$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft File: 85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft (raw, json) Hash identifier: Zv+NAtUn8Ja8QNaP1OiUyKx9NaV/jaH5GnDuDIDKF1A= Subject key identifier: 9B:8B:B1:E4:55:31:F8:BD:CB:D4:B9:F1:83:CA:CD:48:8A:8E:72:44 Authority key identifier: 85:C6:1D:B0:CE:C2:C1:FB:C7:FB:4E:26:BE:02:00:14:71:77:B7:EA Certificate issuer: /CN=85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA Certificate serial: 2B7F95BB95A9CA2281D48136C08BC845CB3D7C0E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft Manifest number: 0116 Signing time: Tue 09 Sep 2025 07:05:47 +0000 Manifest this update: Tue 09 Sep 2025 07:00:47 +0000 Manifest next update: Sun 14 Sep 2025 18:23:47 +0000 Files and hashes: 1: 85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.crl (hash: faEYZAM8/xsitGx0veTSOMGLsX4BW6VrJMZNItv+WbE=) 2: 323830333a373231303a3a2f33322d3438203d3e20323731393135.roa (hash: j6b/IpqSZ0tzZBWgkiBpjEjaoCramVfn+i/P+43zn6s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.crl rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Sep 2025 09:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7f:95:bb:95:a9:ca:22:81:d4:81:36:c0:8b:c8:45:cb:3d:7c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA Validity Not Before: Sep 9 07:00:47 2025 GMT Not After : Sep 14 18:23:47 2025 GMT Subject: CN=9B8BB1E45531F8BDCBD4B9F183CACD488A8E7244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:36:bf:a1:82:14:29:78:e3:64:72:0f:07: 3d:cc:0f:e4:21:f8:c3:c6:5c:9b:25:aa:3f:4b:36: 58:a4:5f:41:dd:35:61:85:91:18:a5:3e:10:ea:95: 17:7b:4b:64:3c:48:2f:5f:9e:51:5d:c1:e2:0a:46: 80:37:56:ba:ef:f3:ae:d6:de:2c:4e:d3:fc:74:89: b4:c3:ee:d0:d7:8c:ad:cd:d1:47:f4:0b:00:2c:f7: 05:81:3a:e1:ca:8a:94:a8:bd:a3:b4:e7:0f:55:d7: 5b:94:5e:d1:06:0e:52:f3:8e:88:aa:77:47:76:38: 68:ea:5e:38:27:c6:1b:9b:cb:ff:54:57:c8:08:85: f1:83:27:de:15:fa:00:52:c0:6f:cb:5d:8a:cc:89: b7:12:b9:44:33:eb:d9:7d:37:d0:d7:71:a8:f6:6e: 17:16:cc:8e:d0:ed:ad:50:44:cf:3f:b1:60:ce:fb: 07:ed:71:80:60:50:22:70:d2:25:b3:5d:fe:30:3a: 6e:0d:e5:b4:b3:bf:5b:72:82:4c:50:79:37:a1:76: 72:71:8c:b6:3b:29:a4:a5:13:8d:cf:33:16:e5:30: 16:3b:31:0a:9d:8e:a2:87:52:de:76:f4:78:64:ab: ac:33:60:b6:39:86:b5:e3:9b:41:b8:2d:dd:04:dc: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:B1:E4:55:31:F8:BD:CB:D4:B9:F1:83:CA:CD:48:8A:8E:72:44 X509v3 Authority Key Identifier: keyid:85:C6:1D:B0:CE:C2:C1:FB:C7:FB:4E:26:BE:02:00:14:71:77:B7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A3016CE5D9AB697701C13EC9FF1A8FE76365F752313A11494D2CEB23C9447F9/0/85C61DB0CEC2C1FBC7FB4E26BE0200147177B7EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:90:7c:01:9d:37:3e:f8:6b:42:dc:c1:fd:49:4b:b2:6f:04: 1f:37:f0:bc:4c:90:8a:63:d6:2a:8c:ca:56:72:80:77:95:eb: 81:74:25:6b:2f:d7:b7:f6:b9:45:ec:b4:23:bd:e7:cf:46:be: d4:a5:5b:04:31:89:db:4e:d1:f3:1a:d1:e4:da:32:7e:7e:7d: 91:e5:4d:6d:69:d1:76:58:c5:b0:2d:ad:6f:d0:c3:24:c0:7f: b8:46:b0:ef:c7:4d:a1:47:9f:1b:a9:25:f6:d4:5c:95:8f:3a: 28:03:33:8b:43:e8:03:8c:05:c3:bd:b5:60:49:2b:a7:f7:57: 77:4c:e6:e0:b3:2e:4d:c9:c7:f2:b1:64:33:14:a9:25:e3:38: ef:70:3b:a8:ee:60:12:b6:d1:df:5c:5d:f2:00:b2:e5:89:a0: 16:54:f2:2e:fc:22:77:a8:62:cb:00:ad:81:11:a7:f6:3f:21: b8:3c:b3:60:62:f5:5b:cb:29:9b:4b:86:0d:c4:f2:73:a0:57: 57:f6:4b:87:2e:ce:ae:5e:3b:d1:da:9d:16:d5:21:b1:b5:4f: 2f:6b:f5:77:4e:22:5e:fe:38:b4:06:a1:a8:e8:0c:f3:7a:37: 42:b9:50:b3:30:ed:bc:f4:ac:07:49:15:20:05:11:92:f8:4d: ac:a6:fe:b0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK3+Vu5WpyiKB1IE2wIvIRcs9fA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVDNjFEQjBDRUMyQzFGQkM3RkI0RTI2QkUwMjAwMTQ3 MTc3QjdFQTAeFw0yNTA5MDkwNzAwNDdaFw0yNTA5MTQxODIzNDdaMDMxMTAvBgNV BAMTKDlCOEJCMUU0NTUzMUY4QkRDQkQ0QjlGMTgzQ0FDRDQ4OEE4RTcyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyja/oYIUKXjjZHIPBz3MD+Qh +MPGXJslqj9LNlikX0HdNWGFkRilPhDqlRd7S2Q8SC9fnlFdweIKRoA3Vrrv867W 3ixO0/x0ibTD7tDXjK3N0Uf0CwAs9wWBOuHKipSovaO05w9V11uUXtEGDlLzjoiq d0d2OGjqXjgnxhuby/9UV8gIhfGDJ94V+gBSwG/LXYrMibcSuUQz69l9N9DXcaj2 bhcWzI7Q7a1QRM8/sWDO+wftcYBgUCJw0iWzXf4wOm4N5bSzv1tygkxQeTehdnJx jLY7KaSlE43PMxblMBY7MQqdjqKHUt529Hhkq6wzYLY5hrXjm0G4Ld0E3GXDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUm4ux5FUx+L3L1Lnxg8rNSIqOckQwHwYDVR0j BBgwFoAUhcYdsM7CwfvH+04mvgIAFHF3t+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQTMwMTZDRTVEOUFCNjk3NzAxQzEzRUM5RkYxQThGRTc2 MzY1Rjc1MjMxM0ExMTQ5NEQyQ0VCMjNDOTQ0N0Y5LzAvODVDNjFEQjBDRUMyQzFG QkM3RkI0RTI2QkUwMjAwMTQ3MTc3QjdFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUM2MURCMENFQzJDMUZCQzdG QjRFMjZCRTAyMDAxNDcxNzdCN0VBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkEzMDE2Q0U1RDlBQjY5NzcwMUMxM0VDOUZGMUE4RkU3NjM2NUY3NTIz MTNBMTE0OTREMkNFQjIzQzk0NDdGOS8wLzg1QzYxREIwQ0VDMkMxRkJDN0ZCNEUy NkJFMDIwMDE0NzE3N0I3RUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDkHwBnTc++GtC3MH9SUuybwQf N/C8TJCKY9YqjMpWcoB3leuBdCVrL9e39rlF7LQjvefPRr7UpVsEMYnbTtHzGtHk 2jJ+fn2R5U1tadF2WMWwLa1v0MMkwH+4RrDvx02hR58bqSX21FyVjzooAzOLQ+gD jAXDvbVgSSun91d3TObgsy5NycfysWQzFKkl4zjvcDuo7mASttHfXF3yALLliaAW VPIu/CJ3qGLLAK2BEaf2PyG4PLNgYvVbyymbS4YNxPJzoFdX9kuHLs6uXjvR2p0W 1SGxtU8va/V3TiJe/ji0BqGo6AzzejdCuVCzMO289KwHSRUgBRGS+E2spv6w -----END CERTIFICATE-----Generated at Wed Sep 10 00:06:07 2025 by rpki-client