$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json) Hash identifier: oOnlwbYtZU91eiKhHquQo/0wgiz4Lm2/nlXV61o2qFM= Subject key identifier: 7F:3D:E0:91:51:9A:3B:42:E9:2A:D5:E5:E3:1C:F9:97:E9:1A:FA:90 Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Certificate serial: 09F1ABBACE9E7D3325AE6EE3158B37FAD2A21092 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft Manifest number: 0118 Signing time: Fri 05 Sep 2025 15:23:35 +0000 Manifest this update: Fri 05 Sep 2025 15:18:35 +0000 Manifest next update: Wed 10 Sep 2025 00:25:35 +0000 Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: MAJxrDm1ex5gG0+qVfg9yJc6ZorOreLgA5tyBVAPd0o=) 2: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: rGf/Ot8vpc4bXLZjtJMeJ64W68zetCQCjBNpV60KJLk=) 3: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: vb7Kyf31JcU4K7h1whk05luNX6Z6SSjkjzD3prLXHAE=) 4: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: Slx3RiEDbhu/dYi4bIyQA281pS6sucqApYUnGXZWpnE=) 5: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: a8Us3kI8SkWGmqoxEMJdOuQDpMUk4xinBahinzFU9DU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Sep 2025 00:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f1:ab:ba:ce:9e:7d:33:25:ae:6e:e3:15:8b:37:fa:d2:a2:10:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Validity Not Before: Sep 5 15:18:35 2025 GMT Not After : Sep 10 00:25:35 2025 GMT Subject: CN=7F3DE091519A3B42E92AD5E5E31CF997E91AFA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c2:c7:b3:2a:52:ad:a6:e0:c8:71:62:b6:ae: f1:da:b4:c0:c1:a0:0f:20:a8:24:01:8d:19:d0:d5: ee:72:25:b9:00:c1:98:c6:ef:ab:54:8b:de:cd:19: fd:68:1d:16:e3:e7:8a:34:0e:f9:bf:6c:55:29:c6: 2f:7c:fa:63:46:07:f7:81:ef:70:75:65:c1:5c:c2: 9b:19:42:4f:7e:bf:45:ac:2c:f1:94:ef:dd:25:5d: 49:ee:a0:05:25:49:ff:13:94:42:51:3f:d4:1c:c9: 6c:eb:27:72:fa:5b:d1:f8:15:16:10:e2:52:e7:60: 54:68:5b:e5:91:2f:33:79:5b:17:5d:df:19:a5:93: b3:32:7e:d4:a3:32:d4:82:d9:73:a8:b0:69:6f:aa: 10:d7:db:1f:f7:56:ec:51:f8:c1:95:d7:4c:64:cd: 63:a0:4f:1c:69:4d:79:9e:47:21:3a:7e:be:1f:b8: 81:57:dc:0e:cf:7f:0f:22:57:b6:cc:71:3d:e8:03: 22:b0:8a:29:4f:7e:0c:76:db:8b:9a:1c:72:35:12: 89:f0:70:40:81:32:a1:aa:16:c3:d2:6a:38:cf:25: f6:5e:e1:82:aa:75:53:16:4e:ad:99:60:96:67:45: ed:97:9b:f0:13:25:29:37:fc:97:e3:78:27:f5:c6: 9c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3D:E0:91:51:9A:3B:42:E9:2A:D5:E5:E3:1C:F9:97:E9:1A:FA:90 X509v3 Authority Key Identifier: keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4e:6a:44:d9:fc:58:b0:e6:9f:42:06:e5:6b:47:f6:4b:3e: f6:7a:45:0f:02:51:ba:d4:ec:67:74:ef:98:0f:5d:88:89:b5: ab:b2:e1:78:0f:9b:60:16:a7:cc:81:64:b6:07:ab:38:41:0e: 1d:77:12:3e:81:47:a1:a4:bb:b4:8a:b0:60:42:86:cd:29:03: 6a:00:08:07:d3:59:63:05:13:45:8b:07:24:71:e2:01:89:2f: ff:aa:04:85:7b:35:8e:70:59:23:84:7e:26:82:6d:b9:e1:e9: bd:25:2b:03:54:72:35:4f:8e:88:a2:60:d7:c5:70:ee:b5:6e: 44:ff:75:fa:1a:8f:c8:65:5c:db:bc:f7:e5:ce:d4:c5:b4:3e: f2:69:a6:4c:90:2d:2a:fd:d0:38:e4:a3:42:b9:b9:96:7e:f3: e4:76:bb:c4:d2:56:22:4d:77:ae:08:2b:d5:23:ad:e5:54:39: 6b:c9:f2:3e:b3:1b:7c:7d:dc:c0:8f:23:fc:82:37:30:da:3a: 93:46:d8:6c:07:99:14:9a:ed:0f:df:e9:c9:aa:0c:75:b2:32: 7a:23:b4:cf:97:8b:0a:1d:de:8f:6b:5d:f8:39:4e:6d:a5:11: 74:02:3c:79:8e:35:17:73:90:2b:ea:94:1e:4f:16:e9:21:62: a0:ee:db:90 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCfGrus6efTMlrm7jFYs3+tKiEJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4 RkJFOERBOTAeFw0yNTA5MDUxNTE4MzVaFw0yNTA5MTAwMDI1MzVaMDMxMTAvBgNV BAMTKDdGM0RFMDkxNTE5QTNCNDJFOTJBRDVFNUUzMUNGOTk3RTkxQUZBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwsezKlKtpuDIcWK2rvHatMDB oA8gqCQBjRnQ1e5yJbkAwZjG76tUi97NGf1oHRbj54o0Dvm/bFUpxi98+mNGB/eB 73B1ZcFcwpsZQk9+v0WsLPGU790lXUnuoAUlSf8TlEJRP9QcyWzrJ3L6W9H4FRYQ 4lLnYFRoW+WRLzN5Wxdd3xmlk7MyftSjMtSC2XOosGlvqhDX2x/3VuxR+MGV10xk zWOgTxxpTXmeRyE6fr4fuIFX3A7Pfw8iV7bMcT3oAyKwiilPfgx224uaHHI1Eonw cECBMqGqFsPSajjPJfZe4YKqdVMWTq2ZYJZnRe2Xm/ATJSk3/JfjeCf1xpzzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUfz3gkVGaO0LpKtXl4xz5l+ka+pAwHwYDVR0j BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4 RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1 QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxTmpE2fxYsOafQgbla0f2Sz72 ekUPAlG61OxndO+YD12IibWrsuF4D5tgFqfMgWS2B6s4QQ4ddxI+gUehpLu0irBg QobNKQNqAAgH01ljBRNFiwckceIBiS//qgSFezWOcFkjhH4mgm254em9JSsDVHI1 T46IomDXxXDutW5E/3X6Go/IZVzbvPflztTFtD7yaaZMkC0q/dA45KNCubmWfvPk drvE0lYiTXeuCCvVI63lVDlryfI+sxt8fdzAjyP8gjcw2jqTRthsB5kUmu0P3+nJ qgx1sjJ6I7TPl4sKHd6Pa134OU5tpRF0Ajx5jjUXc5Ar6pQeTxbpIWKg7tuQ -----END CERTIFICATE-----Generated at Sat Sep 6 14:15:40 2025 by rpki-client