$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft File: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json) Hash identifier: kTW23UfQqoANT6Sx4CVDiZ4Aiz+gfKFhKi/FaTztu+4= Subject key identifier: 68:FA:86:9B:18:17:07:DC:C5:72:1D:AC:96:76:97:A0:0E:F8:A8:22 Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 Certificate issuer: /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Certificate serial: 2B843F8BF4D3BDE55C2B3E564DBC4739F825533F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft Manifest number: 0108 Signing time: Fri 22 Aug 2025 16:59:43 +0000 Manifest this update: Fri 22 Aug 2025 16:54:43 +0000 Manifest next update: Tue 26 Aug 2025 23:37:43 +0000 Files and hashes: 1: 323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (hash: 7UfKWaQAr95bPBridFn/arYQ/3LdRnATvxQ9sAAQ4B4=) 2: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: jOyaarGwiB6ZNhrXHLxiVp/569nGPk/JQ8PLn/F/92c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 23:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:84:3f:8b:f4:d3:bd:e5:5c:2b:3e:56:4d:bc:47:39:f8:25:53:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Validity Not Before: Aug 22 16:54:43 2025 GMT Not After : Aug 26 23:37:43 2025 GMT Subject: CN=68FA869B181707DCC5721DAC967697A00EF8A822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:50:92:cd:d9:87:8e:04:e9:9d:31:b8:e9: fb:89:ab:3d:c1:65:b0:80:9d:67:3d:17:e4:5b:ee: c1:3d:6a:94:26:18:29:68:4a:14:f2:3f:2f:16:2c: e3:76:1e:7d:f9:8a:12:bf:fa:79:da:10:ec:f9:8e: a5:76:fc:74:18:39:ff:f6:a5:fd:5c:3c:f8:88:8e: 4b:8e:b1:4e:8f:a6:76:04:71:d2:50:0f:46:5d:7b: 51:82:35:b6:73:36:12:47:ab:11:1a:0d:05:f1:69: c0:7e:96:2f:c8:bc:f0:25:84:0b:50:ec:b8:75:da: 04:e6:53:aa:50:7b:e3:e3:36:65:12:49:d8:ed:21: 48:7d:67:00:c0:ae:4f:65:14:65:1b:59:53:73:50: 47:36:af:18:4b:b3:e6:f9:9d:d5:0a:3c:e0:b0:a9: b4:75:1a:db:d2:39:16:8b:e1:8e:4e:74:02:ec:ee: f4:b1:9e:fd:2d:27:d5:f8:8f:04:92:40:a6:a5:73: d8:d3:c0:81:32:e0:0a:da:25:79:b3:39:a6:3a:a7: 09:1d:c2:d7:5b:6c:72:40:44:85:3b:ba:ee:cf:fb: f3:a9:33:2e:6d:c5:af:0d:11:35:32:7f:79:bb:12: 7f:f8:4b:5f:1e:fc:14:87:3f:86:c9:95:54:05:95: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:86:9B:18:17:07:DC:C5:72:1D:AC:96:76:97:A0:0E:F8:A8:22 X509v3 Authority Key Identifier: keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f7:72:f7:af:b3:c8:83:d2:23:aa:26:6c:bf:48:a6:cf:b7: f1:c8:55:56:ff:58:71:eb:a6:31:f5:78:25:a9:60:12:20:e1: 24:6e:c9:06:8e:1a:e9:90:b1:0f:c9:07:10:5d:80:f5:62:74: 3b:0c:d8:84:4b:b4:34:ae:8c:97:03:f4:51:32:df:fd:9b:12: a9:8d:e6:39:b8:85:ce:19:bf:cd:a3:cb:d2:ef:54:91:b8:17: 54:3b:b5:dc:85:df:27:49:91:66:ae:94:47:46:32:a6:d7:17: 0a:4c:09:28:bf:16:45:a9:53:5d:b4:5e:14:ea:1c:72:7f:10: b4:86:f1:18:cb:46:86:4f:ff:ac:07:05:0d:71:59:d9:d6:a1: 7e:d5:08:78:30:7e:7b:b5:75:3d:20:a3:ec:5d:08:45:af:91: e7:1c:53:f8:d6:10:59:89:47:cc:c2:6a:f4:ac:cc:1b:88:d0: 81:ac:c6:8a:44:a9:8d:67:5a:f0:5e:2a:9d:b5:64:b3:fa:a6: 4a:a5:5b:10:5e:f6:be:06:b1:14:bd:49:6f:99:62:7c:6a:78: 36:9b:48:84:a3:83:a3:bd:31:58:a0:0c:17:38:dd:e5:b3:78: a9:c9:82:7b:30:3e:2f:21:f3:aa:71:65:cf:56:24:d0:b1:dd: e4:79:e9:8f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK4Q/i/TTveVcKz5WTbxHOfglUz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCOERGMUYwQkU2MDlGQjZGOTgwMDNFQjk2QzlDREU3 MkI1M0FGODAeFw0yNTA4MjIxNjU0NDNaFw0yNTA4MjYyMzM3NDNaMDMxMTAvBgNV BAMTKDY4RkE4NjlCMTgxNzA3RENDNTcyMURBQzk2NzY5N0EwMEVGOEE4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZrlCSzdmHjgTpnTG46fuJqz3B ZbCAnWc9F+Rb7sE9apQmGCloShTyPy8WLON2Hn35ihK/+nnaEOz5jqV2/HQYOf/2 pf1cPPiIjkuOsU6PpnYEcdJQD0Zde1GCNbZzNhJHqxEaDQXxacB+li/IvPAlhAtQ 7Lh12gTmU6pQe+PjNmUSSdjtIUh9ZwDArk9lFGUbWVNzUEc2rxhLs+b5ndUKPOCw qbR1GtvSORaL4Y5OdALs7vSxnv0tJ9X4jwSSQKalc9jTwIEy4AraJXmzOaY6pwkd wtdbbHJARIU7uu7P+/OpMy5txa8NETUyf3m7En/4S18e/BSHP4bJlVQFlapDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaPqGmxgXB9zFch2slnaXoA74qCIwHwYDVR0j BBgwFoAU37jfHwvmCftvmAA+uWyc3nK1OvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNzEzNDREQzk5NzdBRjIxQjJGM0NERjY1NTYyODI5NTk2 OEY5OTA3OUI1QTlGMzlBQkNEMDRBNzk0OUQ5RDMxLzAvREZCOERGMUYwQkU2MDlG QjZGOTgwMDNFQjk2QzlDREU3MkI1M0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkI4REYxRjBCRTYwOUZCNkY5 ODAwM0VCOTZDOUNERTcyQjUzQUY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjcxMzQ0REM5OTc3QUYyMUIyRjNDREY2NTU2MjgyOTU5NjhGOTkwNzlC NUE5RjM5QUJDRDA0QTc5NDlEOUQzMS8wL0RGQjhERjFGMEJFNjA5RkI2Rjk4MDAz RUI5NkM5Q0RFNzJCNTNBRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBx93L3r7PIg9IjqiZsv0imz7fx yFVW/1hx66Yx9XglqWASIOEkbskGjhrpkLEPyQcQXYD1YnQ7DNiES7Q0royXA/RR Mt/9mxKpjeY5uIXOGb/No8vS71SRuBdUO7Xchd8nSZFmrpRHRjKm1xcKTAkovxZF qVNdtF4U6hxyfxC0hvEYy0aGT/+sBwUNcVnZ1qF+1Qh4MH57tXU9IKPsXQhFr5Hn HFP41hBZiUfMwmr0rMwbiNCBrMaKRKmNZ1rwXiqdtWSz+qZKpVsQXva+BrEUvUlv mWJ8ang2m0iEo4OjvTFYoAwXON3ls3ipyYJ7MD4vIfOqcWXPViTQsd3keemP -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:39 2025 by rpki-client