$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft File: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft (raw, json) Hash identifier: /NXbE4gJmmdjPuoJIAw4wQ+h4nO2od57iCY6SIIJVKo= Subject key identifier: 2C:DB:49:FA:2A:A0:01:FE:2D:9E:F8:82:16:34:78:87:A5:1F:04:3F Authority key identifier: 3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D Certificate issuer: /CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D Certificate serial: 4F17A4D130A5567BEB7B4E4A5239FB9547C16E54 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft Manifest number: 010C Signing time: Sat 23 Aug 2025 15:19:12 +0000 Manifest this update: Sat 23 Aug 2025 15:14:12 +0000 Manifest next update: Thu 28 Aug 2025 22:09:12 +0000 Files and hashes: 1: 3139302e3131332e38342e302f32322d3234203d3e20323633363938.roa (hash: AHFicsh51xc7duqTOrlmoLWuP5aU+OV95Mt4Zf+cn9c=) 2: 3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl (hash: CjjUgeRx5MrPiCjDcNxSphVqQ2PPmL+hO0urbZ+GLpQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:17:a4:d1:30:a5:56:7b:eb:7b:4e:4a:52:39:fb:95:47:c1:6e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D Validity Not Before: Aug 23 15:14:12 2025 GMT Not After : Aug 28 22:09:12 2025 GMT Subject: CN=2CDB49FA2AA001FE2D9EF88216347887A51F043F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:5d:2b:57:11:57:49:69:21:bc:5d:7c:97: 47:7d:42:45:65:66:6f:35:3c:5a:38:19:d7:fb:f6: b7:fb:99:b5:15:03:db:5f:e2:18:d9:b2:31:11:1b: 2b:2f:9a:4b:fa:82:c4:4c:c1:6f:c5:07:ac:38:9d: 3b:6a:ed:32:a0:86:b1:28:91:21:34:9c:f7:7d:c9: 8e:8d:9f:8a:a0:6a:5a:e1:28:63:e0:03:73:61:f7: 1f:4b:a7:2e:d7:05:be:e2:8c:14:8c:2c:ae:0b:2c: 1b:a0:75:21:d8:a5:06:e4:b2:0f:06:6a:e1:a6:ed: 88:4c:14:dc:4a:96:1b:c9:44:03:24:5f:db:a1:9f: 16:82:a6:cb:60:9c:a8:c0:d9:3a:0e:00:15:dd:ee: 33:9b:de:8e:e7:ae:cf:7a:78:ef:8a:f8:01:58:95: f3:fd:03:6a:1c:f7:5c:58:98:3c:98:2c:e7:b5:7c: 87:7e:91:e4:a8:c2:21:64:c6:8d:3b:87:c1:cb:92: a4:64:74:cf:80:8d:39:ff:20:2c:f7:4d:59:62:53: 1b:91:53:6b:c8:46:97:9e:f0:47:8a:ec:d8:8a:09: ca:f0:41:18:2d:ff:4e:3d:32:12:6a:28:df:a9:7f: b6:48:8f:77:1e:69:af:36:58:06:19:ae:7e:be:8c: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DB:49:FA:2A:A0:01:FE:2D:9E:F8:82:16:34:78:87:A5:1F:04:3F X509v3 Authority Key Identifier: keyid:3A:FF:A6:15:5E:E0:B8:62:7A:55:EE:8E:EB:C7:84:3B:F0:87:D0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB0FC4F1F62E2DF0709A7566D0BE5E9C082845C6A311C078079D458113B82C78/0/3AFFA6155EE0B8627A55EE8EEBC7843BF087D08D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:13:b4:7c:04:ff:6d:a2:e6:ce:0a:23:c2:c8:80:82:85:d8: 11:db:27:a2:3a:aa:68:13:ca:34:3e:f7:ac:fa:57:0d:21:1d: a4:d8:2e:29:2c:a2:d3:fc:1b:26:8e:dc:66:20:01:db:8f:1c: 1a:5e:ee:91:12:de:ab:99:f2:1b:3b:b3:35:c3:20:66:6e:41: 60:83:e6:81:86:8a:90:e3:9c:07:e2:29:6c:8e:6a:17:73:3a: 26:cc:e3:b7:d3:fb:b1:48:b2:48:cd:1a:be:4d:70:18:59:a0: 84:55:18:73:25:b9:f2:b3:66:25:f4:56:5e:5a:53:21:ba:51: fd:cd:2e:c0:bf:2c:be:2e:b1:72:70:70:46:2d:8b:95:44:cf: 96:cf:99:d0:06:c4:d6:f3:14:5b:cc:53:fc:10:bd:64:2a:4d: a2:57:d7:0c:b4:3f:8e:d7:2e:9e:b7:2d:75:2b:05:cc:53:58: 32:3d:ec:28:a1:fb:34:f1:00:09:8f:29:7a:ac:d8:7d:c7:11: d3:72:8e:f1:46:d7:89:cb:0d:cb:49:f4:0b:42:e6:53:fa:80: e2:19:af:de:21:1f:f0:8e:73:27:e4:00:a8:4a:7e:98:7f:5c: ec:85:a9:c8:b8:22:02:3a:10:1f:97:b8:36:da:5f:56:81:e1: 73:93:48:12 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTxek0TClVnvre05KUjn7lUfBblQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGRkE2MTU1RUUwQjg2MjdBNTVFRThFRUJDNzg0M0JG MDg3RDA4RDAeFw0yNTA4MjMxNTE0MTJaFw0yNTA4MjgyMjA5MTJaMDMxMTAvBgNV BAMTKDJDREI0OUZBMkFBMDAxRkUyRDlFRjg4MjE2MzQ3ODg3QTUxRjA0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQml0rVxFXSWkhvF18l0d9QkVl Zm81PFo4Gdf79rf7mbUVA9tf4hjZsjERGysvmkv6gsRMwW/FB6w4nTtq7TKghrEo kSE0nPd9yY6Nn4qgalrhKGPgA3Nh9x9Lpy7XBb7ijBSMLK4LLBugdSHYpQbksg8G auGm7YhMFNxKlhvJRAMkX9uhnxaCpstgnKjA2ToOABXd7jOb3o7nrs96eO+K+AFY lfP9A2oc91xYmDyYLOe1fId+keSowiFkxo07h8HLkqRkdM+AjTn/ICz3TVliUxuR U2vIRpee8EeK7NiKCcrwQRgt/049MhJqKN+pf7ZIj3ceaa82WAYZrn6+jJTpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULNtJ+iqgAf4tnviCFjR4h6UfBD8wHwYDVR0j BBgwFoAUOv+mFV7guGJ6Ve6O68eEO/CH0I0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQjBGQzRGMUY2MkUyREYwNzA5QTc1NjZEMEJFNUU5QzA4 Mjg0NUM2QTMxMUMwNzgwNzlENDU4MTEzQjgyQzc4LzAvM0FGRkE2MTU1RUUwQjg2 MjdBNTVFRThFRUJDNzg0M0JGMDg3RDA4RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQUZGQTYxNTVFRTBCODYyN0E1 NUVFOEVFQkM3ODQzQkYwODdEMDhELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0IwRkM0RjFGNjJFMkRGMDcwOUE3NTY2RDBCRTVFOUMwODI4NDVDNkEz MTFDMDc4MDc5RDQ1ODExM0I4MkM3OC8wLzNBRkZBNjE1NUVFMEI4NjI3QTU1RUU4 RUVCQzc4NDNCRjA4N0QwOEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBE7R8BP9toubOCiPCyICChdgR 2yeiOqpoE8o0Pves+lcNIR2k2C4pLKLT/BsmjtxmIAHbjxwaXu6REt6rmfIbO7M1 wyBmbkFgg+aBhoqQ45wH4ilsjmoXczomzOO30/uxSLJIzRq+TXAYWaCEVRhzJbny s2Yl9FZeWlMhulH9zS7Avyy+LrFycHBGLYuVRM+Wz5nQBsTW8xRbzFP8EL1kKk2i V9cMtD+O1y6ety11KwXMU1gyPewoofs08QAJjyl6rNh9xxHTco7xRteJyw3LSfQL QuZT+oDiGa/eIR/wjnMn5ACoSn6Yf1zshanIuCICOhAfl7g22l9WgeFzk0gS -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:55 2025 by rpki-client