$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft File: 2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft (raw, json) Hash identifier: FKmqeQWbEaVuP2PSMGowHTlR5SLMvBW/WMcQthigVjc= Subject key identifier: B0:74:4D:8B:B9:46:0B:25:9E:B4:8F:7A:C4:83:65:0F:82:81:1F:58 Authority key identifier: 2F:EE:53:CB:4F:A7:FD:18:21:23:FA:FF:3B:70:9C:F5:75:AA:96:E5 Certificate issuer: /CN=2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5 Certificate serial: 57A4DF60E3601F77AB42161249263DCDBED8F908 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft Manifest number: 010A Signing time: Fri 22 Aug 2025 00:03:53 +0000 Manifest this update: Thu 21 Aug 2025 23:58:53 +0000 Manifest next update: Wed 27 Aug 2025 12:24:53 +0000 Files and hashes: 1: 3134332e3230322e39362e302f32322d3234203d3e20323634363139.roa (hash: jPFWk0iwemzZCfohAAV+jI3V46BIvKrcmB26gnaCcIE=) 2: 2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.crl (hash: YuD8rQ93rhVLFaF/YaMg/0TMCaOCPaPi5kpjvx46L1k=) 3: 323830333a376534303a3a2f33322d3332203d3e20323634363139.roa (hash: eI29Bf8Kf5Tof2EaTFp8LjzxoGtMyVv6zFuiUUWW57s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.crl rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a4:df:60:e3:60:1f:77:ab:42:16:12:49:26:3d:cd:be:d8:f9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5 Validity Not Before: Aug 21 23:58:53 2025 GMT Not After : Aug 27 12:24:53 2025 GMT Subject: CN=B0744D8BB9460B259EB48F7AC483650F82811F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:e9:cf:2c:20:b5:36:91:4b:91:42:2b:d0: e0:e9:c3:85:00:38:67:60:ef:9b:0b:28:0e:f7:6c: fc:65:e1:cb:17:b4:1a:07:5e:cd:c1:6a:4d:72:10: a0:1e:7f:42:62:6e:4b:97:9a:48:6d:ef:3d:6f:f3: a2:63:f5:61:97:95:6f:d0:08:16:9c:10:7c:b7:1b: 3d:10:29:a0:83:34:db:4c:f8:52:04:67:37:12:9b: f1:5f:da:f0:3c:e7:6e:b5:f6:aa:88:36:e4:aa:77: 34:da:59:7c:9c:c8:12:37:79:60:c9:18:19:07:7a: 1e:fb:0a:d3:03:e2:44:ad:eb:31:bb:51:7d:8a:d9: dc:e4:18:02:49:f4:66:04:dc:b7:8b:5f:95:4d:4e: 73:8d:41:8e:1e:c7:aa:34:67:8e:28:6d:31:96:b2: b9:68:21:bd:0c:ba:3e:9c:ab:32:2c:fe:3d:a6:bb: 71:dd:14:88:50:40:d1:24:aa:84:fb:2a:59:a5:7d: 1b:30:0c:0b:19:99:72:00:fa:67:45:ec:8f:77:e7: ca:52:fd:29:cf:73:eb:41:70:2d:12:e6:26:d0:92: eb:9e:30:9f:3a:f9:7f:5b:76:7f:2a:61:d7:57:4e: 8f:06:7a:41:3a:00:31:0f:79:4b:70:f2:13:5e:26: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:74:4D:8B:B9:46:0B:25:9E:B4:8F:7A:C4:83:65:0F:82:81:1F:58 X509v3 Authority Key Identifier: keyid:2F:EE:53:CB:4F:A7:FD:18:21:23:FA:FF:3B:70:9C:F5:75:AA:96:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EBAD9EC9BBB7F262F889C919BD540C1E009C0A91E427626EEF5B7E06CCD6B714/0/2FEE53CB4FA7FD182123FAFF3B709CF575AA96E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f1:2a:66:e1:c9:93:60:b9:b8:a0:40:2f:5e:92:59:b9:32: 32:0d:2d:2f:42:c1:63:ad:e0:a3:da:71:ca:c8:79:a9:e8:e6: be:5f:05:b0:37:83:3d:7b:63:c7:c5:05:80:94:d7:bc:20:68: 99:fc:6b:6a:18:de:a3:40:26:8a:67:9b:64:65:03:be:1f:a6: f8:25:08:62:57:8b:ea:be:0c:f9:71:8f:fe:b3:fd:5a:99:a9: 52:8d:29:43:9f:93:37:9e:b2:26:1c:42:7c:17:f3:79:f2:2f: 63:3d:66:4b:6b:30:b7:c0:a8:64:74:cd:b8:67:31:0b:06:9f: 4b:f0:a9:21:c0:b6:de:9f:ef:84:71:76:13:db:4e:e1:b6:39: d0:90:ac:43:00:19:6a:41:33:e8:f3:83:4b:56:11:97:6d:6b: 82:b6:6e:9c:cb:e9:22:19:d9:b4:84:a7:59:8a:b7:b3:d5:74: f0:53:59:b8:dd:a7:af:7d:de:d1:e5:f6:54:45:fd:28:a4:ea: e5:3f:48:2f:de:52:c6:12:f8:b2:ec:df:8f:1c:e1:13:15:3a: 10:7b:e6:03:26:99:1d:be:9e:74:2f:57:de:9b:7a:96:ec:07: 49:fe:fa:1f:23:83:e9:4b:a6:26:e1:2c:72:56:c4:13:66:90: e7:46:66:55 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUV6TfYONgH3erQhYSSSY9zb7Y+QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFRTUzQ0I0RkE3RkQxODIxMjNGQUZGM0I3MDlDRjU3 NUFBOTZFNTAeFw0yNTA4MjEyMzU4NTNaFw0yNTA4MjcxMjI0NTNaMDMxMTAvBgNV BAMTKEIwNzQ0RDhCQjk0NjBCMjU5RUI0OEY3QUM0ODM2NTBGODI4MTFGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCheOnPLCC1NpFLkUIr0ODpw4UA OGdg75sLKA73bPxl4csXtBoHXs3Bak1yEKAef0JibkuXmkht7z1v86Jj9WGXlW/Q CBacEHy3Gz0QKaCDNNtM+FIEZzcSm/Ff2vA852619qqINuSqdzTaWXycyBI3eWDJ GBkHeh77CtMD4kSt6zG7UX2K2dzkGAJJ9GYE3LeLX5VNTnONQY4ex6o0Z44obTGW srloIb0Muj6cqzIs/j2mu3HdFIhQQNEkqoT7KlmlfRswDAsZmXIA+mdF7I9358pS /SnPc+tBcC0S5ibQkuueMJ86+X9bdn8qYddXTo8GekE6ADEPeUtw8hNeJhD1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsHRNi7lGCyWetI96xINlD4KBH1gwHwYDVR0j BBgwFoAUL+5Ty0+n/RghI/r/O3Cc9XWqluUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQkFEOUVDOUJCQjdGMjYyRjg4OUM5MTlCRDU0MEMxRTAw OUMwQTkxRTQyNzYyNkVFRjVCN0UwNkNDRDZCNzE0LzAvMkZFRTUzQ0I0RkE3RkQx ODIxMjNGQUZGM0I3MDlDRjU3NUFBOTZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkVFNTNDQjRGQTdGRDE4MjEy M0ZBRkYzQjcwOUNGNTc1QUE5NkU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUJBRDlFQzlCQkI3RjI2MkY4ODlDOTE5QkQ1NDBDMUUwMDlDMEE5MUU0 Mjc2MjZFRUY1QjdFMDZDQ0Q2QjcxNC8wLzJGRUU1M0NCNEZBN0ZEMTgyMTIzRkFG RjNCNzA5Q0Y1NzVBQTk2RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC88Spm4cmTYLm4oEAvXpJZuTIy DS0vQsFjreCj2nHKyHmp6Oa+XwWwN4M9e2PHxQWAlNe8IGiZ/GtqGN6jQCaKZ5tk ZQO+H6b4JQhiV4vqvgz5cY/+s/1amalSjSlDn5M3nrImHEJ8F/N58i9jPWZLazC3 wKhkdM24ZzELBp9L8KkhwLben++EcXYT207htjnQkKxDABlqQTPo84NLVhGXbWuC tm6cy+kiGdm0hKdZirez1XTwU1m43aevfd7R5fZURf0opOrlP0gv3lLGEviy7N+P HOETFToQe+YDJpkdvp50L1fem3qW7AdJ/vofI4PpS6Ym4SxyVsQTZpDnRmZV -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:19 2025 by rpki-client