$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft File: FA40F4074261959953C6B11359AE13D2C4B837D3.mft (raw, json) Hash identifier: k4o5ZclzZuFsaU/Dm6PD8xdGsrsubUzjvb8+r+hhsFM= Subject key identifier: 3F:9E:10:EF:26:F1:AD:C9:94:BE:E3:24:81:54:AE:CF:1F:71:C8:F5 Authority key identifier: FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3 Certificate issuer: /CN=FA40F4074261959953C6B11359AE13D2C4B837D3 Certificate serial: 248CEA1A73CC972894094220EB73ADD7F9A651DC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft Manifest number: 010C Signing time: Tue 19 Aug 2025 16:23:47 +0000 Manifest this update: Tue 19 Aug 2025 16:18:47 +0000 Manifest next update: Sun 24 Aug 2025 12:32:47 +0000 Files and hashes: 1: 323830363a3333323a3a2f33322d3438203d3e20323635353738.roa (hash: dVsNOyPKu6XffJQutRoMAelX/LHC5UntUohEGpULlLM=) 2: 34352e3137342e3137322e302f32322d3234203d3e20323635353738.roa (hash: edgFkGcxkCm91xM+uyMsNz59LzNDLj7cGSCgYABjhXk=) 3: FA40F4074261959953C6B11359AE13D2C4B837D3.crl (hash: JEbFxGi7YwVCHQAccCey5AFSO2YEIUy0jy0ETeCqqYk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 12:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8c:ea:1a:73:cc:97:28:94:09:42:20:eb:73:ad:d7:f9:a6:51:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA40F4074261959953C6B11359AE13D2C4B837D3 Validity Not Before: Aug 19 16:18:47 2025 GMT Not After : Aug 24 12:32:47 2025 GMT Subject: CN=3F9E10EF26F1ADC994BEE3248154AECF1F71C8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:89:51:43:80:c4:ec:ed:dc:5c:86:33:80: d8:d9:8f:99:b0:bb:88:9f:21:b7:a1:8b:5e:5c:80: a8:29:5d:63:62:a7:8c:73:88:b5:6b:a9:bc:7b:6b: 72:a9:5a:d9:50:2c:00:3e:a4:84:c0:93:cc:4f:cb: 84:f3:96:19:2e:c0:1f:9f:19:86:bc:78:27:56:bd: 35:a8:5b:78:5b:6b:2a:54:a1:4c:14:2a:3c:8a:d2: 8e:e7:27:14:fe:5a:42:6b:2c:c7:69:ed:37:9a:fb: d5:35:5a:24:ed:57:be:5a:c2:e8:86:37:62:67:be: 19:75:8b:8a:04:3e:95:b3:24:d1:f8:db:b6:9b:47: f1:c2:7d:28:a9:ff:bb:b2:7c:f5:45:29:63:b0:4b: 50:3e:8a:b6:e6:ee:25:8f:7d:c9:48:d0:8c:ac:97: 3c:ca:38:20:15:d1:d6:6a:2b:1a:99:4c:1e:e6:4d: 06:fb:63:26:92:6e:13:80:bb:69:f2:37:ab:76:51: e6:49:3a:6a:cb:c3:4e:21:af:4f:b8:2a:0b:d4:12: 59:fa:7e:95:8e:6d:b4:42:aa:5e:26:d3:62:d6:6d: 81:62:62:ff:dc:72:4c:14:a6:82:1e:9b:b1:eb:dd: 8b:94:d1:11:57:ca:29:7b:d2:65:8d:fe:36:71:a3: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9E:10:EF:26:F1:AD:C9:94:BE:E3:24:81:54:AE:CF:1F:71:C8:F5 X509v3 Authority Key Identifier: keyid:FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8a:c1:9e:21:05:0c:35:30:92:d5:fa:f4:f5:42:8c:33:3f: 03:7e:48:b6:19:6b:d2:df:10:1b:04:c9:3b:3f:7a:8f:47:15: c3:29:bb:c0:7d:50:9b:da:69:c9:d4:fc:91:15:48:ba:66:b6: 8e:7d:94:28:3c:a2:fb:ed:fd:6b:86:d7:65:a5:de:59:cf:07: 14:57:c5:92:2b:4b:94:2b:62:52:37:76:2c:72:3e:5f:85:c3: 63:51:6f:0a:9e:88:13:85:be:31:54:1e:a8:0c:33:9d:11:4d: ca:cf:2e:9f:c1:7a:0c:f7:25:48:e9:2a:76:db:e7:4d:b1:1c: bd:e2:7c:b3:be:98:1e:05:24:d0:2f:f8:3b:1a:96:06:46:4a: 52:4e:f9:32:39:de:65:51:76:ea:c1:25:50:a1:c3:fc:33:06: 6c:5a:70:3a:6b:bd:bd:5d:28:5d:8e:45:76:ac:7f:67:c8:a7: 82:e4:3c:68:19:f6:5f:fc:2c:12:22:71:81:e9:8e:2e:39:cb: 72:bb:aa:f4:f5:fc:b4:f8:5b:64:e9:22:63:b3:05:e8:d2:6e: 12:6a:41:a3:e3:64:91:18:c3:cb:91:e7:1c:b8:ae:e8:6c:8f: 6e:d1:3b:e6:d8:bb:c2:6e:30:e0:00:89:98:47:78:bc:69:12: 56:03:84:62 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJIzqGnPMlyiUCUIg63Ot1/mmUdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0MEY0MDc0MjYxOTU5OTUzQzZCMTEzNTlBRTEzRDJD NEI4MzdEMzAeFw0yNTA4MTkxNjE4NDdaFw0yNTA4MjQxMjMyNDdaMDMxMTAvBgNV BAMTKDNGOUUxMEVGMjZGMUFEQzk5NEJFRTMyNDgxNTRBRUNGMUY3MUM4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUJolRQ4DE7O3cXIYzgNjZj5mw u4ifIbehi15cgKgpXWNip4xziLVrqbx7a3KpWtlQLAA+pITAk8xPy4TzlhkuwB+f GYa8eCdWvTWoW3hbaypUoUwUKjyK0o7nJxT+WkJrLMdp7Tea+9U1WiTtV75awuiG N2Jnvhl1i4oEPpWzJNH427abR/HCfSip/7uyfPVFKWOwS1A+irbm7iWPfclI0Iys lzzKOCAV0dZqKxqZTB7mTQb7YyaSbhOAu2nyN6t2UeZJOmrLw04hr0+4KgvUEln6 fpWObbRCql4m02LWbYFiYv/cckwUpoIem7Hr3YuU0RFXyil70mWN/jZxo3PrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUP54Q7ybxrcmUvuMkgVSuzx9xyPUwHwYDVR0j BBgwFoAU+kD0B0JhlZlTxrETWa4T0sS4N9MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0Q0RkYyN0RGQ0Y0QTVFRUM1RTRDRTE0MDIzMUUzMzE1 N0RCNTExMjJDMTA1Q0UxQUI1QUQ2RTM0REI0MzMyLzAvRkE0MEY0MDc0MjYxOTU5 OTUzQzZCMTEzNTlBRTEzRDJDNEI4MzdEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQTQwRjQwNzQyNjE5NTk5NTND NkIxMTM1OUFFMTNEMkM0QjgzN0QzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNENEZGMjdERkNGNEE1RUVDNUU0Q0UxNDAyMzFFMzMxNTdEQjUxMTIy QzEwNUNFMUFCNUFENkUzNERCNDMzMi8wL0ZBNDBGNDA3NDI2MTk1OTk1M0M2QjEx MzU5QUUxM0QyQzRCODM3RDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMisGeIQUMNTCS1fr09UKMMz8D fki2GWvS3xAbBMk7P3qPRxXDKbvAfVCb2mnJ1PyRFUi6ZraOfZQoPKL77f1rhtdl pd5ZzwcUV8WSK0uUK2JSN3Yscj5fhcNjUW8KnogThb4xVB6oDDOdEU3Kzy6fwXoM 9yVI6Sp22+dNsRy94nyzvpgeBSTQL/g7GpYGRkpSTvkyOd5lUXbqwSVQocP8MwZs WnA6a729XShdjkV2rH9nyKeC5DxoGfZf/CwSInGB6Y4uOctyu6r09fy0+Ftk6SJj swXo0m4SakGj42SRGMPLkeccuK7obI9u0Tvm2LvCbjDgAImYR3i8aRJWA4Ri -----END CERTIFICATE-----Generated at Wed Aug 20 19:43:47 2025 by rpki-client