$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.mft File: E965E5CF9E1070A4CE10F4A8BE0183D80413014D.mft (raw, json) Hash identifier: 56RI91QuwzH0NaPDAgS8Qz/u5ISW1Ac1FaEE3Q9f47A= Subject key identifier: B2:11:07:0E:CE:01:C9:D7:AA:A3:55:3D:D7:DF:6B:E2:F0:17:20:20 Authority key identifier: E9:65:E5:CF:9E:10:70:A4:CE:10:F4:A8:BE:01:83:D8:04:13:01:4D Certificate issuer: /CN=E965E5CF9E1070A4CE10F4A8BE0183D80413014D Certificate serial: 2A090F59AE62989027284B3E6B66BD6A57975981 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.mft Manifest number: E0 Signing time: Wed 20 Aug 2025 13:22:00 +0000 Manifest this update: Wed 20 Aug 2025 13:17:00 +0000 Manifest next update: Tue 26 Aug 2025 09:33:00 +0000 Files and hashes: 1: 3137302e37382e3235322e302f32322d3234203d3e20323733383334.roa (hash: nkCB8c6FSFXFM4pHzOgMV+piC1zaBwMOrb8yZMHsGv0=) 2: E965E5CF9E1070A4CE10F4A8BE0183D80413014D.crl (hash: seRHzQ/AP9K0koL3AQMsc8f7JsUJRgv1UQAmSA7OnMA=) 3: 323830333a633935303a3a2f33322d3438203d3e20323733383334.roa (hash: LuNevXdG2Q2+2fVIoNCGElDeU+o88/cfE3YpUJCWB3I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.crl rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 09:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:09:0f:59:ae:62:98:90:27:28:4b:3e:6b:66:bd:6a:57:97:59:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E965E5CF9E1070A4CE10F4A8BE0183D80413014D Validity Not Before: Aug 20 13:17:00 2025 GMT Not After : Aug 26 09:33:00 2025 GMT Subject: CN=B211070ECE01C9D7AAA3553DD7DF6BE2F0172020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:7a:1b:bd:7a:6b:5b:4e:d3:ef:e4:a2:24: c6:2f:14:3c:1a:18:d1:45:14:44:a9:4e:38:7d:1a: 6d:77:5c:5d:59:40:89:4e:19:49:ec:9a:9c:8c:5f: a9:89:b1:fd:00:63:41:a7:6c:8c:fc:a3:56:00:e4: 8e:d6:be:29:13:a1:7e:5a:3c:07:d0:8c:d0:45:ac: fa:ab:d5:52:40:5e:49:62:f1:3d:12:a6:01:9c:f0: 4e:49:2d:30:82:f9:e0:42:79:c8:05:11:01:4e:7c: cf:dd:6f:1d:79:5a:79:ae:06:cf:a6:a4:d9:4d:23: 4d:97:a6:30:00:f0:52:33:24:0c:58:f3:64:39:86: dd:db:ca:0b:43:b2:91:61:72:6f:4d:97:a5:1e:7e: 59:b2:13:6a:ee:a5:67:63:71:5e:93:21:19:a0:d9: de:37:4a:54:7e:79:4d:8a:1e:70:20:19:2b:a8:92: 58:30:bd:3f:d9:9d:41:8d:bd:41:ae:16:2a:bc:a9: 68:1f:bd:33:58:38:54:42:d6:40:07:4d:e7:4e:5b: 49:8a:a2:4a:3a:7e:da:c4:65:d5:6d:d1:17:35:9a: 9d:46:5b:4e:82:aa:5b:05:9d:ff:ee:bb:9c:10:bf: 1d:eb:47:38:a3:97:5c:e0:2b:15:40:a9:86:10:ea: e9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:11:07:0E:CE:01:C9:D7:AA:A3:55:3D:D7:DF:6B:E2:F0:17:20:20 X509v3 Authority Key Identifier: keyid:E9:65:E5:CF:9E:10:70:A4:CE:10:F4:A8:BE:01:83:D8:04:13:01:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a8:92:71:68:67:0f:c0:78:11:15:52:ad:fe:2f:33:9f:6f: fd:7e:68:12:10:a3:f7:5e:1b:04:11:ad:96:23:16:e7:b7:87: fc:38:f0:15:7e:42:fc:09:4a:25:db:3c:cf:83:14:12:bd:d7: 89:8c:3d:8f:aa:fc:6e:4b:7a:b5:f3:29:8e:b4:81:2a:86:d0: 9f:5d:48:a2:25:eb:98:2a:e3:8f:56:15:fd:d4:9b:e2:d2:a5: ea:15:e2:d0:74:ae:e3:6f:5f:e1:28:20:ef:61:7e:94:0b:89: e1:b1:00:69:72:57:46:f6:6b:3e:15:8e:42:3d:c8:19:51:31: 32:5a:dc:2f:ed:78:b1:1c:4c:d5:2f:93:75:85:d2:0e:ae:36: 09:41:30:a2:07:97:82:37:ad:45:43:c4:3d:c3:12:be:1a:51: eb:7e:a7:ef:d8:69:6a:9a:b9:72:da:ed:a8:a6:63:c5:e9:ac: 57:66:f1:7e:93:57:7d:30:62:88:23:06:11:17:9d:cd:54:f9: c7:5d:3d:e2:eb:d5:ba:69:a0:0e:3b:93:e1:00:90:cb:ac:a1: 97:75:56:3e:2a:ec:3f:46:92:69:ba:6d:09:30:c0:86:c1:b5: ea:96:58:97:82:f3:e2:5f:02:62:a4:d8:20:c6:5d:f7:ff:6f: 52:0e:99:9d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKgkPWa5imJAnKEs+a2a9aleXWYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk2NUU1Q0Y5RTEwNzBBNENFMTBGNEE4QkUwMTgzRDgw NDEzMDE0RDAeFw0yNTA4MjAxMzE3MDBaFw0yNTA4MjYwOTMzMDBaMDMxMTAvBgNV BAMTKEIyMTEwNzBFQ0UwMUM5RDdBQUEzNTUzREQ3REY2QkUyRjAxNzIwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2XobvXprW07T7+SiJMYvFDwa GNFFFESpTjh9Gm13XF1ZQIlOGUnsmpyMX6mJsf0AY0GnbIz8o1YA5I7WvikToX5a PAfQjNBFrPqr1VJAXkli8T0SpgGc8E5JLTCC+eBCecgFEQFOfM/dbx15WnmuBs+m pNlNI02XpjAA8FIzJAxY82Q5ht3bygtDspFhcm9Nl6UeflmyE2rupWdjcV6TIRmg 2d43SlR+eU2KHnAgGSuoklgwvT/ZnUGNvUGuFiq8qWgfvTNYOFRC1kAHTedOW0mK oko6ftrEZdVt0Rc1mp1GW06CqlsFnf/uu5wQvx3rRzijl1zgKxVAqYYQ6ulfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUshEHDs4Bydeqo1U9199r4vAXICAwHwYDVR0j BBgwFoAU6WXlz54QcKTOEPSovgGD2AQTAU0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GOEEzQTVERTgwOERFNDg4M0ZFQjc1NEZDRDFFOUNDQTlC OTdDMUFCMDFCMkU2RUU4N0VFMzcyQjBERDNBMTAyLzAvRTk2NUU1Q0Y5RTEwNzBB NENFMTBGNEE4QkUwMTgzRDgwNDEzMDE0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTY1RTVDRjlFMTA3MEE0Q0Ux MEY0QThCRTAxODNEODA0MTMwMTRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjhBM0E1REU4MDhERTQ4ODNGRUI3NTRGQ0QxRTlDQ0E5Qjk3QzFBQjAx QjJFNkVFODdFRTM3MkIwREQzQTEwMi8wL0U5NjVFNUNGOUUxMDcwQTRDRTEwRjRB OEJFMDE4M0Q4MDQxMzAxNEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjqJJxaGcPwHgRFVKt/i8zn2/9 fmgSEKP3XhsEEa2WIxbnt4f8OPAVfkL8CUol2zzPgxQSvdeJjD2PqvxuS3q18ymO tIEqhtCfXUiiJeuYKuOPVhX91Jvi0qXqFeLQdK7jb1/hKCDvYX6UC4nhsQBpcldG 9ms+FY5CPcgZUTEyWtwv7XixHEzVL5N1hdIOrjYJQTCiB5eCN61FQ8Q9wxK+GlHr fqfv2Glqmrly2u2opmPF6axXZvF+k1d9MGKIIwYRF53NVPnHXT3i69W6aaAOO5Ph AJDLrKGXdVY+Kuw/RpJpum0JMMCGwbXqlliXgvPiXwJipNggxl33/29SDpmd -----END CERTIFICATE-----Generated at Sat Aug 23 11:03:29 2025 by rpki-client