$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft File: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json) Hash identifier: dFyQi7mBO8UJvFiyj1K7c776ZWdnU32gcmpAKxtb41g= Subject key identifier: 4D:4C:23:3A:90:F7:FB:13:8D:D9:26:9C:70:A0:A2:42:2F:68:49:6F Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A Certificate issuer: /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Certificate serial: 5430484C175BC5F9EB0097CB95E5876CCEDA9541 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft Manifest number: 0101 Signing time: Wed 23 Jul 2025 05:32:46 +0000 Manifest this update: Wed 23 Jul 2025 05:27:46 +0000 Manifest next update: Sun 27 Jul 2025 20:46:46 +0000 Files and hashes: 1: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=) 2: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=) 3: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=) 4: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=) 5: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=) 6: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: Wpmq6k/LtYagylACytwogVp5eCH4M3vsRUGyuZGd+H8=) 7: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 15:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:30:48:4c:17:5b:c5:f9:eb:00:97:cb:95:e5:87:6c:ce:da:95:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Validity Not Before: Jul 23 05:27:46 2025 GMT Not After : Jul 27 20:46:46 2025 GMT Subject: CN=4D4C233A90F7FB138DD9269C70A0A2422F68496F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:5b:3c:e2:22:7c:fc:fc:81:9a:3e:9c:9e: f2:3a:13:bb:d5:8b:64:18:7c:0e:52:5c:d6:67:d4: 48:f8:97:76:9a:b1:73:fe:29:2d:8b:08:57:f8:76: 60:bb:c7:70:2e:31:d3:d1:76:8e:52:49:2e:39:19: 7f:7c:b2:7e:41:22:e5:72:5f:ff:ea:0e:8e:1a:20: 48:35:2a:73:8d:83:8e:70:ea:29:2c:e2:27:56:00: 03:02:65:14:76:30:8e:e4:1a:63:e4:8b:e4:28:95: 41:08:46:53:9b:ed:e0:eb:6c:a5:14:b0:30:d2:c0: 85:fd:2b:8e:4b:de:2d:61:2e:0b:62:a7:1f:3e:cc: 29:1f:4f:35:68:67:a4:b4:af:87:d3:14:74:2c:07: 85:26:cb:8f:26:03:fb:5d:6b:5d:94:80:79:3b:29: ed:51:1f:ca:3d:b3:14:4d:2c:66:be:a0:b9:95:4a: b6:e5:02:5a:a7:5c:71:ec:1f:28:3f:5b:70:cb:0e: 75:72:41:ad:fb:36:52:f6:5b:3d:88:97:27:ab:fc: dc:57:4b:09:01:57:53:c4:25:66:80:3a:c3:40:d8: 27:b8:fa:3b:c2:5a:50:a6:d3:c9:1c:db:79:42:da: 66:8f:bc:dc:8b:8f:d6:f6:df:f1:49:a7:68:f8:ac: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4C:23:3A:90:F7:FB:13:8D:D9:26:9C:70:A0:A2:42:2F:68:49:6F X509v3 Authority Key Identifier: keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f7:46:23:96:dd:81:4f:34:3a:e8:2d:8c:b7:1b:a2:fd:da: 70:9a:58:ce:4f:66:77:7b:4e:94:a5:47:7d:36:9b:a2:5c:5b: b7:ef:ec:ff:cc:06:a1:1b:52:43:d5:b7:7e:15:37:53:2c:c0: a6:ab:6d:cc:61:07:dc:2d:15:be:d7:49:da:ad:72:02:6c:b0: 92:b9:77:b8:9d:94:8a:7f:9e:57:8d:4a:2b:e2:3f:82:f6:86: a5:f6:2c:38:d6:7c:14:f7:ea:bc:ff:f9:d9:57:07:c0:fe:17: 43:e0:31:a0:85:7d:69:d0:90:95:05:c3:c2:80:65:0c:ff:94: 83:0b:63:99:1d:85:78:59:be:67:11:93:ba:a6:a5:61:a0:55: df:41:51:af:0e:7f:08:96:fa:a0:ef:7c:c8:fc:07:33:0e:72: 4e:d8:03:78:56:27:c7:af:ff:e5:6c:dc:87:7f:fa:c4:c7:ff: a8:3e:6b:c6:b5:25:ea:6d:c0:cc:e1:85:68:38:c5:13:54:d1: 5b:1c:c8:e2:0b:a3:ae:8a:43:89:c5:ea:93:36:ea:e9:ac:07: e0:d3:6f:6f:52:28:d1:b0:1f:56:5d:d7:43:09:c7:14:b6:75: 95:f6:56:80:50:68:2a:d6:93:9a:5b:22:18:9e:ba:88:37:b4: d3:57:f4:79 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVDBITBdbxfnrAJfLleWHbM7alUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdGMDREQ0NEN0M1 QzI2NDA2QTAeFw0yNTA3MjMwNTI3NDZaFw0yNTA3MjcyMDQ2NDZaMDMxMTAvBgNV BAMTKDRENEMyMzNBOTBGN0ZCMTM4REQ5MjY5QzcwQTBBMjQyMkY2ODQ5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs81s84iJ8/PyBmj6cnvI6E7vV i2QYfA5SXNZn1Ej4l3aasXP+KS2LCFf4dmC7x3AuMdPRdo5SSS45GX98sn5BIuVy X//qDo4aIEg1KnONg45w6iks4idWAAMCZRR2MI7kGmPki+QolUEIRlOb7eDrbKUU sDDSwIX9K45L3i1hLgtipx8+zCkfTzVoZ6S0r4fTFHQsB4Umy48mA/tda12UgHk7 Ke1RH8o9sxRNLGa+oLmVSrblAlqnXHHsHyg/W3DLDnVyQa37NlL2Wz2Ilyer/NxX SwkBV1PEJWaAOsNA2Ce4+jvCWlCm08kc23lC2maPvNyLj9b23/FJp2j4rKpdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTUwjOpD3+xON2SaccKCiQi9oSW8wHwYDVR0j BBgwFoAUJfKO8ND5OlKLNeB/BNzNfFwmQGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQy M0FEQzQyOEE5NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1 MjhCMzVFMDdGMDREQ0NEN0M1QzI2NDA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUYyOEVGMEQwRjkzQTUyOEIz NUUwN0YwNERDQ0Q3QzVDMjY0MDZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlFMEUyQjUwM0U0MjNBREM0MjhB OTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzI1RjI4RUYwRDBGOTNBNTI4QjM1RTA3 RjA0RENDRDdDNUMyNjQwNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBE90Yjlt2BTzQ66C2Mtxui/dpw mljOT2Z3e06UpUd9NpuiXFu37+z/zAahG1JD1bd+FTdTLMCmq23MYQfcLRW+10na rXICbLCSuXe4nZSKf55XjUor4j+C9oal9iw41nwU9+q8//nZVwfA/hdD4DGghX1p 0JCVBcPCgGUM/5SDC2OZHYV4Wb5nEZO6pqVhoFXfQVGvDn8Ilvqg73zI/AczDnJO 2AN4VifHr//lbNyHf/rEx/+oPmvGtSXqbcDM4YVoOMUTVNFbHMjiC6OuikOJxeqT NurprAfg029vUijRsB9WXddDCccUtnWV9laAUGgq1pOaWyIYnrqIN7TTV/R5 -----END CERTIFICATE-----Generated at Wed Jul 23 13:00:27 2025 by rpki-client