$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft File: FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft (raw, json) Hash identifier: yeVF9E4S+riXoqHIS5dWmNtwIOLG51/2kPwFmUujfBo= Subject key identifier: D3:3F:2D:78:37:C6:32:7A:68:23:BE:B2:AD:29:2F:3B:63:07:38:E4 Authority key identifier: FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 Certificate issuer: /CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Certificate serial: 1DFA9C8438135595512850280A450EE56F36F046 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft Manifest number: 0118 Signing time: Mon 15 Sep 2025 16:25:04 +0000 Manifest this update: Mon 15 Sep 2025 16:20:04 +0000 Manifest next update: Sat 20 Sep 2025 23:40:04 +0000 Files and hashes: 1: 3230302e362e31372e302f32342d3234203d3e203233303331.roa (hash: dIEVjdb3lQCo9g9fO5GmMpWFti9yLYGOF7cFBhbUkAQ=) 2: FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl (hash: 1J96t846twg6PBjWdxhh9hK+9H0ZPb1g/2FrkgAwxpU=) 3: 3230302e362e31372e302f32342d3234203d3e20323733313233.roa (hash: xGaOy+8VqeB5oNlE4CohBIcrgM3fz/XUKeLlcTUTGpM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 23:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fa:9c:84:38:13:55:95:51:28:50:28:0a:45:0e:e5:6f:36:f0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F9FC9E2490D527653EF7CE847173F9CD08833 Validity Not Before: Sep 15 16:20:04 2025 GMT Not After : Sep 20 23:40:04 2025 GMT Subject: CN=D33F2D7837C6327A6823BEB2AD292F3B630738E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:d2:5b:a3:45:f1:14:31:1b:df:dc:e3:47: 25:04:8d:77:43:c4:11:99:71:27:90:f3:24:9b:47: 9e:d5:63:bf:50:1d:20:a4:28:0e:20:b2:5c:c4:d0: 13:d3:d7:0e:d1:b5:c5:9b:39:46:12:08:6a:ff:5e: c7:ce:f7:b8:89:2f:3e:68:8e:1d:50:28:b0:56:17: 6c:82:04:e4:a1:33:4e:dd:e9:eb:1c:d3:fe:74:9f: 0d:1f:a9:0f:1d:d5:c9:8e:01:54:9c:60:9f:43:a7: 40:7a:25:1e:00:ee:99:a5:93:fe:25:e5:0a:38:25: f0:20:d0:d3:01:b4:07:fa:c2:54:26:ee:2e:e8:8e: fc:7b:5f:ee:41:bc:a1:ef:fa:75:ef:80:d1:93:f8: 3e:2e:89:da:3b:14:9c:84:bf:9b:2c:61:84:bd:5d: 55:02:4c:9f:55:5f:66:d8:35:61:92:34:e0:34:6f: 10:42:39:20:6b:9f:e4:db:48:a9:9b:19:07:a1:f1: cc:c6:6e:93:61:f6:96:b1:a1:bd:6d:a6:d5:88:e7: 01:c5:af:99:cb:b4:60:85:fe:83:66:c4:63:c9:cf: 70:c6:6b:cb:db:54:5e:fd:c3:a9:ea:6d:65:26:bb: ea:b2:96:c0:af:10:12:15:00:53:c4:5a:6b:a5:7b: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3F:2D:78:37:C6:32:7A:68:23:BE:B2:AD:29:2F:3B:63:07:38:E4 X509v3 Authority Key Identifier: keyid:FA:8F:9F:C9:E2:49:0D:52:76:53:EF:7C:E8:47:17:3F:9C:D0:88:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8B29FB550AAE2F8936C08563686CECE337E58BD5A22AE6705A1F7CAA3137ADA/0/FA8F9FC9E2490D527653EF7CE847173F9CD08833.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c1:ab:4a:20:13:cc:9a:fa:4f:d1:da:e9:1f:30:89:e6:5f: fa:dc:d2:04:26:c5:fe:32:35:cb:24:48:68:5e:23:2b:b5:ad: 34:12:5e:03:6b:bc:f1:5b:09:44:00:ad:af:c4:b6:da:47:5d: eb:0b:bf:c8:18:6d:26:64:ab:f7:60:ce:f4:c3:8f:b0:e9:bd: 08:f6:f3:34:b5:a7:ad:bd:53:bf:94:88:08:eb:2b:c8:4b:a1: c7:a1:0c:b8:a6:1e:8f:c3:c3:c4:06:7d:90:bf:41:1a:85:0b: a9:41:e0:c9:06:ab:fc:5a:b1:b4:21:2c:61:be:4b:16:44:7c: d7:93:66:09:c3:c6:eb:93:a3:12:75:80:b3:fc:34:1f:47:3c: 11:df:ff:2d:ed:d6:c5:76:e4:31:a8:13:56:68:9b:ea:ab:a7: fe:b4:c2:97:98:ef:d6:27:ac:ee:b4:32:ca:81:b3:b5:4e:75: af:4d:84:0c:63:37:0f:f4:1e:c1:dc:b5:12:a3:e6:c0:1f:ef: 61:3c:9d:bc:37:88:9b:80:77:60:b3:63:de:de:0e:c4:6a:34: cb:7c:30:42:fd:a7:01:7b:9b:51:2b:21:44:e2:58:2a:bd:81: 44:02:49:5a:4a:ec:c6:ce:ad:7f:4d:1d:e4:7a:e9:f4:d5:f5: 55:e4:ce:66 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHfqchDgTVZVRKFAoCkUO5W828EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjlGQzlFMjQ5MEQ1Mjc2NTNFRjdDRTg0NzE3M0Y5 Q0QwODgzMzAeFw0yNTA5MTUxNjIwMDRaFw0yNTA5MjAyMzQwMDRaMDMxMTAvBgNV BAMTKEQzM0YyRDc4MzdDNjMyN0E2ODIzQkVCMkFEMjkyRjNCNjMwNzM4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZjNJbo0XxFDEb39zjRyUEjXdD xBGZcSeQ8ySbR57VY79QHSCkKA4gslzE0BPT1w7RtcWbOUYSCGr/XsfO97iJLz5o jh1QKLBWF2yCBOShM07d6esc0/50nw0fqQ8d1cmOAVScYJ9Dp0B6JR4A7pmlk/4l 5Qo4JfAg0NMBtAf6wlQm7i7ojvx7X+5BvKHv+nXvgNGT+D4uido7FJyEv5ssYYS9 XVUCTJ9VX2bYNWGSNOA0bxBCOSBrn+TbSKmbGQeh8czGbpNh9paxob1tptWI5wHF r5nLtGCF/oNmxGPJz3DGa8vbVF79w6nqbWUmu+qylsCvEBIVAFPEWmule14ZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0z8teDfGMnpoI76yrSkvO2MHOOQwHwYDVR0j BBgwFoAU+o+fyeJJDVJ2U+986EcXP5zQiDMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOEIyOUZCNTUwQUFFMkY4OTM2QzA4NTYzNjg2Q0VDRTMz N0U1OEJENUEyMkFFNjcwNUExRjdDQUEzMTM3QURBLzAvRkE4RjlGQzlFMjQ5MEQ1 Mjc2NTNFRjdDRTg0NzE3M0Y5Q0QwODgzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQThGOUZDOUUyNDkwRDUyNzY1 M0VGN0NFODQ3MTczRjlDRDA4ODMzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDhCMjlGQjU1MEFBRTJGODkzNkMwODU2MzY4NkNFQ0UzMzdFNThCRDVB MjJBRTY3MDVBMUY3Q0FBMzEzN0FEQS8wL0ZBOEY5RkM5RTI0OTBENTI3NjUzRUY3 Q0U4NDcxNzNGOUNEMDg4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACwatKIBPMmvpP0drpHzCJ5l/6 3NIEJsX+MjXLJEhoXiMrta00El4Da7zxWwlEAK2vxLbaR13rC7/IGG0mZKv3YM70 w4+w6b0I9vM0taetvVO/lIgI6yvIS6HHoQy4ph6Pw8PEBn2Qv0EahQupQeDJBqv8 WrG0ISxhvksWRHzXk2YJw8brk6MSdYCz/DQfRzwR3/8t7dbFduQxqBNWaJvqq6f+ tMKXmO/WJ6zutDLKgbO1TnWvTYQMYzcP9B7B3LUSo+bAH+9hPJ28N4ibgHdgs2Pe 3g7EajTLfDBC/acBe5tRKyFE4lgqvYFEAklaSuzGzq1/TR3keun01fVV5M5m -----END CERTIFICATE-----Generated at Wed Sep 17 08:36:40 2025 by rpki-client