$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft File: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft (raw, json) Hash identifier: 5/Hp9UkxFVvH5G8NYwA44xwcC13XFGj5AALupgCYAxc= Subject key identifier: 59:3A:08:91:E6:CF:0D:E2:DA:58:22:CA:D1:94:05:A6:F1:FB:52:E1 Authority key identifier: 65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2 Certificate issuer: /CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2 Certificate serial: 0EA9D1F07AC234CF18820BB5066888070CE3345D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft Manifest number: C1 Signing time: Wed 30 Jul 2025 13:24:11 +0000 Manifest this update: Wed 30 Jul 2025 13:19:11 +0000 Manifest next update: Mon 04 Aug 2025 14:16:11 +0000 Files and hashes: 1: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl (hash: ieRhqK/Xb6x3fAqQqF/xBTxpDQ0Qvb/yz7FuBZozCo4=) 2: 34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa (hash: u7SE5LWZJmCpnVyryY58woPlAbt1cGNdxLoYQJyfGrw=) 3: 323830333a373936303a3a2f33322d3438203d3e20323639373438.roa (hash: MN/4RtlE9d+DnKy0U12QHBIdBSJFq+lAXrFHgivrrPc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a9:d1:f0:7a:c2:34:cf:18:82:0b:b5:06:68:88:07:0c:e3:34:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2 Validity Not Before: Jul 30 13:19:11 2025 GMT Not After : Aug 4 14:16:11 2025 GMT Subject: CN=593A0891E6CF0DE2DA5822CAD19405A6F1FB52E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:58:4d:4c:bf:c3:00:2a:60:f6:8e:b2:37: 73:de:26:30:0d:ad:15:30:d3:a0:72:86:46:f3:37: 11:11:86:22:ae:ac:c9:1f:3d:2a:b1:50:1a:be:23: 01:ae:cd:c1:f8:3d:c9:75:cb:85:f1:42:6f:ce:ed: 90:0a:ef:86:d4:4a:a4:28:d4:7d:34:95:61:3b:8e: f3:2d:c8:81:d4:ef:bb:a7:94:e5:b1:56:65:b6:eb: 44:cd:09:13:8a:06:6d:54:be:ae:2f:2c:10:6f:1b: 01:4e:22:ea:bf:7b:21:a8:4e:2d:d3:44:7a:b2:4f: 29:3e:be:8d:63:cf:3d:97:18:13:f2:9a:8c:61:9a: 5f:ca:5b:75:4a:fb:07:6b:30:c6:39:f4:e1:dc:7b: c5:16:63:cb:42:04:2d:69:0b:50:f3:66:6a:1c:a3: 85:e5:2a:d9:d2:2f:f1:e6:5e:9d:9c:a1:0f:4d:eb: 44:f7:18:94:1d:f3:a5:74:b1:82:d5:66:b7:b9:e4: 05:81:75:20:b3:ca:de:ae:f8:37:57:0c:4c:ab:ca: e8:f6:72:09:c7:64:fc:1e:75:b4:0b:c7:06:b9:35: ac:f2:d6:26:f0:28:27:35:90:73:85:69:67:77:e3: 95:f1:6d:2b:9d:b8:71:3b:f2:c0:f8:ef:76:a7:6d: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:08:91:E6:CF:0D:E2:DA:58:22:CA:D1:94:05:A6:F1:FB:52:E1 X509v3 Authority Key Identifier: keyid:65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3f:95:a5:f0:d1:97:4b:23:c3:46:e1:6e:d5:af:8a:4e:ed: b1:eb:4b:a2:36:66:c1:27:29:02:b8:76:4c:73:e3:13:2d:9b: da:60:9f:dc:40:e5:7e:59:b7:c9:42:fd:e3:9d:95:d5:5c:a1: f8:bb:38:28:04:ca:18:28:32:00:fd:28:99:e5:43:e9:43:a0: ca:2e:24:b3:de:58:be:95:70:16:fe:4f:9f:27:22:8c:29:65: 36:dc:50:d6:9b:f6:d8:e4:7a:35:dc:9e:4f:76:3c:2b:36:21: 47:d6:be:b3:c4:6b:8a:e8:56:ea:0a:44:f4:59:8f:d2:a1:b8: 76:fa:44:73:b9:ce:bb:b6:a9:82:df:46:fe:4a:14:cc:c7:2b: 98:21:0c:28:eb:94:fd:84:f3:c3:e1:24:a0:22:7a:38:8a:69: dc:4a:90:12:dc:04:81:71:40:ad:34:be:94:bb:f0:b5:f2:7c: da:e6:4e:ae:2a:8d:90:07:4d:be:41:a2:e5:80:d3:ea:c0:fb: 58:d1:20:d1:0e:1e:b0:e7:83:0a:d6:cd:de:ae:a9:2d:e6:bb: 9f:0c:b1:6b:a5:a4:da:e4:52:a2:ab:81:15:5d:da:ca:87:ac: 5f:45:8e:c8:44:37:a3:f6:85:6d:cc:a2:ef:0f:f4:ae:f0:fd: 76:69:30:e2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDqnR8HrCNM8Yggu1BmiIBwzjNF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVENTQzNjg4QzgyQ0M4MEVENjhERjJBOTM0NDFDMjk1 QzlGQTNFMjAeFw0yNTA3MzAxMzE5MTFaFw0yNTA4MDQxNDE2MTFaMDMxMTAvBgNV BAMTKDU5M0EwODkxRTZDRjBERTJEQTU4MjJDQUQxOTQwNUE2RjFGQjUyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl51hNTL/DACpg9o6yN3PeJjAN rRUw06ByhkbzNxERhiKurMkfPSqxUBq+IwGuzcH4Pcl1y4XxQm/O7ZAK74bUSqQo 1H00lWE7jvMtyIHU77unlOWxVmW260TNCROKBm1Uvq4vLBBvGwFOIuq/eyGoTi3T RHqyTyk+vo1jzz2XGBPymoxhml/KW3VK+wdrMMY59OHce8UWY8tCBC1pC1DzZmoc o4XlKtnSL/HmXp2coQ9N60T3GJQd86V0sYLVZre55AWBdSCzyt6u+DdXDEyryuj2 cgnHZPwedbQLxwa5Nazy1ibwKCc1kHOFaWd345XxbSuduHE78sD473anbaHPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUWToIkebPDeLaWCLK0ZQFpvH7UuEwHwYDVR0j BBgwFoAUZdVDaIyCzIDtaN8qk0QcKVyfo+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDNCQzA2NjdDRDY2RTcwODQ4MDdEN0NFNTgyNzIzMkYz RkQxQzlFMkFFMDRENjlEMTlBMjI3OEZGRDIzMjZCLzAvNjVENTQzNjg4QzgyQ0M4 MEVENjhERjJBOTM0NDFDMjk1QzlGQTNFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUQ1NDM2ODhDODJDQzgwRUQ2 OERGMkE5MzQ0MUMyOTVDOUZBM0UyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQzQkMwNjY3Q0Q2NkU3MDg0ODA3RDdDRTU4MjcyMzJGM0ZEMUM5RTJB RTA0RDY5RDE5QTIyNzhGRkQyMzI2Qi8wLzY1RDU0MzY4OEM4MkNDODBFRDY4REYy QTkzNDQxQzI5NUM5RkEzRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSP5Wl8NGXSyPDRuFu1a+KTu2x 60uiNmbBJykCuHZMc+MTLZvaYJ/cQOV+WbfJQv3jnZXVXKH4uzgoBMoYKDIA/SiZ 5UPpQ6DKLiSz3li+lXAW/k+fJyKMKWU23FDWm/bY5Ho13J5PdjwrNiFH1r6zxGuK 6FbqCkT0WY/Sobh2+kRzuc67tqmC30b+ShTMxyuYIQwo65T9hPPD4SSgIno4imnc SpAS3ASBcUCtNL6Uu/C18nza5k6uKo2QB02+QaLlgNPqwPtY0SDRDh6w54MK1s3e rqkt5rufDLFrpaTa5FKiq4EVXdrKh6xfRY7IRDej9oVtzKLvD/Su8P12aTDi -----END CERTIFICATE-----Generated at Thu Jul 31 10:03:50 2025 by rpki-client