$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft File: 0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft (raw, json) Hash identifier: Bf30rDE/dJiGiMMTPhbi+Z6uu44U+M/k3Q26fwBQ8+E= Subject key identifier: 0D:8D:74:89:8B:29:EC:37:18:27:1E:7B:F4:2C:61:DB:B5:17:C4:6E Authority key identifier: 0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8 Certificate issuer: /CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8 Certificate serial: 68BCB36EC96B3BB06FAC03751F7088C010FDC762 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft Manifest number: 011E Signing time: Wed 17 Sep 2025 10:32:17 +0000 Manifest this update: Wed 17 Sep 2025 10:27:17 +0000 Manifest next update: Tue 23 Sep 2025 00:12:17 +0000 Files and hashes: 1: 3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa (hash: ZdsG86b+FcM+UBOt0dFPWgI/HfenH2ijjMngzZLnxgM=) 2: 323830333a363231303a3a2f33322d3332203d3e20323731393034.roa (hash: AaBThXXwsB45XFFB6nd/l2AQJxXABhJixlwmGWy1uBY=) 3: 0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl (hash: XGtv+pWmLNXla6vH9T3lybEQQagTccJQc7bOkD3P6ng=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bc:b3:6e:c9:6b:3b:b0:6f:ac:03:75:1f:70:88:c0:10:fd:c7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8 Validity Not Before: Sep 17 10:27:17 2025 GMT Not After : Sep 23 00:12:17 2025 GMT Subject: CN=0D8D74898B29EC3718271E7BF42C61DBB517C46E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e1:e4:8f:96:32:b5:a7:da:60:34:de:69:4c: 11:c8:34:9d:7e:dc:14:b3:6e:ee:db:05:77:b3:d9: 84:cb:ba:58:a2:3f:05:25:02:ba:d9:5d:e8:5e:b5: 8b:23:bb:88:04:19:f8:01:7c:4e:e7:af:d1:3d:07: e5:ed:4e:61:95:e5:9f:c3:a8:01:1f:0d:36:f6:ac: 45:d4:6d:c7:ea:b1:8c:a7:1a:4e:ce:a5:69:10:6d: b9:8b:25:0b:b4:04:9d:46:27:ce:4b:69:cb:82:72: 95:ca:3a:19:93:29:0d:e5:1b:5c:23:87:e6:29:d7: 87:cc:70:0c:d7:d0:8d:83:d8:e1:99:d4:f1:c2:0c: 0e:d7:de:5e:10:0a:07:f0:3f:2b:e5:b2:3f:a5:b8: 45:1b:79:c1:d2:c0:d3:21:6d:af:af:1e:39:21:e0: 16:be:2a:6d:5f:39:2f:31:1f:c1:a3:2e:5e:fb:ea: ea:33:78:5e:74:7f:f5:91:9f:cc:00:4e:93:02:5a: 6c:6e:44:c3:ac:ac:a7:09:95:bc:84:3f:5e:a4:af: 16:0a:c3:03:13:dc:b9:b4:87:30:78:e7:ad:84:9f: 43:b5:2f:6f:29:7b:79:3e:77:93:9b:d5:f9:8f:ca: 03:e6:dd:dc:0e:f1:9f:1a:32:1b:79:91:5e:eb:da: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8D:74:89:8B:29:EC:37:18:27:1E:7B:F4:2C:61:DB:B5:17:C4:6E X509v3 Authority Key Identifier: keyid:0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:48:f3:53:49:f3:13:1e:97:d9:db:a3:eb:0f:1b:99:41:75: 7c:73:c5:4b:9e:e4:c6:d9:51:8a:61:0b:fb:c5:c0:92:0e:4c: 56:f2:d9:0b:71:17:65:9e:d6:4f:d9:cb:6b:8e:5e:20:f3:d0: 8f:23:1b:e3:6e:97:0a:62:99:db:73:47:6d:eb:e0:94:fb:80: 69:3e:6d:db:4b:0c:39:b2:ff:5e:f7:03:f0:92:df:d8:76:88: 21:a6:8c:cf:74:0d:31:a0:37:d3:57:8c:2c:71:2e:14:d6:06: 65:b3:22:84:ec:e9:06:1d:6c:de:b9:31:e5:e3:2a:7f:01:9c: d6:80:e9:e7:1d:30:0b:b3:8e:2c:dc:bf:5b:19:4a:e5:8e:04: 2c:4c:74:7a:5a:dc:2d:5b:66:0a:2e:b1:77:9b:d3:4a:8c:16: 2f:8a:c0:4b:22:b7:43:d9:1b:ca:10:cf:d5:a4:36:72:c1:c7: b8:da:3a:b6:55:91:65:f4:ef:96:60:0c:39:e4:ef:8b:a2:92: 6f:da:ca:40:8c:de:ca:81:b6:7d:f9:24:99:4d:2a:35:8d:d9: 47:46:2d:2c:e4:5b:b2:e9:1e:75:d4:1c:f4:ad:6f:98:d2:8b: 4f:dc:b8:be:92:f4:4f:d1:d3:12:c0:99:88:c8:97:4e:bb:2f: 85:1d:aa:c1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaLyzbslrO7BvrAN1H3CIwBD9x2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyQTI0QkU1REM3QUZGOUY1RDkwQTYxOTFGNDlEMkYy QzhFQTNBODAeFw0yNTA5MTcxMDI3MTdaFw0yNTA5MjMwMDEyMTdaMDMxMTAvBgNV BAMTKDBEOEQ3NDg5OEIyOUVDMzcxODI3MUU3QkY0MkM2MURCQjUxN0M0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm4eSPljK1p9pgNN5pTBHINJ1+ 3BSzbu7bBXez2YTLuliiPwUlArrZXehetYsju4gEGfgBfE7nr9E9B+XtTmGV5Z/D qAEfDTb2rEXUbcfqsYynGk7OpWkQbbmLJQu0BJ1GJ85LacuCcpXKOhmTKQ3lG1wj h+Yp14fMcAzX0I2D2OGZ1PHCDA7X3l4QCgfwPyvlsj+luEUbecHSwNMhba+vHjkh 4Ba+Km1fOS8xH8GjLl776uozeF50f/WRn8wATpMCWmxuRMOsrKcJlbyEP16krxYK wwMT3Lm0hzB4562En0O1L28pe3k+d5Ob1fmPygPm3dwO8Z8aMht5kV7r2jEzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDY10iYsp7DcYJx579Cxh27UXxG4wHwYDVR0j BBgwFoAUDCokvl3Hr/n12QphkfSdLyyOo6gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUMzQjFCMTk4RkFFNDA2RDM1Nzk5MzJGM0MxMTBFREU2 OENCQzlENzE0RUM5MTA1RUYzQ0UzQ0JEREVBNzMxLzAvMEMyQTI0QkU1REM3QUZG OUY1RDkwQTYxOTFGNDlEMkYyQzhFQTNBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQzJBMjRCRTVEQzdBRkY5RjVE OTBBNjE5MUY0OUQyRjJDOEVBM0E4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFDM0IxQjE5OEZBRTQwNkQzNTc5OTMyRjNDMTEwRURFNjhDQkM5RDcx NEVDOTEwNUVGM0NFM0NCRERFQTczMS8wLzBDMkEyNEJFNURDN0FGRjlGNUQ5MEE2 MTkxRjQ5RDJGMkM4RUEzQTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtSPNTSfMTHpfZ26PrDxuZQXV8 c8VLnuTG2VGKYQv7xcCSDkxW8tkLcRdlntZP2ctrjl4g89CPIxvjbpcKYpnbc0dt 6+CU+4BpPm3bSww5sv9e9wPwkt/YdoghpozPdA0xoDfTV4wscS4U1gZlsyKE7OkG HWzeuTHl4yp/AZzWgOnnHTALs44s3L9bGUrljgQsTHR6WtwtW2YKLrF3m9NKjBYv isBLIrdD2RvKEM/VpDZywce42jq2VZFl9O+WYAw55O+LopJv2spAjN7KgbZ9+SSZ TSo1jdlHRi0s5Fuy6R511Bz0rW+Y0otP3Li+kvRP0dMSwJmIyJdOuy+FHarB -----END CERTIFICATE-----Generated at Wed Sep 17 23:11:42 2025 by rpki-client