$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft File: 42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft (raw, json) Hash identifier: FrDMQ0f6sEZP/ml2iCKomgq7xZ7jO17Yw18KPc9le/I= Subject key identifier: EF:87:09:53:34:8E:CC:A7:F5:09:ED:C0:79:B5:0D:74:96:62:92:ED Authority key identifier: 42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1 Certificate issuer: /CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1 Certificate serial: 57171EE63495083B8683388605A2A4F309CD4A29 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft Manifest number: 0110 Signing time: Thu 21 Aug 2025 19:36:22 +0000 Manifest this update: Thu 21 Aug 2025 19:31:22 +0000 Manifest next update: Tue 26 Aug 2025 18:39:22 +0000 Files and hashes: 1: 34352e3139312e3139362e302f32322d3235203d3e20323639383938.roa (hash: /7Fj/4pyOlcPS3m9i/lL+K0SgGpktleabmrsbcuiyBE=) 2: 323830333a333465303a3a2f33322d3438203d3e20323639383938.roa (hash: pdzxVlbeJpazDdydO+ly57EE7M0R0rXYvOb+d52H9BE=) 3: 42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl (hash: 7AukDs8tioZYHcZscEJJbPi9ftgVHFC3EZJFdXolKlw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 18:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:17:1e:e6:34:95:08:3b:86:83:38:86:05:a2:a4:f3:09:cd:4a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1 Validity Not Before: Aug 21 19:31:22 2025 GMT Not After : Aug 26 18:39:22 2025 GMT Subject: CN=EF870953348ECCA7F509EDC079B50D74966292ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:21:cd:f0:55:73:4a:e3:c3:2f:ab:e0:01:e5: b3:93:f8:31:2d:86:3b:5a:5b:87:ef:af:6a:4b:19: 2e:27:7d:e7:d9:c6:c9:2c:bb:05:fb:75:6a:56:24: 05:d6:62:c3:85:c2:c1:6a:b4:ab:b5:8f:2f:4c:9c: c6:a7:67:99:62:d1:8c:3e:86:86:cf:31:08:a5:ad: e0:1f:e7:b8:80:07:ae:7c:c3:94:84:34:f5:55:04: fc:35:fb:81:3e:40:8d:ca:b4:dd:70:8e:b1:e5:7e: 1d:75:1b:7f:31:b8:5f:75:9a:2d:86:43:52:0f:90: a1:ce:c1:77:54:30:b9:f5:44:84:b1:04:56:1d:6e: a4:4b:92:82:32:b4:e2:99:6e:f6:c1:0d:93:35:34: 54:9d:e2:8c:08:61:8a:43:49:b2:58:b4:17:cb:bf: 24:5a:0c:0b:af:35:2b:8c:79:9e:9c:eb:ba:78:cb: be:0e:18:cc:49:da:3d:86:91:66:45:34:4c:3b:81: b9:fe:ad:bb:34:07:e1:4b:51:68:98:ea:c2:68:27: dc:f2:5d:e3:5e:34:57:6d:53:b6:b4:57:82:98:fc: be:93:ab:27:ae:c1:50:63:17:17:df:05:d8:08:63: 6c:f0:af:b4:4b:d3:08:42:0b:bf:13:d5:a9:66:e2: 25:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:87:09:53:34:8E:CC:A7:F5:09:ED:C0:79:B5:0D:74:96:62:92:ED X509v3 Authority Key Identifier: keyid:42:CD:5D:8F:F5:8F:1A:6C:FC:D1:04:2C:88:47:62:96:CB:1C:9B:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D110F05B15EDAFE370A85C99458D399D1A5EA3F319B23192620DB3D3E66CE959/0/42CD5D8FF58F1A6CFCD1042C88476296CB1C9BE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:67:01:5c:1a:78:2c:1d:f9:48:e5:f2:1a:e2:25:cf:3a:12: 1e:ff:f4:d5:8b:53:39:3f:75:7c:80:f0:2d:42:a4:7c:e1:b0: 6b:90:44:82:9a:91:1c:37:12:82:b1:84:01:39:82:51:6f:47: 27:07:74:72:0f:ba:63:a0:1d:df:2e:29:1d:27:6d:af:ec:67: 20:45:21:b3:95:20:70:cd:35:c0:64:c4:50:d9:c2:18:9d:74: 92:2d:96:6b:28:b3:cf:32:b2:3b:b3:63:07:56:1f:90:07:8a: 40:de:61:51:fc:86:ab:01:96:65:1c:7f:95:4b:9f:23:fa:09: 5a:f6:8c:b0:49:5d:0a:30:aa:4e:3f:be:42:4d:64:76:65:21: 2d:7c:07:4d:f2:03:e5:14:6d:8d:e2:06:51:82:1c:24:ad:bc: 5a:a2:d9:4e:29:64:28:fc:13:76:c1:9f:06:5a:b5:63:c0:47: 73:d1:8c:ff:0b:01:5f:a9:cb:91:21:6c:4a:75:f9:67:67:ad: 42:de:8e:b8:8d:c6:78:65:37:fd:53:59:89:da:5c:63:7a:0f: 49:30:73:58:6a:7f:a1:b5:d8:80:54:a6:6f:62:47:e0:3e:bb: d0:99:75:b7:dc:67:c3:d4:33:6b:b9:2f:76:3c:54:64:cf:6a: 58:d3:00:ac -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVxce5jSVCDuGgziGBaKk8wnNSikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRDVEOEZGNThGMUE2Q0ZDRDEwNDJDODg0NzYyOTZD QjFDOUJFMTAeFw0yNTA4MjExOTMxMjJaFw0yNTA4MjYxODM5MjJaMDMxMTAvBgNV BAMTKEVGODcwOTUzMzQ4RUNDQTdGNTA5RURDMDc5QjUwRDc0OTY2MjkyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUIc3wVXNK48Mvq+AB5bOT+DEt hjtaW4fvr2pLGS4nfefZxsksuwX7dWpWJAXWYsOFwsFqtKu1jy9MnManZ5li0Yw+ hobPMQilreAf57iAB658w5SENPVVBPw1+4E+QI3KtN1wjrHlfh11G38xuF91mi2G Q1IPkKHOwXdUMLn1RISxBFYdbqRLkoIytOKZbvbBDZM1NFSd4owIYYpDSbJYtBfL vyRaDAuvNSuMeZ6c67p4y74OGMxJ2j2GkWZFNEw7gbn+rbs0B+FLUWiY6sJoJ9zy XeNeNFdtU7a0V4KY/L6TqyeuwVBjFxffBdgIY2zwr7RL0whCC78T1alm4iVLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU74cJUzSOzKf1Ce3AebUNdJZiku0wHwYDVR0j BBgwFoAUQs1dj/WPGmz80QQsiEdilsscm+EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTEwRjA1QjE1RURBRkUzNzBBODVDOTk0NThEMzk5RDFB NUVBM0YzMTlCMjMxOTI2MjBEQjNEM0U2NkNFOTU5LzAvNDJDRDVEOEZGNThGMUE2 Q0ZDRDEwNDJDODg0NzYyOTZDQjFDOUJFMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNENUQ4RkY1OEYxQTZDRkNE MTA0MkM4ODQ3NjI5NkNCMUM5QkUxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDExMEYwNUIxNUVEQUZFMzcwQTg1Qzk5NDU4RDM5OUQxQTVFQTNGMzE5 QjIzMTkyNjIwREIzRDNFNjZDRTk1OS8wLzQyQ0Q1RDhGRjU4RjFBNkNGQ0QxMDQy Qzg4NDc2Mjk2Q0IxQzlCRTEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzZwFcGngsHflI5fIa4iXPOhIe //TVi1M5P3V8gPAtQqR84bBrkESCmpEcNxKCsYQBOYJRb0cnB3RyD7pjoB3fLikd J22v7GcgRSGzlSBwzTXAZMRQ2cIYnXSSLZZrKLPPMrI7s2MHVh+QB4pA3mFR/Iar AZZlHH+VS58j+gla9oywSV0KMKpOP75CTWR2ZSEtfAdN8gPlFG2N4gZRghwkrbxa otlOKWQo/BN2wZ8GWrVjwEdz0Yz/CwFfqcuRIWxKdflnZ61C3o64jcZ4ZTf9U1mJ 2lxjeg9JMHNYan+htdiAVKZvYkfgPrvQmXW33GfD1DNruS92PFRkz2pY0wCs -----END CERTIFICATE-----Generated at Sat Aug 23 10:59:47 2025 by rpki-client