$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft File: 3214A9089E97D5F53B714A9F9256A933E4595E53.mft (raw, json) Hash identifier: lVN/4reHL6SC9d/HVAMDGoNhEh0/3+g++mb37pNvsig= Subject key identifier: C5:49:EC:BA:C3:7E:8F:F5:AD:F2:17:A6:52:C8:3F:CB:CD:F4:65:E3 Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 Certificate issuer: /CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Certificate serial: 0B3AC5D9AE1F33FA7A759A6C261DE85C6B9A8EF8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft Manifest number: 0107 Signing time: Sun 03 Aug 2025 07:10:47 +0000 Manifest this update: Sun 03 Aug 2025 07:05:47 +0000 Manifest next update: Thu 07 Aug 2025 11:15:47 +0000 Files and hashes: 1: 34352e3137382e33372e302f32342d3234203d3e203232373234.roa (hash: 43R/cEImMXcw2rUpezKiejqH/mogG87oMFpxF9iY7Ms=) 2: 3214A9089E97D5F53B714A9F9256A933E4595E53.crl (hash: aTSlLu0NX2cdoE4foGMxJpBPiHr7nRkZ/CqIpmiT6e8=) 3: 34352e3137382e33392e302f32342d3234203d3e203232373234.roa (hash: 111gob655h+J1ltSdpVz1rHfordidT3DHlpMVoHhsG4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3a:c5:d9:ae:1f:33:fa:7a:75:9a:6c:26:1d:e8:5c:6b:9a:8e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53 Validity Not Before: Aug 3 07:05:47 2025 GMT Not After : Aug 7 11:15:47 2025 GMT Subject: CN=C549ECBAC37E8FF5ADF217A652C83FCBCDF465E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:25:48:d5:62:f0:2a:7e:03:e6:20:70:a8:66: ba:6e:cc:d4:d8:d4:0b:94:b9:91:cc:ba:6d:61:b4: c8:c1:9c:f6:e7:7b:0a:e8:5e:4e:bb:3e:87:45:58: 2a:be:76:49:87:aa:b6:40:7d:18:8b:09:fe:cc:c0: ae:10:51:2f:f7:75:97:18:62:60:26:e9:cc:55:33: d1:a5:81:86:9f:66:b5:c2:c9:44:be:6e:72:cc:c0: de:c4:e2:f5:d9:5b:d1:d6:e6:22:5e:1c:27:52:5e: cf:e6:57:72:c7:df:7c:29:e3:47:8b:a5:a0:82:a6: ba:7f:40:c1:e8:d4:e0:47:de:73:6a:fa:f9:c5:6e: 81:f9:bf:0c:b3:cd:4a:ab:82:04:23:5b:72:4b:06: 7a:9f:f1:94:11:3d:c9:9e:68:7a:7f:23:23:5f:8d: ba:24:2a:32:a4:82:1f:fc:65:3c:b8:38:94:2c:f0: 08:6f:80:74:21:23:c0:ef:98:07:77:5e:77:6b:fd: 42:3c:b3:5a:46:17:6f:10:5f:48:27:d6:d9:05:da: d6:bb:d0:44:12:59:b7:5c:7d:4e:04:b0:68:e7:0b: 79:ca:94:11:79:5d:d0:e2:c2:97:d8:5a:c7:88:21: 66:71:36:af:2f:48:f3:55:b9:f8:8d:fb:a0:d4:f0: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:49:EC:BA:C3:7E:8F:F5:AD:F2:17:A6:52:C8:3F:CB:CD:F4:65:E3 X509v3 Authority Key Identifier: keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:57:3c:ca:6d:58:2c:1a:5d:04:c0:24:ca:9e:81:08:f7:4a: 58:5d:24:db:21:24:79:82:91:56:15:7f:84:82:ee:7e:de:34: 35:10:6c:15:1b:ba:03:84:8e:c8:8d:7f:f9:d1:25:16:2e:f0: 29:1b:6c:af:4a:90:6c:6f:34:7d:69:2f:93:78:bb:01:33:89: 7e:f5:44:d4:8b:f5:0c:65:ac:55:f2:cf:c1:63:c3:0a:79:b9: 6d:42:56:f8:1f:af:e6:fe:c9:e5:32:12:2a:0b:15:76:3e:83: f7:22:29:5b:9a:6a:2e:01:f0:78:05:72:39:c4:6f:69:dd:fe: c4:51:b4:95:ec:33:6c:58:c7:4e:3b:0a:db:16:02:43:1f:42: 59:69:5f:6a:9c:56:f7:47:64:96:91:05:21:e9:f7:60:75:8d: a5:2f:67:db:86:dd:6b:9e:e2:a7:2f:b8:4d:c2:ca:8f:6d:75: 45:4d:3d:9d:69:85:e5:fc:65:3b:c5:48:04:4a:a8:cf:5a:78: 8d:21:de:ff:e0:34:7c:63:66:43:77:b4:6e:74:e4:fc:a8:06: 48:bb:ac:4a:c4:20:29:6a:28:18:3a:73:b0:c3:2d:57:62:77: 3e:c1:bf:14:0d:96:02:54:55:ed:5c:d7:5d:3b:01:f3:3d:39: 0c:84:6c:16 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCzrF2a4fM/p6dZpsJh3oXGuajvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxNEE5MDg5RTk3RDVGNTNCNzE0QTlGOTI1NkE5MzNF NDU5NUU1MzAeFw0yNTA4MDMwNzA1NDdaFw0yNTA4MDcxMTE1NDdaMDMxMTAvBgNV BAMTKEM1NDlFQ0JBQzM3RThGRjVBREYyMTdBNjUyQzgzRkNCQ0RGNDY1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJUjVYvAqfgPmIHCoZrpuzNTY 1AuUuZHMum1htMjBnPbnewroXk67PodFWCq+dkmHqrZAfRiLCf7MwK4QUS/3dZcY YmAm6cxVM9GlgYafZrXCyUS+bnLMwN7E4vXZW9HW5iJeHCdSXs/mV3LH33wp40eL paCCprp/QMHo1OBH3nNq+vnFboH5vwyzzUqrggQjW3JLBnqf8ZQRPcmeaHp/IyNf jbokKjKkgh/8ZTy4OJQs8AhvgHQhI8DvmAd3Xndr/UI8s1pGF28QX0gn1tkF2ta7 0EQSWbdcfU4EsGjnC3nKlBF5XdDiwpfYWseIIWZxNq8vSPNVufiN+6DU8HQvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUxUnsusN+j/Wt8hemUsg/y830ZeMwHwYDVR0j BBgwFoAUMhSpCJ6X1fU7cUqfklapM+RZXlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMTI2OTU1Rjg2NzdFODU4MzZENkMwMDNFMzhCRTNDRTcy N0IyQzk3RkQ2MjU1ODFCMDA4ODc5M0NFMTlERUFGLzAvMzIxNEE5MDg5RTk3RDVG NTNCNzE0QTlGOTI1NkE5MzNFNDU5NUU1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjE0QTkwODlFOTdENUY1M0I3 MTRBOUY5MjU2QTkzM0U0NTk1RTUzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzEyNjk1NUY4Njc3RTg1ODM2RDZDMDAzRTM4QkUzQ0U3MjdCMkM5N0ZE NjI1NTgxQjAwODg3OTNDRTE5REVBRi8wLzMyMTRBOTA4OUU5N0Q1RjUzQjcxNEE5 RjkyNTZBOTMzRTQ1OTVFNTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtVzzKbVgsGl0EwCTKnoEI90pY XSTbISR5gpFWFX+Egu5+3jQ1EGwVG7oDhI7IjX/50SUWLvApG2yvSpBsbzR9aS+T eLsBM4l+9UTUi/UMZaxV8s/BY8MKebltQlb4H6/m/snlMhIqCxV2PoP3Iilbmmou AfB4BXI5xG9p3f7EUbSV7DNsWMdOOwrbFgJDH0JZaV9qnFb3R2SWkQUh6fdgdY2l L2fbht1rnuKnL7hNwsqPbXVFTT2daYXl/GU7xUgESqjPWniNId7/4DR8Y2ZDd7Ru dOT8qAZIu6xKxCApaigYOnOwwy1XYnc+wb8UDZYCVFXtXNddOwHzPTkMhGwW -----END CERTIFICATE-----Generated at Sun Aug 3 16:10:26 2025 by rpki-client