$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft File: 420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft (raw, json) Hash identifier: SKyO5LKnWzHTfVtXyQ7BFtv4GO86442lVELcdl93Kms= Subject key identifier: CB:E7:22:B6:A7:13:50:A1:5B:8A:8D:8F:1F:FB:BD:30:55:15:DC:EE Authority key identifier: 42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09 Certificate issuer: /CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09 Certificate serial: 1260C4A86C98529F589F77BC092B57172E22F405 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft Manifest number: 0115 Signing time: Wed 17 Sep 2025 07:10:11 +0000 Manifest this update: Wed 17 Sep 2025 07:05:11 +0000 Manifest next update: Mon 22 Sep 2025 22:37:11 +0000 Files and hashes: 1: 420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl (hash: /9eVES5hwT3NFhmpUG0YytSQt3qQISgAreM804fNorE=) 2: 34352e3233302e33342e302f32332d3234203d3e203634313039.roa (hash: py7SwEogYW7OlG4gh9g/9TmQ8H1L8j3pKcEm/vflPK4=) 3: 323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa (hash: Hd1AtImOstWgb3cGVVnSBaluoWDIBWPqxaspTcz7mr0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 22:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:60:c4:a8:6c:98:52:9f:58:9f:77:bc:09:2b:57:17:2e:22:f4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09 Validity Not Before: Sep 17 07:05:11 2025 GMT Not After : Sep 22 22:37:11 2025 GMT Subject: CN=CBE722B6A71350A15B8A8D8F1FFBBD305515DCEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:2f:e8:1b:2b:b0:2b:5c:8d:e5:90:09:17: b3:2d:8c:29:fe:53:b2:cc:02:27:05:ba:a0:5f:4c: d0:c9:66:a0:2b:f7:b3:2d:01:67:bc:7a:7e:1b:54: 20:ef:c9:04:02:5a:22:5c:80:63:d1:0b:cb:57:aa: 55:09:f8:93:3f:44:45:64:9f:4e:d7:1d:44:ee:d9: d6:7f:32:a4:05:f7:3e:58:50:75:f8:86:be:17:8d: 39:87:35:68:db:59:08:5e:8e:71:64:bb:41:c4:eb: 0d:1a:59:ad:8a:16:b7:eb:78:d4:dc:65:6a:88:90: d8:95:3f:15:5f:97:38:6e:e5:bf:3b:8c:41:48:33: b1:06:ad:d9:ef:23:1a:42:96:8a:8f:8c:08:de:7f: 2b:c1:95:3c:28:f2:68:8a:2a:c6:33:6e:5e:63:b2: 38:fb:4c:13:b8:42:59:ec:b1:7a:34:09:8d:7f:a4: fd:a7:e6:91:62:95:02:3d:6d:d5:5d:b2:cd:80:87: 25:e9:29:09:f8:9e:fe:c1:0b:26:98:28:7f:44:16: f4:07:11:17:fa:ef:7a:fd:23:59:78:e5:59:fb:b0: dd:1f:47:84:2d:d5:96:4a:76:18:0f:4f:08:b7:7a: fe:6f:bf:f5:90:d9:ef:9c:15:fc:42:5c:97:04:87: 1d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E7:22:B6:A7:13:50:A1:5B:8A:8D:8F:1F:FB:BD:30:55:15:DC:EE X509v3 Authority Key Identifier: keyid:42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:98:00:99:9c:0e:c1:ba:68:84:0c:64:91:d9:30:5c:88:0a: 71:74:6c:1f:18:92:f7:b7:b7:77:0d:7a:aa:48:bc:36:8a:69: 4d:de:22:12:d6:59:40:81:89:5e:1d:16:67:77:93:90:4a:96: 41:71:98:27:92:56:15:a4:97:54:26:70:f1:e4:48:a5:ad:4b: 05:f0:aa:21:78:fc:c1:28:c0:68:65:99:28:a2:8b:ad:96:d6: 79:0e:f0:c9:2d:4d:2b:47:62:f7:01:06:73:7b:25:e5:1a:d0: 8b:40:0b:df:90:16:09:1b:23:89:4c:3d:6d:c8:cc:2e:f8:a6: 19:cc:c4:2f:04:95:f9:68:2d:e5:68:89:16:47:47:27:03:3f: 6a:4a:96:49:09:b7:2b:59:83:30:da:00:be:40:af:10:1e:06: 79:0b:8c:62:f8:ee:54:db:38:9f:7d:b0:df:97:e9:06:70:93: 37:1d:c9:2c:0d:eb:ba:9b:f7:82:c0:dc:96:26:2a:7c:23:3e: 81:9b:06:31:d1:39:68:24:e4:fe:d4:94:d6:a1:99:3e:52:45: 96:1e:9c:6d:c1:a1:d1:c3:11:0a:05:51:3d:bd:64:5b:42:e8: 40:c5:7c:da:96:b4:8e:c3:3b:17:4b:39:89:9c:3e:bd:cb:56: db:54:f4:98 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEmDEqGyYUp9Yn3e8CStXFy4i9AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwQUJDRUY4QjI0OUIzRkQ2MzI3NEMwQjM4MkQ2RjVC RUExMUEwOTAeFw0yNTA5MTcwNzA1MTFaFw0yNTA5MjIyMjM3MTFaMDMxMTAvBgNV BAMTKENCRTcyMkI2QTcxMzUwQTE1QjhBOEQ4RjFGRkJCRDMwNTUxNURDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVS/oGyuwK1yN5ZAJF7MtjCn+ U7LMAicFuqBfTNDJZqAr97MtAWe8en4bVCDvyQQCWiJcgGPRC8tXqlUJ+JM/REVk n07XHUTu2dZ/MqQF9z5YUHX4hr4XjTmHNWjbWQhejnFku0HE6w0aWa2KFrfreNTc ZWqIkNiVPxVflzhu5b87jEFIM7EGrdnvIxpCloqPjAjefyvBlTwo8miKKsYzbl5j sjj7TBO4QlnssXo0CY1/pP2n5pFilQI9bdVdss2AhyXpKQn4nv7BCyaYKH9EFvQH ERf673r9I1l45Vn7sN0fR4Qt1ZZKdhgPTwi3ev5vv/WQ2e+cFfxCXJcEhx39AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUy+citqcTUKFbio2PH/u9MFUV3O4wHwYDVR0j BBgwFoAUQgq874skmz/WMnTAs4LW9b6hGgkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QzY2NzhFQzBDRERCQ0Q1NkQ4MUZBODhDMjBGMzE5Nzcw QzNDNjE5OUE0N0MxNzgwNThCRjk2NEYzRTM3NTg4LzAvNDIwQUJDRUY4QjI0OUIz RkQ2MzI3NEMwQjM4MkQ2RjVCRUExMUEwOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBBQkNFRjhCMjQ5QjNGRDYz Mjc0QzBCMzgyRDZGNUJFQTExQTA5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUM2Njc4RUMwQ0REQkNENTZEODFGQTg4QzIwRjMxOTc3MEMzQzYxOTlB NDdDMTc4MDU4QkY5NjRGM0UzNzU4OC8wLzQyMEFCQ0VGOEIyNDlCM0ZENjMyNzRD MEIzODJENkY1QkVBMTFBMDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXmACZnA7BumiEDGSR2TBciApx dGwfGJL3t7d3DXqqSLw2imlN3iIS1llAgYleHRZnd5OQSpZBcZgnklYVpJdUJnDx 5EilrUsF8KohePzBKMBoZZkoooutltZ5DvDJLU0rR2L3AQZzeyXlGtCLQAvfkBYJ GyOJTD1tyMwu+KYZzMQvBJX5aC3laIkWR0cnAz9qSpZJCbcrWYMw2gC+QK8QHgZ5 C4xi+O5U2ziffbDfl+kGcJM3HcksDeu6m/eCwNyWJip8Iz6BmwYx0TloJOT+1JTW oZk+UkWWHpxtwaHRwxEKBVE9vWRbQuhAxXzalrSOwzsXSzmJnD69y1bbVPSY -----END CERTIFICATE-----Generated at Thu Sep 18 23:31:03 2025 by rpki-client