$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: WdGeyhCUymKi16bnItuSQJd0h/5n71KDllS7dhz4tx4= Subject key identifier: 5D:C8:54:DD:B9:3A:00:E1:56:FC:F9:43:E3:FD:E3:59:AC:5F:42:1B Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 489E8DD4B4718D5CFC03A91CAED5CECDEDB93A3C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: 0119 Signing time: Wed 17 Sep 2025 22:14:49 +0000 Manifest this update: Wed 17 Sep 2025 22:09:49 +0000 Manifest next update: Tue 23 Sep 2025 04:51:49 +0000 Files and hashes: 1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: kvXq/7xFBcYihjCboY6sXmggXJS5RFgBzNm9B4FD6Yk=) 2: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: g6DNKjZekU2uDpQLAA16qySYRWAhC+pOHrCuJlds2qw=) 3: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: PjnUAqBn/22UQ+t/knC/I04nLlI1liPgApBJA7Dl7ek=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 23:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9e:8d:d4:b4:71:8d:5c:fc:03:a9:1c:ae:d5:ce:cd:ed:b9:3a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Sep 17 22:09:49 2025 GMT Not After : Sep 23 04:51:49 2025 GMT Subject: CN=5DC854DDB93A00E156FCF943E3FDE359AC5F421B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:d3:ca:74:27:e8:f8:40:3a:3c:ce:ee:08: 2e:c4:f5:a4:7a:39:1e:0a:a5:79:da:f4:d0:d4:64: 6d:ee:1a:d4:7c:c5:da:be:30:a2:c0:a4:9f:ba:75: 13:66:16:22:be:f6:b1:ca:26:39:f3:87:e0:0b:17: db:78:f4:b5:e7:08:bb:29:b4:8d:4a:fb:83:9d:74: 21:5e:43:48:03:c6:a3:f6:a0:a2:e6:08:11:e5:c5: 4c:81:20:db:67:16:c2:a6:c8:ce:9e:76:b5:df:36: 18:a7:e0:30:c1:f4:16:de:c1:ee:ac:f1:ce:6c:eb: 99:51:19:6b:23:c9:7c:bc:f5:4b:91:d8:3d:d0:7f: 98:47:9c:7b:d6:54:9b:1d:d9:33:ba:0d:c0:32:94: 4c:e3:cb:6d:6c:24:25:e0:3e:82:85:3b:89:22:08: d6:45:af:57:14:8f:93:9c:8b:1b:c0:82:82:ac:ef: cc:38:ef:7e:d2:60:5a:c1:bf:49:cb:6d:39:3d:9f: 3a:65:84:77:54:d8:3f:91:d1:27:dc:f9:6a:6b:4e: 68:4c:2a:b9:04:36:4a:31:70:06:98:e9:40:04:13: bb:70:61:f9:0e:65:37:0c:fa:65:46:24:1a:b3:48: 63:54:41:25:7c:68:0e:b7:8e:26:e2:f5:50:b8:0d: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C8:54:DD:B9:3A:00:E1:56:FC:F9:43:E3:FD:E3:59:AC:5F:42:1B X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:81:9e:a0:6c:04:4f:67:78:77:a0:6b:c1:45:30:97:b1:d3: 10:80:c7:ad:f3:f5:39:b2:1c:32:cf:15:f3:19:67:de:b3:f2: d7:a4:fc:42:e2:f8:c5:0c:a9:e9:0c:93:6f:72:c0:a7:6f:c7: c2:2c:37:01:f6:ec:ca:64:43:20:7d:69:62:83:07:34:6a:f7: a0:f6:ce:20:a8:78:21:7e:02:f1:57:03:3d:62:4a:0c:b9:f9: 99:95:23:74:c0:c6:13:00:2f:39:be:1f:26:72:f7:5a:d9:46: cc:32:2a:cd:45:cf:ea:24:84:e1:86:51:8a:1d:0f:fd:ca:f4: f2:14:5d:2f:6d:a3:2a:bd:7e:f7:95:26:c4:73:ee:81:a1:ad: 7d:ff:55:3c:68:38:4f:ab:c4:b3:c1:95:8f:fd:1c:5a:cf:45: e8:c3:b2:35:08:4f:09:66:66:a9:df:f2:82:5a:3d:89:51:b9: 3c:56:77:ae:8c:8a:a5:be:ac:b3:29:cb:46:b2:fb:5f:7a:a9: 02:ce:df:9b:91:1c:a6:ec:a0:9f:29:0a:3c:0b:23:0e:14:3d: 04:7c:8d:9f:f9:b6:0a:d9:29:a6:bb:2d:9b:94:ce:4d:8c:f9: 38:71:2b:bf:50:7e:30:e5:29:ef:dd:45:b7:23:fc:71:35:9f: f4:04:92:0a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSJ6N1LRxjVz8A6kcrtXOze25OjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNTA5MTcyMjA5NDlaFw0yNTA5MjMwNDUxNDlaMDMxMTAvBgNV BAMTKDVEQzg1NEREQjkzQTAwRTE1NkZDRjk0M0UzRkRFMzU5QUM1RjQyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44tPKdCfo+EA6PM7uCC7E9aR6 OR4KpXna9NDUZG3uGtR8xdq+MKLApJ+6dRNmFiK+9rHKJjnzh+ALF9t49LXnCLsp tI1K+4OddCFeQ0gDxqP2oKLmCBHlxUyBINtnFsKmyM6edrXfNhin4DDB9Bbewe6s 8c5s65lRGWsjyXy89UuR2D3Qf5hHnHvWVJsd2TO6DcAylEzjy21sJCXgPoKFO4ki CNZFr1cUj5OcixvAgoKs78w4737SYFrBv0nLbTk9nzplhHdU2D+R0Sfc+WprTmhM KrkENkoxcAaY6UAEE7twYfkOZTcM+mVGJBqzSGNUQSV8aA63jibi9VC4DXLjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXchU3bk6AOFW/PlD4/3jWaxfQhswHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJgZ6gbARPZ3h3oGvBRTCXsdMQ gMet8/U5shwyzxXzGWfes/LXpPxC4vjFDKnpDJNvcsCnb8fCLDcB9uzKZEMgfWli gwc0aveg9s4gqHghfgLxVwM9YkoMufmZlSN0wMYTAC85vh8mcvda2UbMMirNRc/q JIThhlGKHQ/9yvTyFF0vbaMqvX73lSbEc+6Boa19/1U8aDhPq8SzwZWP/Rxaz0Xo w7I1CE8JZmap3/KCWj2JUbk8VneujIqlvqyzKctGsvtfeqkCzt+bkRym7KCfKQo8 CyMOFD0EfI2f+bYK2Smmuy2blM5NjPk4cSu/UH4w5Snv3UW3I/xxNZ/0BJIK -----END CERTIFICATE-----Generated at Thu Sep 18 23:30:02 2025 by rpki-client