$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft File: 25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft (raw, json) Hash identifier: 6Aya/S87d0Z/RLZm7zmV/YI/BDHeDdl+SxLqBfNqX0M= Subject key identifier: 43:1F:B8:1A:82:AE:FB:4D:27:5C:21:C8:11:9A:C0:F4:E2:D0:20:3D Authority key identifier: 25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B Certificate issuer: /CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B Certificate serial: 550D99DE0FBC8384BC36A36EC88EF42060270292 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft Manifest number: FE Signing time: Sun 20 Jul 2025 15:52:51 +0000 Manifest this update: Sun 20 Jul 2025 15:47:51 +0000 Manifest next update: Fri 25 Jul 2025 18:32:51 +0000 Files and hashes: 1: 323830333a323565303a3a2f33322d3336203d3e203238303332.roa (hash: NveS6qbrjhVyjyB60dQ6OiVTKjcTd2GaZHfhFSi8D4s=) 2: 3230302e3233332e34342e302f32322d3234203d3e203238303332.roa (hash: q2jVn+eVl/pOsdNV25L101XSG3vXoZ2BGkOLLLmjNsg=) 3: 25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl (hash: uGceQKe4D+UPAjegPzoX3VV1zJpsgIXVtySuiQz9cc4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:0d:99:de:0f:bc:83:84:bc:36:a3:6e:c8:8e:f4:20:60:27:02:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25E2A43494D13C6F2ABA675D1A57C4D00A108B2B Validity Not Before: Jul 20 15:47:51 2025 GMT Not After : Jul 25 18:32:51 2025 GMT Subject: CN=431FB81A82AEFB4D275C21C8119AC0F4E2D0203D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:32:2e:78:49:ad:ca:5d:53:00:47:a7:e6: 93:1b:17:7a:9a:2a:cf:4e:04:a6:b6:f2:53:0d:c4: 03:3a:e7:af:0f:a3:68:d8:c6:85:5f:69:c8:8e:d3: d4:0f:a4:6b:53:26:72:48:0a:66:08:5f:b0:2c:fc: 22:48:7c:f1:5a:9b:b9:0e:70:db:20:7e:45:c2:2c: 16:a5:dc:f3:28:9e:b7:c2:73:bb:70:6e:53:da:ca: b8:cb:42:df:9c:3c:1e:36:7d:e3:4e:3d:35:be:35: 7c:8c:8e:50:09:b4:0a:5e:8e:1a:cf:59:6d:cc:d8: 53:a5:d7:a6:ec:df:6c:32:3b:40:0a:a0:ca:de:63: 46:8a:22:cd:1c:fa:55:eb:1d:41:19:b5:0a:e8:c9: 88:a4:f1:df:53:de:e5:56:44:f1:be:4c:eb:af:c6: 93:61:cf:4f:d6:d2:be:9a:1c:85:11:20:8c:4e:ac: 40:e2:f7:d6:29:23:4f:0b:6b:a1:2f:36:78:07:46: a9:74:83:06:8d:96:20:fb:c7:bb:84:db:0d:32:4c: 5e:1c:af:0b:b5:b6:82:43:7b:53:d1:d1:35:13:f4: 7d:93:da:85:53:d8:47:4b:ca:b6:b4:f6:98:07:e8: b6:19:14:53:c9:1f:76:48:21:09:4f:6c:93:0c:89: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1F:B8:1A:82:AE:FB:4D:27:5C:21:C8:11:9A:C0:F4:E2:D0:20:3D X509v3 Authority Key Identifier: keyid:25:E2:A4:34:94:D1:3C:6F:2A:BA:67:5D:1A:57:C4:D0:0A:10:8B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04EDDEE6B6F88EA17E6C2CD56C55F29A1937EB8745DD56F3E71B340A9FF830A6/0/25E2A43494D13C6F2ABA675D1A57C4D00A108B2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:91:b5:a7:ef:10:1c:be:37:fb:36:4b:80:d6:fd:ce:29:52: b5:36:28:9d:f1:bb:5a:da:33:00:fb:ed:c9:df:b1:73:d9:c8: 67:20:2c:08:37:1a:ea:28:63:18:92:12:88:f7:62:65:3f:3a: 39:cc:a6:40:04:cd:44:cf:c7:a9:fb:3d:f7:b8:b6:dc:ca:69: e0:82:9f:9d:3c:1d:d2:d0:e0:6e:66:39:5b:2f:17:0c:95:87: df:be:5a:95:20:68:f3:a3:90:93:af:0d:c6:33:4d:4e:4e:cc: 5c:b8:40:de:df:48:ff:5a:8f:b0:75:67:9a:10:3a:44:fa:cd: 6a:79:fe:71:ff:8b:83:a1:d5:9b:2d:72:8d:6a:3c:e3:6f:ec: fa:0e:9d:e1:13:b7:84:25:52:d8:77:d8:31:bf:88:f7:f1:ab: 57:d2:05:fe:0e:28:b3:07:f5:0b:85:22:84:43:f4:47:9b:7e: 85:8e:45:90:3b:7d:04:86:92:f5:4d:85:c1:80:df:98:e9:f0: 90:ef:bc:a4:b8:49:77:07:61:84:c6:2e:74:cb:a9:ab:ac:08: 90:97:21:45:12:30:76:b4:85:03:f4:58:47:92:cd:4d:bb:95: 0d:b2:99:c2:0d:37:ac:b2:a2:4c:31:a2:5d:ec:76:b1:fa:c7: 9b:7d:31:7d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVQ2Z3g+8g4S8NqNuyI70IGAnApIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVFMkE0MzQ5NEQxM0M2RjJBQkE2NzVEMUE1N0M0RDAw QTEwOEIyQjAeFw0yNTA3MjAxNTQ3NTFaFw0yNTA3MjUxODMyNTFaMDMxMTAvBgNV BAMTKDQzMUZCODFBODJBRUZCNEQyNzVDMjFDODExOUFDMEY0RTJEMDIwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJzIueEmtyl1TAEen5pMbF3qa Ks9OBKa28lMNxAM6568Po2jYxoVfaciO09QPpGtTJnJICmYIX7As/CJIfPFam7kO cNsgfkXCLBal3PMonrfCc7twblPayrjLQt+cPB42feNOPTW+NXyMjlAJtApejhrP WW3M2FOl16bs32wyO0AKoMreY0aKIs0c+lXrHUEZtQroyYik8d9T3uVWRPG+TOuv xpNhz0/W0r6aHIURIIxOrEDi99YpI08La6EvNngHRql0gwaNliD7x7uE2w0yTF4c rwu1toJDe1PR0TUT9H2T2oVT2EdLyra09pgH6LYZFFPJH3ZIIQlPbJMMiaCLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQx+4GoKu+00nXCHIEZrA9OLQID0wHwYDVR0j BBgwFoAUJeKkNJTRPG8qumddGlfE0AoQiyswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wNEVEREVFNkI2Rjg4RUExN0U2QzJDRDU2QzU1RjI5QTE5 MzdFQjg3NDVERDU2RjNFNzFCMzQwQTlGRjgzMEE2LzAvMjVFMkE0MzQ5NEQxM0M2 RjJBQkE2NzVEMUE1N0M0RDAwQTEwOEIyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUUyQTQzNDk0RDEzQzZGMkFC QTY3NUQxQTU3QzREMDBBMTA4QjJCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDRFRERFRTZCNkY4OEVBMTdFNkMyQ0Q1NkM1NUYyOUExOTM3RUI4NzQ1 REQ1NkYzRTcxQjM0MEE5RkY4MzBBNi8wLzI1RTJBNDM0OTREMTNDNkYyQUJBNjc1 RDFBNTdDNEQwMEExMDhCMkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7kbWn7xAcvjf7NkuA1v3OKVK1 Niid8bta2jMA++3J37Fz2chnICwINxrqKGMYkhKI92JlPzo5zKZABM1Ez8ep+z33 uLbcymnggp+dPB3S0OBuZjlbLxcMlYffvlqVIGjzo5CTrw3GM01OTsxcuEDe30j/ Wo+wdWeaEDpE+s1qef5x/4uDodWbLXKNajzjb+z6Dp3hE7eEJVLYd9gxv4j38atX 0gX+DiizB/ULhSKEQ/RHm36FjkWQO30EhpL1TYXBgN+Y6fCQ77ykuEl3B2GExi50 y6mrrAiQlyFFEjB2tIUD9FhHks1Nu5UNspnCDTessqJMMaJd7Hax+sebfTF9 -----END CERTIFICATE-----Generated at Tue Jul 22 00:12:02 2025 by rpki-client