$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft File: 2522843848570F9C59A0A97D0D85367C510D573A.mft (raw, json) Hash identifier: DtaZfIiIL+iwJO17uqUdj1akHuxGYcnVV9fxgW7W4Xc= Subject key identifier: 41:87:72:B1:25:3C:2A:89:AF:BE:E2:35:F1:4E:28:9D:83:88:6B:4E Authority key identifier: 25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A Certificate issuer: /CN=2522843848570F9C59A0A97D0D85367C510D573A Certificate serial: 27B97F46CCDC35C4091C05F8F74667C0E50D1FF4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft Manifest number: 39 Signing time: Thu 18 Sep 2025 13:46:41 +0000 Manifest this update: Thu 18 Sep 2025 13:41:41 +0000 Manifest next update: Tue 23 Sep 2025 15:50:41 +0000 Files and hashes: 1: 2522843848570F9C59A0A97D0D85367C510D573A.crl (hash: CMJ2cpkjQsr0RDbLQlV8p49YCnaGUTTUPZeNC0+Oc/8=) 2: 323830333a656435303a313a3a2f34382d3438203d3e20323733383639.roa (hash: z/6l6Pa6GCWSCcWLKaIxaItlBQBm+5gINkKFBzQwXPg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b9:7f:46:cc:dc:35:c4:09:1c:05:f8:f7:46:67:c0:e5:0d:1f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2522843848570F9C59A0A97D0D85367C510D573A Validity Not Before: Sep 18 13:41:41 2025 GMT Not After : Sep 23 15:50:41 2025 GMT Subject: CN=418772B1253C2A89AFBEE235F14E289D83886B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:ff:d9:fb:93:ef:17:09:09:94:57:6b:a5: 58:26:be:85:16:7e:43:84:53:44:95:18:83:5e:b5: 23:62:77:7b:a5:f9:bd:4c:e2:91:cf:14:42:14:f4: cc:89:cf:71:37:fa:c0:93:9b:9c:0f:9f:38:56:16: 2e:78:6d:2a:dd:63:69:31:15:f5:87:f7:21:fc:80: b5:91:fb:d8:d0:e7:50:7c:06:f7:77:de:7d:f9:38: 68:86:72:9b:e7:95:ee:a3:19:9a:60:6d:4e:93:f0: 73:45:ad:f8:9b:2c:09:a1:68:48:77:03:4a:ee:8b: 07:0e:fa:ac:08:b9:e6:0a:ef:85:c7:b1:2c:2d:c3: c1:0f:55:f7:80:0b:95:1b:67:5c:14:80:14:6b:74: 6c:d1:83:eb:7e:53:9f:4f:dc:a8:53:bb:e9:2a:80: a2:d8:38:8f:43:97:66:5a:45:01:06:bb:65:77:9f: c0:71:ed:16:4c:af:e8:3b:77:8a:c3:35:cb:5b:e7: 32:69:0c:24:75:98:be:c3:4b:99:fa:bc:f5:03:75: 79:90:c8:14:3d:a3:4e:2e:80:13:6e:90:c0:9b:37: a1:6a:2e:22:80:c4:a3:0b:bf:7e:55:6f:50:35:7e: 21:6b:76:1b:0b:56:4f:d2:ef:db:cf:bb:50:24:9f: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:72:B1:25:3C:2A:89:AF:BE:E2:35:F1:4E:28:9D:83:88:6B:4E X509v3 Authority Key Identifier: keyid:25:22:84:38:48:57:0F:9C:59:A0:A9:7D:0D:85:36:7C:51:0D:57:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2522843848570F9C59A0A97D0D85367C510D573A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2891698316F76A859B1D83FF311DEFF0FF47D8DFEA18A2BB224C7F4052B1366B/0/2522843848570F9C59A0A97D0D85367C510D573A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:20:db:11:b4:8e:57:74:c1:93:36:ec:9b:72:7c:e5:5d:3f: 12:aa:17:80:23:e6:e7:b0:70:e8:ea:96:e0:06:14:6e:f3:c7: 49:7a:f8:ef:49:60:7f:6d:43:d9:32:c1:18:a9:97:f7:d1:64: 21:b5:2b:f1:f9:09:93:36:aa:15:70:88:6b:29:a7:81:bf:df: 77:7c:fa:73:d0:49:cc:e0:0c:37:f1:c2:7b:ac:3a:46:2c:a2: 86:ed:d6:99:01:05:38:57:c6:15:f3:99:7f:31:c1:f9:68:a3: 46:7e:57:76:b4:01:fa:2c:1f:4c:8c:90:eb:58:3f:56:f3:eb: cb:15:7d:2d:69:33:b9:43:ea:e4:b8:d6:2c:ed:50:66:d4:f0: 75:b9:b2:5c:39:35:47:f3:97:1d:56:34:cb:18:30:79:f4:1a: b7:76:4e:42:48:82:9d:d8:01:be:22:64:45:41:eb:b5:77:46: 80:d0:cb:b3:db:50:de:d8:49:82:ca:c5:de:65:0b:ee:25:82: 2d:84:65:64:fe:76:dc:41:d1:7d:85:75:7a:12:43:e8:4c:41: bb:73:a8:d3:81:0e:bb:ad:db:1b:7f:3a:3c:32:13:4b:fa:fa: 86:e1:c9:7b:22:85:ab:37:24:07:ac:5a:29:7c:81:f2:4b:d7: 40:03:77:73 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJ7l/RszcNcQJHAX490ZnwOUNH/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUyMjg0Mzg0ODU3MEY5QzU5QTBBOTdEMEQ4NTM2N0M1 MTBENTczQTAeFw0yNTA5MTgxMzQxNDFaFw0yNTA5MjMxNTUwNDFaMDMxMTAvBgNV BAMTKDQxODc3MkIxMjUzQzJBODlBRkJFRTIzNUYxNEUyODlEODM4ODZCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbf/Z+5PvFwkJlFdrpVgmvoUW fkOEU0SVGINetSNid3ul+b1M4pHPFEIU9MyJz3E3+sCTm5wPnzhWFi54bSrdY2kx FfWH9yH8gLWR+9jQ51B8Bvd33n35OGiGcpvnle6jGZpgbU6T8HNFrfibLAmhaEh3 A0ruiwcO+qwIueYK74XHsSwtw8EPVfeAC5UbZ1wUgBRrdGzRg+t+U59P3KhTu+kq gKLYOI9Dl2ZaRQEGu2V3n8Bx7RZMr+g7d4rDNctb5zJpDCR1mL7DS5n6vPUDdXmQ yBQ9o04ugBNukMCbN6FqLiKAxKMLv35Vb1A1fiFrdhsLVk/S79vPu1AknzidAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQYdysSU8KomvvuI18U4onYOIa04wHwYDVR0j BBgwFoAUJSKEOEhXD5xZoKl9DYU2fFENVzowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yODkxNjk4MzE2Rjc2QTg1OUIxRDgzRkYzMTFERUZGMEZG NDdEOERGRUExOEEyQkIyMjRDN0Y0MDUyQjEzNjZCLzAvMjUyMjg0Mzg0ODU3MEY5 QzU5QTBBOTdEMEQ4NTM2N0M1MTBENTczQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNTIyODQzODQ4NTcwRjlDNTlB MEE5N0QwRDg1MzY3QzUxMEQ1NzNBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjg5MTY5ODMxNkY3NkE4NTlCMUQ4M0ZGMzExREVGRjBGRjQ3RDhERkVB MThBMkJCMjI0QzdGNDA1MkIxMzY2Qi8wLzI1MjI4NDM4NDg1NzBGOUM1OUEwQTk3 RDBEODUzNjdDNTEwRDU3M0EubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7INsRtI5XdMGTNuybcnzlXT8S qheAI+bnsHDo6pbgBhRu88dJevjvSWB/bUPZMsEYqZf30WQhtSvx+QmTNqoVcIhr KaeBv993fPpz0EnM4Aw38cJ7rDpGLKKG7daZAQU4V8YV85l/McH5aKNGfld2tAH6 LB9MjJDrWD9W8+vLFX0taTO5Q+rkuNYs7VBm1PB1ubJcOTVH85cdVjTLGDB59Bq3 dk5CSIKd2AG+ImRFQeu1d0aA0Muz21De2EmCysXeZQvuJYIthGVk/nbcQdF9hXV6 EkPoTEG7c6jTgQ67rdsbfzo8MhNL+vqG4cl7IoWrNyQHrFopfIHyS9dAA3dz -----END CERTIFICATE-----Generated at Thu Sep 18 17:11:22 2025 by rpki-client