$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: 3fbTP3+vrXxO0LNsJR6HLxfHtDX4zWLCmWF3qtnM3Es= Subject key identifier: E1:35:93:1D:56:38:8D:24:9B:54:63:03:4A:10:75:FE:FA:98:1F:2F Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 7E978BBBC2F51EDE25DEF6B9BCAA57BC9C083B71 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 011B Signing time: Mon 15 Sep 2025 07:24:20 +0000 Manifest this update: Mon 15 Sep 2025 07:19:20 +0000 Manifest next update: Sat 20 Sep 2025 09:32:20 +0000 Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: qqdvBG6GRDMr3ufOJyzqJCnHycAbDxYGVuytcg9J6EA=) 2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 19:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:97:8b:bb:c2:f5:1e:de:25:de:f6:b9:bc:aa:57:bc:9c:08:3b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Sep 15 07:19:20 2025 GMT Not After : Sep 20 09:32:20 2025 GMT Subject: CN=E135931D56388D249B5463034A1075FEFA981F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:b8:4b:99:d3:6a:27:46:4e:db:c6:6d:da: 3c:51:92:fb:85:ad:8d:18:a2:c6:be:08:ae:f4:39: e6:a0:a7:82:66:b7:03:0c:e6:97:0a:70:cd:93:89: 3d:c0:46:8f:d6:37:1b:f5:e7:ce:3c:04:0b:75:bb: cf:16:1e:1e:b3:d1:20:2c:0f:d0:60:45:73:0c:eb: db:b2:78:66:00:7a:3e:90:3c:f8:a3:be:09:c0:e8: 05:c9:64:e3:cb:a6:ce:46:3a:fc:f1:0a:2a:c2:7d: b9:b7:3a:8b:d9:fe:57:16:36:a2:cc:f4:aa:66:7a: 0a:dc:d5:91:16:72:2e:8d:a3:04:60:40:25:34:0b: 7c:22:63:e8:0e:cf:ca:d2:f7:14:50:c2:74:80:4c: 74:af:3a:80:5a:29:a5:64:26:b7:b2:bb:2c:5f:41: 3d:f9:a9:b3:c7:9b:d9:4c:ab:9b:09:9b:f5:3b:35: 68:45:24:0a:e4:64:60:f3:70:a6:6b:81:b6:64:2a: e2:6c:91:37:49:dc:29:9e:f5:51:cc:37:6e:4f:5c: 1a:43:b1:cd:f1:7a:85:93:8e:f8:f3:13:9d:4b:b5: ff:37:f7:af:25:4a:22:fd:e3:d1:7f:a7:c7:47:66: 0c:bb:7e:33:b1:6a:f5:02:ee:fd:aa:2b:bc:cf:34: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:35:93:1D:56:38:8D:24:9B:54:63:03:4A:10:75:FE:FA:98:1F:2F X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1a:27:c7:c5:15:cf:d2:05:35:99:01:fc:f5:17:f8:0c:08: ea:33:13:1b:7b:58:35:e3:14:6a:4f:be:63:2d:96:7f:89:ea: f2:62:d4:7c:42:fb:06:e7:7b:95:a8:33:c2:32:88:10:c4:f6: bd:e1:18:ad:0e:44:22:5e:c0:cf:1c:74:7f:44:c3:fc:18:d9: 1b:6c:27:f5:85:62:88:d8:d6:af:0c:d3:35:a7:e7:a2:ec:2c: 7a:d4:f8:5b:24:ef:04:eb:32:94:3c:d5:5d:c2:02:79:2c:8f: 45:8d:bd:0a:e0:71:94:2f:d8:83:80:6d:13:7d:b6:cc:b7:a4: 4d:15:65:0b:dc:f6:e6:40:56:99:47:37:4f:3c:f3:8f:0e:72: 21:34:50:8e:8a:7d:f9:88:df:77:ed:16:71:e2:1a:63:da:26: e4:6d:8f:28:87:cc:2d:52:ee:6c:a8:df:ee:53:f3:cf:da:27: a5:4d:21:97:92:79:6a:86:c9:fc:0b:c1:42:13:a3:d9:ef:9a: 12:c9:b2:d7:d2:73:2d:7e:57:9a:5e:d1:c1:37:bf:62:9d:43: 31:7a:9b:69:e3:ac:3a:5c:50:c6:61:15:a7:24:d3:8f:18:17: b3:30:53:bb:e0:dc:e3:b9:85:ba:5d:b6:29:ec:7d:eb:31:42: 16:23:d7:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfpeLu8L1Ht4l3va5vKpXvJwIO3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTA5MTUwNzE5MjBaFw0yNTA5MjAwOTMyMjBaMDMxMTAvBgNV BAMTKEUxMzU5MzFENTYzODhEMjQ5QjU0NjMwMzRBMTA3NUZFRkE5ODFGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iLhLmdNqJ0ZO28Zt2jxRkvuF rY0Yosa+CK70Oeagp4JmtwMM5pcKcM2TiT3ARo/WNxv15848BAt1u88WHh6z0SAs D9BgRXMM69uyeGYAej6QPPijvgnA6AXJZOPLps5GOvzxCirCfbm3OovZ/lcWNqLM 9Kpmegrc1ZEWci6NowRgQCU0C3wiY+gOz8rS9xRQwnSATHSvOoBaKaVkJreyuyxf QT35qbPHm9lMq5sJm/U7NWhFJArkZGDzcKZrgbZkKuJskTdJ3Cme9VHMN25PXBpD sc3xeoWTjvjzE51Ltf83968lSiL949F/p8dHZgy7fjOxavUC7v2qK7zPNMw9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4TWTHVY4jSSbVGMDShB1/vqYHy8wHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsGifHxRXP0gU1mQH89Rf4DAjq MxMbe1g14xRqT75jLZZ/ieryYtR8QvsG53uVqDPCMogQxPa94RitDkQiXsDPHHR/ RMP8GNkbbCf1hWKI2NavDNM1p+ei7Cx61PhbJO8E6zKUPNVdwgJ5LI9Fjb0K4HGU L9iDgG0TfbbMt6RNFWUL3PbmQFaZRzdPPPOPDnIhNFCOin35iN937RZx4hpj2ibk bY8oh8wtUu5sqN/uU/PP2ielTSGXknlqhsn8C8FCE6PZ75oSybLX0nMtfleaXtHB N79inUMxeptp46w6XFDGYRWnJNOPGBezMFO74NzjuYW6XbYp7H3rMUIWI9fJ -----END CERTIFICATE-----Generated at Mon Sep 15 22:32:09 2025 by rpki-client