$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft File: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft (raw, json) Hash identifier: FOOvxLIP3Tqac70ut8ixbFvjpDoAOooj9DHuuyEc9/c= Subject key identifier: 97:AA:66:0E:F2:BB:2A:2F:07:76:04:05:49:AB:7E:E1:11:F2:CA:B6 Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2 Certificate issuer: /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2 Certificate serial: 3086D329553D3138D5468D2D2D31C62EAA6E9B84 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft Manifest number: FB Signing time: Sat 19 Jul 2025 22:59:42 +0000 Manifest this update: Sat 19 Jul 2025 22:54:42 +0000 Manifest next update: Thu 24 Jul 2025 14:41:42 +0000 Files and hashes: 1: 291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl (hash: bjgq3oNMDvWdCjfaQr9lpJ0daPPzXhhSofpP/vCldaE=) 2: 34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa (hash: 4VUCnUrOTEFJUAMerXLjzJe+4pxzRGbnHxoBswqshlY=) 3: 323830363a3330633a3a2f33322d3438203d3e20323730313733.roa (hash: JRsnL/EF5Mvh3uIexqf/lKD0Frgj2yJLic8Lrr5SfrE=) 4: 323830363a3330633a3a2f33322d3332203d3e203238343431.roa (hash: vIOhJjECWzttZKOV+dVCoi9TcFOasaJL+FAuiQqhZoY=) 5: 34352e3136342e3130382e302f32322d3234203d3e203238343431.roa (hash: FZ/ToJSDVA+/z6gj7agzP3+M2/gq86aV54y856+5jAs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Jul 2025 19:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:86:d3:29:55:3d:31:38:d5:46:8d:2d:2d:31:c6:2e:aa:6e:9b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2 Validity Not Before: Jul 19 22:54:42 2025 GMT Not After : Jul 24 14:41:42 2025 GMT Subject: CN=97AA660EF2BB2A2F0776040549AB7EE111F2CAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:c7:56:fc:62:27:4b:dc:a7:ea:8d:1a:e4: 97:c4:26:8c:03:f3:96:a6:a0:86:c8:06:c6:dd:28: 20:d6:4f:d1:ff:84:08:7f:89:c4:46:66:2d:44:a5: dd:01:4a:7f:b2:f1:6a:33:76:70:06:7a:8a:72:f5: 83:70:33:20:30:ef:82:8e:cb:64:02:d8:30:a1:c5: 8f:59:f3:b3:e7:1e:a7:63:24:b7:89:fa:4d:28:d2: 20:2e:91:4b:1b:2a:8a:92:b3:8a:22:2b:f1:85:e7: 57:23:91:32:c9:a9:d7:65:65:42:7b:9b:d0:ba:7d: a9:e5:94:19:c2:41:dd:0e:de:90:5e:a6:15:e4:86: f4:74:19:d2:c7:f6:0b:41:c9:e3:58:83:70:a4:16: ef:99:e1:68:fe:b1:cd:5a:19:50:06:bd:42:33:17: 65:54:53:27:98:aa:7d:6d:6d:10:65:40:c4:1a:e6: 7a:e7:d2:c8:2e:de:dc:1f:96:9b:89:29:6d:8b:10: ca:8f:1f:2c:db:06:67:19:b2:f1:be:99:f9:13:ef: 43:75:f2:df:a9:2b:d5:b2:64:dd:07:d4:62:93:51: cd:88:bb:97:f5:95:77:25:6e:f8:3b:4b:27:44:05: 39:d1:64:ef:6a:e0:0b:08:1b:e1:a5:26:10:5c:1a: c0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AA:66:0E:F2:BB:2A:2F:07:76:04:05:49:AB:7E:E1:11:F2:CA:B6 X509v3 Authority Key Identifier: keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cc:48:58:4d:fe:a5:e2:05:73:6a:13:62:b7:e0:ef:6f:4b: 8f:c2:94:81:8f:fd:9f:3f:02:e8:66:57:ea:ea:7e:2b:7b:d8: 1d:17:a1:b9:e9:fe:60:97:94:5b:44:04:ec:1e:8e:2c:d7:28: 59:3d:79:46:74:3c:16:8a:00:99:d3:93:11:b1:5b:ef:db:bc: d8:3d:e4:59:f3:48:90:bd:f8:a2:2d:ca:83:0e:61:c3:e4:da: 02:e0:13:37:e2:0e:87:ae:07:cf:44:88:ae:5f:1f:a8:06:75: 4f:a6:d9:cb:5a:68:5b:31:cd:85:7e:7d:32:06:aa:92:ee:17: fe:2d:82:fa:2f:fb:37:8a:24:f5:5d:67:6d:54:48:77:20:82: 85:98:d4:cb:34:55:b5:db:ae:04:d8:50:25:f6:39:98:55:a6: d6:8d:ca:ee:f1:93:73:b8:a7:40:12:ce:7a:a8:99:2f:6e:43: 2c:6b:22:51:42:a2:91:89:eb:b9:ae:45:81:55:45:36:d4:cb: e2:fe:64:c4:49:47:9e:0c:f2:88:74:b6:cc:8f:eb:40:99:ca: 4e:a1:6e:4e:00:c1:3e:20:cc:d5:17:02:aa:e4:1b:89:fd:16: 19:7a:a6:fe:d5:c9:2f:51:bc:cd:9c:a1:10:98:e0:1b:bf:e1: f0:a1:e9:78 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMIbTKVU9MTjVRo0tLTHGLqpum4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkxQkYyNjRFM0RGQkUyOUE1RDUyQUUyNENFMTI0M0RG NkYzOThDMjAeFw0yNTA3MTkyMjU0NDJaFw0yNTA3MjQxNDQxNDJaMDMxMTAvBgNV BAMTKDk3QUE2NjBFRjJCQjJBMkYwNzc2MDQwNTQ5QUI3RUUxMTFGMkNBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksMdW/GInS9yn6o0a5JfEJowD 85amoIbIBsbdKCDWT9H/hAh/icRGZi1Epd0BSn+y8WozdnAGeopy9YNwMyAw74KO y2QC2DChxY9Z87PnHqdjJLeJ+k0o0iAukUsbKoqSs4oiK/GF51cjkTLJqddlZUJ7 m9C6fanllBnCQd0O3pBephXkhvR0GdLH9gtByeNYg3CkFu+Z4Wj+sc1aGVAGvUIz F2VUUyeYqn1tbRBlQMQa5nrn0sgu3twflpuJKW2LEMqPHyzbBmcZsvG+mfkT70N1 8t+pK9WyZN0H1GKTUc2Iu5f1lXclbvg7SydEBTnRZO9q4AsIG+GlJhBcGsARAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUl6pmDvK7Ki8HdgQFSat+4RHyyrYwHwYDVR0j BBgwFoAUKRvyZOPfviml1SriTOEkPfbzmMIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRkE3NzEzNzdBMzUzMDgxODg4MURDMjIyNjcwNUE1OEIx OTVCRDZFQzAzNTEwMzgyMTE3RTkyRUU5NjFEM0E5LzAvMjkxQkYyNjRFM0RGQkUy OUE1RDUyQUUyNENFMTI0M0RGNkYzOThDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTFCRjI2NEUzREZCRTI5QTVE NTJBRTI0Q0UxMjQzREY2RjM5OEMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0ZBNzcxMzc3QTM1MzA4MTg4ODFEQzIyMjY3MDVBNThCMTk1QkQ2RUMw MzUxMDM4MjExN0U5MkVFOTYxRDNBOS8wLzI5MUJGMjY0RTNERkJFMjlBNUQ1MkFF MjRDRTEyNDNERjZGMzk4QzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFzEhYTf6l4gVzahNit+Dvb0uP wpSBj/2fPwLoZlfq6n4re9gdF6G56f5gl5RbRATsHo4s1yhZPXlGdDwWigCZ05MR sVvv27zYPeRZ80iQvfiiLcqDDmHD5NoC4BM34g6HrgfPRIiuXx+oBnVPptnLWmhb Mc2Ffn0yBqqS7hf+LYL6L/s3iiT1XWdtVEh3IIKFmNTLNFW1264E2FAl9jmYVabW jcru8ZNzuKdAEs56qJkvbkMsayJRQqKRieu5rkWBVUU21Mvi/mTESUeeDPKIdLbM j+tAmcpOoW5OAME+IMzVFwKq5BuJ/RYZeqb+1ckvUbzNnKEQmOAbv+Hwoel4 -----END CERTIFICATE-----Generated at Sun Jul 20 19:09:16 2025 by rpki-client