$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.mft File: 0D958177A72933A92171E747F897947268B18B32.mft (raw, json) Hash identifier: wL8h04mtwJQHusVowfChXmMB7eVs6GKw2/hU2R+H0To= Subject key identifier: 29:85:62:AF:B6:2A:32:1C:9D:3E:C1:1F:6C:4B:79:81:81:90:72:25 Authority key identifier: 0D:95:81:77:A7:29:33:A9:21:71:E7:47:F8:97:94:72:68:B1:8B:32 Certificate issuer: /CN=0D958177A72933A92171E747F897947268B18B32 Certificate serial: 158067657ABEA4A9F12EEF3F3D76202E0A4AC853 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D958177A72933A92171E747F897947268B18B32.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.mft Manifest number: FE Signing time: Sat 02 Aug 2025 13:34:59 +0000 Manifest this update: Sat 02 Aug 2025 13:29:59 +0000 Manifest next update: Thu 07 Aug 2025 05:40:59 +0000 Files and hashes: 1: 0D958177A72933A92171E747F897947268B18B32.crl (hash: o6k0D0iiOzRP10nXsaVOI2aDJWbrCvXvirVz+Tn/hdI=) 2: 3230302e302e37342e302f32342d3234203d3e203233303331.roa (hash: Bddvq3KOnfqrUWoO0Krc6XoXdhX+e5K0ZyzubZHIvWg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.crl rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D958177A72933A92171E747F897947268B18B32.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:80:67:65:7a:be:a4:a9:f1:2e:ef:3f:3d:76:20:2e:0a:4a:c8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D958177A72933A92171E747F897947268B18B32 Validity Not Before: Aug 2 13:29:59 2025 GMT Not After : Aug 7 05:40:59 2025 GMT Subject: CN=298562AFB62A321C9D3EC11F6C4B798181907225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:b5:04:c5:c2:5d:ec:35:05:6c:ca:1c:c8: ec:45:82:a7:94:5b:b5:ec:20:a7:39:2a:73:58:d6: 27:e0:62:c9:5e:39:36:78:93:5e:3b:b0:31:05:dc: 2a:32:e8:8c:93:63:03:4f:f4:68:8a:41:7d:b8:2c: ea:bb:8b:34:69:90:2e:5e:da:01:7f:0d:2e:ca:59: f6:e2:29:a8:df:a7:e3:49:8c:3d:84:62:26:1b:cb: bf:d8:81:fb:fa:52:dc:59:40:7b:ef:ce:ad:9b:0a: 61:41:96:63:3f:1f:91:1d:26:5e:f1:16:41:28:93: 9c:24:24:44:22:cc:c2:81:d1:77:fe:73:99:c4:67: af:c8:29:43:08:d1:6f:7f:d4:1d:43:d6:a9:d3:a6: 23:a0:1c:68:8c:7e:1b:19:de:7a:40:96:23:e3:02: a6:8b:84:84:8c:18:cd:7b:94:87:03:31:85:2b:8f: 52:80:8a:43:e0:0e:72:e1:ef:dc:93:58:2d:6b:11: a6:c3:7e:61:b1:c1:a5:5a:11:c5:3f:a0:3b:5f:c3: 9a:25:55:18:0a:f5:15:4d:10:c4:e7:fc:b6:ee:7a: f6:b8:59:7f:c0:54:67:d8:03:78:a4:99:f9:9c:6d: 22:95:4d:cd:f6:f2:f6:4a:06:30:25:e0:e1:6f:08: a8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:85:62:AF:B6:2A:32:1C:9D:3E:C1:1F:6C:4B:79:81:81:90:72:25 X509v3 Authority Key Identifier: keyid:0D:95:81:77:A7:29:33:A9:21:71:E7:47:F8:97:94:72:68:B1:8B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D958177A72933A92171E747F897947268B18B32.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:00:47:ef:8c:91:97:63:ca:54:23:79:5c:2e:f9:95:15:5c: b3:b4:86:68:da:13:47:7b:16:0d:75:07:54:f1:21:f0:00:c5: 03:50:bc:da:72:f7:c2:29:d2:7c:b4:6a:9a:24:41:0e:36:77: 59:b4:08:75:8d:b2:26:3d:0e:58:ed:51:da:7f:63:75:36:bd: df:7e:59:3d:b1:81:ee:0d:52:18:d3:f7:5a:8f:6a:9a:28:05: e2:af:d4:f0:d4:1e:85:93:b4:6f:f1:56:ca:82:2c:46:ba:81: 45:ac:40:c1:79:36:d6:a5:9e:50:d4:fd:5a:31:ff:b8:55:4e: dc:25:52:b0:dd:c7:05:72:b2:bf:cd:0e:4b:7f:c2:70:ff:72: 1b:fa:27:fd:3f:8c:e1:88:6b:18:27:2a:39:95:f1:56:17:ae: 8a:fe:b1:32:08:ba:2c:37:f9:64:44:c4:a7:8b:c3:e4:e9:f0: b6:b4:c0:24:b5:96:3a:a9:b2:da:e3:1b:e8:9f:b0:c3:31:7e: 45:7d:25:91:0e:67:21:18:a2:e5:06:dc:2d:6f:ee:92:cf:76: 9c:53:28:68:3b:fd:d9:71:65:45:c5:cd:c7:ca:e4:f2:c5:ef: e5:44:0e:ea:82:b0:12:7b:8f:e9:04:36:62:da:35:6f:b7:bc: c8:d9:3d:46 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFYBnZXq+pKnxLu8/PXYgLgpKyFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ5NTgxNzdBNzI5MzNBOTIxNzFFNzQ3Rjg5Nzk0NzI2 OEIxOEIzMjAeFw0yNTA4MDIxMzI5NTlaFw0yNTA4MDcwNTQwNTlaMDMxMTAvBgNV BAMTKDI5ODU2MkFGQjYyQTMyMUM5RDNFQzExRjZDNEI3OTgxODE5MDcyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2bUExcJd7DUFbMocyOxFgqeU W7XsIKc5KnNY1ifgYsleOTZ4k147sDEF3Coy6IyTYwNP9GiKQX24LOq7izRpkC5e 2gF/DS7KWfbiKajfp+NJjD2EYiYby7/Ygfv6UtxZQHvvzq2bCmFBlmM/H5EdJl7x FkEok5wkJEQizMKB0Xf+c5nEZ6/IKUMI0W9/1B1D1qnTpiOgHGiMfhsZ3npAliPj AqaLhISMGM17lIcDMYUrj1KAikPgDnLh79yTWC1rEabDfmGxwaVaEcU/oDtfw5ol VRgK9RVNEMTn/Lbueva4WX/AVGfYA3ikmfmcbSKVTc328vZKBjAl4OFvCKjzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKYVir7YqMhydPsEfbEt5gYGQciUwHwYDVR0j BBgwFoAUDZWBd6cpM6khcedH+JeUcmixizIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MDQxQzREODZCOTY0RTQ4RDNDQzY3NjY0NjQzQzAxMDA3 NkYyQ0Q0NDhERTVDNUZENzNGOTZERDcxNENDRUMzLzAvMEQ5NTgxNzdBNzI5MzNB OTIxNzFFNzQ3Rjg5Nzk0NzI2OEIxOEIzMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDk1ODE3N0E3MjkzM0E5MjE3 MUU3NDdGODk3OTQ3MjY4QjE4QjMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTA0MUM0RDg2Qjk2NEU0OEQzQ0M2NzY2NDY0M0MwMTAwNzZGMkNENDQ4 REU1QzVGRDczRjk2REQ3MTRDQ0VDMy8wLzBEOTU4MTc3QTcyOTMzQTkyMTcxRTc0 N0Y4OTc5NDcyNjhCMThCMzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5AEfvjJGXY8pUI3lcLvmVFVyz tIZo2hNHexYNdQdU8SHwAMUDULzacvfCKdJ8tGqaJEEONndZtAh1jbImPQ5Y7VHa f2N1Nr3fflk9sYHuDVIY0/daj2qaKAXir9Tw1B6Fk7Rv8VbKgixGuoFFrEDBeTbW pZ5Q1P1aMf+4VU7cJVKw3ccFcrK/zQ5Lf8Jw/3Ib+if9P4zhiGsYJyo5lfFWF66K /rEyCLosN/lkRMSni8Pk6fC2tMAktZY6qbLa4xvon7DDMX5FfSWRDmchGKLlBtwt b+6Sz3acUyhoO/3ZcWVFxc3HyuTyxe/lRA7qgrASe4/pBDZi2jVvt7zI2T1G -----END CERTIFICATE-----Generated at Sun Aug 3 16:02:39 2025 by rpki-client