$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft File: EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft (raw, json) Hash identifier: iNot0+330ZOnSstv2+9vN8IbczulYgq1xI5BZSboqL0= Subject key identifier: B0:E1:26:1B:47:F8:87:94:B3:FC:7D:89:10:34:04:72:08:AB:F7:D9 Authority key identifier: EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8 Certificate issuer: /CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8 Certificate serial: 2D3958C8ADE281B0BAE8A0F8FE9D526F52D61962 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft Manifest number: 0110 Signing time: Mon 18 Aug 2025 20:20:23 +0000 Manifest this update: Mon 18 Aug 2025 20:15:23 +0000 Manifest next update: Sun 24 Aug 2025 09:32:23 +0000 Files and hashes: 1: 3139302e3131332e33352e302f32342d3234203d3e20323731383634.roa (hash: whz10X8rtZzGp5KMzk05l4IUJVXM4z7n6YqJR8ewZes=) 2: 323830333a623431303a3a2f33322d3332203d3e20323731383634.roa (hash: Q2PshefDUXGnhMVo308cN4VQhDiScT++G8OK9eTiar4=) 3: 3139302e3131332e33332e302f32342d3234203d3e20323731383634.roa (hash: azN9pRvg5DpbUa7YhuECMfpkA3UkUWDg8qQJHMhMr7A=) 4: EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl (hash: Us7De4ROymHm8Lp60JFVjcZLSjpuGWjWY5KJEKK/aDI=) 5: 3139302e3131332e33342e302f32342d3234203d3e20323731383634.roa (hash: lFSysIKlLWf7JB59Euh1O3A3OikH4P+rns7uXXpwjWg=) 6: 3139302e3131332e33322e302f32342d3234203d3e20323731383634.roa (hash: rihQQJVFtZKUDCwHDYSaMs0ULFC3fG8dHmriGQNp/VM=) 7: 3139302e3131332e33322e302f32322d3234203d3e20323731383634.roa (hash: Ykcu8jC4UzsyZvhSzf6AMozsyx0Qjpsc4oSXGJYv0m4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:39:58:c8:ad:e2:81:b0:ba:e8:a0:f8:fe:9d:52:6f:52:d6:19:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8 Validity Not Before: Aug 18 20:15:23 2025 GMT Not After : Aug 24 09:32:23 2025 GMT Subject: CN=B0E1261B47F88794B3FC7D891034047208ABF7D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:6c:2e:36:8b:bd:92:39:53:f5:d4:40:5e: 32:45:27:0b:e4:f7:d6:bb:45:a0:dc:9b:d9:8b:92: 2f:cb:9e:27:24:11:31:7b:05:bb:40:53:16:9f:21: a9:ec:97:60:f8:f1:bd:76:9b:03:c8:cb:98:06:99: a0:a8:61:ce:27:5e:bb:67:02:c5:40:da:7e:d1:a8: 23:46:9c:cb:0b:85:d5:04:42:02:77:77:cd:4b:6a: 8f:6f:c3:57:22:f4:5c:b1:62:bb:1c:22:63:c0:85: 4e:ab:75:95:c4:0b:6b:a0:bc:5c:30:23:e9:3d:3d: 13:20:00:96:fd:42:c4:01:0b:a0:2e:09:26:4c:ce: a0:3e:8c:ca:e4:39:22:6a:0c:d0:03:62:ff:33:c0: 62:15:6e:d3:58:03:19:45:d5:7a:d0:df:3d:09:27: fe:88:8b:a4:d3:cb:92:d8:fe:b4:ae:9e:5b:54:5a: 0b:5f:69:16:74:9b:63:3b:b8:80:ad:b4:8d:9b:1a: df:9c:d1:41:39:e9:d5:4e:93:1f:ec:30:44:fb:d9: 43:61:cf:f5:ea:6f:b3:ce:8b:d2:d9:58:ec:29:58: a5:d7:7b:30:6e:fc:db:ff:10:bd:3c:b1:12:b0:c6: aa:08:b4:90:18:67:45:fb:12:a5:0e:fe:dd:c6:bd: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E1:26:1B:47:F8:87:94:B3:FC:7D:89:10:34:04:72:08:AB:F7:D9 X509v3 Authority Key Identifier: keyid:EA:51:7D:4B:AA:B8:5D:3C:8F:50:08:F4:0B:C4:8B:21:CB:EA:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4A3C65E01138A797CC1CD88B7B32A80F15642316087C29513D3DAC2B1117A368/0/EA517D4BAAB85D3C8F5008F40BC48B21CBEA72B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a9:f2:13:cc:ea:d1:61:83:eb:1a:15:97:94:0b:29:33:0b: dd:be:15:fa:b2:48:b8:2a:c0:b2:83:b0:08:bd:7a:59:83:95: ae:b0:13:e8:71:1d:00:df:cd:8d:8f:ac:f7:af:26:04:20:51: a4:2a:09:d7:5d:2a:99:f3:19:ec:84:34:a9:24:d7:a2:42:35: db:55:b9:d8:ed:0b:58:45:95:cf:71:14:43:cb:6a:19:19:a6: 07:0e:bc:0f:b3:c4:7e:7e:90:b8:1a:26:d7:d6:e1:e8:90:d2: e4:42:8a:89:23:d2:63:5e:6f:38:67:45:70:e8:54:fb:0d:fc: f2:e2:84:d3:5c:eb:72:e7:bc:93:dd:7c:e9:4b:cf:1c:59:51: 3e:1e:92:2a:e9:25:c3:5e:88:b8:aa:ff:8d:d3:38:87:e2:3c: 74:8a:c5:60:34:ae:28:b6:cd:96:f0:e4:13:cb:96:9a:8e:ac: 3a:1c:c9:9a:f9:aa:0a:26:a0:c7:33:2c:af:63:f3:dc:72:4a: 96:fb:d9:3f:e5:64:75:5b:e9:f9:25:b6:a0:92:e5:2b:b6:08: 6b:09:5b:e2:2c:eb:fe:d7:11:2a:21:77:a1:a7:c5:96:e6:fe: 81:c1:64:32:65:25:b3:7e:7b:2d:94:7f:f7:c1:44:9d:b5:db: 67:55:89:0f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULTlYyK3igbC66KD4/p1Sb1LWGWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1MTdENEJBQUI4NUQzQzhGNTAwOEY0MEJDNDhCMjFD QkVBNzJCODAeFw0yNTA4MTgyMDE1MjNaFw0yNTA4MjQwOTMyMjNaMDMxMTAvBgNV BAMTKEIwRTEyNjFCNDdGODg3OTRCM0ZDN0Q4OTEwMzQwNDcyMDhBQkY3RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8H2wuNou9kjlT9dRAXjJFJwvk 99a7RaDcm9mLki/LnickETF7BbtAUxafIansl2D48b12mwPIy5gGmaCoYc4nXrtn AsVA2n7RqCNGnMsLhdUEQgJ3d81Lao9vw1ci9FyxYrscImPAhU6rdZXEC2ugvFww I+k9PRMgAJb9QsQBC6AuCSZMzqA+jMrkOSJqDNADYv8zwGIVbtNYAxlF1XrQ3z0J J/6Ii6TTy5LY/rSunltUWgtfaRZ0m2M7uICttI2bGt+c0UE56dVOkx/sMET72UNh z/Xqb7POi9LZWOwpWKXXezBu/Nv/EL08sRKwxqoItJAYZ0X7EqUO/t3GvRUhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsOEmG0f4h5Sz/H2JEDQEcgir99kwHwYDVR0j BBgwFoAU6lF9S6q4XTyPUAj0C8SLIcvqcrgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QTNDNjVFMDExMzhBNzk3Q0MxQ0Q4OEI3QjMyQTgwRjE1 NjQyMzE2MDg3QzI5NTEzRDNEQUMyQjExMTdBMzY4LzAvRUE1MTdENEJBQUI4NUQz QzhGNTAwOEY0MEJDNDhCMjFDQkVBNzJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQTUxN0Q0QkFBQjg1RDNDOEY1 MDA4RjQwQkM0OEIyMUNCRUE3MkI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEEzQzY1RTAxMTM4QTc5N0NDMUNEODhCN0IzMkE4MEYxNTY0MjMxNjA4 N0MyOTUxM0QzREFDMkIxMTE3QTM2OC8wL0VBNTE3RDRCQUFCODVEM0M4RjUwMDhG NDBCQzQ4QjIxQ0JFQTcyQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhqfITzOrRYYPrGhWXlAspMwvd vhX6ski4KsCyg7AIvXpZg5WusBPocR0A382Nj6z3ryYEIFGkKgnXXSqZ8xnshDSp JNeiQjXbVbnY7QtYRZXPcRRDy2oZGaYHDrwPs8R+fpC4GibX1uHokNLkQoqJI9Jj Xm84Z0Vw6FT7Dfzy4oTTXOty57yT3XzpS88cWVE+HpIq6SXDXoi4qv+N0ziH4jx0 isVgNK4ots2W8OQTy5aajqw6HMma+aoKJqDHMyyvY/PcckqW+9k/5WR1W+n5Jbag kuUrtghrCVviLOv+1xEqIXehp8WW5v6BwWQyZSWzfnstlH/3wUSdtdtnVYkP -----END CERTIFICATE-----Generated at Wed Aug 20 19:43:51 2025 by rpki-client