$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft File: E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft (raw, json) Hash identifier: iKlbL83AHzWXr+xcHxU0sOfhQ79/+i5+0cCdh3bjlYg= Subject key identifier: 1C:96:BE:B9:53:0B:D9:63:DA:02:2B:6E:EF:63:2C:AD:99:8C:AC:52 Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0 Certificate issuer: /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0 Certificate serial: 3EC75F2918FEBD1E20545BE1E6479FF93BF4FEC9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft Manifest number: 21 Signing time: Tue 19 Aug 2025 15:28:20 +0000 Manifest this update: Tue 19 Aug 2025 15:23:20 +0000 Manifest next update: Mon 25 Aug 2025 14:58:20 +0000 Files and hashes: 1: 323830313a31303a3430303a3a2f34382d3438203d3e20323734303832.roa (hash: 8vIPDiyHWCFxED1QzQUkWPFRn5ehHgljcBJsp+0ZuQs=) 2: 34352e36382e39342e302f32342d3234203d3e20323734303832.roa (hash: lhc62mxO4E11a1nS2+eTLpSkRQvO8IrRtl4nl2jl+rE=) 3: 34352e36382e39352e302f32342d3234203d3e20323734303832.roa (hash: Ptmcbh4UnPwoTmgtgc4nOaqbYtiZZ0qesRkHGMvBf50=) 4: E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl (hash: isZZzA5eXn1okrMV57uR43vOl+8vpp5Us4Xc8Bgzf1A=) 5: 34352e36382e39342e302f32332d3233203d3e20323734303832.roa (hash: sM200nMTnixrA/fFvHJhwPuTgnNQl/GyLV99r0uCYoo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 Aug 2025 05:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c7:5f:29:18:fe:bd:1e:20:54:5b:e1:e6:47:9f:f9:3b:f4:fe:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0 Validity Not Before: Aug 19 15:23:20 2025 GMT Not After : Aug 25 14:58:20 2025 GMT Subject: CN=1C96BEB9530BD963DA022B6EEF632CAD998CAC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:38:5e:c0:01:2e:fe:ef:51:dc:ee:2d:4a: e7:cd:ba:ce:43:92:e7:87:c9:54:b3:4a:fc:5d:d7: ba:b5:9c:f7:04:cf:4d:f0:8b:da:d5:08:5b:49:d0: c6:9c:cc:bd:2c:04:8a:5c:ec:1f:a9:9f:e0:2b:ad: 92:77:59:c3:b8:d8:b4:d2:fc:0c:36:60:ae:92:8a: f2:cf:98:fb:45:00:27:84:6f:ac:c9:cd:a2:71:62: 61:06:08:e4:aa:b4:fc:68:fb:87:bd:86:1b:e9:61: ed:69:c5:a6:ed:5d:50:b0:0f:79:0d:c8:46:78:2a: c5:f5:70:77:5a:12:ad:4c:b3:62:a0:d7:8c:12:e2: 99:37:31:52:ba:73:c7:3f:9b:44:05:81:4c:33:d7: 3a:45:84:bc:66:14:84:05:2c:69:bf:12:50:27:9d: 95:e7:52:60:9f:4e:c8:e3:dc:92:22:bb:fc:89:df: d4:98:6e:f9:44:63:66:77:17:b3:49:1f:c4:78:01: a9:ce:50:56:66:09:52:04:f0:0a:76:1a:8f:98:c1: 65:ae:79:20:a5:6c:7e:ca:b0:68:d0:62:0e:02:d9: 97:fd:2c:41:aa:e0:a5:5e:16:a6:04:0b:55:64:bb: 77:f7:bb:6a:7b:64:1e:4f:e0:07:00:d3:37:f7:be: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:BE:B9:53:0B:D9:63:DA:02:2B:6E:EF:63:2C:AD:99:8C:AC:52 X509v3 Authority Key Identifier: keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:34:d9:3c:d4:dd:71:ff:c2:9e:9e:9a:94:0d:ac:fb:17:12: 78:b3:84:f3:e4:2e:15:80:31:cd:b0:38:01:7b:a7:09:c2:72: aa:41:44:19:6f:f1:6d:7a:12:a3:45:5e:c0:3a:1a:eb:19:5f: f3:8f:50:05:82:aa:4c:93:a4:42:82:45:13:17:a0:61:2e:a7: ad:c4:ae:24:ee:86:12:8d:14:bd:8f:d7:b5:84:a0:0b:86:91: d1:c2:13:da:c0:a1:a7:b5:de:35:09:33:be:7a:18:f0:5b:e3: 13:af:52:98:fe:00:77:7e:7c:bf:30:4f:77:b1:a0:dc:1c:7c: 00:f9:20:cf:b1:f7:1e:b9:e9:9f:b0:9e:16:b5:dd:a7:e9:b9: 49:b8:6b:34:bb:b4:71:a3:45:74:33:b8:98:a1:81:5f:ad:40: f4:4f:55:76:0c:1e:08:73:df:ab:02:8a:6a:14:27:db:d8:79: f4:8e:46:ae:7c:12:1f:5f:26:38:50:c5:cd:a5:5e:72:42:8f: c3:1e:89:af:29:fe:3d:98:2a:cb:61:8a:55:21:f0:85:a3:bb: 23:29:80:bb:98:2b:9a:95:9e:61:da:8f:cd:c9:7a:67:de:97: 9a:7b:60:31:2d:74:38:11:e1:cc:66:72:a1:1c:04:f3:4a:36: 8b:8d:db:a3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPsdfKRj+vR4gVFvh5kef+Tv0/skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4MzIzQzhGMEM4RENGNTFCOTQ4MkQ1NkI0QkRGQjhC NzcwRkVFMDAeFw0yNTA4MTkxNTIzMjBaFw0yNTA4MjUxNDU4MjBaMDMxMTAvBgNV BAMTKDFDOTZCRUI5NTMwQkQ5NjNEQTAyMkI2RUVGNjMyQ0FEOTk4Q0FDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HDhewAEu/u9R3O4tSufNus5D kueHyVSzSvxd17q1nPcEz03wi9rVCFtJ0MaczL0sBIpc7B+pn+ArrZJ3WcO42LTS /Aw2YK6SivLPmPtFACeEb6zJzaJxYmEGCOSqtPxo+4e9hhvpYe1pxabtXVCwD3kN yEZ4KsX1cHdaEq1Ms2Kg14wS4pk3MVK6c8c/m0QFgUwz1zpFhLxmFIQFLGm/ElAn nZXnUmCfTsjj3JIiu/yJ39SYbvlEY2Z3F7NJH8R4AanOUFZmCVIE8Ap2Go+YwWWu eSClbH7KsGjQYg4C2Zf9LEGq4KVeFqYEC1Vku3f3u2p7ZB5P4AcA0zf3vtG5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHJa+uVML2WPaAitu72MsrZmMrFIwHwYDVR0j BBgwFoAU6YMjyPDI3PUblILVa0vfuLdw/uAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85QUM3NzQ4RjkwOTQ2NDJFRUQ1QjE2QUVGMjgwRTAyOTI2 REZFNjk4OUE5OUZCRjQ0MDQ4NkJBQ0ZCMDkwMTVELzAvRTk4MzIzQzhGMEM4RENG NTFCOTQ4MkQ1NkI0QkRGQjhCNzcwRkVFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTgzMjNDOEYwQzhEQ0Y1MUI5 NDgyRDU2QjRCREZCOEI3NzBGRUUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUFDNzc0OEY5MDk0NjQyRUVENUIxNkFFRjI4MEUwMjkyNkRGRTY5ODlB OTlGQkY0NDA0ODZCQUNGQjA5MDE1RC8wL0U5ODMyM0M4RjBDOERDRjUxQjk0ODJE NTZCNEJERkI4Qjc3MEZFRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjNNk81N1x/8KenpqUDaz7FxJ4 s4Tz5C4VgDHNsDgBe6cJwnKqQUQZb/FtehKjRV7AOhrrGV/zj1AFgqpMk6RCgkUT F6BhLqetxK4k7oYSjRS9j9e1hKALhpHRwhPawKGntd41CTO+ehjwW+MTr1KY/gB3 fny/ME93saDcHHwA+SDPsfceuemfsJ4Wtd2n6blJuGs0u7Rxo0V0M7iYoYFfrUD0 T1V2DB4Ic9+rAopqFCfb2Hn0jkaufBIfXyY4UMXNpV5yQo/DHomvKf49mCrLYYpV IfCFo7sjKYC7mCualZ5h2o/NyXpn3peae2AxLXQ4EeHMZnKhHATzSjaLjduj -----END CERTIFICATE-----Generated at Wed Aug 20 19:44:03 2025 by rpki-client