$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft File: D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft (raw, json) Hash identifier: mcB0OKSadiZR/ozJAfXG6AavnnLAoLg5wQBHBKto2MI= Subject key identifier: 92:57:63:A1:78:CC:58:4D:90:4B:76:74:46:EA:06:C2:F0:1E:D3:E3 Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 Certificate issuer: /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Certificate serial: 540D61B05229552BF15C484E9BB2E605BC179445 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft Manifest number: F5 Signing time: Sat 05 Jul 2025 09:29:37 +0000 Manifest this update: Sat 05 Jul 2025 09:24:37 +0000 Manifest next update: Thu 10 Jul 2025 21:09:37 +0000 Files and hashes: 1: 3133312e302e3133362e302f32322d3232203d3e203631343637.roa (hash: hIcGTsTzrbpPkkDFPHDJ/vJiVZDkozy3mhBw4FInUkg=) 2: D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl (hash: p1NCJTmJ726S54sDhhxIgpB5aF7sRSQTbFgQl+JlB5k=) 3: 323830333a653538303a3a2f33322d3332203d3e203631343637.roa (hash: VPdQcvxY+Djypk/d3zIynnwjkLRuN2kmRMjzxd8Khgg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Jul 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0d:61:b0:52:29:55:2b:f1:5c:48:4e:9b:b2:e6:05:bc:17:94:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28 Validity Not Before: Jul 5 09:24:37 2025 GMT Not After : Jul 10 21:09:37 2025 GMT Subject: CN=925763A178CC584D904B767446EA06C2F01ED3E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:aa:ef:9a:2e:b3:78:e4:70:29:62:9a:65: b3:0a:84:9d:4a:bc:e9:88:e2:93:7b:e1:9f:cd:70: 2e:a8:25:78:2e:c5:e1:7a:b7:90:91:9a:b4:bc:3f: e8:9b:fe:2d:9d:c6:83:f2:6c:bf:1b:b2:e2:fe:3d: c0:2c:24:3a:f2:a0:be:9b:cf:74:a9:d5:e6:7a:bb: 4e:28:b1:5d:1e:1b:2d:70:b1:aa:24:1e:8d:e7:1c: 03:ee:a0:91:f8:31:04:57:71:25:c0:f1:3d:e2:bd: 7a:41:8e:3f:47:bb:0e:8d:e4:fe:9b:68:12:9d:29: 3f:3a:af:77:e9:cd:a9:ae:92:82:bb:44:b1:94:70: 94:b4:e8:ed:0e:5f:be:b6:dc:5a:b0:13:d0:53:47: 63:71:f9:9c:a1:c0:fb:6d:2a:c2:44:b1:a1:db:ce: 13:c5:53:1a:59:35:71:f5:30:38:45:5f:85:96:e1: 4e:13:e4:71:30:7e:3c:f6:9b:c7:5c:e8:f2:cc:64: 17:8e:e7:0f:30:02:a3:c5:31:b5:6d:94:a7:36:5c: c1:da:fa:15:91:85:35:ef:f1:d0:36:61:da:3d:9f: 7c:8a:af:17:ca:13:5a:e4:48:4f:73:cb:79:9f:31: f5:eb:64:67:21:f7:37:37:19:27:40:a6:16:cb:f9: e9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:57:63:A1:78:CC:58:4D:90:4B:76:74:46:EA:06:C2:F0:1E:D3:E3 X509v3 Authority Key Identifier: keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:80:80:ce:68:cc:c7:a4:df:19:f1:32:c6:ff:9a:68:9f:80: 3c:1b:1b:3c:9f:67:19:8a:b5:e4:4a:e9:ff:60:20:87:0a:ab: 80:c8:34:7d:74:64:fd:93:38:97:cb:0c:61:42:ef:f7:0a:20: 92:e7:fc:6f:18:fd:7a:2e:bd:94:ce:c6:96:a3:31:5e:1a:51: a2:c1:07:e1:36:31:be:40:22:7a:85:19:05:25:ac:c6:2e:b2: c9:87:e9:4a:2f:61:83:c4:a1:e0:40:bf:7e:55:3c:78:45:75: 42:0a:9c:c1:34:cf:52:aa:72:7f:12:ba:1e:68:ef:bb:d4:01: 4f:83:67:0a:51:c9:68:b9:a6:69:14:0d:6a:3f:ef:14:40:4a: 48:ff:ae:d4:f9:e8:03:46:14:8e:48:b4:cc:b9:15:ab:ac:ba: 8a:d0:97:fe:83:fc:91:e8:86:fa:f9:6c:bb:c5:bb:23:0a:24: c0:3e:f6:9a:bf:44:51:de:06:9b:d8:fb:6d:0d:4d:94:05:28: ae:4d:a3:82:29:4b:dc:5e:09:c1:d7:16:ca:18:ca:d3:9a:6f: 05:c8:33:c7:37:89:66:68:8a:d9:51:2f:a7:2f:42:52:35:ba: e5:9f:7f:3a:b6:95:1b:cf:b8:00:26:40:15:02:79:7b:b1:a5: 71:30:b7:cb -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVA1hsFIpVSvxXEhOm7LmBbwXlEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwODczNURDRkJENDQzOUYxRjYxQTYxNzlEQkU5MjBE ODZCMUUyODAeFw0yNTA3MDUwOTI0MzdaFw0yNTA3MTAyMTA5MzdaMDMxMTAvBgNV BAMTKDkyNTc2M0ExNzhDQzU4NEQ5MDRCNzY3NDQ2RUEwNkMyRjAxRUQzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYKqrvmi6zeORwKWKaZbMKhJ1K vOmI4pN74Z/NcC6oJXguxeF6t5CRmrS8P+ib/i2dxoPybL8bsuL+PcAsJDryoL6b z3Sp1eZ6u04osV0eGy1wsaokHo3nHAPuoJH4MQRXcSXA8T3ivXpBjj9Huw6N5P6b aBKdKT86r3fpzamukoK7RLGUcJS06O0OX7623FqwE9BTR2Nx+ZyhwPttKsJEsaHb zhPFUxpZNXH1MDhFX4WW4U4T5HEwfjz2m8dc6PLMZBeO5w8wAqPFMbVtlKc2XMHa +hWRhTXv8dA2Ydo9n3yKrxfKE1rkSE9zy3mfMfXrZGch9zc3GSdAphbL+emFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkldjoXjMWE2QS3Z0RuoGwvAe0+MwHwYDVR0j BBgwFoAU0whzXc+9RDnx9hphedvpINhrHigwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUY0MzdERDdEMTFGMjhDNTgzMjk1RjkzQjlDNTRDRkU5 ODAyNUNBREQyNzdBNTM2NEJDMDU2NzQ5NjE4ODY5LzAvRDMwODczNURDRkJENDQz OUYxRjYxQTYxNzlEQkU5MjBEODZCMUUyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzA4NzM1RENGQkQ0NDM5RjFG NjFBNjE3OURCRTkyMEQ4NkIxRTI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFGNDM3REQ3RDExRjI4QzU4MzI5NUY5M0I5QzU0Q0ZFOTgwMjVDQURE Mjc3QTUzNjRCQzA1Njc0OTYxODg2OS8wL0QzMDg3MzVEQ0ZCRDQ0MzlGMUY2MUE2 MTc5REJFOTIwRDg2QjFFMjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOgIDOaMzHpN8Z8TLG/5pon4A8 Gxs8n2cZirXkSun/YCCHCquAyDR9dGT9kziXywxhQu/3CiCS5/xvGP16Lr2UzsaW ozFeGlGiwQfhNjG+QCJ6hRkFJazGLrLJh+lKL2GDxKHgQL9+VTx4RXVCCpzBNM9S qnJ/EroeaO+71AFPg2cKUclouaZpFA1qP+8UQEpI/67U+egDRhSOSLTMuRWrrLqK 0Jf+g/yR6Ib6+Wy7xbsjCiTAPvaav0RR3gab2PttDU2UBSiuTaOCKUvcXgnB1xbK GMrTmm8FyDPHN4lmaIrZUS+nL0JSNbrln386tpUbz7gAJkAVAnl7saVxMLfL -----END CERTIFICATE-----Generated at Sat Jul 5 19:52:22 2025 by rpki-client