$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft File: 24CA8C9C613F74DE73C0153A83A206D0476833FF.mft (raw, json) Hash identifier: rIT76w14uSa2zXiQ/1sSY0hP5h1N4CB2iRxZCp7P1Sc= Subject key identifier: F1:83:3A:88:E8:BE:0E:10:30:49:79:77:97:64:54:68:E7:56:8C:77 Authority key identifier: 24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF Certificate issuer: /CN=24CA8C9C613F74DE73C0153A83A206D0476833FF Certificate serial: 648F463B02704A31ECCCD289E6FD1F8D60633E81 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft Manifest number: 010A Signing time: Wed 20 Aug 2025 02:30:01 +0000 Manifest this update: Wed 20 Aug 2025 02:25:01 +0000 Manifest next update: Mon 25 Aug 2025 15:14:01 +0000 Files and hashes: 1: 323830333a623536303a3a2f33322d3332203d3e203532343638.roa (hash: /XnPWU8TN21UwONbR3guY36ahmD93W3hsdLPKNH4mQ8=) 2: 24CA8C9C613F74DE73C0153A83A206D0476833FF.crl (hash: 2NXDwJVkfPZveoiPKCHhqMqaoLmwgCTRmp1zn7w+ASM=) 3: 34352e3138322e34332e302f32342d3234203d3e203532343638.roa (hash: j4pxhGczcvfub+1pWmQ3u0tMIFrBZCIDiCOow0FuYXU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 Aug 2025 05:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8f:46:3b:02:70:4a:31:ec:cc:d2:89:e6:fd:1f:8d:60:63:3e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24CA8C9C613F74DE73C0153A83A206D0476833FF Validity Not Before: Aug 20 02:25:01 2025 GMT Not After : Aug 25 15:14:01 2025 GMT Subject: CN=F1833A88E8BE0E103049797797645468E7568C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:83:48:77:e8:bd:99:4e:08:b8:b1:f9:47: c6:47:60:26:f0:28:4d:12:c5:2f:db:07:2b:17:3b: 24:74:11:c6:29:f5:a6:77:c3:fa:30:f0:6a:b8:86: 2c:5a:11:90:7a:4f:31:59:71:f0:0d:36:2e:a9:cb: 11:79:6a:d8:6c:3d:b9:61:f4:fa:94:5c:7d:05:d4: 57:be:0d:1f:ab:d2:19:df:1b:bb:9e:7b:66:29:a4: 72:f1:2a:1b:17:4b:c7:57:a8:6f:00:df:65:26:10: de:24:52:97:8b:f9:42:1d:66:74:e9:c3:ad:6a:99: 6f:13:ee:6e:47:46:d7:96:31:c8:2e:76:8f:0a:f8: 20:75:bf:0e:f9:ec:a7:9c:a9:be:0a:09:dc:a8:22: 57:93:44:ec:71:aa:fc:8c:d2:50:19:cb:4c:74:d5: 39:a3:88:3d:03:0f:e5:36:73:8b:c6:7f:3e:c0:da: a3:4a:4a:50:f6:0d:14:e7:71:46:b5:7f:b3:08:5f: db:b9:55:81:5c:8c:73:4c:3a:34:e7:f3:19:f5:f4: ca:ea:dc:93:99:36:39:fe:14:12:ec:8f:46:28:80: 45:0e:c6:5c:da:7f:19:15:31:cf:4c:c3:4e:28:6c: 21:83:84:7a:d4:66:1b:c1:64:de:6b:4d:4d:ca:28: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:83:3A:88:E8:BE:0E:10:30:49:79:77:97:64:54:68:E7:56:8C:77 X509v3 Authority Key Identifier: keyid:24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:87:55:12:7c:5f:82:e4:11:7f:6b:84:ac:32:80:69:82:d3: 30:37:a3:56:62:9e:21:24:83:16:ae:d8:da:89:ae:40:57:ad: 79:3f:4b:41:77:65:7f:04:28:99:9e:8c:b2:2a:a4:9d:7d:c3: 11:c6:41:70:7c:08:4e:77:24:29:95:b0:7c:2f:65:39:d9:cf: 95:12:93:41:50:de:2b:bb:f7:e7:db:45:a1:42:28:0e:72:16: 9d:10:01:ab:18:ea:a6:aa:ab:97:fc:10:c0:4d:03:70:a8:f5: 8a:fd:00:d4:5c:ee:ce:8c:91:df:38:2b:45:ab:a3:4f:3b:80: b8:b2:d0:a7:86:9d:b1:5f:da:37:26:f4:57:ba:72:cb:71:ef: 4e:49:a0:af:f3:75:d1:ae:9a:0c:56:05:f7:21:c7:77:10:28: 1d:5d:29:41:da:25:d6:43:8f:d1:51:be:ad:07:ae:5d:7f:fb: ea:f3:97:d3:bb:25:65:4e:ab:8d:8b:0c:5c:7a:dd:b3:78:ca: ae:cb:05:81:7b:fd:9e:0d:13:bd:43:19:e5:46:2d:40:f5:84: 5c:ec:0d:e5:88:95:9e:db:b5:ce:b8:4a:63:dc:94:9c:b3:dc: 68:a4:bc:05:2d:1e:dc:db:ca:96:98:a4:dd:1f:a2:c0:a5:54: cd:d8:56:6f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZI9GOwJwSjHszNKJ5v0fjWBjPoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRDQThDOUM2MTNGNzRERTczQzAxNTNBODNBMjA2RDA0 NzY4MzNGRjAeFw0yNTA4MjAwMjI1MDFaFw0yNTA4MjUxNTE0MDFaMDMxMTAvBgNV BAMTKEYxODMzQTg4RThCRTBFMTAzMDQ5Nzk3Nzk3NjQ1NDY4RTc1NjhDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFINId+i9mU4IuLH5R8ZHYCbw KE0SxS/bBysXOyR0EcYp9aZ3w/ow8Gq4hixaEZB6TzFZcfANNi6pyxF5athsPblh 9PqUXH0F1Fe+DR+r0hnfG7uee2YppHLxKhsXS8dXqG8A32UmEN4kUpeL+UIdZnTp w61qmW8T7m5HRteWMcgudo8K+CB1vw757Kecqb4KCdyoIleTROxxqvyM0lAZy0x0 1TmjiD0DD+U2c4vGfz7A2qNKSlD2DRTncUa1f7MIX9u5VYFcjHNMOjTn8xn19Mrq 3JOZNjn+FBLsj0YogEUOxlzafxkVMc9Mw04obCGDhHrUZhvBZN5rTU3KKJwpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8YM6iOi+DhAwSXl3l2RUaOdWjHcwHwYDVR0j BBgwFoAUJMqMnGE/dN5zwBU6g6IG0EdoM/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDgzNTA3NzNCREUwQzQwMzQxRTQ5RDI4N0EwNjRFNzVD MDMyRDEwOUU1Mjc1RTE2MjQzRDJFOUY4MkRCQzdDLzAvMjRDQThDOUM2MTNGNzRE RTczQzAxNTNBODNBMjA2RDA0NzY4MzNGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENBOEM5QzYxM0Y3NERFNzND MDE1M0E4M0EyMDZEMDQ3NjgzM0ZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQ4MzUwNzczQkRFMEM0MDM0MUU0OUQyODdBMDY0RTc1QzAzMkQxMDlF NTI3NUUxNjI0M0QyRTlGODJEQkM3Qy8wLzI0Q0E4QzlDNjEzRjc0REU3M0MwMTUz QTgzQTIwNkQwNDc2ODMzRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCh1USfF+C5BF/a4SsMoBpgtMw N6NWYp4hJIMWrtjaia5AV615P0tBd2V/BCiZnoyyKqSdfcMRxkFwfAhOdyQplbB8 L2U52c+VEpNBUN4ru/fn20WhQigOchadEAGrGOqmqquX/BDATQNwqPWK/QDUXO7O jJHfOCtFq6NPO4C4stCnhp2xX9o3JvRXunLLce9OSaCv83XRrpoMVgX3Icd3ECgd XSlB2iXWQ4/RUb6tB65df/vq85fTuyVlTquNiwxcet2zeMquywWBe/2eDRO9Qxnl Ri1A9YRc7A3liJWe27XOuEpj3JScs9xopLwFLR7c28qWmKTdH6LApVTN2FZv -----END CERTIFICATE-----Generated at Wed Aug 20 19:43:24 2025 by rpki-client