$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E79F6163F782A17F1C10BFB74A1FB5D5EAE48476800338064954B2E5DE2D3004/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.mft File: D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.mft (raw, json) Hash identifier: voYXwL2M+wdvNMEtnX00LMUiT4YvQeoUZuomT/DjEsg= Subject key identifier: 7C:96:B5:F6:D0:29:16:E4:99:11:3B:F1:C2:AE:6A:C8:9D:7C:D9:F7 Authority key identifier: D5:29:9B:C7:F5:C8:58:6F:F3:EE:FF:5F:13:F0:EA:50:69:84:56:9E Certificate issuer: /CN=D5299BC7F5C8586FF3EEFF5F13F0EA506984569E Certificate serial: 0F485B3D559CDA3468E303BDD4BB44D56A75D422 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E79F6163F782A17F1C10BFB74A1FB5D5EAE48476800338064954B2E5DE2D3004/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.mft Manifest number: CB Signing time: Thu 18 Sep 2025 00:11:27 +0000 Manifest this update: Thu 18 Sep 2025 00:06:27 +0000 Manifest next update: Mon 22 Sep 2025 09:23:27 +0000 Files and hashes: 1: D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.crl (hash: PjllH872y0FceXfSfc8HaxxmHqTlmJ8McjuDUQQ/aZQ=) 2: 323830333a663235303a3a2f33322d3438203d3e20323733313733.roa (hash: Sr0JgRGT0p9LC/DQ8sCXDgDyHCYowU4qHXlnDQBxnuw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/E79F6163F782A17F1C10BFB74A1FB5D5EAE48476800338064954B2E5DE2D3004/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.crl rsync://repository.lacnic.net/rpki/lacnic/E79F6163F782A17F1C10BFB74A1FB5D5EAE48476800338064954B2E5DE2D3004/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 21 Sep 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:48:5b:3d:55:9c:da:34:68:e3:03:bd:d4:bb:44:d5:6a:75:d4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5299BC7F5C8586FF3EEFF5F13F0EA506984569E Validity Not Before: Sep 18 00:06:27 2025 GMT Not After : Sep 22 09:23:27 2025 GMT Subject: CN=7C96B5F6D02916E499113BF1C2AE6AC89D7CD9F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:d4:21:6d:9a:f6:69:9e:7e:ab:5e:c6:60: 4c:4e:2d:1a:b6:a8:29:9b:f9:0d:11:d1:76:6d:30: 78:5b:ea:26:21:fa:a8:95:d6:8b:50:40:d9:50:7a: d9:af:60:57:a6:b6:7b:e0:f9:76:6a:4f:83:1d:b4: f9:47:f0:b6:3c:44:10:7a:9a:fc:e5:09:c9:07:e6: e0:c3:87:60:80:01:22:df:95:f4:a8:1f:89:f3:a8: 98:d1:81:0f:10:37:ef:55:3c:5a:82:b7:0b:7d:06: ba:0f:a0:11:25:63:07:a6:da:75:2d:5a:dd:e0:78: 67:d1:53:a1:6e:28:40:c7:6a:c5:37:d0:02:e0:a1: b9:b9:64:2d:8d:07:d6:30:c8:39:7e:f2:bb:bd:cb: ae:89:1a:fe:3b:37:98:32:d6:ce:e5:6a:a3:a1:5d: 61:48:94:1a:f5:68:72:af:59:86:6e:ac:c3:1d:8c: 94:98:0c:d3:a8:d1:1e:5d:79:87:59:da:99:1a:c0: 22:81:80:cd:07:a9:a5:02:fc:34:f7:b6:66:35:a1: 89:b2:04:dd:c0:8f:b0:f2:ab:38:e8:30:9d:23:f3: fb:6c:e1:5d:9c:6f:c2:c7:a0:76:88:bf:93:63:4e: de:e9:3d:bf:74:43:81:05:0c:4a:f6:36:64:82:19: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:96:B5:F6:D0:29:16:E4:99:11:3B:F1:C2:AE:6A:C8:9D:7C:D9:F7 X509v3 Authority Key Identifier: keyid:D5:29:9B:C7:F5:C8:58:6F:F3:EE:FF:5F:13:F0:EA:50:69:84:56:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/E79F6163F782A17F1C10BFB74A1FB5D5EAE48476800338064954B2E5DE2D3004/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E79F6163F782A17F1C10BFB74A1FB5D5EAE48476800338064954B2E5DE2D3004/0/D5299BC7F5C8586FF3EEFF5F13F0EA506984569E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:71:37:63:94:6c:bc:7d:59:47:6c:6d:97:09:ff:13:d6:83: f4:5c:35:b9:57:77:5c:00:d0:d9:08:24:36:72:32:45:c3:b4: ff:39:f0:36:78:d4:cb:97:90:84:01:61:29:75:10:b3:3e:30: 5f:57:8a:0b:85:8f:a5:45:6f:83:e7:ba:ac:5c:84:80:2d:7a: 17:d6:90:72:41:74:06:50:36:77:ce:a5:3a:2f:85:48:38:1b: c1:3e:3e:4c:8c:65:e4:b6:02:11:5c:fd:1e:11:0f:7d:e3:d4: 40:72:54:42:5e:21:e1:61:01:b7:e1:3d:49:69:b9:ae:7e:26: 93:3a:65:84:84:aa:cd:46:dd:be:57:19:a5:e5:ac:dd:70:6d: ac:e8:e7:b3:e0:8d:c2:96:11:19:86:a0:99:aa:14:0b:10:d5: 24:23:69:a0:77:be:a3:be:a0:01:56:14:70:5d:be:02:96:a9: 44:16:47:32:2f:09:ff:82:20:c2:3d:f9:7f:47:3a:63:07:03: 30:5b:ba:6a:d8:4d:19:9a:85:96:59:95:0c:5d:97:10:d0:b5: 94:66:df:ac:38:37:54:3f:83:60:72:5f:23:9f:21:5d:7c:70: 91:53:28:cd:6e:41:74:53:2f:53:bd:dd:d2:19:34:cf:3d:fc: fc:4a:e0:a4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUD0hbPVWc2jRo4wO91LtE1Wp11CIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyOTlCQzdGNUM4NTg2RkYzRUVGRjVGMTNGMEVBNTA2 OTg0NTY5RTAeFw0yNTA5MTgwMDA2MjdaFw0yNTA5MjIwOTIzMjdaMDMxMTAvBgNV BAMTKDdDOTZCNUY2RDAyOTE2RTQ5OTExM0JGMUMyQUU2QUM4OUQ3Q0Q5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZNQhbZr2aZ5+q17GYExOLRq2 qCmb+Q0R0XZtMHhb6iYh+qiV1otQQNlQetmvYFemtnvg+XZqT4MdtPlH8LY8RBB6 mvzlCckH5uDDh2CAASLflfSoH4nzqJjRgQ8QN+9VPFqCtwt9BroPoBElYwem2nUt Wt3geGfRU6FuKEDHasU30ALgobm5ZC2NB9YwyDl+8ru9y66JGv47N5gy1s7laqOh XWFIlBr1aHKvWYZurMMdjJSYDNOo0R5deYdZ2pkawCKBgM0HqaUC/DT3tmY1oYmy BN3Aj7DyqzjoMJ0j8/ts4V2cb8LHoHaIv5NjTt7pPb90Q4EFDEr2NmSCGX81AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUfJa19tApFuSZETvxwq5qyJ182fcwHwYDVR0j BBgwFoAU1Smbx/XIWG/z7v9fE/DqUGmEVp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FNzlGNjE2M0Y3ODJBMTdGMUMxMEJGQjc0QTFGQjVENUVB RTQ4NDc2ODAwMzM4MDY0OTU0QjJFNURFMkQzMDA0LzAvRDUyOTlCQzdGNUM4NTg2 RkYzRUVGRjVGMTNGMEVBNTA2OTg0NTY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENTI5OUJDN0Y1Qzg1ODZGRjNF RUZGNUYxM0YwRUE1MDY5ODQ1NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRTc5RjYxNjNGNzgyQTE3RjFDMTBCRkI3NEExRkI1RDVFQUU0ODQ3Njgw MDMzODA2NDk1NEIyRTVERTJEMzAwNC8wL0Q1Mjk5QkM3RjVDODU4NkZGM0VFRkY1 RjEzRjBFQTUwNjk4NDU2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxcTdjlGy8fVlHbG2XCf8T1oP0 XDW5V3dcANDZCCQ2cjJFw7T/OfA2eNTLl5CEAWEpdRCzPjBfV4oLhY+lRW+D57qs XISALXoX1pByQXQGUDZ3zqU6L4VIOBvBPj5MjGXktgIRXP0eEQ9949RAclRCXiHh YQG34T1JabmufiaTOmWEhKrNRt2+Vxml5azdcG2s6Oez4I3ClhEZhqCZqhQLENUk I2mgd76jvqABVhRwXb4ClqlEFkcyLwn/giDCPfl/RzpjBwMwW7pq2E0ZmoWWWZUM XZcQ0LWUZt+sODdUP4Ngcl8jnyFdfHCRUyjNbkF0Uy9Tvd3SGTTPPfz8SuCk -----END CERTIFICATE-----Generated at Thu Sep 18 17:10:54 2025 by rpki-client