$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft File: 9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft (raw, json) Hash identifier: lChyYYaxPr6L1dte6rEf/QObcBibcRnpJYLATgFNuoI= Subject key identifier: 5B:54:12:42:C9:18:F6:48:DA:60:D4:AA:36:AC:7D:38:09:55:12:7D Authority key identifier: 9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84 Certificate issuer: /CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184 Certificate serial: 34A2D98D5574F6785D9705B30EAFCD45CA109584 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft Manifest number: 0102 Signing time: Sat 26 Jul 2025 18:11:37 +0000 Manifest this update: Sat 26 Jul 2025 18:06:37 +0000 Manifest next update: Fri 01 Aug 2025 13:48:37 +0000 Files and hashes: 1: 9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl (hash: pJyZbD6vLpR1jOcOQ1mG8BsOnWqZjpvoTAb+fV4RWhQ=) 2: 3230302e35392e3138312e302f32342d3234203d3e203237393934.roa (hash: g7woRsm4w1nNWHdXyzzdlHbEwbTXPVqsgXhT9PZsZf4=) 3: 3230302e35392e3138322e302f32332d3234203d3e203237393934.roa (hash: pzAVPYRNyds2b6akfDquQEivC6XGrbvLxp8hLv6EZ2k=) 4: 3230302e35392e3137362e302f32322d3234203d3e203237393934.roa (hash: mtf66X4GBdNz78K5tV6LHwlpI3KnMSDFzDp/Ifl3Et8=) 5: 3230302e35392e3138302e302f32342d3234203d3e203237393934.roa (hash: vm+wSC/c/onsBWzngN+erAqy8IieiIkQsFD8I4HbEjM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 15:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a2:d9:8d:55:74:f6:78:5d:97:05:b3:0e:af:cd:45:ca:10:95:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184 Validity Not Before: Jul 26 18:06:37 2025 GMT Not After : Aug 1 13:48:37 2025 GMT Subject: CN=5B541242C918F648DA60D4AA36AC7D380955127D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:6a:de:76:db:9f:6a:66:b9:23:4d:41:e7: b3:1c:05:9a:b3:07:f4:35:cd:21:fe:1b:cc:95:5d: 5b:fb:7a:d3:59:4f:1f:31:75:8b:3f:27:9e:7e:93: 5a:04:97:04:06:b5:0e:3b:39:ee:a5:64:fb:41:3a: 66:c1:97:1e:4c:a0:e7:a7:f8:23:f1:70:b7:9a:95: 35:3d:ca:9a:00:b9:fe:ca:cb:00:8e:da:2f:5a:74: 3b:e9:30:49:f8:7d:c9:27:f6:25:4b:94:fd:ed:87: 63:47:cb:9b:24:53:a8:92:4c:7f:24:5d:99:b0:e7: d6:46:e1:18:b6:03:56:d6:41:af:16:0b:61:37:f1: 73:fa:e8:1d:a7:f3:5c:4a:0e:c0:5b:b5:36:30:40: 6c:54:8a:d8:27:66:69:20:94:d5:3f:c7:55:78:4e: 4b:96:18:38:97:f6:16:91:f1:ae:d3:2c:49:f9:2c: f5:12:42:88:20:3b:30:be:22:43:9d:57:f8:d4:24: c7:ff:93:1a:af:3b:e3:fb:c3:b5:61:2d:3a:63:17: f6:01:8d:5a:b4:15:06:10:ea:ed:b3:0f:e5:ee:ae: b5:9b:9a:93:a8:b0:f3:5c:25:7f:c1:c2:00:4d:d7: 56:06:71:06:7d:df:ee:50:02:d8:5b:21:4d:76:86: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:12:42:C9:18:F6:48:DA:60:D4:AA:36:AC:7D:38:09:55:12:7D X509v3 Authority Key Identifier: keyid:9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:61:4b:3e:d0:32:51:83:fc:9b:44:cb:77:20:b0:03:2b:79: fa:38:2c:77:db:f3:f5:4a:a1:73:f1:79:94:eb:fe:1f:53:b3: 74:37:91:e1:a1:d6:3e:d0:ce:6c:ed:83:bc:2f:37:2a:60:35: 17:f3:6c:9f:7f:17:2a:cf:3e:0f:75:e7:b5:53:39:d7:4b:f5: b8:85:17:79:c8:94:97:a4:59:87:a4:f9:16:13:05:77:b9:69: 75:a1:b8:5e:4a:a6:25:8b:9a:89:36:7a:e4:e6:6c:1b:91:13: 61:5d:ed:32:e0:5b:f2:8d:3f:37:3e:ec:85:c7:3b:8a:5f:0a: 52:6b:c8:d5:ac:8d:de:4d:8c:e7:2c:27:02:de:04:d3:86:47: 3a:82:57:13:47:ea:0e:a9:3d:3e:66:50:48:54:cd:95:a4:55: 6b:c1:1e:21:84:bf:9e:06:8b:d0:39:bf:7d:b2:3e:a9:aa:d6: 80:e9:9f:8f:52:ba:31:27:ed:49:3d:31:76:e0:91:97:af:9b: 6f:63:41:90:a2:94:b7:ed:86:83:f1:7a:bc:1b:d5:df:bd:8d: a0:af:23:09:f1:d9:f7:af:ba:af:5a:fc:88:a7:57:4c:86:52: 3c:2c:ae:e3:61:fb:8f:0d:f9:a9:ad:55:e6:4c:65:ef:e2:59: cf:9b:e3:57 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNKLZjVV09nhdlwWzDq/NRcoQlYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0QUMyMEYzOENDQjdFM0U1RTlDODNFNTU0MEQzRDE3 RkNDMDE4NDAeFw0yNTA3MjYxODA2MzdaFw0yNTA4MDExMzQ4MzdaMDMxMTAvBgNV BAMTKDVCNTQxMjQyQzkxOEY2NDhEQTYwRDRBQTM2QUM3RDM4MDk1NTEyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC792redtufama5I01B57McBZqz B/Q1zSH+G8yVXVv7etNZTx8xdYs/J55+k1oElwQGtQ47Oe6lZPtBOmbBlx5MoOen +CPxcLealTU9ypoAuf7KywCO2i9adDvpMEn4fckn9iVLlP3th2NHy5skU6iSTH8k XZmw59ZG4Ri2A1bWQa8WC2E38XP66B2n81xKDsBbtTYwQGxUitgnZmkglNU/x1V4 TkuWGDiX9haR8a7TLEn5LPUSQoggOzC+IkOdV/jUJMf/kxqvO+P7w7VhLTpjF/YB jVq0FQYQ6u2zD+XurrWbmpOosPNcJX/BwgBN11YGcQZ93+5QAthbIU12hoFZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUW1QSQskY9kjaYNSqNqx9OAlVEn0wHwYDVR0j BBgwFoAUmkrCDzjMt+Pl6cg+VUDT0X/MAYQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQTI0QjQyOTEwMzU2M0JEMEI3RDI3QTI0NzkzNzg1REQ4 RDE4MzNCMEI0QjBBRTQwQjhBNUY4QzE2MUU5NDdFLzAvOUE0QUMyMEYzOENDQjdF M0U1RTlDODNFNTU0MEQzRDE3RkNDMDE4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTRBQzIwRjM4Q0NCN0UzRTVF OUM4M0U1NTQwRDNEMTdGQ0MwMTg0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUEyNEI0MjkxMDM1NjNCRDBCN0QyN0EyNDc5Mzc4NUREOEQxODMzQjBC NEIwQUU0MEI4QTVGOEMxNjFFOTQ3RS8wLzlBNEFDMjBGMzhDQ0I3RTNFNUU5Qzgz RTU1NDBEM0QxN0ZDQzAxODQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByYUs+0DJRg/ybRMt3ILADK3n6 OCx32/P1SqFz8XmU6/4fU7N0N5HhodY+0M5s7YO8LzcqYDUX82yffxcqzz4Pdee1 UznXS/W4hRd5yJSXpFmHpPkWEwV3uWl1obheSqYli5qJNnrk5mwbkRNhXe0y4Fvy jT83PuyFxzuKXwpSa8jVrI3eTYznLCcC3gTThkc6glcTR+oOqT0+ZlBIVM2VpFVr wR4hhL+eBovQOb99sj6pqtaA6Z+PUroxJ+1JPTF24JGXr5tvY0GQopS37YaD8Xq8 G9XfvY2gryMJ8dn3r7qvWvyIp1dMhlI8LK7jYfuPDfmprVXmTGXv4lnPm+NX -----END CERTIFICATE-----Generated at Sat Jul 26 20:44:26 2025 by rpki-client