$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.mft File: 34B60C1D393D1C566AD654F41E7ED9865CCE3029.mft (raw, json) Hash identifier: hLG4neFkMXXIurBm6GHCm0ExsrhTwpGoeAuBT593iKU= Subject key identifier: 00:A5:86:08:47:45:7F:F8:EC:F1:47:C1:B3:A2:0B:EF:45:96:6D:CD Authority key identifier: 34:B6:0C:1D:39:3D:1C:56:6A:D6:54:F4:1E:7E:D9:86:5C:CE:30:29 Certificate issuer: /CN=34B60C1D393D1C566AD654F41E7ED9865CCE3029 Certificate serial: 2B89FA8684837916BCC1F6362CDF8C186C4F5EC2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.mft Manifest number: 0109 Signing time: Thu 14 Aug 2025 10:42:28 +0000 Manifest this update: Thu 14 Aug 2025 10:37:28 +0000 Manifest next update: Tue 19 Aug 2025 02:19:28 +0000 Files and hashes: 1: 3137302e3235342e3137322e302f32322d3332203d3e20323635363431.roa (hash: kEW/DTRmEmnaOL0ovJP0Z3avE3AJFTw4PpNWh84Si3Y=) 2: 323830333a366634303a3a2f33322d3333203d3e20323635363431.roa (hash: dM6Kp3COeDU9RDgU/0U2bxOvMInAjyjXCADrq/mlLQQ=) 3: 34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl (hash: q8WFKPT9xx6DGmjajEX299lzIIMWcz3x+Z43W3LZzsM=) 4: 323830333a366634303a323a3a2f34382d3438203d3e20323635363431.roa (hash: vkP6iE2ljXW7PNQz99Eq6bSMVGc8k1Y94xsS8iAI9tE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 19 Aug 2025 02:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:89:fa:86:84:83:79:16:bc:c1:f6:36:2c:df:8c:18:6c:4f:5e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34B60C1D393D1C566AD654F41E7ED9865CCE3029 Validity Not Before: Aug 14 10:37:28 2025 GMT Not After : Aug 19 02:19:28 2025 GMT Subject: CN=00A5860847457FF8ECF147C1B3A20BEF45966DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:a8:7e:c5:bd:3b:84:8b:c8:19:df:63:ff: c5:2f:36:b6:a7:26:48:d1:e4:b7:26:4d:f9:df:e1: a7:88:97:5f:14:b8:18:06:4a:54:30:b8:e9:3c:e1: 68:a9:35:cb:ff:c9:ef:1c:63:76:4e:5b:55:89:df: 1b:6b:a6:3e:fb:d5:da:61:f2:fd:6c:87:6c:a7:8e: 54:e6:05:3a:aa:ed:65:57:a9:d6:e3:b9:4f:f8:0a: 76:0b:20:55:c3:e5:fc:8d:97:0b:99:58:79:e2:bc: 7b:c3:cd:ff:e1:c7:a7:d2:4b:17:97:33:0f:44:52: 60:a5:37:50:c3:45:fe:ca:b7:a3:9d:22:e4:c4:7b: 00:8a:48:e8:c0:89:24:d2:26:01:cc:5d:2f:ec:21: f2:ad:18:0f:7f:d0:1b:80:89:a8:3e:f2:f6:b1:f9: e8:e1:df:4d:05:0f:68:60:11:3c:bb:92:33:f0:f3: d8:b1:8c:e9:75:2f:ae:31:a1:f9:fa:7d:b7:cf:38: 1d:ec:ea:58:bd:94:84:2e:c8:be:04:31:45:71:0c: c4:5d:ce:00:17:8f:23:78:11:60:a5:3a:8d:46:74: 74:52:a8:41:1c:8d:41:da:d5:97:85:bc:71:fa:93: a6:18:73:51:e4:8a:1f:51:8b:a7:cd:e9:bb:cb:35: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A5:86:08:47:45:7F:F8:EC:F1:47:C1:B3:A2:0B:EF:45:96:6D:CD X509v3 Authority Key Identifier: keyid:34:B6:0C:1D:39:3D:1C:56:6A:D6:54:F4:1E:7E:D9:86:5C:CE:30:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:a7:37:a6:8c:2c:68:93:aa:7b:be:0a:81:15:a5:8e:14:dc: af:b4:8b:30:85:31:06:5a:e1:51:e4:d8:44:30:aa:c3:0a:56: 07:92:0d:8e:ec:45:aa:98:10:34:f6:64:d0:f2:b6:9f:80:0e: c0:9e:f7:fa:41:6a:dd:84:05:5a:9d:f8:37:6b:73:3f:f3:bd: d4:11:1c:70:1f:90:fc:6a:ff:f8:59:70:e2:ca:b1:27:43:4c: 30:39:75:15:29:46:5b:2a:c2:32:9d:73:ab:d3:df:59:74:97: 42:fd:3a:e8:53:44:32:20:6d:58:e8:76:57:f4:58:c6:2c:9b: c5:04:a8:e7:4f:50:3c:fc:9c:e4:9b:89:51:a5:4e:41:cb:a1: 68:7d:66:0c:25:dd:73:b7:8b:93:4d:b6:79:22:9b:a4:a3:d5: d2:66:3e:c5:29:04:80:8f:c7:a2:08:ea:7e:da:b7:7b:2d:6f: 7b:db:81:90:f6:16:5e:65:02:99:a2:ff:6d:6f:d8:e5:ee:9d: 9a:12:fa:98:33:e3:87:51:88:82:99:09:a7:5b:70:d2:21:95: 25:3e:fd:5b:bd:97:91:67:65:49:8f:b9:66:0b:8f:88:0e:d1: 26:d4:de:8c:ad:7c:24:dc:76:3b:3e:6d:f8:bb:3f:52:39:a3: 6b:d5:ba:ad -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK4n6hoSDeRa8wfY2LN+MGGxPXsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRCNjBDMUQzOTNEMUM1NjZBRDY1NEY0MUU3RUQ5ODY1 Q0NFMzAyOTAeFw0yNTA4MTQxMDM3MjhaFw0yNTA4MTkwMjE5MjhaMDMxMTAvBgNV BAMTKDAwQTU4NjA4NDc0NTdGRjhFQ0YxNDdDMUIzQTIwQkVGNDU5NjZEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qKh+xb07hIvIGd9j/8UvNran JkjR5LcmTfnf4aeIl18UuBgGSlQwuOk84WipNcv/ye8cY3ZOW1WJ3xtrpj771dph 8v1sh2ynjlTmBTqq7WVXqdbjuU/4CnYLIFXD5fyNlwuZWHnivHvDzf/hx6fSSxeX Mw9EUmClN1DDRf7Kt6OdIuTEewCKSOjAiSTSJgHMXS/sIfKtGA9/0BuAiag+8vax +ejh300FD2hgETy7kjPw89ixjOl1L64xofn6fbfPOB3s6li9lIQuyL4EMUVxDMRd zgAXjyN4EWClOo1GdHRSqEEcjUHa1ZeFvHH6k6YYc1Hkih9Ri6fN6bvLNZ4rAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUAKWGCEdFf/js8UfBs6IL70WWbc0wHwYDVR0j BBgwFoAUNLYMHTk9HFZq1lT0Hn7ZhlzOMCkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BOUY0Njk5MjdCMEY4MUZFQkFDNEEzN0UwOTlERjNCMEIw QUIwNjEzOTM1NTNFODkyNDgwREVGNUM0MzE1NzM1LzAvMzRCNjBDMUQzOTNEMUM1 NjZBRDY1NEY0MUU3RUQ5ODY1Q0NFMzAyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNEI2MEMxRDM5M0QxQzU2NkFE NjU0RjQxRTdFRDk4NjVDQ0UzMDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTlGNDY5OTI3QjBGODFGRUJBQzRBMzdFMDk5REYzQjBCMEFCMDYxMzkz NTUzRTg5MjQ4MERFRjVDNDMxNTczNS8wLzM0QjYwQzFEMzkzRDFDNTY2QUQ2NTRG NDFFN0VEOTg2NUNDRTMwMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9pzemjCxok6p7vgqBFaWOFNyv tIswhTEGWuFR5NhEMKrDClYHkg2O7EWqmBA09mTQ8rafgA7Anvf6QWrdhAVanfg3 a3M/873UERxwH5D8av/4WXDiyrEnQ0wwOXUVKUZbKsIynXOr099ZdJdC/TroU0Qy IG1Y6HZX9FjGLJvFBKjnT1A8/Jzkm4lRpU5By6FofWYMJd1zt4uTTbZ5Ipuko9XS Zj7FKQSAj8eiCOp+2rd7LW9724GQ9hZeZQKZov9tb9jl7p2aEvqYM+OHUYiCmQmn W3DSIZUlPv1bvZeRZ2VJj7lmC4+IDtEm1N6MrXwk3HY7Pm34uz9SOaNr1bqt -----END CERTIFICATE-----Generated at Fri Aug 15 20:09:36 2025 by rpki-client