$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft File: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft (raw, json) Hash identifier: dgbjAYG/eLbfi4m2rOuVHU3QjwNVgUPWp26Jr3W5dao= Subject key identifier: F2:C9:54:93:7B:17:0B:6D:D3:1E:AB:4A:EB:5D:4A:E9:0C:E2:64:3C Authority key identifier: DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA Certificate issuer: /CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Certificate serial: 741BCA3AF313A1DE0C1CDF9804FF36890066E1EB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft Manifest number: 0112 Signing time: Thu 04 Sep 2025 23:23:16 +0000 Manifest this update: Thu 04 Sep 2025 23:18:16 +0000 Manifest next update: Wed 10 Sep 2025 15:43:16 +0000 Files and hashes: 1: 3230302e392e39362e302f32342d3234203d3e203237393437.roa (hash: yn6Nu655v9mUSksEI4cIktvdx/yTjs2oRj5bZMAfrfk=) 2: DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl (hash: 8aaNpBaLzKOldWDv4MexffaLMch0ZP1tC5bdOFx0luc=) 3: 3230302e392e39362e302f32342d3234203d3e203631343638.roa (hash: ItjXaKOwb+QHZwLhWYBWCIH0VcsHfuLK9e+dIUcT39E=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 10 Sep 2025 15:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:1b:ca:3a:f3:13:a1:de:0c:1c:df:98:04:ff:36:89:00:66:e1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDAF89D4807C4FBD2974CAC276C37C95F8A777AA Validity Not Before: Sep 4 23:18:16 2025 GMT Not After : Sep 10 15:43:16 2025 GMT Subject: CN=F2C954937B170B6DD31EAB4AEB5D4AE90CE2643C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:fe:44:25:04:45:a9:fc:9f:55:0a:66:5f: f2:d3:52:9b:aa:a5:84:92:67:03:56:6a:26:03:c7: 5a:d5:ab:ad:d0:71:12:a7:c2:2c:95:77:26:07:95: be:66:89:4c:53:52:20:97:00:de:ab:48:14:fe:c1: 3d:ee:7f:e0:06:f1:8e:99:05:94:73:c3:67:cf:ec: eb:c2:39:3e:ee:d4:44:2d:96:cb:dc:ac:38:15:3b: 75:38:bc:64:58:1c:a3:3a:d3:9a:46:53:6d:35:c2: 02:39:9b:05:d3:9b:87:69:1b:d5:53:4e:a8:e8:b3: 0c:f7:14:ad:56:0f:c7:38:e6:36:15:ed:62:8e:27: ca:ac:a1:ec:15:47:d2:52:e1:4d:3a:0f:76:1a:3b: f1:c2:17:57:db:4b:68:93:d5:56:ec:6f:66:e4:4d: f0:32:a6:bf:7d:fd:66:71:47:60:39:dd:97:6e:41: b4:5c:54:cf:63:66:72:7e:3b:c6:22:f5:2a:27:30: 0d:37:28:fd:51:20:d7:8d:cd:54:37:90:51:21:e9: c2:06:3f:49:0d:de:11:e0:2f:32:d1:fa:b2:c7:28: d4:2d:9a:a3:21:02:35:dc:0a:63:22:03:37:17:c6: 7e:c1:05:1e:1e:6e:49:ae:72:20:5a:d4:44:04:e9: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:54:93:7B:17:0B:6D:D3:1E:AB:4A:EB:5D:4A:E9:0C:E2:64:3C X509v3 Authority Key Identifier: keyid:DD:AF:89:D4:80:7C:4F:BD:29:74:CA:C2:76:C3:7C:95:F8:A7:77:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7068363C42E7A5FBCF2DF7CF504DF0ADDCEC7B7C507D5071C6DE68E0F9522D0B/0/DDAF89D4807C4FBD2974CAC276C37C95F8A777AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:be:89:e2:e3:f4:bd:94:cd:62:02:58:03:01:19:d3:95:7b: 91:e5:0c:e8:94:60:65:9b:b4:7a:e7:24:77:3d:80:01:0b:04: cb:5f:ab:03:2a:2e:fd:5a:15:61:19:5a:68:08:fe:1c:45:0c: 08:91:88:63:6f:4f:e9:b2:fa:eb:40:b9:d8:c2:9c:8e:c4:38: 82:74:60:75:62:2f:ed:02:d8:3a:b1:a8:73:7c:0e:bd:9c:3a: ff:41:7c:6d:7d:b4:0b:3a:46:ab:fc:1e:eb:c0:e6:e0:b7:c1: f7:cc:5a:2c:5d:15:21:48:6d:a5:b8:84:74:26:ba:23:80:4d: e3:2f:0f:8b:5e:8d:83:a7:7e:02:11:97:f6:cc:65:a2:1d:5e: b4:f8:c3:17:7d:f9:82:7a:a4:6b:64:23:9f:a0:b3:0a:b0:a5: c7:16:ab:8f:89:6e:d3:f9:70:c9:23:63:d2:bb:68:d9:34:32: 2e:99:93:2a:7a:84:de:f7:fa:ed:87:24:09:4f:a6:93:1b:8a: 39:c7:29:b5:a4:ba:c4:75:bc:5b:7e:69:07:9e:da:f2:38:80: b7:43:d9:0e:5e:2c:55:69:ba:ab:94:f0:39:2b:b0:11:24:8d: 54:31:0b:6c:eb:23:8d:34:4f:cd:94:dd:3b:64:d6:89:c6:90: ad:76:9a:65 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdBvKOvMTod4MHN+YBP82iQBm4eswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBRjg5RDQ4MDdDNEZCRDI5NzRDQUMyNzZDMzdDOTVG OEE3NzdBQTAeFw0yNTA5MDQyMzE4MTZaFw0yNTA5MTAxNTQzMTZaMDMxMTAvBgNV BAMTKEYyQzk1NDkzN0IxNzBCNkREMzFFQUI0QUVCNUQ0QUU5MENFMjY0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXdf5EJQRFqfyfVQpmX/LTUpuq pYSSZwNWaiYDx1rVq63QcRKnwiyVdyYHlb5miUxTUiCXAN6rSBT+wT3uf+AG8Y6Z BZRzw2fP7OvCOT7u1EQtlsvcrDgVO3U4vGRYHKM605pGU201wgI5mwXTm4dpG9VT Tqjoswz3FK1WD8c45jYV7WKOJ8qsoewVR9JS4U06D3YaO/HCF1fbS2iT1Vbsb2bk TfAypr99/WZxR2A53ZduQbRcVM9jZnJ+O8Yi9SonMA03KP1RINeNzVQ3kFEh6cIG P0kN3hHgLzLR+rLHKNQtmqMhAjXcCmMiAzcXxn7BBR4ebkmuciBa1EQE6WpPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8slUk3sXC23THqtK611K6QziZDwwHwYDVR0j BBgwFoAU3a+J1IB8T70pdMrCdsN8lfind6owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDY4MzYzQzQyRTdBNUZCQ0YyREY3Q0Y1MDRERjBBRERD RUM3QjdDNTA3RDUwNzFDNkRFNjhFMEY5NTIyRDBCLzAvRERBRjg5RDQ4MDdDNEZC RDI5NzRDQUMyNzZDMzdDOTVGOEE3NzdBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREFGODlENDgwN0M0RkJEMjk3 NENBQzI3NkMzN0M5NUY4QTc3N0FBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA2ODM2M0M0MkU3QTVGQkNGMkRGN0NGNTA0REYwQUREQ0VDN0I3QzUw N0Q1MDcxQzZERTY4RTBGOTUyMkQwQi8wL0REQUY4OUQ0ODA3QzRGQkQyOTc0Q0FD Mjc2QzM3Qzk1RjhBNzc3QUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIvoni4/S9lM1iAlgDARnTlXuR 5QzolGBlm7R65yR3PYABCwTLX6sDKi79WhVhGVpoCP4cRQwIkYhjb0/psvrrQLnY wpyOxDiCdGB1Yi/tAtg6sahzfA69nDr/QXxtfbQLOkar/B7rwObgt8H3zFosXRUh SG2luIR0JrojgE3jLw+LXo2Dp34CEZf2zGWiHV60+MMXffmCeqRrZCOfoLMKsKXH FquPiW7T+XDJI2PSu2jZNDIumZMqeoTe9/rthyQJT6aTG4o5xym1pLrEdbxbfmkH ntryOIC3Q9kOXixVabqrlPA5K7ARJI1UMQts6yONNE/NlN07ZNaJxpCtdppl -----END CERTIFICATE-----Generated at Sat Sep 6 16:53:32 2025 by rpki-client