$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft File: 1543ECDEE164252425B06E8AA0858149FE72AFA3.mft (raw, json) Hash identifier: PRrr2x9UifuwFWiqCDP+Ghx2WvLAKKxmKNVPvGzJiio= Subject key identifier: 1F:19:3C:C5:BD:1F:E7:B5:A7:5E:28:7E:00:5D:DB:6A:D1:94:D4:EC Authority key identifier: 15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3 Certificate issuer: /CN=1543ECDEE164252425B06E8AA0858149FE72AFA3 Certificate serial: 110512E3D129CF6831929E1AC3C3602C0FE16ED5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft Manifest number: 0111 Signing time: Fri 22 Aug 2025 18:00:26 +0000 Manifest this update: Fri 22 Aug 2025 17:55:26 +0000 Manifest next update: Wed 27 Aug 2025 20:48:26 +0000 Files and hashes: 1: 1543ECDEE164252425B06E8AA0858149FE72AFA3.crl (hash: qVQp2A52I2lZRyGJQ9sfAdHFl46FV+x+zN/xZHFRzLU=) 2: 323830333a626236303a3a2f33322d3438203d3e20323639383133.roa (hash: 0yV1Aw7KFsaIZARCe6sfUUr+xSYi4y279CDZkeXCNmg=) 3: 34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa (hash: hHMeaV4VoAmXafduJSsONi6p4lOLcW08DiAmGPb9lWE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:05:12:e3:d1:29:cf:68:31:92:9e:1a:c3:c3:60:2c:0f:e1:6e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1543ECDEE164252425B06E8AA0858149FE72AFA3 Validity Not Before: Aug 22 17:55:26 2025 GMT Not After : Aug 27 20:48:26 2025 GMT Subject: CN=1F193CC5BD1FE7B5A75E287E005DDB6AD194D4EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:c9:ed:cf:8a:00:93:b6:fc:55:75:db:52: 5f:83:f7:21:85:bf:7e:ac:78:a7:4f:a5:22:80:fe: 12:29:ab:cc:95:27:f5:54:26:7b:6a:5e:e5:44:07: cc:db:06:30:27:e0:26:6e:d1:e1:fc:c4:02:ae:9f: c9:8d:ee:b8:45:68:46:0c:eb:f9:58:ad:8f:37:0b: 57:1c:22:16:cf:b8:ec:5b:ef:b0:14:6c:f1:0f:10: b2:8e:88:05:ee:12:95:d1:b2:73:8c:36:53:1e:53: 14:99:d5:e0:1b:5c:71:bb:0e:db:5b:a4:53:c9:b8: 17:1d:72:a4:62:ad:e3:0c:1e:12:79:97:d8:6a:a9: c0:1c:22:a2:d1:da:6e:1a:0d:23:34:f0:57:14:b4: 7c:fa:85:be:ba:29:60:9a:30:ca:47:0c:4d:2e:f1: cf:c9:64:f1:c1:fc:31:a3:7c:1d:a7:0f:06:cd:ff: 3a:c9:e5:7f:61:58:f0:75:64:ca:78:30:6b:59:45: 6a:53:1b:58:37:d6:dc:e7:1a:ad:58:d4:90:3b:8f: 01:4d:0b:aa:23:dd:ca:c6:67:64:21:f3:0c:76:d1: 45:b7:ff:98:a0:c7:f4:b2:4d:c7:e5:ed:3f:db:1d: 1f:fd:86:8f:82:8b:b7:a6:e2:ea:fd:03:7c:73:a2: 83:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:19:3C:C5:BD:1F:E7:B5:A7:5E:28:7E:00:5D:DB:6A:D1:94:D4:EC X509v3 Authority Key Identifier: keyid:15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:02:4e:de:84:24:17:36:60:74:84:32:d6:76:0c:fb:79:0f: 81:48:80:9d:19:46:88:f1:9e:db:18:52:a9:a4:28:cc:50:f6: f6:43:59:62:ca:79:72:96:78:fb:9c:3a:77:a4:b5:8a:af:44: a5:9f:dd:09:c1:64:44:21:f9:8c:56:26:4d:a4:b1:7a:da:06: 4c:1a:53:2f:03:b5:13:15:67:41:d8:7b:64:fc:ac:1a:12:19: 04:30:8e:05:65:37:34:4a:2b:12:d9:29:b1:f2:25:3f:8e:c7: c4:0d:94:6d:7c:04:71:7d:11:83:56:44:c8:10:10:fb:ce:16: 08:3f:24:b5:74:e1:e1:06:2d:be:bb:55:1c:78:da:d9:02:02: 85:0b:49:60:8b:b6:4f:12:d4:3e:1a:8a:00:01:ec:1d:19:76: 35:79:11:d2:c7:79:20:ea:09:27:25:3d:90:e4:68:c6:cf:dd: a8:c3:1c:22:ec:2b:6f:01:84:0c:f8:db:a6:c6:67:58:ac:fb: b2:20:4c:ef:c8:16:0b:2a:84:ac:dc:7e:dc:56:49:41:59:19: 7f:ea:c1:dd:0e:02:46:94:8c:29:91:d5:d9:d9:7f:bf:73:4f: 7f:f6:b7:05:62:6a:ff:b7:bb:fe:ae:09:28:bf:c9:63:56:a6: 20:f9:ca:0d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEQUS49Epz2gxkp4aw8NgLA/hbtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0M0VDREVFMTY0MjUyNDI1QjA2RThBQTA4NTgxNDlG RTcyQUZBMzAeFw0yNTA4MjIxNzU1MjZaFw0yNTA4MjcyMDQ4MjZaMDMxMTAvBgNV BAMTKDFGMTkzQ0M1QkQxRkU3QjVBNzVFMjg3RTAwNUREQjZBRDE5NEQ0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ssntz4oAk7b8VXXbUl+D9yGF v36seKdPpSKA/hIpq8yVJ/VUJntqXuVEB8zbBjAn4CZu0eH8xAKun8mN7rhFaEYM 6/lYrY83C1ccIhbPuOxb77AUbPEPELKOiAXuEpXRsnOMNlMeUxSZ1eAbXHG7Dttb pFPJuBcdcqRireMMHhJ5l9hqqcAcIqLR2m4aDSM08FcUtHz6hb66KWCaMMpHDE0u 8c/JZPHB/DGjfB2nDwbN/zrJ5X9hWPB1ZMp4MGtZRWpTG1g31tznGq1Y1JA7jwFN C6oj3crGZ2Qh8wx20UW3/5igx/SyTcfl7T/bHR/9ho+Ci7em4ur9A3xzooMTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHxk8xb0f57WnXih+AF3batGU1OwwHwYDVR0j BBgwFoAUFUPs3uFkJSQlsG6KoIWBSf5yr6MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENDdDQUJFNDA5NzY0NDMyNUI0ODc3N0I3QzUyRkMyQUQ2 REQ5MjI2NDFEOUUwMTQ1QThGMjNFQjYzMUVCMUNDLzAvMTU0M0VDREVFMTY0MjUy NDI1QjA2RThBQTA4NTgxNDlGRTcyQUZBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNTQzRUNERUUxNjQyNTI0MjVC MDZFOEFBMDg1ODE0OUZFNzJBRkEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDQ3Q0FCRTQwOTc2NDQzMjVCNDg3NzdCN0M1MkZDMkFENkREOTIyNjQx RDlFMDE0NUE4RjIzRUI2MzFFQjFDQy8wLzE1NDNFQ0RFRTE2NDI1MjQyNUIwNkU4 QUEwODU4MTQ5RkU3MkFGQTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJAk7ehCQXNmB0hDLWdgz7eQ+B SICdGUaI8Z7bGFKppCjMUPb2Q1liynlylnj7nDp3pLWKr0Sln90JwWREIfmMViZN pLF62gZMGlMvA7UTFWdB2Htk/KwaEhkEMI4FZTc0SisS2Smx8iU/jsfEDZRtfARx fRGDVkTIEBD7zhYIPyS1dOHhBi2+u1UceNrZAgKFC0lgi7ZPEtQ+GooAAewdGXY1 eRHSx3kg6gknJT2Q5GjGz92owxwi7CtvAYQM+NumxmdYrPuyIEzvyBYLKoSs3H7c VklBWRl/6sHdDgJGlIwpkdXZ2X+/c09/9rcFYmr/t7v+rgkov8ljVqYg+coN -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:31 2025 by rpki-client