$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: CD0I3wTCT98kRUGle8lfl3ITkU8nKRlYlAb7DqEGMgE= Subject key identifier: B2:40:E2:05:EA:AD:1F:CD:7B:6E:C0:1B:F3:71:2F:A5:D3:35:57:ED Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 09D117A733E5334DB6F87B81EFC5D1C4154EEDE3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: FD Signing time: Thu 24 Jul 2025 11:10:55 +0000 Manifest this update: Thu 24 Jul 2025 11:05:55 +0000 Manifest next update: Tue 29 Jul 2025 23:11:55 +0000 Files and hashes: 1: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=) 2: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=) 3: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: ie3cMJ/9sPI/3AdUO+bOj2vP10eVh/Zfwow7QTHV0Js=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 22:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d1:17:a7:33:e5:33:4d:b6:f8:7b:81:ef:c5:d1:c4:15:4e:ed:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: Jul 24 11:05:55 2025 GMT Not After : Jul 29 23:11:55 2025 GMT Subject: CN=B240E205EAAD1FCD7B6EC01BF3712FA5D33557ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:f0:b0:9c:85:67:79:89:43:0f:7e:80:b8: 94:a2:f8:d3:6a:6d:c8:2a:4c:16:e0:de:65:7d:c6: 26:07:7a:88:cf:63:9a:c5:47:29:4c:c4:14:0c:73: fb:60:f3:b6:df:ad:ad:09:cb:f9:ba:68:d3:6f:fe: 23:37:60:6d:e8:8c:93:e9:6e:d9:ce:7a:95:66:e5: 9e:26:8b:08:db:3d:82:60:91:24:e1:ef:b5:be:82: 73:77:2d:32:6a:68:94:74:0c:50:31:8a:5d:80:47: 2a:e7:fd:30:10:44:d8:4e:43:9b:51:fe:8b:50:6e: f4:9a:ac:21:08:0f:c5:e5:17:24:5a:75:77:45:b8: e3:75:2f:90:88:38:96:75:dc:11:cf:6f:4a:fc:f5: dc:4c:5f:ae:60:ea:d6:ca:c8:cf:c5:19:03:1a:1a: d8:c3:42:7d:2c:c1:ac:d8:02:d2:13:f8:6a:7f:df: ce:01:12:d5:57:aa:69:45:ff:0e:46:45:b1:3d:b9: e8:e8:8a:f1:20:8a:26:78:93:5d:5c:8f:2e:ca:3f: 9a:34:ae:3a:ca:a8:8a:8c:d6:4a:57:ca:f7:58:81: 91:7e:04:ee:31:92:b1:a9:a1:2d:dc:33:fd:07:89: 74:69:f8:c1:03:27:ff:eb:78:f7:b7:fb:ea:d6:04: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:40:E2:05:EA:AD:1F:CD:7B:6E:C0:1B:F3:71:2F:A5:D3:35:57:ED X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:67:21:6b:5f:c1:01:6a:a4:dd:1f:f7:1d:cb:4d:55:73:52: 70:e7:fb:06:29:19:ae:99:e8:e1:89:78:43:6a:ad:47:3e:81: ad:52:eb:83:4a:fc:72:71:a2:03:21:75:fe:a6:3b:30:85:4b: 4c:4c:49:89:8b:cf:d9:c0:79:bd:76:a8:55:97:09:dc:9a:5e: 6e:58:a7:7c:f3:41:50:40:ec:da:70:db:0a:ac:32:45:33:d1: a1:39:ff:2e:a1:24:0f:51:fb:6e:87:33:fe:37:f4:35:50:0b: f8:b3:90:c1:cb:f8:42:67:ac:49:37:8f:13:13:b0:8b:a7:7e: af:3a:09:c1:32:62:0a:a6:0f:aa:23:fe:4e:79:fd:36:61:be: ca:b5:68:ed:24:ca:bc:94:e5:4b:7d:73:fa:47:f4:f6:9c:3f: 37:97:4b:a4:7b:db:b8:9b:a4:a6:86:72:cf:1e:0e:9c:fd:13: 16:77:dd:72:2f:86:a1:d5:5a:f0:e1:52:1e:1a:f2:99:c9:41: 52:eb:3a:24:43:bc:b6:d9:c9:83:5e:38:3b:d7:06:5b:19:7d: 01:84:55:04:1e:85:93:de:7b:7f:b0:69:d2:f8:49:57:59:6e: d5:57:23:11:fa:e9:f4:44:99:85:cd:77:28:8c:e0:7b:1f:c5: 0d:48:72:2a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCdEXpzPlM022+HuB78XRxBVO7eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNTA3MjQxMTA1NTVaFw0yNTA3MjkyMzExNTVaMDMxMTAvBgNV BAMTKEIyNDBFMjA1RUFBRDFGQ0Q3QjZFQzAxQkYzNzEyRkE1RDMzNTU3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNfCwnIVneYlDD36AuJSi+NNq bcgqTBbg3mV9xiYHeojPY5rFRylMxBQMc/tg87bfra0Jy/m6aNNv/iM3YG3ojJPp btnOepVm5Z4miwjbPYJgkSTh77W+gnN3LTJqaJR0DFAxil2ARyrn/TAQRNhOQ5tR /otQbvSarCEID8XlFyRadXdFuON1L5CIOJZ13BHPb0r89dxMX65g6tbKyM/FGQMa GtjDQn0swazYAtIT+Gp/384BEtVXqmlF/w5GRbE9uejoivEgiiZ4k11cjy7KP5o0 rjrKqIqM1kpXyvdYgZF+BO4xkrGpoS3cM/0HiXRp+MEDJ//rePe3++rWBLZJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUskDiBeqtH817bsAb83EvpdM1V+0wHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoZyFrX8EBaqTdH/cdy01Vc1Jw 5/sGKRmumejhiXhDaq1HPoGtUuuDSvxycaIDIXX+pjswhUtMTEmJi8/ZwHm9dqhV lwncml5uWKd880FQQOzacNsKrDJFM9GhOf8uoSQPUftuhzP+N/Q1UAv4s5DBy/hC Z6xJN48TE7CLp36vOgnBMmIKpg+qI/5Oef02Yb7KtWjtJMq8lOVLfXP6R/T2nD83 l0uke9u4m6SmhnLPHg6c/RMWd91yL4ah1Vrw4VIeGvKZyUFS6zokQ7y22cmDXjg7 1wZbGX0BhFUEHoWT3nt/sGnS+ElXWW7VVyMR+un0RJmFzXcojOB7H8UNSHIq -----END CERTIFICATE-----Generated at Fri Jul 25 12:55:04 2025 by rpki-client