$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft File: FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft (raw, json) Hash identifier: SCpST3ft3jSejpbc527IyAYKkCysa9EZTRFswSu0kXM= Subject key identifier: C9:DD:1C:6A:33:D0:10:0B:CB:AE:B4:65:B0:B2:04:D4:58:79:92:9E Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90 Certificate issuer: /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790 Certificate serial: 170F18E43E0C31EFEC61D1F3432F6A7F80F99740 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft Manifest number: 0117 Signing time: Mon 15 Sep 2025 03:06:27 +0000 Manifest this update: Mon 15 Sep 2025 03:01:27 +0000 Manifest next update: Sat 20 Sep 2025 18:54:27 +0000 Files and hashes: 1: 323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa (hash: ZfOff7SqfHXRn/eHzIpB9NJ8eiuSXWQf5FRRWZW+WMY=) 2: 34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa (hash: o1CtWFmm1iYAEHlmYU6qbJHOxBRSEcrAqO3Y+pjmBQI=) 3: FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl (hash: uOymM1JXImud/N+i3xO0spwPB3RJqP6cwhM9tmh7t8Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 21:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0f:18:e4:3e:0c:31:ef:ec:61:d1:f3:43:2f:6a:7f:80:f9:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790 Validity Not Before: Sep 15 03:01:27 2025 GMT Not After : Sep 20 18:54:27 2025 GMT Subject: CN=C9DD1C6A33D0100BCBAEB465B0B204D45879929E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:35:8f:14:ee:eb:18:38:4e:f2:f6:69:5d: 59:63:9a:8f:92:07:26:65:59:2d:1a:a1:ec:4d:5b: 45:4f:92:e6:c2:da:88:54:65:0f:0d:ef:79:a0:a5: 95:b3:ad:8d:a4:32:1a:3b:a7:4f:d6:59:bb:ab:03: 77:79:95:7e:45:83:d8:e3:c6:06:ea:33:3f:e9:d7: 72:b7:35:1f:8a:fe:24:c3:01:5c:ab:8e:8a:10:fb: 5c:46:b4:e0:73:d4:24:19:93:43:0b:97:85:31:46: d0:0e:b3:d9:ce:81:f6:a2:80:59:6a:71:3a:63:04: cd:c4:16:8b:53:7a:36:86:d4:e4:c9:fb:f4:bf:b8: 26:7f:19:d4:9c:45:47:05:64:41:ef:f5:86:07:5d: 0e:9e:c1:4e:8f:2a:90:dc:da:25:a4:99:fa:6a:7b: 15:92:7a:9e:fd:1b:2c:7a:fe:b9:aa:f2:be:cf:ba: 7e:ba:26:d1:23:6c:7c:5a:f4:7b:c4:e1:33:71:39: 38:35:e0:69:2a:f8:e0:24:0d:fb:b1:a6:32:a5:d7: b1:1f:b9:3e:81:b1:6e:8b:cb:be:1f:67:09:8e:77: 70:02:7a:4d:06:dc:2c:f1:99:7d:1d:9b:e4:a3:18: cb:aa:bd:19:0b:98:cd:aa:08:b7:ca:bd:ee:df:53: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DD:1C:6A:33:D0:10:0B:CB:AE:B4:65:B0:B2:04:D4:58:79:92:9E X509v3 Authority Key Identifier: keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:35:3c:33:68:53:90:38:39:dc:9e:e8:de:95:91:b6:14:05: 61:1d:5e:90:fb:4d:a7:77:47:8f:37:87:2b:51:00:c8:67:81: f5:7f:c4:13:50:c2:0b:a0:e9:e4:25:a6:ee:c8:4f:9b:42:42: cd:63:a7:8d:95:fb:4c:da:b2:00:dd:c5:97:e8:a9:a4:d5:1c: 36:12:19:b8:89:07:24:77:8e:70:1d:b3:0f:83:31:e8:8d:04: fd:6b:5a:ad:95:46:38:d4:bf:80:24:5a:12:88:e0:f1:53:99: 1d:50:28:d1:5d:c6:f4:78:93:bd:45:8b:05:30:21:50:28:5d: 05:da:a5:3c:c2:d3:61:bd:58:36:55:32:47:5a:4d:81:a8:98: 3f:f2:6e:0f:cd:04:e4:1d:d1:d4:ed:d1:30:1e:70:ef:7d:3b: 09:33:16:33:77:cc:4f:0f:10:4b:a5:7f:61:e5:49:f0:0b:42: 0c:20:03:08:6e:7c:28:80:66:3e:7b:2a:51:3c:3f:c0:b0:d9: 06:7d:7c:4c:02:4f:d1:df:0b:1f:b9:09:d0:2a:93:0e:01:dd: 68:86:07:fa:59:06:66:b3:98:7c:0b:3e:00:e4:3c:46:5a:20: 82:e1:f1:03:cc:fe:22:c4:c8:dc:94:ac:ec:d2:e1:85:ee:bd: c8:51:84:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFw8Y5D4MMe/sYdHzQy9qf4D5l0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDFFMTRENUNGNDdBRTY1RkJGQzUzQjdGNTc3Q0VD NzFCQjc5MDAeFw0yNTA5MTUwMzAxMjdaFw0yNTA5MjAxODU0MjdaMDMxMTAvBgNV BAMTKEM5REQxQzZBMzNEMDEwMEJDQkFFQjQ2NUIwQjIwNEQ0NTg3OTkyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zTWPFO7rGDhO8vZpXVljmo+S ByZlWS0aoexNW0VPkubC2ohUZQ8N73mgpZWzrY2kMho7p0/WWburA3d5lX5Fg9jj xgbqMz/p13K3NR+K/iTDAVyrjooQ+1xGtOBz1CQZk0MLl4UxRtAOs9nOgfaigFlq cTpjBM3EFotTejaG1OTJ+/S/uCZ/GdScRUcFZEHv9YYHXQ6ewU6PKpDc2iWkmfpq exWSep79Gyx6/rmq8r7Pun66JtEjbHxa9HvE4TNxOTg14Gkq+OAkDfuxpjKl17Ef uT6BsW6Ly74fZwmOd3ACek0G3CzxmX0dm+SjGMuqvRkLmM2qCLfKve7fU0FpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyd0cajPQEAvLrrRlsLIE1Fh5kp4wHwYDVR0j BBgwFoAU/5QeFNXPR65l+/xTt/V3zscbt5AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xODhBMUQ0OThDMzAxQUExNTZGODExQzdDRDhFMjI1OTBB QTU0NkQ1REZBM0VGMDdDRDY1MDUzMTQ5Nzg3ODdDLzAvRkY5NDFFMTRENUNGNDdB RTY1RkJGQzUzQjdGNTc3Q0VDNzFCQjc5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjk0MUUxNEQ1Q0Y0N0FFNjVG QkZDNTNCN0Y1NzdDRUM3MUJCNzkwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTg4QTFENDk4QzMwMUFBMTU2RjgxMUM3Q0Q4RTIyNTkwQUE1NDZENURG QTNFRjA3Q0Q2NTA1MzE0OTc4Nzg3Qy8wL0ZGOTQxRTE0RDVDRjQ3QUU2NUZCRkM1 M0I3RjU3N0NFQzcxQkI3OTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYNTwzaFOQODncnujelZG2FAVh HV6Q+02nd0ePN4crUQDIZ4H1f8QTUMILoOnkJabuyE+bQkLNY6eNlftM2rIA3cWX 6Kmk1Rw2Ehm4iQckd45wHbMPgzHojQT9a1qtlUY41L+AJFoSiODxU5kdUCjRXcb0 eJO9RYsFMCFQKF0F2qU8wtNhvVg2VTJHWk2BqJg/8m4PzQTkHdHU7dEwHnDvfTsJ MxYzd8xPDxBLpX9h5UnwC0IMIAMIbnwogGY+eypRPD/AsNkGfXxMAk/R3wsfuQnQ KpMOAd1ohgf6WQZms5h8Cz4A5DxGWiCC4fEDzP4ixMjclKzs0uGF7r3IUYTJ -----END CERTIFICATE-----Generated at Tue Sep 16 03:48:59 2025 by rpki-client