$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft File: 973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft (raw, json) Hash identifier: uGOP5EkpZfhldBfFeVbkhlOpeozvc3v9A9mveZfx344= Subject key identifier: C6:52:65:2C:B8:02:47:A4:01:2F:02:5B:12:12:53:3F:21:1C:D4:66 Authority key identifier: 97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2 Certificate issuer: /CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2 Certificate serial: 4D6293B02BB6F119E9632549647B80B9A1DAD0BE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft Manifest number: 0111 Signing time: Sat 23 Aug 2025 12:12:17 +0000 Manifest this update: Sat 23 Aug 2025 12:07:17 +0000 Manifest next update: Wed 27 Aug 2025 16:20:17 +0000 Files and hashes: 1: 34352e3136322e38342e302f32342d3234203d3e20323637363832.roa (hash: iowUSCP6nkypTOfxS6/NXCn4qSq2Lozb7RA2QE+TmLI=) 2: 973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl (hash: kIxs6SAXr6OqK1xtMfzdbxybcGao9GFyJDZDenjUalk=) 3: 34352e3136322e38322e302f32332d3233203d3e20323637363832.roa (hash: gbLWvXqd/T2upCJcLwG0ybZEXPghql8tAA+ygok/I9U=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:62:93:b0:2b:b6:f1:19:e9:63:25:49:64:7b:80:b9:a1:da:d0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2 Validity Not Before: Aug 23 12:07:17 2025 GMT Not After : Aug 27 16:20:17 2025 GMT Subject: CN=C652652CB80247A4012F025B1212533F211CD466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:51:db:72:d2:55:5a:98:f9:3d:25:dc:27: 4d:af:94:cf:57:49:9a:74:f6:c2:be:80:6f:61:62: e4:c0:24:4c:83:0a:34:3e:0a:08:24:df:c3:29:f9: 85:c9:61:be:e7:d5:1a:a3:f8:4c:44:98:d0:0b:9e: 75:f9:39:34:a9:f1:22:d5:cd:07:a9:b5:44:8a:fb: 03:16:a2:8d:12:18:de:85:c7:23:85:79:8c:cf:69: 4b:6a:e6:6b:fa:f3:df:4a:01:59:1f:ba:35:63:33: 02:27:71:30:7d:c5:a5:39:27:7d:09:f5:aa:48:3c: 32:8c:26:c1:d2:27:2c:ee:d6:68:22:f5:8a:89:40: 0f:02:b0:54:2d:36:60:40:69:b1:53:f6:dd:5a:fa: d6:fa:86:0a:67:20:03:12:d8:26:cc:70:2c:68:41: e4:f0:f1:04:65:12:22:37:aa:62:65:15:8b:2f:11: 45:70:55:ff:3b:59:1d:ca:c2:06:0e:da:65:9a:db: 53:0f:93:46:3d:df:40:00:bb:7f:91:2c:db:63:67: 16:eb:22:9a:39:1d:5e:47:90:46:fd:c3:48:18:cb: 3d:d0:5b:42:8d:a3:78:84:3d:73:d5:e2:1f:83:41: 7e:94:64:08:eb:8d:1e:de:e9:d7:af:4b:bf:63:01: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:52:65:2C:B8:02:47:A4:01:2F:02:5B:12:12:53:3F:21:1C:D4:66 X509v3 Authority Key Identifier: keyid:97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:8c:b4:f0:62:5a:6a:ff:a2:24:5b:12:96:3b:b4:a5:5b:4e: f2:36:09:c5:fa:6a:c4:c5:84:32:ac:8a:d1:c8:b7:c0:1c:b0: b0:d8:f8:4f:dc:57:25:ab:aa:cb:e2:81:dc:74:4e:ff:5d:a6: 19:4a:93:e5:8d:c2:a0:0c:46:70:41:ef:f6:e6:d2:8f:ab:8a: a1:7e:df:06:f6:11:71:d1:aa:60:93:26:fa:60:58:ad:f3:20: 8e:65:22:b0:4c:02:e7:7c:e8:c7:8b:9f:18:16:d2:82:61:62: 7d:38:82:d5:ea:77:8e:0d:4b:b4:9f:53:6f:bf:4b:7e:69:db: de:d3:12:b9:ad:91:52:bc:92:57:23:b0:a8:65:a0:c9:24:36: b8:a4:5e:26:47:4d:e8:9c:9d:d8:20:d2:b1:0a:9f:5d:4d:0d: db:af:cb:b3:d5:65:c4:86:a9:0a:07:2c:4c:e3:1b:e4:9b:2c: 3b:ea:c1:62:60:d0:3c:8d:62:f0:7b:41:b5:5c:78:73:e4:a6: 04:36:d3:0e:7d:2d:4a:22:34:1c:c0:26:b0:fe:1e:25:d9:29: 45:26:b3:fc:d7:68:22:1e:53:87:ea:87:bf:5e:87:c6:78:43: 75:bd:52:dd:3e:d6:59:e9:56:d5:28:0a:76:e1:c3:da:76:51: 51:9a:6b:aa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTWKTsCu28RnpYyVJZHuAuaHa0L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTczRkNDRTVFMEYxNzM4Q0ZFQ0MxNTkyODlCQjI2OUY4 QzBCMUZFMjAeFw0yNTA4MjMxMjA3MTdaFw0yNTA4MjcxNjIwMTdaMDMxMTAvBgNV BAMTKEM2NTI2NTJDQjgwMjQ3QTQwMTJGMDI1QjEyMTI1MzNGMjExQ0Q0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNflHbctJVWpj5PSXcJ02vlM9X SZp09sK+gG9hYuTAJEyDCjQ+Cggk38Mp+YXJYb7n1Rqj+ExEmNALnnX5OTSp8SLV zQeptUSK+wMWoo0SGN6FxyOFeYzPaUtq5mv6899KAVkfujVjMwIncTB9xaU5J30J 9apIPDKMJsHSJyzu1mgi9YqJQA8CsFQtNmBAabFT9t1a+tb6hgpnIAMS2CbMcCxo QeTw8QRlEiI3qmJlFYsvEUVwVf87WR3KwgYO2mWa21MPk0Y930AAu3+RLNtjZxbr Ipo5HV5HkEb9w0gYyz3QW0KNo3iEPXPV4h+DQX6UZAjrjR7e6devS79jAUetAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxlJlLLgCR6QBLwJbEhJTPyEc1GYwHwYDVR0j BBgwFoAUlz/M5eDxc4z+zBWSibsmn4wLH+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GQkY5MUIxNzIwRDkxMjAyRUNGNEM0NDg1MjUzM0NCRjBC NzU0MEM1REQzQTFFRERBNjJGNkFEMjNBMzI1RkYwLzAvOTczRkNDRTVFMEYxNzM4 Q0ZFQ0MxNTkyODlCQjI2OUY4QzBCMUZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzNGQ0NFNUUwRjE3MzhDRkVD QzE1OTI4OUJCMjY5RjhDMEIxRkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkJGOTFCMTcyMEQ5MTIwMkVDRjRDNDQ4NTI1MzNDQkYwQjc1NDBDNURE M0ExRUREQTYyRjZBRDIzQTMyNUZGMC8wLzk3M0ZDQ0U1RTBGMTczOENGRUNDMTU5 Mjg5QkIyNjlGOEMwQjFGRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFjLTwYlpq/6IkWxKWO7SlW07y NgnF+mrExYQyrIrRyLfAHLCw2PhP3Fclq6rL4oHcdE7/XaYZSpPljcKgDEZwQe/2 5tKPq4qhft8G9hFx0apgkyb6YFit8yCOZSKwTALnfOjHi58YFtKCYWJ9OILV6neO DUu0n1Nvv0t+adve0xK5rZFSvJJXI7CoZaDJJDa4pF4mR03onJ3YINKxCp9dTQ3b r8uz1WXEhqkKByxM4xvkmyw76sFiYNA8jWLwe0G1XHhz5KYENtMOfS1KIjQcwCaw /h4l2SlFJrP812giHlOH6oe/XofGeEN1vVLdPtZZ6VbVKAp24cPadlFRmmuq -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:50 2025 by rpki-client