$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft File: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft (raw, json) Hash identifier: yxy7ZN+f8MYWyT+YS/ysXVAIwSSwGf45X3dVsT/Henk= Subject key identifier: C8:EB:F9:99:79:9D:7A:8A:B7:0B:C3:35:CA:40:E0:4A:49:28:BD:21 Authority key identifier: 00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 Certificate issuer: /CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Certificate serial: 655EF5423F32B18E4EC5DF16EFA8BCB3E920E832 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft Manifest number: FB Signing time: Mon 21 Jul 2025 13:52:34 +0000 Manifest this update: Mon 21 Jul 2025 13:47:34 +0000 Manifest next update: Sun 27 Jul 2025 12:34:34 +0000 Files and hashes: 1: 34352e3136342e3137322e302f32322d3234203d3e20323637373035.roa (hash: yZWkzdnI2yE2GWAW0fR8ozyK+67wGcmDL/+BxkZFYOM=) 2: 00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl (hash: kqROt1E8MIZbSmrl3YV9lNMNnIqZ9iDYQePPtiU+GK0=) 3: 323830333a663161303a3a2f33322d3438203d3e20323637373035.roa (hash: Ndho+BhViPHLNULz7C2z55/V4iRAPugD06lZUvZ4mIY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5e:f5:42:3f:32:b1:8e:4e:c5:df:16:ef:a8:bc:b3:e9:20:e8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00FF295B939AD72589CE24B7E4ED41FC5C56A336 Validity Not Before: Jul 21 13:47:34 2025 GMT Not After : Jul 27 12:34:34 2025 GMT Subject: CN=C8EBF999799D7A8AB70BC335CA40E04A4928BD21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:55:7b:3f:4d:bf:12:50:80:72:79:ce:58: fa:1f:c7:54:fc:21:7a:41:40:99:9f:a4:b3:1a:d4: 6e:de:73:fe:54:28:3c:fa:6c:f9:e1:09:4d:be:9b: 83:48:b1:da:d8:91:57:cb:af:91:18:9b:bd:01:e2: 24:b6:fa:98:c5:43:f1:76:62:92:8d:ea:19:b9:db: 4d:77:da:10:17:bb:fa:45:3f:99:b5:13:a9:8f:c9: 49:15:0b:20:08:21:06:a4:1a:6d:bb:49:40:1e:b4: 8f:60:0e:29:77:04:60:3d:50:34:aa:e1:99:21:d8: 45:19:3d:c3:b5:f3:ce:b3:1d:ef:c7:08:9d:40:97: cb:f8:b6:bf:25:4c:ef:f2:f5:d6:ff:ec:91:f3:2f: 4e:1f:8e:31:7e:db:ba:66:ec:b1:8c:b1:28:1d:32: 00:be:78:67:87:f7:8b:63:ef:dc:ef:47:1f:a3:86: 03:ac:37:06:e6:08:b1:aa:fb:50:eb:2e:79:f1:95: 36:16:9d:19:72:6f:e0:b6:c0:c0:ea:0a:66:b7:79: 71:64:e6:e9:ca:12:43:c2:b0:22:be:ba:64:4e:b7: db:10:f1:8e:6a:ac:1c:5d:07:45:b5:87:85:e2:e7: 13:0d:a0:0e:b1:be:15:0b:77:52:36:ce:69:12:62: 24:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EB:F9:99:79:9D:7A:8A:B7:0B:C3:35:CA:40:E0:4A:49:28:BD:21 X509v3 Authority Key Identifier: keyid:00:FF:29:5B:93:9A:D7:25:89:CE:24:B7:E4:ED:41:FC:5C:56:A3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C35E9DF2C9E7ACDC5733C6AD9D4AFD4078EE5DEA55F9E620B54B4C501A21FCB/0/00FF295B939AD72589CE24B7E4ED41FC5C56A336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f8:14:18:84:19:26:78:ab:0d:34:82:56:3c:e1:bb:a0:2a: e8:0a:58:35:bc:56:dc:cc:27:88:3c:f0:15:61:40:4e:7f:fc: 50:9e:6f:7a:42:8a:d7:f9:97:90:1a:06:fb:73:c1:13:52:da: b2:12:01:54:fb:88:ab:88:b9:5a:f4:36:88:5b:c7:06:89:4c: ab:2c:69:f4:a0:e6:d5:09:2a:5e:87:78:ff:0f:25:95:c1:4f: cd:f7:8f:0f:73:b6:44:7b:2f:53:77:12:28:ab:25:05:4f:81: c9:01:76:ed:9f:76:f6:13:8d:26:ba:0c:be:64:0f:8b:00:53: 7b:80:00:d7:6a:c7:cc:02:90:72:71:7c:42:c9:7c:1e:4e:74: 26:67:73:d9:a5:06:47:8c:bb:15:80:33:39:53:5c:fa:e5:27: 02:ed:f2:1f:6c:2f:7e:35:5f:6b:ed:30:63:85:fb:e5:bc:96: cc:e5:19:34:22:54:9c:31:4a:09:97:ce:2f:69:fc:dd:50:78: e5:20:82:f1:44:77:61:a8:65:c8:ae:b0:14:c7:4d:78:b9:38: 7a:24:70:f6:c4:19:73:2f:d6:1e:8f:4e:32:53:7f:ee:5b:6a: 92:77:22:05:9e:49:47:52:5f:a3:49:9a:a8:08:d6:2b:7b:7e: b3:57:e7:b2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZV71Qj8ysY5Oxd8W76i8s+kg6DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGRjI5NUI5MzlBRDcyNTg5Q0UyNEI3RTRFRDQxRkM1 QzU2QTMzNjAeFw0yNTA3MjExMzQ3MzRaFw0yNTA3MjcxMjM0MzRaMDMxMTAvBgNV BAMTKEM4RUJGOTk5Nzk5RDdBOEFCNzBCQzMzNUNBNDBFMDRBNDkyOEJEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwPlV7P02/ElCAcnnOWPofx1T8 IXpBQJmfpLMa1G7ec/5UKDz6bPnhCU2+m4NIsdrYkVfLr5EYm70B4iS2+pjFQ/F2 YpKN6hm520132hAXu/pFP5m1E6mPyUkVCyAIIQakGm27SUAetI9gDil3BGA9UDSq 4Zkh2EUZPcO1886zHe/HCJ1Al8v4tr8lTO/y9db/7JHzL04fjjF+27pm7LGMsSgd MgC+eGeH94tj79zvRx+jhgOsNwbmCLGq+1DrLnnxlTYWnRlyb+C2wMDqCma3eXFk 5unKEkPCsCK+umROt9sQ8Y5qrBxdB0W1h4Xi5xMNoA6xvhULd1I2zmkSYiQpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyOv5mXmdeoq3C8M1ykDgSkkovSEwHwYDVR0j BBgwFoAUAP8pW5Oa1yWJziS35O1B/FxWozYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yQzM1RTlERjJDOUU3QUNEQzU3MzNDNkFEOUQ0QUZENDA3 OEVFNURFQTU1RjlFNjIwQjU0QjRDNTAxQTIxRkNCLzAvMDBGRjI5NUI5MzlBRDcy NTg5Q0UyNEI3RTRFRDQxRkM1QzU2QTMzNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEZGMjk1QjkzOUFENzI1ODlD RTI0QjdFNEVENDFGQzVDNTZBMzM2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkMzNUU5REYyQzlFN0FDREM1NzMzQzZBRDlENEFGRDQwNzhFRTVERUE1 NUY5RTYyMEI1NEI0QzUwMUEyMUZDQi8wLzAwRkYyOTVCOTM5QUQ3MjU4OUNFMjRC N0U0RUQ0MUZDNUM1NkEzMzYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBg+BQYhBkmeKsNNIJWPOG7oCro Clg1vFbczCeIPPAVYUBOf/xQnm96QorX+ZeQGgb7c8ETUtqyEgFU+4iriLla9DaI W8cGiUyrLGn0oObVCSpeh3j/DyWVwU/N948Pc7ZEey9TdxIoqyUFT4HJAXbtn3b2 E40mugy+ZA+LAFN7gADXasfMApBycXxCyXweTnQmZ3PZpQZHjLsVgDM5U1z65ScC 7fIfbC9+NV9r7TBjhfvlvJbM5Rk0IlScMUoJl84vafzdUHjlIILxRHdhqGXIrrAU x014uTh6JHD2xBlzL9Yej04yU3/uW2qSdyIFnklHUl+jSZqoCNYre36zV+ey -----END CERTIFICATE-----Generated at Tue Jul 22 00:04:11 2025 by rpki-client