$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft File: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft (raw, json) Hash identifier: w8jIdF8OIq0mbOc8UnrW3J+Sw98ObmRKDkTZHKyJMsE= Subject key identifier: 07:95:E0:9A:E5:A2:AA:4C:95:3F:F3:14:C3:62:A1:B1:5D:55:4D:70 Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 Certificate issuer: /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Certificate serial: 14233C7ECA0D3F4C951495AE439EFD5C062220ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft Manifest number: 0109 Signing time: Sun 10 Aug 2025 06:17:49 +0000 Manifest this update: Sun 10 Aug 2025 06:12:49 +0000 Manifest next update: Thu 14 Aug 2025 17:14:49 +0000 Files and hashes: 1: 34352e3136302e31322e302f32322d3234203d3e203631353033.roa (hash: rGf/Ot8vpc4bXLZjtJMeJ64W68zetCQCjBNpV60KJLk=) 2: CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl (hash: Wu+F+K0chSqjKFazNO8f/YoE+e5YC75qC4mHblwwkAA=) 3: 34352e3136302e31322e302f32322d3234203d3e20323639373333.roa (hash: a8Us3kI8SkWGmqoxEMJdOuQDpMUk4xinBahinzFU9DU=) 4: 34352e3136302e31322e302f32322d3234203d3e20323636383730.roa (hash: vb7Kyf31JcU4K7h1whk05luNX6Z6SSjkjzD3prLXHAE=) 5: 34352e3136302e31322e302f32322d3234203d3e20323635373033.roa (hash: MAJxrDm1ex5gG0+qVfg9yJc6ZorOreLgA5tyBVAPd0o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 Aug 2025 17:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:23:3c:7e:ca:0d:3f:4c:95:14:95:ae:43:9e:fd:5c:06:22:20:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9 Validity Not Before: Aug 10 06:12:49 2025 GMT Not After : Aug 14 17:14:49 2025 GMT Subject: CN=0795E09AE5A2AA4C953FF314C362A1B15D554D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:8b:e3:95:70:6d:9a:c8:4b:46:8f:df:d6: 71:f3:05:cf:a3:73:26:ec:75:84:d1:b1:0a:82:09: 80:40:f6:95:a6:9f:d0:b6:bc:52:4f:11:3d:c6:1a: 3e:af:20:02:a0:bc:38:1c:a3:59:8f:68:3d:f8:25: 33:0a:8e:fd:74:0c:6d:de:8b:03:f8:19:06:d7:dd: ec:8f:f4:8d:98:e5:bb:8f:4f:46:47:f4:5d:20:1b: ea:82:b8:2d:44:05:da:62:1a:57:49:9d:06:e4:11: 21:d5:99:dc:a9:e5:ac:7a:38:e7:d7:fd:f9:41:cc: d8:66:fb:05:01:92:6f:38:1e:cd:f1:d1:3d:3f:97: 6f:01:9d:7d:4c:50:2b:57:eb:16:30:9a:84:79:b0: 50:a5:f8:03:94:50:23:ca:46:e1:22:11:09:40:66: 54:bd:36:4a:bc:bd:4b:6b:0d:54:c7:d1:6f:3d:a6: f8:88:c6:f7:1b:23:ed:7a:3c:77:52:94:10:60:2d: d2:38:fa:e0:29:93:3a:e4:58:dc:e2:8e:96:48:43: 09:01:16:b8:7c:2b:c9:7a:93:33:29:d4:78:09:64: f4:38:95:2a:55:bc:1c:f8:2f:a9:e7:90:3e:4b:a1: ef:85:ea:74:e0:45:cf:87:36:7d:5c:87:1e:00:f9: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:95:E0:9A:E5:A2:AA:4C:95:3F:F3:14:C3:62:A1:B1:5D:55:4D:70 X509v3 Authority Key Identifier: keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:00:41:37:31:82:01:52:25:75:e1:ba:70:a0:45:7a:c3:40: bb:c3:b1:b6:0a:98:43:07:c3:41:43:2c:ad:37:89:26:83:53: 12:c1:12:a7:c3:f8:dc:48:19:bf:5e:1f:a4:bd:89:03:38:64: 3f:6e:58:b8:2f:87:d8:5b:ec:d7:29:49:c1:e3:80:63:8e:57: a1:12:3b:79:a2:e1:f8:ea:98:76:25:5d:8d:33:dd:1a:61:77: 15:cc:c3:3d:6f:9b:e6:53:7a:47:23:e4:e8:f3:1b:03:dd:96: 99:d0:6d:e7:f5:9b:31:46:39:a7:90:c2:32:1d:d7:0e:87:d9: 05:44:49:27:6b:39:38:fa:15:4b:e1:6a:75:8b:da:99:2e:9a: b7:94:10:72:84:40:07:2d:49:e2:45:2c:98:da:e8:22:86:a5: a6:47:4c:df:51:11:90:c7:6c:32:9a:15:80:58:7d:c0:0f:46: 5b:d1:eb:25:69:b4:b7:0f:b5:8b:61:85:e3:bc:b6:52:7f:c9: 36:b5:53:91:0a:66:a9:4c:cb:1f:d6:1c:86:a4:11:43:47:69: 9b:33:87:a4:04:32:f2:b5:22:52:87:54:01:ff:54:aa:02:2e: 59:77:1f:99:e7:1a:51:2e:be:56:3f:ca:57:bc:2f:9e:c3:d4: 28:22:1b:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFCM8fsoNP0yVFJWuQ579XAYiIO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMjVDNzU4QkQ5NUFFMjMzOEQzN0JCMzBGQ0EyN0I4 RkJFOERBOTAeFw0yNTA4MTAwNjEyNDlaFw0yNTA4MTQxNzE0NDlaMDMxMTAvBgNV BAMTKDA3OTVFMDlBRTVBMkFBNEM5NTNGRjMxNEMzNjJBMUIxNUQ1NTRENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCalovjlXBtmshLRo/f1nHzBc+j cybsdYTRsQqCCYBA9pWmn9C2vFJPET3GGj6vIAKgvDgco1mPaD34JTMKjv10DG3e iwP4GQbX3eyP9I2Y5buPT0ZH9F0gG+qCuC1EBdpiGldJnQbkESHVmdyp5ax6OOfX /flBzNhm+wUBkm84Hs3x0T0/l28BnX1MUCtX6xYwmoR5sFCl+AOUUCPKRuEiEQlA ZlS9Nkq8vUtrDVTH0W89pviIxvcbI+16PHdSlBBgLdI4+uApkzrkWNzijpZIQwkB Frh8K8l6kzMp1HgJZPQ4lSpVvBz4L6nnkD5Loe+F6nTgRc+HNn1chx4A+QdpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUB5XgmuWiqkyVP/MUw2KhsV1VTXAwHwYDVR0j BBgwFoAUyjJcdYvZWuIzjTe7MPyie4++jakwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMDkyN0Q0RTE4Rjc3RUZCNjAyQUUyMUQ1NjExQjg5QzZF MkVCNEQxOTVCQTE4NDhERDk5NjFGODRBMEVEMkIyLzAvQ0EzMjVDNzU4QkQ5NUFF MjMzOEQzN0JCMzBGQ0EyN0I4RkJFOERBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTMyNUM3NThCRDk1QUUyMzM4 RDM3QkIzMEZDQTI3QjhGQkU4REE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzA5MjdENEUxOEY3N0VGQjYwMkFFMjFENTYxMUI4OUM2RTJFQjREMTk1 QkExODQ4REQ5OTYxRjg0QTBFRDJCMi8wL0NBMzI1Qzc1OEJEOTVBRTIzMzhEMzdC QjMwRkNBMjdCOEZCRThEQTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+AEE3MYIBUiV14bpwoEV6w0C7 w7G2CphDB8NBQyytN4kmg1MSwRKnw/jcSBm/Xh+kvYkDOGQ/bli4L4fYW+zXKUnB 44BjjlehEjt5ouH46ph2JV2NM90aYXcVzMM9b5vmU3pHI+To8xsD3ZaZ0G3n9Zsx RjmnkMIyHdcOh9kFREknazk4+hVL4Wp1i9qZLpq3lBByhEAHLUniRSyY2ugihqWm R0zfURGQx2wymhWAWH3AD0Zb0eslabS3D7WLYYXjvLZSf8k2tVORCmapTMsf1hyG pBFDR2mbM4ekBDLytSJSh1QB/1SqAi5Zdx+Z5xpRLr5WP8pXvC+ew9QoIhsA -----END CERTIFICATE-----Generated at Mon Aug 11 13:14:02 2025 by rpki-client