$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft File: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft (raw, json) Hash identifier: X7PaHvT0sf8tuif4odwIPof/rjg6Yk23GtkLkjsOVhs= Subject key identifier: AF:AB:C7:02:05:D2:CD:BE:1C:2B:9C:74:9B:BB:29:17:50:C8:64:88 Authority key identifier: 2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B Certificate issuer: /CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B Certificate serial: 3C6B95D4AEA26FE9D536DF282609699C8FE755BD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft Manifest number: 010A Signing time: Sun 10 Aug 2025 20:18:21 +0000 Manifest this update: Sun 10 Aug 2025 20:13:21 +0000 Manifest next update: Sat 16 Aug 2025 09:02:21 +0000 Files and hashes: 1: 323830313a31333a643830383a3a2f34382d3438203d3e203139343239.roa (hash: pCCwwwI4kK35qb09IHCCQu4MrgMz9s784gSsBRbVivw=) 2: 323830313a31333a643830303a3a2f34382d3438203d3e203134303830.roa (hash: kkafS8rLlGBeQ6VUx0AiD6jnTOHLthXrAqZWKLP0AKs=) 3: 2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl (hash: NYRNhdInyh6H5VxF1aXPciFbSzWWu31fhKwGLoKantc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 15 Aug 2025 13:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6b:95:d4:ae:a2:6f:e9:d5:36:df:28:26:09:69:9c:8f:e7:55:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B Validity Not Before: Aug 10 20:13:21 2025 GMT Not After : Aug 16 09:02:21 2025 GMT Subject: CN=AFABC70205D2CDBE1C2B9C749BBB291750C86488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:aa:21:08:fd:bb:c7:5c:f0:20:e1:ce:79: 55:72:97:53:02:47:60:7a:54:2f:2f:1d:dc:33:b8: c0:2e:a0:45:49:2a:28:9d:be:71:b9:a3:db:9a:0e: 3c:02:b4:1e:27:16:ad:12:54:97:43:9b:27:c7:b0: 6e:78:2c:4e:75:b1:d0:f2:3a:94:27:bb:9d:79:95: 43:90:24:39:64:6d:34:85:7c:07:8c:98:60:ce:04: f3:20:7a:61:da:9d:6d:2b:23:17:d2:9b:26:ef:81: 20:5d:81:3c:f0:66:5d:90:2c:0f:0c:06:18:f8:68: d5:81:7f:60:9c:ff:dc:6c:ad:2f:5b:db:4d:c7:70: c1:2a:46:0a:0b:0f:ed:6b:ff:43:1d:e1:db:c2:b3: d1:c3:65:99:48:af:db:45:37:1d:8b:e4:b7:44:51: 29:77:dd:ce:2a:96:a8:23:33:a2:73:0f:47:73:d6: 9c:bf:bc:76:42:a6:4a:cd:d2:54:f6:ca:fb:e1:71: 8c:39:c8:f2:03:90:84:48:d6:e0:86:2a:1b:9a:97: 82:fb:b4:66:18:e5:3f:cd:ab:a0:2d:43:c7:7d:92: d3:c2:48:78:7b:19:ef:9f:64:0d:02:9b:aa:3d:c9: 5e:01:95:27:0c:6d:4e:f6:51:20:77:e2:1c:94:0e: b9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AB:C7:02:05:D2:CD:BE:1C:2B:9C:74:9B:BB:29:17:50:C8:64:88 X509v3 Authority Key Identifier: keyid:2D:D5:3B:D6:9D:3A:34:77:F5:37:2E:F3:68:9D:3A:C6:BC:C5:D1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DA8C80805BCA4CF63DDA4FBAE73E61851D724B6E761919681A32FF8212233BE/0/2DD53BD69D3A3477F5372EF3689D3AC6BCC5D11B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:23:fe:06:41:5a:20:21:db:53:ac:0a:af:d5:e4:1c:e3:bc: 59:56:55:96:46:0b:87:cb:28:67:45:0c:de:16:65:dd:78:af: a8:c4:0a:fd:09:1a:fd:a8:7b:8e:2e:b2:64:33:3f:fd:74:02: 57:bc:4b:f2:89:1d:e9:a5:5c:53:51:b1:6f:21:24:71:67:bb: 53:ab:cc:6b:7f:09:12:5a:42:1c:c1:19:2c:65:fe:70:23:9e: 6a:99:c9:9c:a9:98:a9:36:70:fc:da:e9:70:b0:83:75:9a:c2: 0a:a8:c9:5f:1d:0a:b6:11:ea:f2:0b:2c:c5:01:7d:23:35:35: 3e:db:41:93:dd:ab:0b:8b:b9:40:32:a5:92:ef:06:c3:7a:b7: 21:6a:9d:c4:01:4a:22:67:39:54:a1:a7:84:5e:a9:8e:9c:05: 20:02:7f:e2:97:4f:fb:28:da:8d:03:97:a9:0b:98:c2:aa:80: 96:9c:69:da:b9:c9:a1:c4:15:fc:d4:6f:d1:81:a9:16:79:62: 9f:4e:0f:31:fb:34:43:a3:20:67:6e:79:8a:51:2f:d2:30:82: 11:45:4c:34:c1:d8:ed:d5:3c:20:1e:af:f3:18:48:c2:64:23: ec:f9:fe:89:55:0a:5a:9b:c4:0f:28:b2:a1:95:5d:f5:cb:0b: 97:f2:9b:48 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPGuV1K6ib+nVNt8oJglpnI/nVb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRENTNCRDY5RDNBMzQ3N0Y1MzcyRUYzNjg5RDNBQzZC Q0M1RDExQjAeFw0yNTA4MTAyMDEzMjFaFw0yNTA4MTYwOTAyMjFaMDMxMTAvBgNV BAMTKEFGQUJDNzAyMDVEMkNEQkUxQzJCOUM3NDlCQkIyOTE3NTBDODY0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7LqohCP27x1zwIOHOeVVyl1MC R2B6VC8vHdwzuMAuoEVJKiidvnG5o9uaDjwCtB4nFq0SVJdDmyfHsG54LE51sdDy OpQnu515lUOQJDlkbTSFfAeMmGDOBPMgemHanW0rIxfSmybvgSBdgTzwZl2QLA8M Bhj4aNWBf2Cc/9xsrS9b203HcMEqRgoLD+1r/0Md4dvCs9HDZZlIr9tFNx2L5LdE USl33c4qlqgjM6JzD0dz1py/vHZCpkrN0lT2yvvhcYw5yPIDkIRI1uCGKhual4L7 tGYY5T/Nq6AtQ8d9ktPCSHh7Ge+fZA0Cm6o9yV4BlScMbU72USB34hyUDrn3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUr6vHAgXSzb4cK5x0m7spF1DIZIgwHwYDVR0j BBgwFoAULdU71p06NHf1Ny7zaJ06xrzF0RswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85REE4QzgwODA1QkNBNENGNjNEREE0RkJBRTczRTYxODUx RDcyNEI2RTc2MTkxOTY4MUEzMkZGODIxMjIzM0JFLzAvMkRENTNCRDY5RDNBMzQ3 N0Y1MzcyRUYzNjg5RDNBQzZCQ0M1RDExQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREQ1M0JENjlEM0EzNDc3RjUz NzJFRjM2ODlEM0FDNkJDQzVEMTFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOURBOEM4MDgwNUJDQTRDRjYzRERBNEZCQUU3M0U2MTg1MUQ3MjRCNkU3 NjE5MTk2ODFBMzJGRjgyMTIyMzNCRS8wLzJERDUzQkQ2OUQzQTM0NzdGNTM3MkVG MzY4OUQzQUM2QkNDNUQxMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByI/4GQVogIdtTrAqv1eQc47xZ VlWWRguHyyhnRQzeFmXdeK+oxAr9CRr9qHuOLrJkMz/9dAJXvEvyiR3ppVxTUbFv ISRxZ7tTq8xrfwkSWkIcwRksZf5wI55qmcmcqZipNnD82ulwsIN1msIKqMlfHQq2 EeryCyzFAX0jNTU+20GT3asLi7lAMqWS7wbDerchap3EAUoiZzlUoaeEXqmOnAUg An/il0/7KNqNA5epC5jCqoCWnGnaucmhxBX81G/RgakWeWKfTg8x+zRDoyBnbnmK US/SMIIRRUw0wdjt1TwgHq/zGEjCZCPs+f6JVQpam8QPKLKhlV31ywuX8ptI -----END CERTIFICATE-----Generated at Mon Aug 11 07:34:37 2025 by rpki-client