$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft File: CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft (raw, json) Hash identifier: WkgZHJ7GRcBAvKofcxZ7mI9UO4pEERbZ/9a6netJ4iw= Subject key identifier: 8C:E5:65:C0:8A:C7:64:B3:62:DF:FD:74:AD:E1:37:E2:5C:51:2F:E5 Authority key identifier: CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27 Certificate issuer: /CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27 Certificate serial: 0380B395A007517C15A9F49EFD3EFF2518DBB6E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft Manifest number: 0108 Signing time: Fri 01 Aug 2025 13:24:16 +0000 Manifest this update: Fri 01 Aug 2025 13:19:16 +0000 Manifest next update: Wed 06 Aug 2025 15:48:16 +0000 Files and hashes: 1: 3230302e31312e33332e302f32342d3234203d3e20323730303238.roa (hash: wK3oeno74goU9D7+c/b55vzwIp59oFbD0eZNt8h6ig0=) 2: CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl (hash: QhhnO7ThdwqNrU/KALmGme9HhS13aVzhGBTARucer1A=) 3: 323830313a3133613a3a2f34342d3434203d3e20323730303238.roa (hash: Q1TLNayYAd06cStRkVHP3ITO3rEv1WH9iz5ULgyaMCM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 15:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:80:b3:95:a0:07:51:7c:15:a9:f4:9e:fd:3e:ff:25:18:db:b6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27 Validity Not Before: Aug 1 13:19:16 2025 GMT Not After : Aug 6 15:48:16 2025 GMT Subject: CN=8CE565C08AC764B362DFFD74ADE137E25C512FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:6a:fb:5d:ad:20:fe:f4:0b:6b:7f:19:c1: 69:e4:66:93:dd:a0:0e:ba:29:1c:30:8d:3e:a2:0a: 2d:6e:3d:fb:fd:da:11:08:54:39:03:0a:5e:15:db: d6:ed:4b:80:45:2b:0c:1a:6c:5a:93:db:37:72:63: 29:da:36:48:bb:bf:01:e8:57:70:fa:dc:e9:ef:e6: b5:6f:47:33:2d:08:11:50:a8:9a:76:e0:7f:4a:84: 1a:7b:c3:30:06:6d:9f:b5:b1:d2:1b:18:91:ac:45: 7d:17:e7:83:31:4e:77:eb:37:fc:c8:cc:84:4f:6a: 4a:80:b5:0a:be:64:cb:80:e2:45:d2:35:b5:6a:c0: 60:21:ec:64:d7:0b:3b:be:cf:e4:9d:da:5f:02:49: fb:bd:f7:c0:f0:bd:db:1b:41:92:58:72:bf:64:54: 39:33:bd:c4:2f:91:55:2e:ab:f0:9b:ac:7a:20:cd: fa:ed:da:9f:f0:0f:2a:34:98:a4:e4:f0:6c:03:23: 2a:2d:59:5a:1f:19:bf:c6:f9:8e:24:dd:ca:6e:f6: d3:15:ed:ee:97:5f:21:69:1f:16:fa:41:e9:0e:cd: 98:19:33:28:4c:c3:51:5a:76:87:3b:a0:8b:51:23: c2:e4:6d:a8:42:d5:18:93:cc:ba:89:34:36:ea:26: cb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E5:65:C0:8A:C7:64:B3:62:DF:FD:74:AD:E1:37:E2:5C:51:2F:E5 X509v3 Authority Key Identifier: keyid:CD:3C:D6:2A:62:CA:FB:D9:9D:1A:C6:CB:B6:E0:73:A5:51:84:5F:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39B707B3A5B3CB46A8126A03A7F4B9E15F0D356448D5BFBC44D114D4CAA308C2/0/CD3CD62A62CAFBD99D1AC6CBB6E073A551845F27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:07:e3:08:6a:eb:71:70:e8:ec:f0:27:84:71:09:6a:a6:f5: 0e:65:4a:d3:f3:3e:05:52:11:66:da:fa:96:f1:33:55:da:11: 02:04:57:ab:03:17:96:2a:61:8a:55:24:c5:b2:4b:aa:08:5e: ba:91:9f:5b:4d:6c:05:92:e3:6a:30:5d:cc:3f:ba:85:ba:d5: ed:e2:6b:a9:92:f2:f4:ea:d3:17:b9:cc:04:91:58:31:05:4e: 7b:60:1e:5d:7d:af:a7:6e:b6:9b:b4:d9:d5:30:23:eb:d0:d2: 64:d3:ab:3f:50:45:67:6e:b2:60:5a:8c:3e:78:6f:54:3d:26: 1d:fb:48:ea:0a:46:28:42:67:db:48:34:9f:58:1b:bb:48:9d: c7:72:bb:b4:c0:32:aa:0b:a9:72:cf:ab:6f:1d:7a:fa:28:53: 9e:eb:b9:7a:3d:0d:e7:e1:fe:b1:3e:02:37:dc:4d:42:dd:fa: 59:66:c4:1f:9d:db:96:c7:96:30:6e:21:bf:3e:8d:07:f7:c0: ec:31:f1:ad:35:5e:fc:88:87:96:bc:e1:4a:a3:bd:1c:3c:3a: 4d:02:d5:09:39:98:0f:55:a4:18:05:ba:0d:8f:33:91:9f:18: 05:63:d9:ca:b0:a2:4c:22:2b:2d:fc:89:49:2a:05:c6:06:8f: 02:e4:66:87 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUA4CzlaAHUXwVqfSe/T7/JRjbtuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzQ0Q2MkE2MkNBRkJEOTlEMUFDNkNCQjZFMDczQTU1 MTg0NUYyNzAeFw0yNTA4MDExMzE5MTZaFw0yNTA4MDYxNTQ4MTZaMDMxMTAvBgNV BAMTKDhDRTU2NUMwOEFDNzY0QjM2MkRGRkQ3NEFERTEzN0UyNUM1MTJGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaumr7Xa0g/vQLa38ZwWnkZpPd oA66KRwwjT6iCi1uPfv92hEIVDkDCl4V29btS4BFKwwabFqT2zdyYynaNki7vwHo V3D63Onv5rVvRzMtCBFQqJp24H9KhBp7wzAGbZ+1sdIbGJGsRX0X54MxTnfrN/zI zIRPakqAtQq+ZMuA4kXSNbVqwGAh7GTXCzu+z+Sd2l8CSfu998DwvdsbQZJYcr9k VDkzvcQvkVUuq/CbrHogzfrt2p/wDyo0mKTk8GwDIyotWVofGb/G+Y4k3cpu9tMV 7e6XXyFpHxb6QekOzZgZMyhMw1Fadoc7oItRI8LkbahC1RiTzLqJNDbqJsszAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjOVlwIrHZLNi3/10reE34lxRL+UwHwYDVR0j BBgwFoAUzTzWKmLK+9mdGsbLtuBzpVGEXycwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOUI3MDdCM0E1QjNDQjQ2QTgxMjZBMDNBN0Y0QjlFMTVG MEQzNTY0NDhENUJGQkM0NEQxMTRENENBQTMwOEMyLzAvQ0QzQ0Q2MkE2MkNBRkJE OTlEMUFDNkNCQjZFMDczQTU1MTg0NUYyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDNDRDYyQTYyQ0FGQkQ5OUQx QUM2Q0JCNkUwNzNBNTUxODQ1RjI3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzlCNzA3QjNBNUIzQ0I0NkE4MTI2QTAzQTdGNEI5RTE1RjBEMzU2NDQ4 RDVCRkJDNDREMTE0RDRDQUEzMDhDMi8wL0NEM0NENjJBNjJDQUZCRDk5RDFBQzZD QkI2RTA3M0E1NTE4NDVGMjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6B+MIautxcOjs8CeEcQlqpvUO ZUrT8z4FUhFm2vqW8TNV2hECBFerAxeWKmGKVSTFskuqCF66kZ9bTWwFkuNqMF3M P7qFutXt4mupkvL06tMXucwEkVgxBU57YB5dfa+nbrabtNnVMCPr0NJk06s/UEVn brJgWow+eG9UPSYd+0jqCkYoQmfbSDSfWBu7SJ3Hcru0wDKqC6lyz6tvHXr6KFOe 67l6PQ3n4f6xPgI33E1C3fpZZsQfnduWx5YwbiG/Po0H98DsMfGtNV78iIeWvOFK o70cPDpNAtUJOZgPVaQYBboNjzORnxgFY9nKsKJMIist/IlJKgXGBo8C5GaH -----END CERTIFICATE-----Generated at Sun Aug 3 16:02:35 2025 by rpki-client