$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft File: A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft (raw, json) Hash identifier: RYYyGAYardkNVD64/VXVtNAY3RrlGIJmh/MTCeEj8rI= Subject key identifier: 4D:96:F1:2E:83:32:29:23:EC:F2:1E:A4:FB:1E:05:29:A8:8B:0A:D9 Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80 Certificate issuer: /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180 Certificate serial: 528BD1453D8944893ACB96496EA6ADFF36A0A89A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft Manifest number: 0111 Signing time: Fri 29 Aug 2025 02:23:47 +0000 Manifest this update: Fri 29 Aug 2025 02:18:47 +0000 Manifest next update: Wed 03 Sep 2025 20:31:47 +0000 Files and hashes: 1: 34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa (hash: 4SNvI2lGeT6H6sIZ9Nny9tic2HGe8XS41PmGFlAFgFg=) 2: 323830333a366132303a3a2f33322d3332203d3e20323635383531.roa (hash: XKxAKGC+Ae0+eBpbIc7FV8BzcTIAbBOwhjO968x5zP4=) 3: 34352e3232352e3138342e302f32322d3234203d3e20323635383531.roa (hash: T+Dja6E+37EVjVckvAQyy2Jf4DvO6wMpk3gstNcYlrc=) 4: A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl (hash: qNFNZQ5ya7gqP5wmr8VwOyBtKV6DI2LWnb4sb689i58=) 5: 34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa (hash: pdZcKOU6AuNSJy/nzOpaaD3u8sc0THK5yqjK9E7a1M0=) 6: 34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa (hash: lvmIPUVVVDucA4JORXUjNf+hUWvbrYXxgrq8ZKPZJEQ=) 7: 34352e3232352e3138352e302f32342d3234203d3e20323635383531.roa (hash: 9/DjF6F2DqZdtHWwC2KoPPwIsrZaA7krMkup+Sx0Gvk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 03 Sep 2025 20:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8b:d1:45:3d:89:44:89:3a:cb:96:49:6e:a6:ad:ff:36:a0:a8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180 Validity Not Before: Aug 29 02:18:47 2025 GMT Not After : Sep 3 20:31:47 2025 GMT Subject: CN=4D96F12E83322923ECF21EA4FB1E0529A88B0AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:84:14:33:ad:2e:be:75:93:ed:a1:f1:f7: 6e:07:c0:6a:9c:f9:d9:e3:22:a2:42:2c:05:db:94: f5:36:fa:42:51:67:5f:f4:79:ed:ef:8f:5e:d4:97: f2:79:fd:ad:f4:81:2e:19:52:e3:ee:ac:b6:ae:3e: 55:7a:ba:a0:48:25:ab:0d:11:b3:fb:1e:d9:4c:f1: df:a5:db:36:74:c3:6e:6e:18:e1:65:05:bb:46:38: 61:f0:ed:00:5a:d7:ce:6c:a2:22:3b:30:66:4c:ec: d2:cf:d8:e8:e6:ef:81:4f:3e:ad:61:f6:1c:ea:cd: 28:60:e6:e8:7f:db:16:91:bb:39:c2:27:3c:5f:db: d1:4d:39:fb:37:4a:58:25:7d:f3:67:5b:ca:76:40: 14:ff:b5:65:eb:b9:78:cb:b7:ea:3d:76:e3:56:97: 2a:29:12:e5:fd:fe:9d:96:21:5f:7b:34:2b:56:4c: 72:fe:65:c1:47:39:cc:fb:87:ea:50:0c:91:ca:39: c9:cf:f5:b6:6b:1d:f1:de:97:f7:78:d2:7b:96:cc: 1c:67:db:cb:e3:ed:7a:91:80:ff:ce:0c:b7:37:b0: a3:a2:b5:51:2c:f0:63:42:12:f4:5b:6c:50:c4:54: e4:24:e8:4d:38:45:00:2f:9e:eb:cf:db:77:9f:d3: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:96:F1:2E:83:32:29:23:EC:F2:1E:A4:FB:1E:05:29:A8:8B:0A:D9 X509v3 Authority Key Identifier: keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:aa:ad:fd:ea:26:3d:7b:71:3f:c0:45:75:62:e7:83:0c:22: 0e:87:f0:be:7d:5d:6c:0e:c9:8e:6c:3a:19:ab:b8:34:2e:c5: 48:2d:98:f3:83:90:08:0b:a6:9c:31:9c:df:60:4a:42:b2:85: 2f:79:30:59:57:58:22:c4:70:c3:3c:5b:87:6f:63:04:36:1b: e7:0a:c8:48:1c:03:5a:8a:3f:07:38:b4:f4:7b:80:60:1d:46: 2a:89:4d:aa:da:b9:7c:7c:03:26:f8:da:a4:83:56:85:99:8e: 4b:a6:0e:7d:18:bd:8a:65:5a:06:0a:3e:2b:0b:e7:fe:00:f6: af:7a:0d:79:33:7f:b5:4d:13:ac:bd:89:13:54:56:f5:1d:2b: 6c:f1:5a:f0:dd:61:f1:4b:2e:ca:f1:a2:f5:75:7b:1d:cb:43: ed:c6:b8:db:ad:33:f8:77:5d:6a:3e:95:56:fb:30:bc:ac:74: b2:2f:04:f4:45:19:09:ec:f4:e5:72:90:f4:e8:18:47:63:21: bc:0f:71:42:6f:27:86:10:b5:3f:ef:ab:c6:22:01:cb:cc:5c: 01:ce:f9:28:dd:9c:42:21:12:c3:b7:58:0a:ae:f9:e0:bf:1b: 9e:f3:93:d8:28:1c:06:9d:64:10:c2:97:d7:8e:5f:2e:97:fd: 28:ef:bc:43 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUovRRT2JRIk6y5ZJbqat/zagqJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1NTg5RDRDQjYzRjA2Q0IwNjM4RkQ4M0RDMjM1NkRE RDJCNjE4MDAeFw0yNTA4MjkwMjE4NDdaFw0yNTA5MDMyMDMxNDdaMDMxMTAvBgNV BAMTKDREOTZGMTJFODMzMjI5MjNFQ0YyMUVBNEZCMUUwNTI5QTg4QjBBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3l4QUM60uvnWT7aHx924HwGqc +dnjIqJCLAXblPU2+kJRZ1/0ee3vj17Ul/J5/a30gS4ZUuPurLauPlV6uqBIJasN EbP7HtlM8d+l2zZ0w25uGOFlBbtGOGHw7QBa185soiI7MGZM7NLP2Ojm74FPPq1h 9hzqzShg5uh/2xaRuznCJzxf29FNOfs3SlglffNnW8p2QBT/tWXruXjLt+o9duNW lyopEuX9/p2WIV97NCtWTHL+ZcFHOcz7h+pQDJHKOcnP9bZrHfHel/d40nuWzBxn 28vj7XqRgP/ODLc3sKOitVEs8GNCEvRbbFDEVOQk6E04RQAvnuvP23ef04rZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTZbxLoMyKSPs8h6k+x4FKaiLCtkwHwYDVR0j BBgwFoAUqFWJ1Mtj8GywY4/YPcI1bd0rYYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMUI3NzAwRTJGRTA3ODVCNEI2NTBGQjZCN0IxQjM1REU4 REFGQzkzQTMxODQxOEVGMTEyODAxODMyQ0RCQTczLzAvQTg1NTg5RDRDQjYzRjA2 Q0IwNjM4RkQ4M0RDMjM1NkRERDJCNjE4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODU1ODlENENCNjNGMDZDQjA2 MzhGRDgzREMyMzU2REREMkI2MTgwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTFCNzcwMEUyRkUwNzg1QjRCNjUwRkI2QjdCMUIzNURFOERBRkM5M0Ez MTg0MThFRjExMjgwMTgzMkNEQkE3My8wL0E4NTU4OUQ0Q0I2M0YwNkNCMDYzOEZE ODNEQzIzNTZEREQyQjYxODAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbqq396iY9e3E/wEV1YueDDCIO h/C+fV1sDsmObDoZq7g0LsVILZjzg5AIC6acMZzfYEpCsoUveTBZV1gixHDDPFuH b2MENhvnCshIHANaij8HOLT0e4BgHUYqiU2q2rl8fAMm+Nqkg1aFmY5Lpg59GL2K ZVoGCj4rC+f+APaveg15M3+1TROsvYkTVFb1HSts8Vrw3WHxSy7K8aL1dXsdy0Pt xrjbrTP4d11qPpVW+zC8rHSyLwT0RRkJ7PTlcpD06BhHYyG8D3FCbyeGELU/76vG IgHLzFwBzvko3ZxCIRLDt1gKrvngvxue85PYKBwGnWQQwpfXjl8ul/0o77xD -----END CERTIFICATE-----Generated at Sun Aug 31 04:42:56 2025 by rpki-client