$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft File: C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft (raw, json) Hash identifier: 2+gGoz1HOMEBMQ8iA2buwlcHorBUEk3vHajYy34kc9w= Subject key identifier: 8C:20:B8:D4:6C:6C:9F:0F:B3:B4:AE:13:51:B8:BC:8C:F5:F6:37:8A Authority key identifier: C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35 Certificate issuer: /CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35 Certificate serial: 3B2ADE2B68AFDDFE8CDD19DD2EE10E8AC27724D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft Manifest number: 011A Signing time: Tue 16 Sep 2025 08:40:38 +0000 Manifest this update: Tue 16 Sep 2025 08:35:38 +0000 Manifest next update: Mon 22 Sep 2025 07:23:38 +0000 Files and hashes: 1: 3139302e3130332e3134342e302f32322d3234203d3e20323632323331.roa (hash: v2rEv3FgDufDMfiddhOq/5IMaazVdU1+nzVGmOOrvh4=) 2: C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl (hash: S9Qbi49i2TT0LGQRP5E5O9NK9D3gBBDUSLZL5fn7Gz4=) 3: 3139302e3130332e3134342e302f32322d3234203d3e20323730303630.roa (hash: z8PWDQjgXLgHvlgmt5clddGGBCsaQqa/XrM1PWBGK5A=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 07:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:2a:de:2b:68:af:dd:fe:8c:dd:19:dd:2e:e1:0e:8a:c2:77:24:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C708C4738D04B5D53F7BC9087DDEBB777119CA35 Validity Not Before: Sep 16 08:35:38 2025 GMT Not After : Sep 22 07:23:38 2025 GMT Subject: CN=8C20B8D46C6C9F0FB3B4AE1351B8BC8CF5F6378A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:73:3c:bc:64:31:ab:2d:f3:39:cb:5a:17: bd:27:ac:5b:f6:35:c4:90:a8:d0:05:b9:7c:07:59: 44:b4:43:23:cc:48:e2:2a:cf:c7:55:0b:fd:8f:37: af:02:5e:3e:d8:dc:d8:46:f8:4c:9d:11:59:8b:82: 9f:e4:14:7a:a7:73:0e:ed:b0:e8:14:9c:15:98:fd: 91:b5:bc:ef:90:c8:7e:9f:40:5f:25:2b:f4:9d:eb: 3e:8c:80:c7:63:7c:9a:8b:2d:f4:dd:21:2f:9a:77: c6:51:29:74:d7:b4:a2:62:bc:cd:1e:75:a4:5f:9f: 5e:3d:3b:1d:fd:89:e4:34:ef:9f:55:f1:33:7c:4c: 2c:58:6b:6b:7b:94:33:39:64:bc:be:17:81:73:a3: 1e:a8:b0:8f:08:d3:d2:4c:26:e3:0b:64:e9:1a:05: 6c:86:f1:36:d6:d7:f3:24:f9:98:5d:2c:01:e9:e7: f9:53:4c:de:68:3a:7a:43:38:3c:e4:0b:7c:e5:95: 44:6a:90:e7:d6:23:63:d2:06:35:16:0c:2a:b0:15: ce:49:eb:e0:e6:e8:b2:6a:cf:c2:1e:5c:e1:e6:38: 62:cc:d7:0e:e2:44:53:9d:10:f4:88:6b:3c:b5:a0: 16:47:3f:ef:7d:67:de:66:7e:08:d9:1e:8e:e1:83: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:20:B8:D4:6C:6C:9F:0F:B3:B4:AE:13:51:B8:BC:8C:F5:F6:37:8A X509v3 Authority Key Identifier: keyid:C7:08:C4:73:8D:04:B5:D5:3F:7B:C9:08:7D:DE:BB:77:71:19:CA:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B9CB779B5F6259C90D9BA26EF905A08B49F18D1F5ED130EB30C020C36E48C90/0/C708C4738D04B5D53F7BC9087DDEBB777119CA35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ac:5c:de:4e:14:17:ed:35:7f:c0:c8:de:4a:03:9a:e7:0b: e4:b4:65:89:13:07:b9:7f:4b:b9:97:ce:c6:83:3f:9f:5c:81: 17:d1:65:6a:ac:f8:60:db:d9:74:c0:29:93:df:ee:b8:48:ec: 80:f9:07:86:62:33:d3:dd:c8:11:a4:ad:d7:3c:c7:83:9e:4a: d4:38:9b:c8:e1:d5:84:89:29:5e:62:6d:30:2a:61:20:a9:bc: e4:4c:52:25:0f:98:b3:8a:3e:a2:ee:e9:95:a5:3c:22:0f:39: ff:da:04:47:b6:65:19:67:44:96:9b:98:e0:aa:8e:4c:cb:84: da:f9:e3:5f:ac:f0:5c:a3:be:7b:9e:f1:4b:5d:f9:29:35:07: 38:b2:bb:94:46:8c:e2:37:d1:f0:2c:3d:0a:ad:61:6e:04:ea: 81:76:ed:cf:89:38:c2:db:52:61:3c:0b:69:db:c9:fe:3d:e7: a4:50:e7:49:1e:6c:d0:31:3a:2f:f0:72:89:d7:16:7b:0f:df: dc:b1:7b:38:e6:92:ef:9a:39:97:c3:61:32:97:a0:ea:42:c7: 34:38:31:49:61:41:3a:c2:4e:a6:ec:29:2b:2e:be:70:be:83: 51:66:f3:53:dd:e1:a6:d0:b9:b4:11:28:68:d7:cd:1d:39:f8: 48:a9:7f:70 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOyreK2iv3f6M3RndLuEOisJ3JNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwOEM0NzM4RDA0QjVENTNGN0JDOTA4N0RERUJCNzc3 MTE5Q0EzNTAeFw0yNTA5MTYwODM1MzhaFw0yNTA5MjIwNzIzMzhaMDMxMTAvBgNV BAMTKDhDMjBCOEQ0NkM2QzlGMEZCM0I0QUUxMzUxQjhCQzhDRjVGNjM3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC723M8vGQxqy3zOctaF70nrFv2 NcSQqNAFuXwHWUS0QyPMSOIqz8dVC/2PN68CXj7Y3NhG+EydEVmLgp/kFHqncw7t sOgUnBWY/ZG1vO+QyH6fQF8lK/Sd6z6MgMdjfJqLLfTdIS+ad8ZRKXTXtKJivM0e daRfn149Ox39ieQ0759V8TN8TCxYa2t7lDM5ZLy+F4Fzox6osI8I09JMJuMLZOka BWyG8TbW1/Mk+ZhdLAHp5/lTTN5oOnpDODzkC3zllURqkOfWI2PSBjUWDCqwFc5J 6+Dm6LJqz8IeXOHmOGLM1w7iRFOdEPSIazy1oBZHP+99Z95mfgjZHo7hg3AVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjCC41Gxsnw+ztK4TUbi8jPX2N4owHwYDVR0j BBgwFoAUxwjEc40EtdU/e8kIfd67d3EZyjUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQjlDQjc3OUI1RjYyNTlDOTBEOUJBMjZFRjkwNUEwOEI0 OUYxOEQxRjVFRDEzMEVCMzBDMDIwQzM2RTQ4QzkwLzAvQzcwOEM0NzM4RDA0QjVE NTNGN0JDOTA4N0RERUJCNzc3MTE5Q0EzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzA4QzQ3MzhEMDRCNUQ1M0Y3 QkM5MDg3RERFQkI3NzcxMTlDQTM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEI5Q0I3NzlCNUY2MjU5QzkwRDlCQTI2RUY5MDVBMDhCNDlGMThEMUY1 RUQxMzBFQjMwQzAyMEMzNkU0OEM5MC8wL0M3MDhDNDczOEQwNEI1RDUzRjdCQzkw ODdEREVCQjc3NzExOUNBMzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxrFzeThQX7TV/wMjeSgOa5wvk tGWJEwe5f0u5l87Ggz+fXIEX0WVqrPhg29l0wCmT3+64SOyA+QeGYjPT3cgRpK3X PMeDnkrUOJvI4dWEiSleYm0wKmEgqbzkTFIlD5izij6i7umVpTwiDzn/2gRHtmUZ Z0SWm5jgqo5My4Ta+eNfrPBco757nvFLXfkpNQc4sruURoziN9HwLD0KrWFuBOqB du3PiTjC21JhPAtp28n+PeekUOdJHmzQMTov8HKJ1xZ7D9/csXs45pLvmjmXw2Ey l6DqQsc0ODFJYUE6wk6m7CkrLr5wvoNRZvNT3eGm0Lm0ESho180dOfhIqX9w -----END CERTIFICATE-----Generated at Thu Sep 18 23:13:24 2025 by rpki-client