$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: ua7gyPosrm7PhjfY3iziPMPdz+MbXPb0UVQakzsPoTY= Subject key identifier: F7:69:24:F4:B6:26:E8:29:C6:C9:7B:41:00:AF:82:D4:5E:49:B7:CC Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 2F3F44990815FEB2E439721A18E1E1787DB7EBF8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: 0107 Signing time: Mon 11 Aug 2025 04:28:21 +0000 Manifest this update: Mon 11 Aug 2025 04:23:21 +0000 Manifest next update: Sat 16 Aug 2025 19:44:21 +0000 Files and hashes: 1: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: Mu1aiZbTuKob4P/uHzlI5H1bWCj0RfxIyLfLzn5wSP0=) 2: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: 91BlvpRcU8aEGrEvjhyyYlKsOM+bu5wYoQw7LuUQYdA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 15 Aug 2025 13:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3f:44:99:08:15:fe:b2:e4:39:72:1a:18:e1:e1:78:7d:b7:eb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Aug 11 04:23:21 2025 GMT Not After : Aug 16 19:44:21 2025 GMT Subject: CN=F76924F4B626E829C6C97B4100AF82D45E49B7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:6c:c6:f0:94:d7:14:2e:78:35:3f:04:d0: 30:37:2a:4a:82:32:5d:89:6d:f7:f7:45:a4:6b:ca: cf:4b:7c:ae:5c:c4:b2:a0:29:94:04:42:ff:78:8d: 23:99:26:2f:73:23:2e:0e:68:e5:75:0e:03:98:de: b5:d6:50:fd:22:4e:fd:2c:80:f5:b0:52:d7:84:0b: 91:62:bf:17:04:2b:4e:c0:26:a1:74:23:a4:99:0f: 58:75:80:ad:26:10:38:56:aa:73:63:ec:ce:59:5a: dc:40:e5:04:8a:d2:dd:b7:29:b2:01:71:6f:1b:2d: 25:ab:f6:09:5a:56:6a:e1:25:bc:e4:6b:1c:d4:20: 24:53:57:8c:e0:3b:3b:d3:34:7c:62:9f:4c:6b:c5: 77:41:a0:f4:91:f9:2d:64:5e:71:f3:51:07:20:78: cf:2d:ed:a5:37:3b:d0:28:4c:cf:eb:0b:bc:4b:a5: f4:83:ac:cf:05:47:d6:43:06:af:2f:5c:22:65:91: 2f:48:5a:d1:ec:08:dd:d6:c8:ef:77:24:4c:81:d9: be:73:66:1b:72:c9:b0:89:81:48:4e:c9:1f:5a:b7: cc:bc:24:15:1c:41:d4:35:69:cc:6a:7c:34:c2:c0: 93:91:8e:f9:b2:47:b3:38:43:a6:d9:b8:59:bb:12: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:24:F4:B6:26:E8:29:C6:C9:7B:41:00:AF:82:D4:5E:49:B7:CC X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:42:f5:a7:d7:06:33:0b:4a:42:f4:cb:f0:a0:39:9d:2d:02: 1c:4f:e2:cd:9c:3a:47:82:b9:c4:77:dd:5d:54:65:0f:bc:ac: 52:f2:d4:f3:d0:52:d4:b0:bc:62:2c:04:14:61:ca:56:b4:b9: 64:c5:5b:b8:97:22:34:c4:b6:0f:a6:97:61:fd:71:38:61:2e: f5:0c:a2:39:3a:3f:48:12:3d:4c:25:5b:3a:7a:04:39:49:8b: 27:bf:da:cc:24:11:0d:99:6d:b8:60:e2:82:da:01:18:7f:6d: 61:5c:b9:4c:c6:8b:d3:54:cc:a6:76:3f:84:df:2a:3e:32:34: a9:06:8e:b0:92:50:a0:78:b0:91:21:cc:78:d6:d5:af:60:37: fc:78:af:d3:92:80:67:45:0c:84:1d:28:73:95:76:43:65:bd: 10:f9:a0:ab:c6:71:c3:16:9d:47:d1:a9:2d:a7:bd:e0:66:49: 35:a1:5b:f8:95:9a:b1:7c:85:e0:bb:f4:01:21:b9:5c:e5:64: 7d:cc:9f:80:d5:c2:14:2b:8b:2e:6a:86:cf:ad:38:39:d3:a9: a4:07:60:64:f4:d7:5a:aa:43:08:0e:ce:0c:15:1e:fb:b8:30: 86:41:df:b0:27:11:66:59:b9:96:c0:02:59:99:f4:3a:8b:8c: 8b:5f:4b:3d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULz9EmQgV/rLkOXIaGOHheH236/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNTA4MTEwNDIzMjFaFw0yNTA4MTYxOTQ0MjFaMDMxMTAvBgNV BAMTKEY3NjkyNEY0QjYyNkU4MjlDNkM5N0I0MTAwQUY4MkQ0NUU0OUI3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBWzG8JTXFC54NT8E0DA3KkqC Ml2Jbff3RaRrys9LfK5cxLKgKZQEQv94jSOZJi9zIy4OaOV1DgOY3rXWUP0iTv0s gPWwUteEC5FivxcEK07AJqF0I6SZD1h1gK0mEDhWqnNj7M5ZWtxA5QSK0t23KbIB cW8bLSWr9glaVmrhJbzkaxzUICRTV4zgOzvTNHxin0xrxXdBoPSR+S1kXnHzUQcg eM8t7aU3O9AoTM/rC7xLpfSDrM8FR9ZDBq8vXCJlkS9IWtHsCN3WyO93JEyB2b5z ZhtyybCJgUhOyR9at8y8JBUcQdQ1acxqfDTCwJORjvmyR7M4Q6bZuFm7EiGNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU92kk9LYm6CnGyXtBAK+C1F5Jt8wwHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdQvWn1wYzC0pC9MvwoDmdLQIc T+LNnDpHgrnEd91dVGUPvKxS8tTz0FLUsLxiLAQUYcpWtLlkxVu4lyI0xLYPppdh /XE4YS71DKI5Oj9IEj1MJVs6egQ5SYsnv9rMJBENmW24YOKC2gEYf21hXLlMxovT VMymdj+E3yo+MjSpBo6wklCgeLCRIcx41tWvYDf8eK/TkoBnRQyEHShzlXZDZb0Q +aCrxnHDFp1H0aktp73gZkk1oVv4lZqxfIXgu/QBIblc5WR9zJ+A1cIUK4suaobP rTg506mkB2Bk9NdaqkMIDs4MFR77uDCGQd+wJxFmWbmWwAJZmfQ6i4yLX0s9 -----END CERTIFICATE-----Generated at Mon Aug 11 09:36:53 2025 by rpki-client