$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.mft File: 0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.mft (raw, json) Hash identifier: q3tTQSAF/5nmG+7O9f6uIcOK3k2Jbbm0wuQUW6K/B0g= Subject key identifier: 15:F3:A8:E7:77:37:9B:EC:27:40:87:DF:E2:0F:B3:0C:E0:9B:B1:2B Authority key identifier: 0C:AB:CA:4D:4E:DD:FC:E1:85:5F:D6:1D:DC:E6:7F:98:96:09:E7:2C Certificate issuer: /CN=0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C Certificate serial: 49294C878F73FDEDF1BB0476A46D176C0859A751 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.mft Manifest number: 0109 Signing time: Wed 23 Jul 2025 08:29:30 +0000 Manifest this update: Wed 23 Jul 2025 08:24:30 +0000 Manifest next update: Mon 28 Jul 2025 11:57:30 +0000 Files and hashes: 1: 3230312e37372e3130382e302f32322d3234203d3e20323635363237.roa (hash: Mhn8oCutPQchTfearWk8MWAvFw14aYJe9MObPQOm9BQ=) 2: 0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.crl (hash: NwELFhCy03XJanoiyVm3O13cU8NGOl+aK0XUkEW7vy4=) 3: 323830363a3361613a3a2f33322d3438203d3e20323635363237.roa (hash: NE+KCGt1/5ZyQLSud9MU/+6h+9AiXEWoLhdRbOlKPEU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.crl rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 11:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:29:4c:87:8f:73:fd:ed:f1:bb:04:76:a4:6d:17:6c:08:59:a7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C Validity Not Before: Jul 23 08:24:30 2025 GMT Not After : Jul 28 11:57:30 2025 GMT Subject: CN=15F3A8E777379BEC274087DFE20FB30CE09BB12B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:b4:ee:59:cb:67:f2:ef:24:3f:02:55:78: 70:e5:52:f2:48:6e:53:24:d9:22:ee:62:b2:f0:14: 43:4f:20:e2:f1:78:52:cb:3e:02:96:a4:e5:60:84: 85:b9:06:07:30:3c:ab:8b:d4:b7:1b:37:f1:1a:96: 6e:b3:02:71:5c:ba:ec:3f:b6:b2:eb:ee:ca:7f:c2: c4:ed:e0:83:71:ad:e8:05:21:da:2a:e5:51:89:09: fc:99:b0:e4:6e:ce:7a:2c:76:33:4d:1b:45:04:8d: 4a:f6:c7:9f:08:5d:93:47:88:41:84:e9:46:a4:ab: 9d:59:b7:05:5a:55:da:e9:d1:6a:7c:a9:4b:22:b7: bd:3d:67:5f:af:b5:88:7a:ea:85:7d:35:f1:94:00: 91:6a:66:f7:03:af:95:b1:99:0e:2c:cc:93:47:f3: 23:d8:6c:02:87:9a:7c:a9:58:2e:92:f4:1e:9b:a9: 2a:c7:4c:ba:50:5a:60:2b:95:bb:6c:14:94:d2:58: ec:a5:eb:2e:51:6d:12:2e:c4:f5:41:bc:7b:89:9f: e7:9c:94:da:4e:15:24:76:b2:9a:a4:e5:66:54:dc: 17:1b:2a:74:f2:71:47:cf:54:99:72:80:f5:03:f8: 27:fb:12:1a:a8:db:ea:c2:22:6f:7b:81:3b:62:4a: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:A8:E7:77:37:9B:EC:27:40:87:DF:E2:0F:B3:0C:E0:9B:B1:2B X509v3 Authority Key Identifier: keyid:0C:AB:CA:4D:4E:DD:FC:E1:85:5F:D6:1D:DC:E6:7F:98:96:09:E7:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C6FBE8CCBB63F91747118DEBAF0E3583DEC309578A1C22F22413425AD164305/0/0CABCA4D4EDDFCE1855FD61DDCE67F989609E72C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4d:88:81:b3:42:ab:51:26:34:db:76:2b:44:b0:f3:51:f4: 24:8f:22:0a:ed:a0:c5:c6:b2:09:7b:b5:49:2f:38:a4:28:43: ec:3d:bd:89:0c:8c:c7:53:82:c3:8e:9e:59:a9:10:49:7c:a5: ed:d2:77:db:36:db:01:be:f5:e5:cc:44:32:84:2f:47:a8:d1: ac:6a:22:8a:89:da:e6:a4:ed:73:ed:92:2d:00:38:64:d3:17: 64:f0:ec:72:2e:55:85:fd:25:20:77:2c:19:dc:ba:f7:c9:4c: b1:2e:1e:ee:82:73:f0:d8:9c:c3:59:cd:c5:8e:b0:5e:5e:9f: 15:2e:2e:92:a3:48:9a:aa:c4:7e:89:80:b7:24:46:fb:f1:a3: ae:43:5c:74:a3:92:ad:48:e8:63:f0:03:0d:f4:c4:72:c9:67: 37:71:72:b0:bb:7b:48:b2:e6:08:c1:49:c5:9c:33:06:d7:92: 7e:a1:5b:52:0a:ef:79:2e:52:36:11:b5:d4:16:1c:26:a4:9d: 80:5b:99:f2:38:1f:15:99:e0:a9:65:fa:57:9b:28:86:11:b1: b9:da:a7:1d:ee:a8:bd:8a:d2:a7:7b:10:26:71:23:3c:3a:a1: 01:f3:66:80:09:fe:10:a1:c3:55:37:9d:23:24:4e:29:03:c0: c6:c8:cd:b3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSSlMh49z/e3xuwR2pG0XbAhZp1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENBQkNBNEQ0RURERkNFMTg1NUZENjFERENFNjdGOTg5 NjA5RTcyQzAeFw0yNTA3MjMwODI0MzBaFw0yNTA3MjgxMTU3MzBaMDMxMTAvBgNV BAMTKDE1RjNBOEU3NzczNzlCRUMyNzQwODdERkUyMEZCMzBDRTA5QkIxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dLTuWctn8u8kPwJVeHDlUvJI blMk2SLuYrLwFENPIOLxeFLLPgKWpOVghIW5BgcwPKuL1LcbN/Ealm6zAnFcuuw/ trLr7sp/wsTt4INxregFIdoq5VGJCfyZsORuznosdjNNG0UEjUr2x58IXZNHiEGE 6Uakq51ZtwVaVdrp0Wp8qUsit709Z1+vtYh66oV9NfGUAJFqZvcDr5WxmQ4szJNH 8yPYbAKHmnypWC6S9B6bqSrHTLpQWmArlbtsFJTSWOyl6y5RbRIuxPVBvHuJn+ec lNpOFSR2spqk5WZU3BcbKnTycUfPVJlygPUD+Cf7Ehqo2+rCIm97gTtiSplXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFfOo53c3m+wnQIff4g+zDOCbsSswHwYDVR0j BBgwFoAUDKvKTU7d/OGFX9Yd3OZ/mJYJ5ywwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85QzZGQkU4Q0NCQjYzRjkxNzQ3MTE4REVCQUYwRTM1ODNE RUMzMDk1NzhBMUMyMkYyMjQxMzQyNUFEMTY0MzA1LzAvMENBQkNBNEQ0RURERkNF MTg1NUZENjFERENFNjdGOTg5NjA5RTcyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0FCQ0E0RDRFRERGQ0UxODU1 RkQ2MUREQ0U2N0Y5ODk2MDlFNzJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUM2RkJFOENDQkI2M0Y5MTc0NzExOERFQkFGMEUzNTgzREVDMzA5NTc4 QTFDMjJGMjI0MTM0MjVBRDE2NDMwNS8wLzBDQUJDQTRENEVEREZDRTE4NTVGRDYx RERDRTY3Rjk4OTYwOUU3MkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeTYiBs0KrUSY023YrRLDzUfQk jyIK7aDFxrIJe7VJLzikKEPsPb2JDIzHU4LDjp5ZqRBJfKXt0nfbNtsBvvXlzEQy hC9HqNGsaiKKidrmpO1z7ZItADhk0xdk8OxyLlWF/SUgdywZ3Lr3yUyxLh7ugnPw 2JzDWc3FjrBeXp8VLi6So0iaqsR+iYC3JEb78aOuQ1x0o5KtSOhj8AMN9MRyyWc3 cXKwu3tIsuYIwUnFnDMG15J+oVtSCu95LlI2EbXUFhwmpJ2AW5nyOB8VmeCpZfpX myiGEbG52qcd7qi9itKnexAmcSM8OqEB82aACf4QocNVN50jJE4pA8DGyM2z -----END CERTIFICATE-----Generated at Thu Jul 24 23:27:53 2025 by rpki-client