$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft File: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft (raw, json) Hash identifier: ktRW+Jj8+0VeeICgXtcOgQEsWR1en87SVZye1vq+LJY= Subject key identifier: 28:8E:65:85:41:DC:A1:24:B6:CC:8C:FC:F5:DC:36:98:C0:A9:E7:E5 Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA Certificate issuer: /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Certificate serial: 3045878C0B6A63287B37EEABF5B8CEB78FF0C7F0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft Manifest number: 0100 Signing time: Wed 23 Jul 2025 14:28:15 +0000 Manifest this update: Wed 23 Jul 2025 14:23:15 +0000 Manifest next update: Tue 29 Jul 2025 12:51:15 +0000 Files and hashes: 1: 3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl (hash: 3XZsDTaycrOIm+U6xe5IrWzaN3KZcUHRaMoiZUmZeLY=) 2: 3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa (hash: 9nOTLn46sjpDAR48MKagvl/ZyN6L83EJfcCvLIjfam0=) 3: 323830333a393663303a3a2f33322d3438203d3e20323635363534.roa (hash: +HXJb4sa7ETJbCOAHf7M1k8XWQOuQ/vamBtSiKAhPUQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 22:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:45:87:8c:0b:6a:63:28:7b:37:ee:ab:f5:b8:ce:b7:8f:f0:c7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA Validity Not Before: Jul 23 14:23:15 2025 GMT Not After : Jul 29 12:51:15 2025 GMT Subject: CN=288E658541DCA124B6CC8CFCF5DC3698C0A9E7E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:a6:be:44:a7:83:21:2a:8d:90:ba:7e:76: 98:5c:bf:3c:b4:a8:55:ca:2a:de:bc:06:ea:9c:c6: 5b:ca:4e:7b:13:af:cf:00:72:f9:75:20:d7:dc:22: 91:94:e9:fd:ea:26:f8:f4:26:0a:4e:7b:00:dd:6b: cf:54:40:99:c7:fb:5b:7c:99:cb:c7:a2:17:98:7b: f2:56:6f:1b:68:4c:61:ef:74:2a:05:9d:86:df:b1: d8:1c:1f:f4:11:9a:c3:be:3b:f3:f6:23:c3:90:a8: 37:96:a6:33:3d:3c:d6:62:cc:e3:2d:91:c7:f0:a8: 83:18:19:db:58:ee:32:ec:09:02:0c:df:5b:c3:95: 11:1e:e7:b6:bf:53:d1:7e:6b:e9:2a:74:cd:e1:ff: de:95:62:3c:bc:54:83:86:0b:57:c9:ef:31:3a:fb: ba:1c:4d:16:82:f5:db:69:3e:bb:3d:2a:37:1b:74: 6b:bd:33:86:8f:1f:aa:c8:ae:6a:62:ee:fd:07:86: 26:b9:31:62:96:f7:78:8c:39:3f:e8:d9:11:d0:6a: 79:d2:28:64:be:a2:82:89:cf:62:cc:e0:18:99:7f: a3:87:27:ca:11:1f:df:7e:d2:b6:0f:07:82:91:d3: 5e:8f:43:b9:25:ee:19:2d:03:39:94:01:b9:23:8d: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8E:65:85:41:DC:A1:24:B6:CC:8C:FC:F5:DC:36:98:C0:A9:E7:E5 X509v3 Authority Key Identifier: keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e3:6d:d4:e2:19:78:3c:59:7c:97:44:fc:d3:e6:75:df:2f: 46:ef:72:13:bf:8c:46:be:4c:f4:b8:c8:45:1a:05:2b:d4:4b: bf:28:1c:15:f5:a2:86:37:07:04:cb:0f:a9:50:77:f0:d3:02: f6:b5:30:88:58:a3:73:b0:61:60:0b:42:c6:ca:fb:65:f8:61: e8:85:95:6d:2c:3c:3a:27:15:58:a4:ef:b2:fc:a9:4c:53:3a: 3c:27:20:42:c6:2e:b7:6c:ff:47:20:ef:f5:be:ed:8e:97:20: 56:f0:0f:3a:52:78:a6:63:ed:98:f8:8d:bf:83:b5:11:a8:53: f6:ca:47:6c:95:7a:12:51:a9:f0:20:2f:87:62:80:bf:8e:45: bb:6e:bd:af:98:b4:b0:0c:05:59:34:e7:9f:dc:2a:30:a6:fa: 8e:af:ba:37:1c:83:a3:a0:3e:d7:25:25:28:31:28:5b:64:31: 66:36:2c:49:0f:ed:a5:d2:ee:07:2e:5e:59:82:b1:ca:ee:c5: d4:fa:9c:40:ca:50:cb:2a:08:65:fb:b3:18:c4:01:83:c8:08: c6:dc:bd:9c:8b:15:ad:55:25:e2:1a:ed:5a:12:9c:f6:aa:b7: 59:96:20:89:37:a0:d6:f9:d2:dd:9b:15:8b:2b:54:f9:72:45: ce:7e:48:2c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMEWHjAtqYyh7N+6r9bjOt4/wx/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBQUFCQjk5RjVDRjc5Q0E3QzI1RjAyMkY4NUY4NUUw RENCMkNCQTAeFw0yNTA3MjMxNDIzMTVaFw0yNTA3MjkxMjUxMTVaMDMxMTAvBgNV BAMTKDI4OEU2NTg1NDFEQ0ExMjRCNkNDOENGQ0Y1REMzNjk4QzBBOUU3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKhKa+RKeDISqNkLp+dphcvzy0 qFXKKt68BuqcxlvKTnsTr88Acvl1INfcIpGU6f3qJvj0JgpOewDda89UQJnH+1t8 mcvHoheYe/JWbxtoTGHvdCoFnYbfsdgcH/QRmsO+O/P2I8OQqDeWpjM9PNZizOMt kcfwqIMYGdtY7jLsCQIM31vDlREe57a/U9F+a+kqdM3h/96VYjy8VIOGC1fJ7zE6 +7ocTRaC9dtpPrs9KjcbdGu9M4aPH6rIrmpi7v0Hhia5MWKW93iMOT/o2RHQannS KGS+ooKJz2LM4BiZf6OHJ8oRH99+0rYPB4KR016PQ7kl7hktAzmUAbkjjaB9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKI5lhUHcoSS2zIz89dw2mMCp5+UwHwYDVR0j BBgwFoAUPKqruZ9c95ynwl8CL4X4Xg3LLLowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85NjU4NzI5NzhCNDJGRTk5OTcwRUUwNEQ4QjIwNjA3NzEw ODNFMzA3NDFBNTA5QkFFQjAwREI2M0NFQ0IyM0QzLzAvM0NBQUFCQjk5RjVDRjc5 Q0E3QzI1RjAyMkY4NUY4NUUwRENCMkNCQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0FBQUJCOTlGNUNGNzlDQTdD MjVGMDIyRjg1Rjg1RTBEQ0IyQ0JBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTY1ODcyOTc4QjQyRkU5OTk3MEVFMDREOEIyMDYwNzcxMDgzRTMwNzQx QTUwOUJBRUIwMERCNjNDRUNCMjNEMy8wLzNDQUFBQkI5OUY1Q0Y3OUNBN0MyNUYw MjJGODVGODVFMERDQjJDQkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi423U4hl4PFl8l0T80+Z13y9G 73ITv4xGvkz0uMhFGgUr1Eu/KBwV9aKGNwcEyw+pUHfw0wL2tTCIWKNzsGFgC0LG yvtl+GHohZVtLDw6JxVYpO+y/KlMUzo8JyBCxi63bP9HIO/1vu2OlyBW8A86Unim Y+2Y+I2/g7URqFP2ykdslXoSUanwIC+HYoC/jkW7br2vmLSwDAVZNOef3CowpvqO r7o3HIOjoD7XJSUoMShbZDFmNixJD+2l0u4HLl5ZgrHK7sXU+pxAylDLKghl+7MY xAGDyAjG3L2cixWtVSXiGu1aEpz2qrdZliCJN6DW+dLdmxWLK1T5ckXOfkgs -----END CERTIFICATE-----Generated at Thu Jul 24 23:39:41 2025 by rpki-client