$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft File: 8422A5C9039083170A21D8F8523768E40CD48430.mft (raw, json) Hash identifier: kHwRpM4z4JC9iZBT+sgpUetO63LLoslIZGlcXB8n72U= Subject key identifier: 9B:C6:C6:47:BD:41:F8:83:48:93:B1:30:D0:E6:70:92:A1:7B:39:5B Authority key identifier: 84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30 Certificate issuer: /CN=8422A5C9039083170A21D8F8523768E40CD48430 Certificate serial: 50668FC3591CFD5ACC097A04BF959CCB3B6FE75D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft Manifest number: 011A Signing time: Wed 17 Sep 2025 04:43:35 +0000 Manifest this update: Wed 17 Sep 2025 04:38:35 +0000 Manifest next update: Mon 22 Sep 2025 14:13:35 +0000 Files and hashes: 1: 8422A5C9039083170A21D8F8523768E40CD48430.crl (hash: y99oKyDeYpYjMsnjajUONxyHL+HBhAYNokg6p0z/cVI=) 2: 323830333a383536303a3a2f33322d3332203d3e20323639373632.roa (hash: xgdu2VKXGWT3zuazQQ3ZGRAu8EfpPw4CmBmO186ZJdA=) 3: 34352e3138312e3136342e302f32322d3234203d3e20323639373632.roa (hash: mzNYCOmBkzDShpzfFRcJU8Z+CuEOVXuCuW1wyaoqRq4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.crl rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 22 Sep 2025 14:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:66:8f:c3:59:1c:fd:5a:cc:09:7a:04:bf:95:9c:cb:3b:6f:e7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8422A5C9039083170A21D8F8523768E40CD48430 Validity Not Before: Sep 17 04:38:35 2025 GMT Not After : Sep 22 14:13:35 2025 GMT Subject: CN=9BC6C647BD41F8834893B130D0E67092A17B395B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:af:90:4d:fe:d9:d3:34:e5:bd:de:6f:08: a5:56:40:b2:40:d1:ad:84:f3:f6:87:40:77:2d:8a: 31:a5:3e:3b:b0:74:c3:49:eb:74:24:a3:a1:b9:1f: 92:a9:be:9e:05:eb:a5:65:d0:39:0c:e7:8a:0d:ce: 9e:f8:64:d3:63:60:89:4e:8f:1a:74:2d:2e:19:55: 51:f1:0e:6d:21:98:71:96:80:6d:78:ef:cd:23:b1: 38:9f:07:f6:66:ba:8d:d9:72:bd:01:9e:6e:6d:55: 72:73:fd:d9:43:12:17:61:11:3c:e4:2b:19:e3:04: 95:9b:39:b3:a4:a0:cc:fc:75:64:42:6b:a9:e9:33: 2d:4e:61:e9:fe:a1:5d:10:c0:22:6b:db:03:2f:c7: 0e:34:2b:14:ff:57:ad:e8:72:58:f9:b9:b6:91:21: f8:46:31:a6:79:6c:56:e1:e5:9c:9c:77:79:88:ed: 27:d6:8d:a3:2c:a5:5e:28:d7:3f:57:fb:12:e1:eb: 0a:ea:21:8c:1d:c3:ee:5a:29:8e:a3:a8:b9:10:e9: 0f:9a:af:aa:42:5e:16:7c:79:31:0e:ea:52:09:1d: 93:35:76:ad:59:32:ec:d0:a2:17:2a:04:1f:1e:6b: 3d:dd:6d:0d:fd:73:af:37:3b:53:f3:3f:50:af:ad: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:C6:47:BD:41:F8:83:48:93:B1:30:D0:E6:70:92:A1:7B:39:5B X509v3 Authority Key Identifier: keyid:84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9c:0b:c0:7d:50:df:08:60:d3:ac:f0:b0:17:82:4d:6b:64: 3a:83:1d:8c:fe:15:85:3f:a4:e4:ea:ea:f5:f5:e2:48:d7:58: 11:fe:4f:9a:f6:9d:9d:94:ae:17:06:b4:ee:5e:74:56:59:3f: 5e:02:7b:48:f9:5e:12:a4:41:c4:be:b8:89:5a:2c:2f:87:c7: fd:5a:ad:58:4c:93:49:86:f2:6c:31:cb:04:cc:2e:fe:80:90: ef:8a:b1:84:55:93:70:9f:93:0b:43:8b:e1:5b:3d:12:b8:af: c1:90:55:dc:89:cf:8d:aa:d5:95:4f:24:06:8e:06:f7:fa:91: 3d:6b:42:c0:3d:0a:f6:ac:86:7a:8e:e3:21:03:4f:b3:79:82: 19:ae:60:b7:83:45:68:01:d5:aa:15:c5:47:2e:53:f3:47:97: bb:93:b3:38:44:2b:2e:4c:f0:b0:75:13:81:46:af:58:7c:20: 32:e3:c2:9b:f8:09:0b:a8:3c:2d:28:ce:8e:25:39:62:df:57: bd:e1:8d:0c:8f:3e:66:be:ed:f8:b1:3a:1c:2d:93:8f:8f:9e: 48:6a:d7:a6:b5:62:46:a5:d7:85:5c:ad:dc:04:0a:54:c0:d5: aa:24:c6:71:bd:7f:1c:2b:03:ea:49:18:e3:8c:85:cb:e5:d5: 20:bc:8a:1a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUGaPw1kc/VrMCXoEv5Wcyztv510wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMkE1QzkwMzkwODMxNzBBMjFEOEY4NTIzNzY4RTQw Q0Q0ODQzMDAeFw0yNTA5MTcwNDM4MzVaFw0yNTA5MjIxNDEzMzVaMDMxMTAvBgNV BAMTKDlCQzZDNjQ3QkQ0MUY4ODM0ODkzQjEzMEQwRTY3MDkyQTE3QjM5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pK+QTf7Z0zTlvd5vCKVWQLJA 0a2E8/aHQHctijGlPjuwdMNJ63Qko6G5H5Kpvp4F66Vl0DkM54oNzp74ZNNjYIlO jxp0LS4ZVVHxDm0hmHGWgG14780jsTifB/Zmuo3Zcr0Bnm5tVXJz/dlDEhdhETzk KxnjBJWbObOkoMz8dWRCa6npMy1OYen+oV0QwCJr2wMvxw40KxT/V63oclj5ubaR IfhGMaZ5bFbh5Zycd3mI7SfWjaMspV4o1z9X+xLh6wrqIYwdw+5aKY6jqLkQ6Q+a r6pCXhZ8eTEO6lIJHZM1dq1ZMuzQohcqBB8eaz3dbQ39c683O1PzP1CvravtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUm8bGR71B+INIk7Ew0OZwkqF7OVswHwYDVR0j BBgwFoAUhCKlyQOQgxcKIdj4Ujdo5AzUhDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FMEU2OUM1MzRGNDk1RjMwMzdCRjhEMjI0NjExRTYxMUM4 MDkyRDY1NDQ4NzFDOUFGNDUzMUI0Q0U2NkM1Q0MyLzAvODQyMkE1QzkwMzkwODMx NzBBMjFEOEY4NTIzNzY4RTQwQ0Q0ODQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDIyQTVDOTAzOTA4MzE3MEEy MUQ4Rjg1MjM3NjhFNDBDRDQ4NDMwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTBFNjlDNTM0RjQ5NUYzMDM3QkY4RDIyNDYxMUU2MTFDODA5MkQ2NTQ0 ODcxQzlBRjQ1MzFCNENFNjZDNUNDMi8wLzg0MjJBNUM5MDM5MDgzMTcwQTIxRDhG ODUyMzc2OEU0MENENDg0MzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSnAvAfVDfCGDTrPCwF4JNa2Q6 gx2M/hWFP6Tk6ur19eJI11gR/k+a9p2dlK4XBrTuXnRWWT9eAntI+V4SpEHEvriJ Wiwvh8f9Wq1YTJNJhvJsMcsEzC7+gJDvirGEVZNwn5MLQ4vhWz0SuK/BkFXcic+N qtWVTyQGjgb3+pE9a0LAPQr2rIZ6juMhA0+zeYIZrmC3g0VoAdWqFcVHLlPzR5e7 k7M4RCsuTPCwdROBRq9YfCAy48Kb+AkLqDwtKM6OJTli31e94Y0Mjz5mvu34sToc LZOPj55IatemtWJGpdeFXK3cBApUwNWqJMZxvX8cKwPqSRjjjIXL5dUgvIoa -----END CERTIFICATE-----Generated at Thu Sep 18 21:55:33 2025 by rpki-client