$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft File: FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft (raw, json) Hash identifier: cYvqGFd2g4w0/abATwE6GPJJ3LxCZw7dVDdasugkoWw= Subject key identifier: 87:A5:A4:9E:D9:EA:57:33:C4:01:51:19:E5:0E:FA:49:24:DB:0D:83 Authority key identifier: FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 Certificate issuer: /CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Certificate serial: 2B0B2B73A6FBB213B8CDA80E0062ED87DC45F282 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft Manifest number: 010A Signing time: Fri 22 Aug 2025 04:52:08 +0000 Manifest this update: Fri 22 Aug 2025 04:47:08 +0000 Manifest next update: Wed 27 Aug 2025 12:39:08 +0000 Files and hashes: 1: 3230302e362e31372e302f32342d3234203d3e203233303331.roa (hash: dIEVjdb3lQCo9g9fO5GmMpWFti9yLYGOF7cFBhbUkAQ=) 2: FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl (hash: cZo3jKS2FYpOurRx3tW+QV39Vie8eysvOoKW5gPF7yA=) 3: 3230302e362e31372e302f32342d3234203d3e20323733313233.roa (hash: xGaOy+8VqeB5oNlE4CohBIcrgM3fz/XUKeLlcTUTGpM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:0b:2b:73:a6:fb:b2:13:b8:cd:a8:0e:00:62:ed:87:dc:45:f2:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Validity Not Before: Aug 22 04:47:08 2025 GMT Not After : Aug 27 12:39:08 2025 GMT Subject: CN=87A5A49ED9EA5733C4015119E50EFA4924DB0D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c2:31:a4:e4:f4:c3:92:0a:f2:7e:82:fb:7d: fc:c0:00:cc:a4:21:09:d0:73:94:30:cd:17:28:f7: d3:b3:1f:da:96:09:ef:28:b9:b0:78:e8:34:83:24: 19:8c:d5:14:13:23:30:01:6f:d6:cf:f5:9c:09:3c: e0:42:db:03:94:51:8e:35:b0:8b:08:2d:81:3e:ee: 51:eb:69:09:7f:6f:da:e6:38:0e:ce:50:71:bf:d3: 7a:cc:5e:a8:bc:a7:f2:61:42:d4:27:ed:74:94:c2: 81:ca:52:5f:69:40:53:5e:85:2c:24:90:e2:56:ac: 13:b6:cc:cd:ac:2f:83:55:12:5d:b9:6f:17:9e:2c: 9e:0a:54:0d:08:cb:9d:6d:31:0d:5a:05:09:60:f5: 28:94:c0:1c:53:95:e1:7f:c2:2a:43:82:93:a6:68: 70:c8:d1:eb:2b:a0:e8:76:dc:79:22:a1:ce:6e:56: b4:bd:3d:58:f2:8f:a3:98:65:54:9e:63:aa:f5:df: 9d:38:56:21:f4:d9:a8:ba:25:f3:39:28:55:37:44: da:91:f6:a9:eb:8b:51:cd:de:3a:a0:5b:00:da:98: 7a:01:8f:e1:cd:52:af:fa:9e:5d:b6:e2:28:31:03: d0:72:8d:f5:61:76:a0:2e:77:fa:21:08:13:87:4e: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A5:A4:9E:D9:EA:57:33:C4:01:51:19:E5:0E:FA:49:24:DB:0D:83 X509v3 Authority Key Identifier: keyid:FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d6:56:22:af:7c:5c:39:95:e5:66:2d:5b:41:cc:8e:ad:db: c1:99:d4:68:3b:fc:08:0b:93:6f:e0:2c:71:4b:9d:9a:bf:3c: 05:b9:d5:9d:e0:8d:a3:e2:50:64:3f:a4:7b:7d:b6:fe:3e:f6: 77:03:51:3b:55:68:2a:8c:e2:29:15:10:81:7a:14:5d:72:13: e2:f5:d4:f8:e1:88:56:ab:89:d9:be:07:81:20:39:bd:38:b1: e0:a8:4d:e0:64:5b:33:48:40:00:d0:a4:10:21:5e:6a:93:a0: d1:1b:0a:1c:b8:5a:93:6e:19:8a:d3:fc:ae:76:6d:f3:e5:b8: 8d:47:59:76:a9:34:5d:c8:fc:77:1e:07:f7:20:d4:79:48:66: 3f:18:6e:b9:d2:b8:33:f3:b4:f4:dd:08:c0:90:5c:06:0f:a9: 46:58:03:ad:3b:bd:12:09:48:b5:f6:c5:5b:5b:97:90:29:f5: 42:a7:41:c8:ce:b9:a9:6f:e1:46:b9:ce:6a:76:1d:78:8f:9a: af:4b:d7:43:7b:33:64:b8:fa:dd:9b:ec:d8:f9:d1:ca:c6:32: 86:ac:8e:b5:03:35:fb:53:e9:d8:f2:c8:8a:ad:7e:f9:8f:b0: cd:bc:8d:f5:b2:00:01:86:1a:b8:a8:d9:d0:c2:c1:6d:dd:16: 9b:44:ed:56 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKwsrc6b7shO4zagOAGLth9xF8oIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjlGQzlFMjQ5MEQ1Mjc2NTNFRjdDRTg0NzE3M0Y5 Q0QwODgzMzAeFw0yNTA4MjIwNDQ3MDhaFw0yNTA4MjcxMjM5MDhaMDMxMTAvBgNV BAMTKDg3QTVBNDlFRDlFQTU3MzNDNDAxNTExOUU1MEVGQTQ5MjREQjBEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwjGk5PTDkgryfoL7ffzAAMyk IQnQc5QwzRco99OzH9qWCe8oubB46DSDJBmM1RQTIzABb9bP9ZwJPOBC2wOUUY41 sIsILYE+7lHraQl/b9rmOA7OUHG/03rMXqi8p/JhQtQn7XSUwoHKUl9pQFNehSwk kOJWrBO2zM2sL4NVEl25bxeeLJ4KVA0Iy51tMQ1aBQlg9SiUwBxTleF/wipDgpOm aHDI0esroOh23Hkioc5uVrS9PVjyj6OYZVSeY6r13504ViH02ai6JfM5KFU3RNqR 9qnri1HN3jqgWwDamHoBj+HNUq/6nl224igxA9ByjfVhdqAud/ohCBOHTlZzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUh6WkntnqVzPEAVEZ5Q76SSTbDYMwHwYDVR0j BBgwFoAU+o+fyeJJDVJ2U+986EcXP5zQiDMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOEIyOUZCNTUwQUFFMkY4OTM2QzA4NTYzNjg2Q0VDRTMz N0U1OEJENUEyMkFFNjcwNUExRjdDQUEzMTM3QURBLzAvRkE4RjlGQzlFMjQ5MEQ1 Mjc2NTNFRjdDRTg0NzE3M0Y5Q0QwODgzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQThGOUZDOUUyNDkwRDUyNzY1 M0VGN0NFODQ3MTczRjlDRDA4ODMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDhCMjlGQjU1MEFBRTJGODkzNkMwODU2MzY4NkNFQ0UzMzdFNThCRDVB MjJBRTY3MDVBMUY3Q0FBMzEzN0FEQS8wL0ZBOEY5RkM5RTI0OTBENTI3NjUzRUY3 Q0U4NDcxNzNGOUNEMDg4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP1lYir3xcOZXlZi1bQcyOrdvB mdRoO/wIC5Nv4CxxS52avzwFudWd4I2j4lBkP6R7fbb+PvZ3A1E7VWgqjOIpFRCB ehRdchPi9dT44YhWq4nZvgeBIDm9OLHgqE3gZFszSEAA0KQQIV5qk6DRGwocuFqT bhmK0/yudm3z5biNR1l2qTRdyPx3Hgf3INR5SGY/GG650rgz87T03QjAkFwGD6lG WAOtO70SCUi19sVbW5eQKfVCp0HIzrmpb+FGuc5qdh14j5qvS9dDezNkuPrdm+zY +dHKxjKGrI61AzX7U+nY8siKrX75j7DNvI31sgABhhq4qNnQwsFt3RabRO1W -----END CERTIFICATE-----Generated at Sat Aug 23 10:58:19 2025 by rpki-client