$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft File: CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft (raw, json) Hash identifier: Pey1cxIjS47S9otPxTRKtdqUNzhV2RM93pd5xNnNGts= Subject key identifier: 68:8C:9A:D1:F6:78:0E:E3:29:B1:F1:FF:DB:29:B9:E1:48:09:CD:E0 Authority key identifier: CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0 Certificate issuer: /CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0 Certificate serial: 1C654BA5130D6320A7EDFFF51E7480C2DC9C17CA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft Manifest number: 010B Signing time: Mon 18 Aug 2025 21:21:01 +0000 Manifest this update: Mon 18 Aug 2025 21:16:01 +0000 Manifest next update: Sun 24 Aug 2025 08:00:01 +0000 Files and hashes: 1: CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl (hash: Wjtx98pNbm2yajuZdimXZKideGWfL4Gx5OUovRWJNyQ=) 2: 323830333a653034303a3a2f33322d3332203d3e203238313030.roa (hash: Xmcg9na2zPYnEP04KwXb0ZAcJAqdN+FzOt5chec7fqs=) 3: 3133382e39372e3233362e302f32322d3234203d3e203238313030.roa (hash: VVk5r8T92bVE2YlJ5zpM1vr9Jh6mo06jNQHxOf3Mj28=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 08:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:65:4b:a5:13:0d:63:20:a7:ed:ff:f5:1e:74:80:c2:dc:9c:17:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB7CEC6B251591295CC04EA4274140F6FB652E0 Validity Not Before: Aug 18 21:16:01 2025 GMT Not After : Aug 24 08:00:01 2025 GMT Subject: CN=688C9AD1F6780EE329B1F1FFDB29B9E14809CDE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:91:39:83:2c:4c:b5:8c:13:2f:44:ba:d8: 35:e6:76:90:de:17:e2:6c:71:9a:ca:ea:04:ff:60: 87:9c:40:f1:10:96:f4:4c:70:1c:db:2f:8b:85:29: d6:7f:7e:41:b7:b2:cc:f8:be:11:b1:c1:94:a1:22: 0e:c5:9a:25:fa:38:4a:df:2b:86:aa:1e:5b:7e:ae: 2c:8d:d4:5b:11:84:a5:9d:d5:29:d1:0d:9e:1a:82: ad:12:82:10:b7:30:4d:3b:f3:cb:b0:4c:d8:f7:21: 4b:50:d0:dc:6c:ae:79:ad:53:9c:45:8d:5e:0f:42: 51:96:84:e4:73:2f:e8:0c:83:71:18:bf:4e:5e:20: 68:55:26:90:7b:f1:ad:ae:69:39:f8:f3:75:a8:fb: 75:05:0f:20:94:bc:cb:8a:13:04:3e:a9:63:37:80: 6b:d2:91:a5:e4:08:44:55:cd:ae:2b:9b:ce:0e:f7: 03:b7:a5:60:5a:05:ad:d2:65:70:d8:d1:49:d9:64: 3f:92:87:0b:03:ff:ad:5d:4e:15:f3:29:e2:b8:c6: 64:95:2e:33:82:7c:b0:79:ea:6e:55:19:18:0b:56: c2:a1:6f:aa:8f:30:00:bc:a1:53:99:46:c8:bb:ed: 7d:bb:fd:22:7e:99:a8:56:c0:fb:98:4a:bf:75:d4: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8C:9A:D1:F6:78:0E:E3:29:B1:F1:FF:DB:29:B9:E1:48:09:CD:E0 X509v3 Authority Key Identifier: keyid:CB:B7:CE:C6:B2:51:59:12:95:CC:04:EA:42:74:14:0F:6F:B6:52:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C3413E6505BD22DEA01430EC2D965A29ACA1D6BFEF2449341C48A72BD4EB4F1/0/CBB7CEC6B251591295CC04EA4274140F6FB652E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:62:05:3c:2f:94:69:09:db:fd:3f:ef:5c:18:0d:94:24:e7: 54:87:cb:48:59:d3:15:94:7f:19:ab:5f:bd:a6:40:fa:37:03: d0:98:78:34:33:6a:4d:90:8d:96:c0:ab:45:7a:0d:99:28:e6: 6f:f0:ef:28:f3:7e:75:93:1f:91:c3:47:73:18:6a:9a:07:c0: fc:92:51:d2:18:03:cd:8f:ee:75:fd:a7:e6:20:00:1f:6b:82: 7d:f3:d1:0d:d6:aa:4d:86:fd:6e:a6:74:65:f5:3e:0f:78:91: 69:b0:60:86:21:99:2c:62:7f:fd:c8:ec:d9:91:9e:c9:ef:05: f1:3d:dd:5f:7d:11:93:e5:15:4e:fa:de:98:3e:6a:a5:ba:08: df:ea:c9:54:81:e2:47:9b:fd:80:7e:ef:96:fb:cd:2c:ad:39: bf:12:67:2d:b8:5e:fa:b5:c8:7e:67:5f:ff:83:37:92:d7:30: a1:6f:00:9d:63:be:89:84:e9:fe:1f:95:92:ca:aa:25:73:ab: 30:a5:26:93:fd:59:0c:9b:2a:cd:ca:94:91:8f:f3:9a:f3:72: 0c:84:53:e8:4d:c6:7a:18:9c:ad:f5:d3:a6:0a:23:e8:75:58: c7:91:fe:2a:11:f1:99:c0:e5:c7:a3:f7:8a:3b:07:2c:bc:fa: cd:db:26:5c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHGVLpRMNYyCn7f/1HnSAwtycF8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCN0NFQzZCMjUxNTkxMjk1Q0MwNEVBNDI3NDE0MEY2 RkI2NTJFMDAeFw0yNTA4MTgyMTE2MDFaFw0yNTA4MjQwODAwMDFaMDMxMTAvBgNV BAMTKDY4OEM5QUQxRjY3ODBFRTMyOUIxRjFGRkRCMjlCOUUxNDgwOUNERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdJE5gyxMtYwTL0S62DXmdpDe F+JscZrK6gT/YIecQPEQlvRMcBzbL4uFKdZ/fkG3ssz4vhGxwZShIg7FmiX6OErf K4aqHlt+riyN1FsRhKWd1SnRDZ4agq0SghC3ME0788uwTNj3IUtQ0NxsrnmtU5xF jV4PQlGWhORzL+gMg3EYv05eIGhVJpB78a2uaTn483Wo+3UFDyCUvMuKEwQ+qWM3 gGvSkaXkCERVza4rm84O9wO3pWBaBa3SZXDY0UnZZD+ShwsD/61dThXzKeK4xmSV LjOCfLB56m5VGRgLVsKhb6qPMAC8oVOZRsi77X27/SJ+mahWwPuYSr911NBNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaIya0fZ4DuMpsfH/2ym54UgJzeAwHwYDVR0j BBgwFoAUy7fOxrJRWRKVzATqQnQUD2+2UuAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQzM0MTNFNjUwNUJEMjJERUEwMTQzMEVDMkQ5NjVBMjlB Q0ExRDZCRkVGMjQ0OTM0MUM0OEE3MkJENEVCNEYxLzAvQ0JCN0NFQzZCMjUxNTkx Mjk1Q0MwNEVBNDI3NDE0MEY2RkI2NTJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkI3Q0VDNkIyNTE1OTEyOTVD QzA0RUE0Mjc0MTQwRjZGQjY1MkUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUMzNDEzRTY1MDVCRDIyREVBMDE0MzBFQzJEOTY1QTI5QUNBMUQ2QkZF RjI0NDkzNDFDNDhBNzJCRDRFQjRGMS8wL0NCQjdDRUM2QjI1MTU5MTI5NUNDMDRF QTQyNzQxNDBGNkZCNjUyRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBYgU8L5RpCdv9P+9cGA2UJOdU h8tIWdMVlH8Zq1+9pkD6NwPQmHg0M2pNkI2WwKtFeg2ZKOZv8O8o8351kx+Rw0dz GGqaB8D8klHSGAPNj+51/afmIAAfa4J989EN1qpNhv1upnRl9T4PeJFpsGCGIZks Yn/9yOzZkZ7J7wXxPd1ffRGT5RVO+t6YPmqlugjf6slUgeJHm/2Afu+W+80srTm/ EmctuF76tch+Z1//gzeS1zChbwCdY76JhOn+H5WSyqolc6swpSaT/VkMmyrNypSR j/Oa83IMhFPoTcZ6GJyt9dOmCiPodVjHkf4qEfGZwOXHo/eKOwcsvPrN2yZc -----END CERTIFICATE-----Generated at Wed Aug 20 19:43:33 2025 by rpki-client