$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft File: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft (raw, json) Hash identifier: xjjtHgKrob7Q7Oc7VGUoJ0hX/mJyFgxFedOp0c5OfGc= Subject key identifier: 09:E0:E4:FD:A8:20:50:1E:8F:04:92:E0:25:11:12:1C:35:73:99:D7 Authority key identifier: 2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C Certificate issuer: /CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C Certificate serial: 7B02E2B4FE7F55C2FB35BAF7E96C61889BAA974F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft Manifest number: 011D Signing time: Thu 18 Sep 2025 00:26:33 +0000 Manifest this update: Thu 18 Sep 2025 00:21:33 +0000 Manifest next update: Tue 23 Sep 2025 20:08:33 +0000 Files and hashes: 1: 3230302e3131352e3137392e302f32342d3234203d3e20323632323338.roa (hash: t0NXd0AZoax6j3Zx+zGAKvSkdzoQul8jv0P43Qt0bzM=) 2: 2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl (hash: qQ+/S2Y3XxO9eKYlY6qjFUeiXLMgBQz4bYC9fBBLD/8=) 3: 323830313a303a3331303a3a2f34382d3438203d3e20323632323338.roa (hash: BG7uP5ZpYPElGFwYBjwJHYhl9menyk39pNruzJ1aixs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:02:e2:b4:fe:7f:55:c2:fb:35:ba:f7:e9:6c:61:88:9b:aa:97:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D00DE6856A46670E74CBC3380A84B75A4BD982C Validity Not Before: Sep 18 00:21:33 2025 GMT Not After : Sep 23 20:08:33 2025 GMT Subject: CN=09E0E4FDA820501E8F0492E02511121C357399D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:69:47:1e:c7:4a:59:0e:99:c7:96:16:02: 8e:fb:67:d5:85:99:a0:c6:8f:2e:99:c9:0b:56:f9: 08:a5:89:9b:43:a6:38:59:9f:df:e0:99:5c:9d:80: 36:eb:b4:96:59:d9:ec:ad:6a:2d:06:04:a7:ca:36: 38:0a:05:e9:d4:da:ed:8d:27:4c:c3:c2:3a:e1:2e: 74:93:27:02:bd:5e:09:1f:bb:b2:10:3f:6c:44:e3: d5:26:ad:39:fb:15:cb:eb:d0:82:d1:37:d3:5a:92: 1f:15:69:88:7c:7e:22:09:d5:7d:f9:d6:79:ae:28: 68:c9:d5:18:d4:9e:bc:6f:56:0a:4a:54:e5:dd:99: 51:ef:a3:6c:ab:5d:b2:ad:18:a6:cc:c8:ab:55:74: e6:ad:fa:98:e4:f2:4e:ea:d0:04:fa:90:69:6a:20: 2d:21:e2:7f:ce:b2:5b:48:a7:dd:ab:61:3c:74:ab: f0:08:a4:a4:ff:d1:88:02:91:10:aa:4e:42:de:61: ce:4d:ab:e9:04:a9:b8:ce:08:bf:79:04:16:f3:b0: 0f:0b:fb:28:2d:a2:af:7f:88:dc:ac:9e:b7:96:ce: 8a:52:51:d4:6c:df:37:3c:25:2d:54:f0:ba:d1:59: 7c:6a:3d:45:51:1a:fb:b1:67:5d:4f:73:26:06:52: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E0:E4:FD:A8:20:50:1E:8F:04:92:E0:25:11:12:1C:35:73:99:D7 X509v3 Authority Key Identifier: keyid:2D:00:DE:68:56:A4:66:70:E7:4C:BC:33:80:A8:4B:75:A4:BD:98:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33CBD823A5E6A44B211094A157D298ADC4B9DFAFC39B05343297EFD40C5076FC/0/2D00DE6856A46670E74CBC3380A84B75A4BD982C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:30:a4:42:1f:ad:8d:73:60:03:47:34:a5:4a:7c:fb:51:b7: be:47:da:7d:76:cf:39:8a:8a:3d:45:65:a4:bf:49:35:c5:dc: a3:db:31:48:3f:24:76:fe:bd:16:b8:d6:ce:85:65:4d:b4:f4: 1d:41:fb:56:e2:e0:fe:ba:22:3a:6d:e9:96:34:ec:9d:b8:78: 07:cd:ab:08:10:e9:71:b7:28:dc:88:02:5c:52:c7:9e:09:71: 77:27:3e:98:24:ad:8c:3e:75:17:56:b6:11:4d:cd:7f:74:e2: dc:81:d0:3a:10:7d:38:ec:18:da:26:17:0a:bf:28:b5:e1:21: d7:43:9f:af:3e:37:b0:5a:a3:49:a6:e0:f9:7c:10:44:b1:18: 98:69:76:5d:22:15:80:6d:32:89:13:6d:c4:56:62:49:86:c1: 5c:e7:c7:7b:1c:3b:27:06:2f:26:f8:3c:83:ea:41:25:ae:48: f7:6b:e2:99:58:f3:73:85:0f:2b:0e:bc:45:92:4e:04:c3:d5: 46:b5:08:f8:70:3c:37:3b:20:ab:f3:2c:2c:a2:b5:a6:76:0e: 9f:60:26:46:69:69:73:6b:6b:32:1a:96:ea:83:f0:ab:74:c8: 24:ca:21:f4:81:03:2e:dd:89:a0:80:c9:9b:47:d0:cd:35:f6: 97:4d:ab:f0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUewLitP5/VcL7Nbr36WxhiJuql08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwMERFNjg1NkE0NjY3MEU3NENCQzMzODBBODRCNzVB NEJEOTgyQzAeFw0yNTA5MTgwMDIxMzNaFw0yNTA5MjMyMDA4MzNaMDMxMTAvBgNV BAMTKDA5RTBFNEZEQTgyMDUwMUU4RjA0OTJFMDI1MTExMjFDMzU3Mzk5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAt2lHHsdKWQ6Zx5YWAo77Z9WF maDGjy6ZyQtW+QiliZtDpjhZn9/gmVydgDbrtJZZ2eytai0GBKfKNjgKBenU2u2N J0zDwjrhLnSTJwK9Xgkfu7IQP2xE49UmrTn7Fcvr0ILRN9Nakh8VaYh8fiIJ1X35 1nmuKGjJ1RjUnrxvVgpKVOXdmVHvo2yrXbKtGKbMyKtVdOat+pjk8k7q0AT6kGlq IC0h4n/OsltIp92rYTx0q/AIpKT/0YgCkRCqTkLeYc5Nq+kEqbjOCL95BBbzsA8L +ygtoq9/iNysnreWzopSUdRs3zc8JS1U8LrRWXxqPUVRGvuxZ11PcyYGUig9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUCeDk/aggUB6PBJLgJRESHDVzmdcwHwYDVR0j BBgwFoAULQDeaFakZnDnTLwzgKhLdaS9mCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zM0NCRDgyM0E1RTZBNDRCMjExMDk0QTE1N0QyOThBREM0 QjlERkFGQzM5QjA1MzQzMjk3RUZENDBDNTA3NkZDLzAvMkQwMERFNjg1NkE0NjY3 MEU3NENCQzMzODBBODRCNzVBNEJEOTgyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDAwREU2ODU2QTQ2NjcwRTc0 Q0JDMzM4MEE4NEI3NUE0QkQ5ODJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzNDQkQ4MjNBNUU2QTQ0QjIxMTA5NEExNTdEMjk4QURDNEI5REZBRkMz OUIwNTM0MzI5N0VGRDQwQzUwNzZGQy8wLzJEMDBERTY4NTZBNDY2NzBFNzRDQkMz MzgwQTg0Qjc1QTRCRDk4MkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuMKRCH62Nc2ADRzSlSnz7Ube+ R9p9ds85ioo9RWWkv0k1xdyj2zFIPyR2/r0WuNbOhWVNtPQdQftW4uD+uiI6bemW NOyduHgHzasIEOlxtyjciAJcUseeCXF3Jz6YJK2MPnUXVrYRTc1/dOLcgdA6EH04 7BjaJhcKvyi14SHXQ5+vPjewWqNJpuD5fBBEsRiYaXZdIhWAbTKJE23EVmJJhsFc 58d7HDsnBi8m+DyD6kElrkj3a+KZWPNzhQ8rDrxFkk4Ew9VGtQj4cDw3OyCr8yws orWmdg6fYCZGaWlza2syGpbqg/CrdMgkyiH0gQMu3YmggMmbR9DNNfaXTavw -----END CERTIFICATE-----Generated at Thu Sep 18 19:00:48 2025 by rpki-client