$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft File: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft (raw, json) Hash identifier: /0X36KSW42CAd1Ac2awZKFe8WZVVpONwDpJ8GI1fPLI= Subject key identifier: 24:85:85:02:63:C7:F0:59:69:60:30:86:67:68:C6:6C:1B:05:DA:06 Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 Certificate issuer: /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Certificate serial: 12C1A5F3AE7EB5221521A0C1C26B973242C68F56 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft Manifest number: 33 Signing time: Mon 21 Jul 2025 08:29:09 +0000 Manifest this update: Mon 21 Jul 2025 08:24:09 +0000 Manifest next update: Fri 25 Jul 2025 10:21:09 +0000 Files and hashes: 1: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (hash: xT9XwSauYoSUnu1hhUiyvbXy1q8NqQprbVYTgbnc4vM=) 2: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl (hash: f5tq2DoDoiLnkdwqU2psmHTu7RsnCfpGKsCA9e3NUSM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c1:a5:f3:ae:7e:b5:22:15:21:a0:c1:c2:6b:97:32:42:c6:8f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Validity Not Before: Jul 21 08:24:09 2025 GMT Not After : Jul 25 10:21:09 2025 GMT Subject: CN=2485850263C7F059696030866768C66C1B05DA06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:b8:76:25:2c:85:b9:e0:34:e9:e3:93:e2: a1:a2:ed:9e:70:52:4a:ab:32:b0:bc:74:0f:98:27: 4c:43:40:81:f1:1a:8b:32:5b:8a:08:72:9e:bc:ef: a4:23:43:92:74:8a:09:5f:83:3d:0e:c5:a3:a1:13: d0:af:7f:d6:9f:e7:4b:20:1a:50:92:6a:cb:cd:01: fa:9c:4d:6a:d7:e2:19:9e:81:12:a0:2d:1a:35:0c: 1a:a3:e9:c7:c1:04:3c:ee:b6:dd:69:66:11:5a:cb: 8f:60:e1:cc:b8:e2:a4:07:f6:ba:99:a4:81:ea:d0: 8c:2e:8d:15:6c:bc:4d:40:f8:f7:cf:fe:92:7e:1b: a8:83:17:59:b3:a2:c5:67:de:8c:75:45:35:d2:05: 9f:68:da:9c:5c:cb:00:30:8b:fa:a1:6e:0c:cf:a7: fd:17:88:e3:57:e5:d3:eb:74:23:4c:62:d3:ad:a7: 2b:e5:14:cb:c3:bb:d1:cf:61:7c:cd:58:c0:fd:63: 58:43:be:23:52:4a:bb:22:ee:69:d2:f5:61:a5:c1: 60:70:23:13:c3:06:14:9c:38:d6:da:32:e9:da:2c: 3e:5e:52:06:96:c1:ca:78:0a:f4:ea:88:50:ba:7f: 49:c5:09:69:cc:e7:9e:16:e9:5e:db:17:75:d2:21: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:85:85:02:63:C7:F0:59:69:60:30:86:67:68:C6:6C:1B:05:DA:06 X509v3 Authority Key Identifier: keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5a:3d:63:bb:27:70:80:2f:6d:d8:7f:79:4e:3b:02:8f:6e: 72:0c:14:fa:17:f4:fe:56:8c:4d:c5:1a:7d:dd:01:01:d6:b8: 19:fa:a9:53:75:fa:40:9a:44:63:ba:82:75:c6:d9:fc:6c:a4: 69:af:44:cb:45:76:02:5f:a9:25:4e:f9:f3:53:c2:2c:f2:82: 14:09:d0:32:75:ae:50:e1:52:81:dc:11:4d:77:46:4d:c0:7d: e8:8c:07:c8:a9:ba:a6:e8:c8:c3:16:26:e5:08:72:a7:4f:85: c9:1c:e6:04:5f:cc:db:59:d5:c4:63:34:22:e3:d5:f6:a5:77: ab:05:91:31:2a:de:a2:3a:b0:f0:c7:78:b5:66:3e:1b:f8:45: a1:04:04:10:e8:77:58:85:ad:f5:2b:59:87:75:7d:86:c7:85: 73:57:54:d5:b5:c9:2f:f0:c3:0a:87:3c:e2:ce:d2:40:ed:d0: 6c:bb:ee:e2:a5:5d:fd:ff:55:a0:c2:bf:4b:38:a3:8b:a3:b0: b2:4a:6b:2e:a2:39:ff:81:e6:14:81:a2:09:cc:9c:91:de:8c: 5b:74:95:e5:6e:36:a3:86:9e:44:fb:41:26:5c:ab:1a:87:23: 15:90:b6:ef:34:9b:31:94:4b:75:0c:62:c5:1a:8a:7e:03:5a: df:15:75:13 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEsGl865+tSIVIaDBwmuXMkLGj1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0MkJCRUVGQTg1RkUzNzFCREVCQzREQkIxNzA5RUI2 NzFCMEE3MjAeFw0yNTA3MjEwODI0MDlaFw0yNTA3MjUxMDIxMDlaMDMxMTAvBgNV BAMTKDI0ODU4NTAyNjNDN0YwNTk2OTYwMzA4NjY3NjhDNjZDMUIwNURBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsebh2JSyFueA06eOT4qGi7Z5w UkqrMrC8dA+YJ0xDQIHxGosyW4oIcp6876QjQ5J0iglfgz0OxaOhE9Cvf9af50sg GlCSasvNAfqcTWrX4hmegRKgLRo1DBqj6cfBBDzutt1pZhFay49g4cy44qQH9rqZ pIHq0IwujRVsvE1A+PfP/pJ+G6iDF1mzosVn3ox1RTXSBZ9o2pxcywAwi/qhbgzP p/0XiONX5dPrdCNMYtOtpyvlFMvDu9HPYXzNWMD9Y1hDviNSSrsi7mnS9WGlwWBw IxPDBhScONbaMunaLD5eUgaWwcp4CvTqiFC6f0nFCWnM554W6V7bF3XSIe4lAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJIWFAmPH8FlpYDCGZ2jGbBsF2gYwHwYDVR0j BBgwFoAUiEK77vqF/jcb3rxNuxcJ62cbCnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjY5OTRCMjA3OTkwQjFCRDM3MUNFRjExNDRFRjc3NEFF RTM0MDdBOEEyOTM2QzVGREU5NDkyQTZCRUU1RDMyLzAvODg0MkJCRUVGQTg1RkUz NzFCREVCQzREQkIxNzA5RUI2NzFCMEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODQyQkJFRUZBODVGRTM3MUJE RUJDNERCQjE3MDlFQjY3MUIwQTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTY2OTk0QjIwNzk5MEIxQkQzNzFDRUYxMTQ0RUY3NzRBRUUzNDA3QThB MjkzNkM1RkRFOTQ5MkE2QkVFNUQzMi8wLzg4NDJCQkVFRkE4NUZFMzcxQkRFQkM0 REJCMTcwOUVCNjcxQjBBNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvWj1juydwgC9t2H95TjsCj25y DBT6F/T+VoxNxRp93QEB1rgZ+qlTdfpAmkRjuoJ1xtn8bKRpr0TLRXYCX6klTvnz U8Is8oIUCdAyda5Q4VKB3BFNd0ZNwH3ojAfIqbqm6MjDFiblCHKnT4XJHOYEX8zb WdXEYzQi49X2pXerBZExKt6iOrDwx3i1Zj4b+EWhBAQQ6HdYha31K1mHdX2Gx4Vz V1TVtckv8MMKhzziztJA7dBsu+7ipV39/1Wgwr9LOKOLo7CySmsuojn/geYUgaIJ zJyR3oxbdJXlbjajhp5E+0EmXKsahyMVkLbvNJsxlEt1DGLFGop+A1rfFXUT -----END CERTIFICATE-----Generated at Mon Jul 21 18:55:49 2025 by rpki-client