYw RjE3ODkzRTZDNkZDM0FFQTFFQjM4MzJCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81Q0E5QjcyMDRFQzVCRjBGMTc4 OTNFNkM2RkMzQUVBMUVCMzgzMkJBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzVFRTAwNDQ5MUFGNDAwMTZEMkVFMDA0NjU1NjhCMUU0MzFCOTMyMzQz MjMyQTVEMUY5RjAyRDQzMjMzNTdFNy8wLzVDQTlCNzIwNEVDNUJGMEYxNzg5M0U2 QzZGQzNBRUExRUIzODMyQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2Opl5sZW58btMH0U3kb2mvNHm XxaMd9591Km7QVWt4S5glZbhBa+P/OJa4cE4hPRrKlASdUkankYLbxoO0pQDL+cn sFRTMFO71be11wbSAzhrrYczF5+A6nA1HI8+EMENt0ZJcAgr2bP0FooDJqzjiHgw p4cpwWQIaUo2Gz9OidnkbzNB0Llt17sljZfsPIBc9bXbrRX+EBw4Q+sDs+8i15SI 5G23r6cv3Zd7t3Xs6+sMmRPcIMxkfGHYBEsdYJwmu8mUqw8zi9NWKjZL+VqDAKHk KFEhwQj/CC5C3yY32sgQXNTskRZW9BGn1YUkM7t/G9/J8OqMDXS0my/tqL3D -----END CERTIFICATE-----Generated at Sat Aug 23 21:38:55 2025 by rpki-client