$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft File: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft (raw, json) Hash identifier: aKKhfm/c6e/oghlt0Xp2sGTOgXe6fTDbRmquQhBwgnY= Subject key identifier: 8E:ED:CA:9C:76:4F:13:A7:97:10:96:63:A2:CE:35:BE:8E:32:EF:1D Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 Certificate issuer: /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Certificate serial: 136367AC89593AAC317618C9DF6EDBF1EE807758 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft Manifest number: 0114 Signing time: Sun 14 Sep 2025 13:09:13 +0000 Manifest this update: Sun 14 Sep 2025 13:04:13 +0000 Manifest next update: Sat 20 Sep 2025 03:34:13 +0000 Files and hashes: 1: 323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (hash: 7UfKWaQAr95bPBridFn/arYQ/3LdRnATvxQ9sAAQ4B4=) 2: DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl (hash: tjdbOP4AvsWFKKx8jiZgrqECpsNOoYItjfMwp0WP1hw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 21:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:63:67:ac:89:59:3a:ac:31:76:18:c9:df:6e:db:f1:ee:80:77:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8 Validity Not Before: Sep 14 13:04:13 2025 GMT Not After : Sep 20 03:34:13 2025 GMT Subject: CN=8EEDCA9C764F13A797109663A2CE35BE8E32EF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:a5:5c:69:74:d6:73:4b:54:1c:c4:20:d5: 95:c6:fe:92:e4:06:b5:c1:82:b3:97:73:c4:96:5c: 72:48:04:2d:58:87:37:40:3d:cd:62:e5:a3:88:8e: 74:b2:b7:1e:cd:39:45:2e:d6:1b:e9:6e:0b:d3:60: 95:ef:76:22:6a:2a:0a:20:80:e7:85:bd:a8:3c:33: 96:7a:99:66:b2:92:4d:6d:48:6e:d4:d0:da:65:5c: ea:e9:12:28:37:23:38:98:da:1a:ef:2e:ad:e3:64: ee:b1:a7:cb:54:36:41:e8:a5:87:8b:01:db:6a:bd: c8:aa:e6:54:e5:34:4e:a0:d2:27:ed:52:d8:31:b7: f7:d4:b6:d1:7b:59:b2:bc:1a:b4:1d:49:e1:06:b2: de:ca:3f:38:3e:35:39:10:b1:e5:74:e6:0c:cd:12: 62:79:7e:cb:1f:db:98:3e:52:ee:93:15:d5:62:b1: e2:b6:fd:df:1b:39:77:ff:5e:93:ea:07:f7:86:d6: 1b:46:58:bc:f0:02:e9:f0:35:5c:fd:53:66:14:49: 49:26:03:3c:fc:31:6e:41:d4:b7:fb:d3:35:0e:86: c7:5b:b2:56:57:8c:f6:fc:c3:1e:49:8d:e6:5e:d1: d1:87:47:d6:a2:32:30:e7:c3:37:0f:c9:36:e2:11: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:ED:CA:9C:76:4F:13:A7:97:10:96:63:A2:CE:35:BE:8E:32:EF:1D X509v3 Authority Key Identifier: keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fb:cc:b6:f6:04:0b:fc:d5:00:f5:e6:21:d0:6a:89:d8:c7: aa:0a:bc:d4:52:d1:61:83:df:6c:b9:db:1d:cf:78:c7:2f:ec: 71:6e:f3:81:cf:b9:89:5d:eb:2c:6a:d2:46:87:16:32:46:54: ab:95:95:a9:e0:bb:3d:b2:3b:f7:8e:c0:68:81:d0:59:ba:e3: 7a:fe:69:84:ee:43:89:82:17:4a:99:20:51:11:95:75:40:b9: 69:2e:62:a5:2c:24:6d:92:d9:83:ac:6e:02:ef:5e:c9:bd:3d: e5:a7:b2:c5:38:b5:5b:62:47:88:45:3a:67:ad:95:b4:f7:10: 6a:47:d4:79:19:bd:5c:d6:5c:04:42:22:7a:6d:0f:1a:7f:4c: 3d:dd:9d:a6:25:92:6a:fd:71:b3:35:04:b3:d3:93:c0:a1:42: ef:8b:a9:b4:b2:70:83:76:19:8c:7e:56:e8:e2:eb:6d:5b:16: a8:dc:a9:32:03:1a:1c:35:3d:69:d9:3d:12:b4:47:41:23:ec: 91:7a:87:0f:38:f0:b6:b9:d2:65:4d:7b:f3:00:75:dd:be:ec: d5:02:b1:53:05:6d:04:ce:27:b6:77:a6:58:f5:36:b3:aa:3f: 4d:93:ba:fb:3a:d2:33:19:3b:76:be:1b:c3:0a:39:c0:90:8f: 04:78:dc:fc -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUE2NnrIlZOqwxdhjJ327b8e6Ad1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCOERGMUYwQkU2MDlGQjZGOTgwMDNFQjk2QzlDREU3 MkI1M0FGODAeFw0yNTA5MTQxMzA0MTNaFw0yNTA5MjAwMzM0MTNaMDMxMTAvBgNV BAMTKDhFRURDQTlDNzY0RjEzQTc5NzEwOTY2M0EyQ0UzNUJFOEUzMkVGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNaVcaXTWc0tUHMQg1ZXG/pLk BrXBgrOXc8SWXHJIBC1YhzdAPc1i5aOIjnSytx7NOUUu1hvpbgvTYJXvdiJqKgog gOeFvag8M5Z6mWaykk1tSG7U0NplXOrpEig3IziY2hrvLq3jZO6xp8tUNkHopYeL Adtqvciq5lTlNE6g0iftUtgxt/fUttF7WbK8GrQdSeEGst7KPzg+NTkQseV05gzN EmJ5fssf25g+Uu6TFdViseK2/d8bOXf/XpPqB/eG1htGWLzwAunwNVz9U2YUSUkm Azz8MW5B1Lf70zUOhsdbslZXjPb8wx5JjeZe0dGHR9aiMjDnwzcPyTbiEUFxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUju3KnHZPE6eXEJZjos41vo4y7x0wHwYDVR0j BBgwFoAU37jfHwvmCftvmAA+uWyc3nK1OvgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNzEzNDREQzk5NzdBRjIxQjJGM0NERjY1NTYyODI5NTk2 OEY5OTA3OUI1QTlGMzlBQkNEMDRBNzk0OUQ5RDMxLzAvREZCOERGMUYwQkU2MDlG QjZGOTgwMDNFQjk2QzlDREU3MkI1M0FGOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERkI4REYxRjBCRTYwOUZCNkY5 ODAwM0VCOTZDOUNERTcyQjUzQUY4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjcxMzQ0REM5OTc3QUYyMUIyRjNDREY2NTU2MjgyOTU5NjhGOTkwNzlC NUE5RjM5QUJDRDA0QTc5NDlEOUQzMS8wL0RGQjhERjFGMEJFNjA5RkI2Rjk4MDAz RUI5NkM5Q0RFNzJCNTNBRjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ+8y29gQL/NUA9eYh0GqJ2Meq CrzUUtFhg99sudsdz3jHL+xxbvOBz7mJXessatJGhxYyRlSrlZWp4Ls9sjv3jsBo gdBZuuN6/mmE7kOJghdKmSBREZV1QLlpLmKlLCRtktmDrG4C717JvT3lp7LFOLVb YkeIRTpnrZW09xBqR9R5Gb1c1lwEQiJ6bQ8af0w93Z2mJZJq/XGzNQSz05PAoULv i6m0snCDdhmMflbo4uttWxao3KkyAxocNT1p2T0StEdBI+yReocPOPC2udJlTXvz AHXdvuzVArFTBW0Ezie2d6ZY9Tazqj9Nk7r7OtIzGTt2vhvDCjnAkI8EeNz8 -----END CERTIFICATE-----Generated at Tue Sep 16 17:51:12 2025 by rpki-client