$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft File: 35D619733A3D3A776B2D5FB84305186B942E249A.mft (raw, json) Hash identifier: ZmZMV2eQtli2SF846UyIb2Ae9bYl92Qj8BTYMvKtU+k= Subject key identifier: 52:F7:07:A5:B7:81:9C:59:4E:FB:C8:27:69:09:58:BF:D6:A1:A2:6C Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A Certificate issuer: /CN=35D619733A3D3A776B2D5FB84305186B942E249A Certificate serial: 4E64728075465E58DFA3778A0AD8E3E05443A2B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft Manifest number: 0102 Signing time: Sat 26 Jul 2025 19:02:09 +0000 Manifest this update: Sat 26 Jul 2025 18:57:09 +0000 Manifest next update: Fri 01 Aug 2025 10:14:09 +0000 Files and hashes: 1: 35D619733A3D3A776B2D5FB84305186B942E249A.crl (hash: fRmNQqSKyoxI8IK76jJw93VGSDrfrzwaA6BTUF94Krw=) 2: 3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa (hash: LY8m5iymGqWKvIirfivufBi5WC9W6dyP1Ast3ViSTKo=) 3: 3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa (hash: O6BnIOAS+8L0M3wsNqlmxFo8FVjSJjL+BMueCf7+jP4=) 4: 323830363a3230393a3a2f33322d3634203d3e20323635353031.roa (hash: nS1OJQh7flpXAeDVq3QSsIPGwMJxKtKknh6/2e/vaZQ=) 5: 323830363a3230393a3a2f33322d3634203d3e20323730313536.roa (hash: hZV1guPYhSmEJdBPb1pmv2tiE0YV74XhLiE3oneSZcs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 15:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:64:72:80:75:46:5e:58:df:a3:77:8a:0a:d8:e3:e0:54:43:a2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A Validity Not Before: Jul 26 18:57:09 2025 GMT Not After : Aug 1 10:14:09 2025 GMT Subject: CN=52F707A5B7819C594EFBC827690958BFD6A1A26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:5b:2e:1d:e0:11:26:5d:2d:74:06:85:a0: 06:1b:e5:cb:c5:30:bd:f3:f9:47:bd:63:27:5e:5a: 1a:a3:db:91:4d:ce:f2:f0:56:6a:b8:0c:e3:35:4e: 45:78:00:f5:0f:5b:78:f0:37:57:a8:8f:22:ff:52: 9d:be:19:05:5e:5e:9c:46:f4:b9:f6:26:b1:e0:33: 1c:ef:37:22:0c:01:bf:3e:6c:d1:86:f9:d6:e6:f4: 4d:93:74:c0:fe:6a:6a:88:c8:d5:0b:5d:68:2f:08: 5e:d1:2e:f6:5b:41:2e:05:43:a4:cf:f5:18:ee:82: d0:0f:75:c1:7c:64:c8:fa:32:32:f1:99:3b:d7:5c: 2a:47:97:60:d1:09:85:27:ed:05:05:ce:e4:5a:06: d0:b1:e8:9b:4a:f2:fc:f3:ac:83:a5:c5:49:19:81: 5d:ff:89:66:9c:86:04:82:ec:09:22:3f:72:d0:84: 9e:18:46:c1:16:3a:96:ae:6b:90:73:6f:00:f3:28: 1c:73:56:6d:f8:0e:98:98:91:b8:a7:68:3b:11:77: 42:1b:35:88:3e:41:d7:c6:87:bf:51:2d:90:80:11: f7:97:1d:a2:e9:ca:33:1c:0a:cb:d4:ca:66:eb:2b: d5:dc:7f:f4:d5:90:86:58:e2:f0:ad:ab:d3:9b:37: ff:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F7:07:A5:B7:81:9C:59:4E:FB:C8:27:69:09:58:BF:D6:A1:A2:6C X509v3 Authority Key Identifier: keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:11:88:2d:2e:58:22:bf:8b:e9:7a:31:03:97:6a:fd:42:75: e4:8e:45:a4:16:56:d9:67:ff:60:2c:0a:88:04:fa:ec:88:25: 93:44:e6:df:5b:d0:25:7d:96:43:55:92:26:30:81:62:d8:f4: bc:2e:d4:c6:7b:15:ce:ba:35:25:27:5a:3e:37:d4:be:2f:db: 8b:ff:b7:ba:06:ba:98:b3:b6:ac:da:fd:f7:93:2e:28:0b:ab: 9d:3c:4b:e7:15:37:8f:07:73:26:c9:ec:cd:58:74:e5:a8:57: 81:40:1e:df:fe:50:77:80:25:93:44:27:8a:40:43:69:3d:5c: 06:8d:51:b8:7c:28:ea:0c:90:90:4e:2d:ee:34:e0:16:5f:f5: 7e:7d:58:6f:5a:a1:95:a4:56:fc:b8:17:1c:ed:10:05:d6:9c: 2a:c4:4a:9d:96:07:05:1c:fd:21:7a:89:1e:d7:b8:33:94:b6: 6e:68:a2:f0:66:db:3a:2b:f8:79:26:54:43:9c:01:b7:63:06: c0:c5:d8:f7:8e:4d:ac:80:c5:5b:50:89:7d:d5:00:ed:d6:fa: 94:c0:18:f8:f4:b9:28:16:64:32:90:13:a7:22:b0:0b:ee:a5: e7:26:b6:c3:ba:59:06:3c:38:a3:e3:ec:40:20:3f:71:0d:af: 64:13:9f:a1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTmRygHVGXljfo3eKCtjj4FRDorEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVENjE5NzMzQTNEM0E3NzZCMkQ1RkI4NDMwNTE4NkI5 NDJFMjQ5QTAeFw0yNTA3MjYxODU3MDlaFw0yNTA4MDExMDE0MDlaMDMxMTAvBgNV BAMTKDUyRjcwN0E1Qjc4MTlDNTk0RUZCQzgyNzY5MDk1OEJGRDZBMUEyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6alsuHeARJl0tdAaFoAYb5cvF ML3z+Ue9YydeWhqj25FNzvLwVmq4DOM1TkV4APUPW3jwN1eojyL/Up2+GQVeXpxG 9Ln2JrHgMxzvNyIMAb8+bNGG+dbm9E2TdMD+amqIyNULXWgvCF7RLvZbQS4FQ6TP 9RjugtAPdcF8ZMj6MjLxmTvXXCpHl2DRCYUn7QUFzuRaBtCx6JtK8vzzrIOlxUkZ gV3/iWachgSC7AkiP3LQhJ4YRsEWOpaua5BzbwDzKBxzVm34DpiYkbinaDsRd0Ib NYg+QdfGh79RLZCAEfeXHaLpyjMcCsvUymbrK9Xcf/TVkIZY4vCtq9ObN//TAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUUvcHpbeBnFlO+8gnaQlYv9ahomwwHwYDVR0j BBgwFoAUNdYZczo9OndrLV+4QwUYa5QuJJowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkM5QjBEQzA1QUZBQjdFQ0IzQTM3OUREQzZENTFDNTQ4 RDNBNzExRDlDMTA0NjJGMkI2QUJDMUU3NUUxMDE5LzAvMzVENjE5NzMzQTNEM0E3 NzZCMkQ1RkI4NDMwNTE4NkI5NDJFMjQ5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUQ2MTk3MzNBM0QzQTc3NkIy RDVGQjg0MzA1MTg2Qjk0MkUyNDlBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZDOUIwREMwNUFGQUI3RUNCM0EzNzlEREM2RDUxQzU0OEQzQTcxMUQ5 QzEwNDYyRjJCNkFCQzFFNzVFMTAxOS8wLzM1RDYxOTczM0EzRDNBNzc2QjJENUZC ODQzMDUxODZCOTQyRTI0OUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/EYgtLlgiv4vpejEDl2r9QnXk jkWkFlbZZ/9gLAqIBPrsiCWTRObfW9AlfZZDVZImMIFi2PS8LtTGexXOujUlJ1o+ N9S+L9uL/7e6BrqYs7as2v33ky4oC6udPEvnFTePB3MmyezNWHTlqFeBQB7f/lB3 gCWTRCeKQENpPVwGjVG4fCjqDJCQTi3uNOAWX/V+fVhvWqGVpFb8uBcc7RAF1pwq xEqdlgcFHP0heoke17gzlLZuaKLwZts6K/h5JlRDnAG3YwbAxdj3jk2sgMVbUIl9 1QDt1vqUwBj49LkoFmQykBOnIrAL7qXnJrbDulkGPDij4+xAID9xDa9kE5+h -----END CERTIFICATE-----Generated at Sun Jul 27 06:11:12 2025 by rpki-client