$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft File: A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft (raw, json) Hash identifier: mJrala2BeeUo1p3lgdoBlOJcpZg+R/7K5mLKpEQsqSE= Subject key identifier: 35:A6:41:6A:2C:0F:98:E3:47:50:7F:B0:98:CA:0D:68:7F:A4:06:45 Authority key identifier: A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78 Certificate issuer: /CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478 Certificate serial: 55B6EC04D71940EB07B9012CDF51322062294D8A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft Manifest number: 0114 Signing time: Sat 06 Sep 2025 05:07:09 +0000 Manifest this update: Sat 06 Sep 2025 05:02:09 +0000 Manifest next update: Thu 11 Sep 2025 15:46:09 +0000 Files and hashes: 1: A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl (hash: +FQXykZsHjtCTgufX1LdDBAfja9/Er5o9kYQNKk9Kvo=) 2: 323830333a643638303a3a2f33322d3336203d3e20323633323234.roa (hash: iFfy/fPWKpIoluhGN2CThRqibNtWe9X59SrKN8WRLAM=) 3: 3137372e39312e3234382e302f32312d3234203d3e20323633323234.roa (hash: yrB/l0MxLVnwRds3mdsUMC0Y5ZI+kRtQ1bArHu/Ma8w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 11 Sep 2025 13:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b6:ec:04:d7:19:40:eb:07:b9:01:2c:df:51:32:20:62:29:4d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478 Validity Not Before: Sep 6 05:02:09 2025 GMT Not After : Sep 11 15:46:09 2025 GMT Subject: CN=35A6416A2C0F98E347507FB098CA0D687FA40645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:a0:ac:3a:ac:32:f6:1a:0f:ca:33:57:fd: 25:c4:2c:e5:a8:01:33:25:a0:a2:a8:27:79:b6:f5: f3:83:60:c3:18:14:fd:6b:bb:68:1b:fb:70:fd:7a: 64:24:10:4b:04:27:bb:83:f2:a7:33:26:12:82:3d: 5d:2a:ee:86:bc:4b:79:90:f1:c6:b3:70:b0:42:ee: 41:7a:bf:fa:e0:f7:b6:7d:7c:df:ad:27:1d:37:72: 38:89:b7:2f:7e:f9:c0:0c:e2:08:a4:71:9b:45:6f: 25:d5:18:8c:59:ee:9b:5a:4a:ab:a9:4a:73:9a:9e: fa:2d:2f:08:f5:89:b4:db:35:1f:73:9e:ac:1f:3a: 11:6e:67:fe:58:b4:e6:52:0d:19:b4:da:d7:ca:7e: 88:78:1d:a9:9b:6b:ab:dd:f2:ed:df:70:a1:89:48: 83:4e:3a:d1:b4:c0:17:b4:54:3a:42:28:ad:c3:51: 17:79:3b:a7:8d:4b:54:c0:e4:95:ff:a4:88:1e:7a: 57:5f:38:26:30:c1:9e:d5:53:16:6a:19:9f:34:f1: 5e:0b:3e:db:f2:ea:d0:26:8c:0a:9b:69:35:46:02: 26:d9:1c:39:1d:eb:b6:9f:0a:14:74:71:b8:d3:28: cc:cf:e2:eb:3b:98:46:50:00:09:c1:72:da:10:75: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A6:41:6A:2C:0F:98:E3:47:50:7F:B0:98:CA:0D:68:7F:A4:06:45 X509v3 Authority Key Identifier: keyid:A9:96:A5:FE:83:CD:F4:C0:C2:A3:11:F2:2A:2C:F3:DB:1D:02:C4:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E89A25762E817B4ABAD4AE619618A2027CDA10E65EA17AE320EAB24829F102F7/0/A996A5FE83CDF4C0C2A311F22A2CF3DB1D02C478.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:46:78:73:b9:a2:84:90:ad:ef:20:56:ad:ae:62:c4:d6:a1: a7:72:d9:40:93:5a:cb:97:88:ba:36:92:24:79:7f:67:66:5a: ea:3e:7a:7b:95:7a:a7:11:45:6a:0a:e4:2d:8e:49:a6:3a:f6: 34:ff:2f:01:16:4d:98:de:e5:6a:21:3d:5d:0b:be:8c:1f:0e: d4:f8:52:90:82:78:e8:c2:59:24:4f:94:83:fc:18:b1:41:96: 4d:97:b9:fa:09:dc:55:e8:ff:d8:5a:96:dc:63:7f:47:24:4f: d5:23:e4:39:65:ee:1a:80:28:66:43:4e:4a:90:3b:46:57:b7: 7b:54:0a:2d:db:c3:d5:d3:9f:f4:df:4e:75:85:45:f0:f8:90: 89:ad:b1:be:fc:de:0c:c4:88:50:9d:56:29:3f:f8:57:9d:02: 97:40:dd:41:35:b1:4a:3e:2b:a2:0a:86:f9:21:2f:e2:aa:74: a4:aa:6f:cf:0c:18:23:37:e5:b7:d4:d7:9f:44:f6:e6:00:6a: de:01:5b:88:38:37:fe:ff:e0:98:cc:02:12:b4:98:85:f1:82: c8:b0:78:6c:e9:9d:78:93:64:1e:2b:16:88:c2:fc:ef:45:33: b7:a9:d3:62:4c:c5:a6:d4:c8:36:9e:ed:c1:8e:66:71:8b:67: 23:7d:40:0e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVbbsBNcZQOsHuQEs31EyIGIpTYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk5NkE1RkU4M0NERjRDMEMyQTMxMUYyMkEyQ0YzREIx RDAyQzQ3ODAeFw0yNTA5MDYwNTAyMDlaFw0yNTA5MTExNTQ2MDlaMDMxMTAvBgNV BAMTKDM1QTY0MTZBMkMwRjk4RTM0NzUwN0ZCMDk4Q0EwRDY4N0ZBNDA2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2aCsOqwy9hoPyjNX/SXELOWo ATMloKKoJ3m29fODYMMYFP1ru2gb+3D9emQkEEsEJ7uD8qczJhKCPV0q7oa8S3mQ 8cazcLBC7kF6v/rg97Z9fN+tJx03cjiJty9++cAM4gikcZtFbyXVGIxZ7ptaSqup SnOanvotLwj1ibTbNR9znqwfOhFuZ/5YtOZSDRm02tfKfoh4Hamba6vd8u3fcKGJ SINOOtG0wBe0VDpCKK3DURd5O6eNS1TA5JX/pIgeeldfOCYwwZ7VUxZqGZ808V4L Ptvy6tAmjAqbaTVGAibZHDkd67afChR0cbjTKMzP4us7mEZQAAnBctoQdVR9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNaZBaiwPmONHUH+wmMoNaH+kBkUwHwYDVR0j BBgwFoAUqZal/oPN9MDCoxHyKizz2x0CxHgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FODlBMjU3NjJFODE3QjRBQkFENEFFNjE5NjE4QTIwMjdD REExMEU2NUVBMTdBRTMyMEVBQjI0ODI5RjEwMkY3LzAvQTk5NkE1RkU4M0NERjRD MEMyQTMxMUYyMkEyQ0YzREIxRDAyQzQ3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTk2QTVGRTgzQ0RGNEMwQzJB MzExRjIyQTJDRjNEQjFEMDJDNDc4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTg5QTI1NzYyRTgxN0I0QUJBRDRBRTYxOTYxOEEyMDI3Q0RBMTBFNjVF QTE3QUUzMjBFQUIyNDgyOUYxMDJGNy8wL0E5OTZBNUZFODNDREY0QzBDMkEzMTFG MjJBMkNGM0RCMUQwMkM0NzgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSRnhzuaKEkK3vIFatrmLE1qGn ctlAk1rLl4i6NpIkeX9nZlrqPnp7lXqnEUVqCuQtjkmmOvY0/y8BFk2Y3uVqIT1d C76MHw7U+FKQgnjowlkkT5SD/BixQZZNl7n6CdxV6P/YWpbcY39HJE/VI+Q5Ze4a gChmQ05KkDtGV7d7VAot28PV05/03051hUXw+JCJrbG+/N4MxIhQnVYpP/hXnQKX QN1BNbFKPiuiCob5IS/iqnSkqm/PDBgjN+W31NefRPbmAGreAVuIODf+/+CYzAIS tJiF8YLIsHhs6Z14k2QeKxaIwvzvRTO3qdNiTMWm1Mg2nu3BjmZxi2cjfUAO -----END CERTIFICATE-----Generated at Sat Sep 6 14:28:31 2025 by rpki-client