$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft File: 3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft (raw, json) Hash identifier: UMgQU7Vqjjnuu/6Ak1dx6/q9+8wOE9sDDPiG+LtH1YE= Subject key identifier: D8:3C:B7:15:2B:59:2D:71:99:E2:E3:0B:F2:ED:A0:E1:47:C2:50:E0 Authority key identifier: 3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47 Certificate issuer: /CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647 Certificate serial: 6087A8E45DC8A9F94E29E40D3FC26B9CF02FD29F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft Manifest number: FF Signing time: Thu 24 Jul 2025 23:53:33 +0000 Manifest this update: Thu 24 Jul 2025 23:48:33 +0000 Manifest next update: Tue 29 Jul 2025 02:41:33 +0000 Files and hashes: 1: 3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl (hash: pPb0J9Y5oQkl1HCrA5TJgqPRjPPUzIjNzuSFoM6CXZM=) 2: 323830333a633239303a3130303a3a2f34302d3430203d3e20323732383534.roa (hash: LmKlFTxcim6cEDip8fkobXqKp4Q7mzEsnMJgj5g988g=) 3: 323830333a633239303a3530303a3a2f34302d3430203d3e20323732383534.roa (hash: 86G3IUs5BJrGgFXrob+HUNSyEKdUEhYwpJxrgcCab1I=) 4: 323830333a633239303a3a2f34302d3430203d3e20323732383534.roa (hash: 6lb+Qbcfr2WCQoasm2uq1qbIEkgO7GtxVGYF2M9VqbM=) 5: 323830333a633239303a3230303a3a2f34302d3430203d3e20323732383534.roa (hash: qBSFuf8KI90sb++ohHeWqPJIKA8Ag3oz5mwbv2ErseQ=) 6: 323830333a633239303a3330303a3a2f34302d3430203d3e20323732383534.roa (hash: kziv/jtTBV5ngVHoXOg4SleNxts1fuxq1ZsYi+cW8vk=) 7: 323830333a633239303a3430303a3a2f34302d3430203d3e20323732383534.roa (hash: s7Obro7WG0DKMugZRal8aYbStUUaKmVnXXxzsvKl600=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 22:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:87:a8:e4:5d:c8:a9:f9:4e:29:e4:0d:3f:c2:6b:9c:f0:2f:d2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C5BEE1B9EDB8C17432B2D9DEC310EA301598647 Validity Not Before: Jul 24 23:48:33 2025 GMT Not After : Jul 29 02:41:33 2025 GMT Subject: CN=D83CB7152B592D7199E2E30BF2EDA0E147C250E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cf:b3:38:de:55:a0:9a:6c:77:a8:c0:78:84: 92:21:67:23:ca:1c:6e:82:d7:8c:8d:9a:f8:7e:02: 06:1f:f4:de:66:15:f8:17:0d:15:41:19:59:f3:03: b1:67:6f:38:0c:df:d6:b9:c2:a0:11:f1:c6:44:e8: 46:99:e6:80:a7:22:d2:37:7d:b1:68:57:ef:d6:48: 22:dc:5d:b6:1a:b1:68:38:53:e2:08:8f:70:6c:f2: d1:66:dc:e7:fe:52:59:e1:2f:03:98:37:bc:0d:2f: 9a:24:9f:6b:b2:41:f2:22:10:25:b9:93:75:b3:62: 2a:f9:99:12:72:82:5d:4a:38:28:fc:b9:5a:04:4e: 93:d0:07:70:32:24:26:36:14:bd:23:43:fd:6e:da: cd:d1:2d:82:35:a4:6c:af:1f:82:15:75:4e:b9:7f: ca:3c:18:e7:68:35:d7:eb:c8:7e:85:be:27:4c:81: 9f:c0:9d:3e:83:87:ca:bc:ad:88:5a:a6:65:2f:f2: 0c:de:0a:0a:fa:86:cf:5b:d3:fe:c9:ad:1b:e0:1b: 30:a5:10:a7:46:79:aa:6e:39:71:fa:fe:04:a4:dd: 03:69:2e:8a:75:60:a4:dd:fc:32:1d:d0:2b:f2:57: 02:67:d4:19:c3:4a:16:b0:10:8a:12:36:43:c0:57: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:B7:15:2B:59:2D:71:99:E2:E3:0B:F2:ED:A0:E1:47:C2:50:E0 X509v3 Authority Key Identifier: keyid:3C:5B:EE:1B:9E:DB:8C:17:43:2B:2D:9D:EC:31:0E:A3:01:59:86:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61A08D21FEDA51C42CDAF2D4ED6ED215A9467EAE1559AAF262162E2AFBA596B0/0/3C5BEE1B9EDB8C17432B2D9DEC310EA301598647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a3:d7:d7:90:64:4a:8d:b7:eb:15:06:95:a9:f7:1b:63:d7: b4:b5:46:46:9b:f9:d1:77:ed:6b:ec:31:78:17:b8:a9:bc:47: bc:6d:e0:ec:55:43:6d:34:03:b0:1b:5c:c4:85:cf:42:2e:9d: 53:6f:f6:23:95:7a:0e:30:2d:fe:9f:b7:f6:8d:8d:ef:1f:75: 9b:3f:a3:b4:f6:83:6e:58:a0:73:47:62:74:41:77:fc:57:3f: 8b:28:21:40:b9:9c:89:68:e5:53:b6:3b:50:ec:38:05:ce:dd: 94:7c:d9:19:33:c8:5b:c0:90:cc:72:c0:5c:e3:60:db:d7:6b: d9:fb:49:77:13:f6:c5:9e:14:e4:56:e9:c5:09:e6:3f:60:1e: 87:25:fc:42:80:ee:3b:f2:8c:52:a4:c2:1e:fb:c1:27:21:88: b8:21:c9:3a:6f:37:0e:1d:bb:16:18:6c:ad:e8:08:41:60:7b: 21:88:da:40:cb:bc:8f:06:ff:20:8b:98:fa:99:8d:99:d6:58: 55:53:42:55:15:6e:b7:c6:62:bc:dc:51:b0:8e:06:9d:a2:f8: 72:00:62:c7:47:ca:25:32:77:8c:65:9a:13:d0:18:b4:a0:fa: ec:99:6b:f6:b8:b0:10:24:57:78:9f:81:bc:ed:49:39:48:7d: 7e:ea:f4:41 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYIeo5F3IqflOKeQNP8JrnPAv0p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1QkVFMUI5RURCOEMxNzQzMkIyRDlERUMzMTBFQTMw MTU5ODY0NzAeFw0yNTA3MjQyMzQ4MzNaFw0yNTA3MjkwMjQxMzNaMDMxMTAvBgNV BAMTKEQ4M0NCNzE1MkI1OTJENzE5OUUyRTMwQkYyRURBMEUxNDdDMjUwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTz7M43lWgmmx3qMB4hJIhZyPK HG6C14yNmvh+AgYf9N5mFfgXDRVBGVnzA7FnbzgM39a5wqAR8cZE6EaZ5oCnItI3 fbFoV+/WSCLcXbYasWg4U+IIj3Bs8tFm3Of+UlnhLwOYN7wNL5okn2uyQfIiECW5 k3WzYir5mRJygl1KOCj8uVoETpPQB3AyJCY2FL0jQ/1u2s3RLYI1pGyvH4IVdU65 f8o8GOdoNdfryH6FvidMgZ/AnT6Dh8q8rYhapmUv8gzeCgr6hs9b0/7JrRvgGzCl EKdGeapuOXH6/gSk3QNpLop1YKTd/DId0CvyVwJn1BnDShawEIoSNkPAV1JXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2Dy3FStZLXGZ4uML8u2g4UfCUOAwHwYDVR0j BBgwFoAUPFvuG57bjBdDKy2d7DEOowFZhkcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MUEwOEQyMUZFREE1MUM0MkNEQUYyRDRFRDZFRDIxNUE5 NDY3RUFFMTU1OUFBRjI2MjE2MkUyQUZCQTU5NkIwLzAvM0M1QkVFMUI5RURCOEMx NzQzMkIyRDlERUMzMTBFQTMwMTU5ODY0Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQzVCRUUxQjlFREI4QzE3NDMy QjJEOURFQzMxMEVBMzAxNTk4NjQ3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjFBMDhEMjFGRURBNTFDNDJDREFGMkQ0RUQ2RUQyMTVBOTQ2N0VBRTE1 NTlBQUYyNjIxNjJFMkFGQkE1OTZCMC8wLzNDNUJFRTFCOUVEQjhDMTc0MzJCMkQ5 REVDMzEwRUEzMDE1OTg2NDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2o9fXkGRKjbfrFQaVqfcbY9e0 tUZGm/nRd+1r7DF4F7ipvEe8beDsVUNtNAOwG1zEhc9CLp1Tb/YjlXoOMC3+n7f2 jY3vH3WbP6O09oNuWKBzR2J0QXf8Vz+LKCFAuZyJaOVTtjtQ7DgFzt2UfNkZM8hb wJDMcsBc42Db12vZ+0l3E/bFnhTkVunFCeY/YB6HJfxCgO478oxSpMIe+8EnIYi4 Ick6bzcOHbsWGGyt6AhBYHshiNpAy7yPBv8gi5j6mY2Z1lhVU0JVFW63xmK83FGw jgadovhyAGLHR8olMneMZZoT0Bi0oPrsmWv2uLAQJFd4n4G87Uk5SH1+6vRB -----END CERTIFICATE-----Generated at Fri Jul 25 07:03:17 2025 by rpki-client