$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft File: 3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft (raw, json) Hash identifier: CzRd6OupvZgTxRcCWRl44Td/UbcbSuPXotjhRLlvBo0= Subject key identifier: 24:6A:20:CB:8A:EC:52:C0:65:5D:4E:BB:7C:5E:D1:D1:E4:1C:B8:A1 Authority key identifier: 3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0 Certificate issuer: /CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0 Certificate serial: 5DB9AAEC5C40D13C48740511C49A0A2280E321EA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft Manifest number: 0101 Signing time: Sun 20 Jul 2025 06:54:45 +0000 Manifest this update: Sun 20 Jul 2025 06:49:45 +0000 Manifest next update: Thu 24 Jul 2025 15:18:45 +0000 Files and hashes: 1: 3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl (hash: 40a4J637xJwUtrO70YOOSws8HLBioSINXo2PGxoza8g=) 2: 323830313a3163343a3a2f34342d3434203d3e20323632353839.roa (hash: lorZn9/vXoPIp0R8IKOORdaOFAbwOZuk9eFtFCf+UjY=) 3: 3230312e3133302e31362e302f32322d3232203d3e203237393531.roa (hash: abImvvbFsudfph5qw211U6DBVARt/+FYVfAAbpcdAJc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Jul 2025 15:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b9:aa:ec:5c:40:d1:3c:48:74:05:11:c4:9a:0a:22:80:e3:21:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0 Validity Not Before: Jul 20 06:49:45 2025 GMT Not After : Jul 24 15:18:45 2025 GMT Subject: CN=246A20CB8AEC52C0655D4EBB7C5ED1D1E41CB8A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:a3:08:7c:5a:0b:4f:18:33:3c:14:55:65: f8:82:5a:b2:cf:f0:ca:26:53:12:a1:7a:7a:47:9e: 60:10:bc:a1:60:a0:d6:5e:02:dd:6e:71:f1:c0:d6: 0c:b7:79:90:b4:23:01:cf:35:21:af:97:f4:03:2c: c2:46:a5:f8:a6:ef:ef:97:80:b6:85:30:6a:81:e1: 09:22:af:b9:08:f6:0c:47:ad:68:5f:39:09:ce:c4: 96:e1:f4:1f:5b:ee:d3:e2:1c:6d:2b:8b:20:70:1f: 33:36:5f:f7:73:09:99:4f:9a:c4:e7:f2:88:27:27: 4b:c0:4b:19:88:d0:af:a5:50:3b:38:b1:a1:1b:d5: 0b:23:64:4e:51:c0:80:ef:4b:05:92:fa:a4:8b:cd: e9:b1:6b:e2:21:27:87:2e:43:b4:e4:33:3a:18:38: 2f:be:bd:1c:50:78:b0:aa:3e:df:59:2c:67:fd:98: d7:c1:42:60:79:53:fc:07:d0:b3:79:a0:02:18:e2: e6:a6:3b:6e:01:68:84:d6:cd:d5:0a:ad:1e:9e:ea: b2:d2:a7:0c:80:49:0e:c3:72:c2:a9:d9:e9:83:b6: cc:59:5f:5a:70:35:5d:8c:40:a4:cd:a6:61:1d:86: 77:25:fd:39:5c:73:4f:a9:6f:c4:47:4b:8b:16:ce: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6A:20:CB:8A:EC:52:C0:65:5D:4E:BB:7C:5E:D1:D1:E4:1C:B8:A1 X509v3 Authority Key Identifier: keyid:3C:94:AC:DC:43:86:59:F2:0D:2A:C8:CD:39:93:4A:1C:C0:EF:E3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8231A47A2F082BC76BB9CEE9E3F5EAB852FCE65C4F7447C24819BC0408E6B76/0/3C94ACDC438659F20D2AC8CD39934A1CC0EFE3A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6b:61:75:b4:3d:8f:67:4a:d0:fa:07:8b:cb:78:5c:de:7c: 71:34:9b:b3:b4:e7:7a:fb:72:fa:7f:92:00:e0:85:e3:c3:20: 1e:9c:f7:b1:3e:dc:eb:49:bd:62:fa:8f:89:35:91:15:d9:01: be:e2:18:f7:fd:f2:14:e5:8c:3c:73:1d:10:a2:f7:a4:6a:1d: ca:b3:62:c4:92:98:51:96:29:44:9e:0e:36:38:20:ea:e7:05: 2e:a8:cd:32:48:6d:d9:88:0e:ff:cd:92:0b:45:0d:a1:08:86: 0b:93:01:e0:1e:73:ab:00:e4:65:30:ef:83:28:b7:a5:6c:39: 0a:75:9d:00:27:b0:e9:bb:30:25:8c:55:8d:da:5f:3b:c3:9b: 3e:23:b8:ee:91:51:15:cc:d9:d8:d4:5d:ec:93:2b:07:29:36: 35:36:5a:bc:cc:df:ae:74:29:c4:72:d6:de:f3:97:d8:76:de: 91:41:e4:db:8f:61:9e:d4:d4:89:98:ba:6a:5f:39:61:eb:94: b2:d4:63:50:54:56:13:2f:38:3e:07:b4:63:88:e2:e1:9d:17: d0:6e:98:50:d4:2f:2b:7d:6b:1b:0c:b9:86:77:71:5d:c3:b5: 24:bc:f8:d3:3e:25:da:93:f0:e7:02:8f:a4:b6:f4:55:53:5e: ec:96:86:69 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXbmq7FxA0TxIdAURxJoKIoDjIeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5NEFDREM0Mzg2NTlGMjBEMkFDOENEMzk5MzRBMUND MEVGRTNBMDAeFw0yNTA3MjAwNjQ5NDVaFw0yNTA3MjQxNTE4NDVaMDMxMTAvBgNV BAMTKDI0NkEyMENCOEFFQzUyQzA2NTVENEVCQjdDNUVEMUQxRTQxQ0I4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyqMIfFoLTxgzPBRVZfiCWrLP 8MomUxKhenpHnmAQvKFgoNZeAt1ucfHA1gy3eZC0IwHPNSGvl/QDLMJGpfim7++X gLaFMGqB4Qkir7kI9gxHrWhfOQnOxJbh9B9b7tPiHG0riyBwHzM2X/dzCZlPmsTn 8ognJ0vASxmI0K+lUDs4saEb1QsjZE5RwIDvSwWS+qSLzemxa+IhJ4cuQ7TkMzoY OC++vRxQeLCqPt9ZLGf9mNfBQmB5U/wH0LN5oAIY4uamO24BaITWzdUKrR6e6rLS pwyASQ7DcsKp2emDtsxZX1pwNV2MQKTNpmEdhncl/Tlcc0+pb8RHS4sWzvmxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUJGogy4rsUsBlXU67fF7R0eQcuKEwHwYDVR0j BBgwFoAUPJSs3EOGWfINKsjNOZNKHMDv46AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BODIzMUE0N0EyRjA4MkJDNzZCQjlDRUU5RTNGNUVBQjg1 MkZDRTY1QzRGNzQ0N0MyNDgxOUJDMDQwOEU2Qjc2LzAvM0M5NEFDREM0Mzg2NTlG MjBEMkFDOENEMzk5MzRBMUNDMEVGRTNBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzk0QUNEQzQzODY1OUYyMEQy QUM4Q0QzOTkzNEExQ0MwRUZFM0EwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTgyMzFBNDdBMkYwODJCQzc2QkI5Q0VFOUUzRjVFQUI4NTJGQ0U2NUM0 Rjc0NDdDMjQ4MTlCQzA0MDhFNkI3Ni8wLzNDOTRBQ0RDNDM4NjU5RjIwRDJBQzhD RDM5OTM0QTFDQzBFRkUzQTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+a2F1tD2PZ0rQ+geLy3hc3nxx NJuztOd6+3L6f5IA4IXjwyAenPexPtzrSb1i+o+JNZEV2QG+4hj3/fIU5Yw8cx0Q ovekah3Ks2LEkphRlilEng42OCDq5wUuqM0ySG3ZiA7/zZILRQ2hCIYLkwHgHnOr AORlMO+DKLelbDkKdZ0AJ7DpuzAljFWN2l87w5s+I7jukVEVzNnY1F3skysHKTY1 Nlq8zN+udCnEctbe85fYdt6RQeTbj2Ge1NSJmLpqXzlh65Sy1GNQVFYTLzg+B7Rj iOLhnRfQbphQ1C8rfWsbDLmGd3Fdw7UkvPjTPiXak/DnAo+ktvRVU17sloZp -----END CERTIFICATE-----Generated at Sun Jul 20 22:35:20 2025 by rpki-client