$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft File: C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft (raw, json) Hash identifier: XmGp+6MBxjlF+L36P5l4PjymPLhjKWT1puofpS8Yfd4= Subject key identifier: C9:A9:5D:E6:C0:AE:2B:94:93:46:C3:6F:0A:CF:22:84:C4:6C:7E:A3 Authority key identifier: C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB Certificate issuer: /CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB Certificate serial: 1AAFF58CBF3444BEF9FFB97A860B48E0B282C65D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft Manifest number: 9C Signing time: Tue 29 Jul 2025 05:29:40 +0000 Manifest this update: Tue 29 Jul 2025 05:24:40 +0000 Manifest next update: Sun 03 Aug 2025 20:00:40 +0000 Files and hashes: 1: C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl (hash: vHQZjER8Xe63ezvryKGniy8T9OMXrk6/Ed5YsZXlFj4=) 2: 3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa (hash: Pd2ExO8abuZnvqYUZ0WPU7FO5B0yKkXxgkX9ENnMtqQ=) 3: 3138312e3130332e36382e302f32342d3332203d3e20323733383534.roa (hash: qu4XnH2LNLKqZdzMaN/XxCY6a1kKtnrMAbZYdDRe2xc=) 4: 323830333a313535303a3a2f33322d3438203d3e20323733383534.roa (hash: TEicY60GOr1oerg9vrz2DNwkX/XFJ5yLl3FlNrUpXL8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:af:f5:8c:bf:34:44:be:f9:ff:b9:7a:86:0b:48:e0:b2:82:c6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB Validity Not Before: Jul 29 05:24:40 2025 GMT Not After : Aug 3 20:00:40 2025 GMT Subject: CN=C9A95DE6C0AE2B949346C36F0ACF2284C46C7EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:d7:a0:33:82:e3:bd:e3:71:b0:8b:42:8c: 05:4b:ba:44:cb:17:70:ea:b9:9f:0e:f5:50:55:4a: 32:bb:fe:60:27:38:ba:fe:b9:1d:cc:16:ef:84:1b: 29:4a:c5:54:7e:41:ef:05:3f:84:94:74:ea:e3:b5: da:ff:b6:3e:87:5d:0d:fd:f0:31:5f:3b:f9:c4:a4: 49:df:5c:e0:1e:25:7b:de:49:a6:3d:28:8d:78:ea: 5f:14:03:03:cf:37:95:c0:98:07:62:38:36:75:10: 1a:ec:fe:8a:f4:2b:da:e6:af:24:5c:44:df:34:63: dc:d5:6e:1b:cf:2d:d0:99:61:77:86:10:d4:d1:58: 5b:b6:68:49:02:43:5b:03:86:4c:ec:ba:3a:a4:53: 29:d7:c6:13:6c:b3:cc:74:64:1f:ae:0a:bc:93:7b: 25:23:23:a0:6d:1d:49:af:3e:db:9c:dd:fe:06:33: 00:98:3f:c5:b1:68:62:6a:97:b7:50:2a:9f:fa:fe: 47:79:6d:d5:f2:6e:df:88:8b:72:34:ad:73:17:d1: cf:c4:87:f5:a0:9f:33:5c:d4:7f:26:b4:ae:39:9c: c4:f2:0b:fb:27:b3:7d:47:bb:57:0b:2a:66:73:b7: 69:60:3d:26:9f:61:c8:fa:9c:a0:d3:5b:ec:ec:a9: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A9:5D:E6:C0:AE:2B:94:93:46:C3:6F:0A:CF:22:84:C4:6C:7E:A3 X509v3 Authority Key Identifier: keyid:C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0f:29:3d:4d:44:d7:2f:86:2d:53:cf:da:1d:58:2f:3b:99: 42:70:5e:aa:2f:5a:cc:3a:24:a8:1c:8b:19:8c:74:aa:22:4e: 5f:02:75:cd:9d:30:85:4f:36:71:95:54:5f:8a:26:f4:5b:ba: 12:a0:b4:44:07:35:4d:e3:b5:09:39:bf:b4:41:00:94:f4:1f: ce:b0:6b:15:3e:a9:8d:bf:56:52:de:24:3d:d3:7e:2a:59:8c: fa:11:24:69:f8:5c:b1:31:ec:4c:0f:3e:46:61:26:24:56:c0: 1e:43:92:87:13:98:ee:0d:62:fa:69:3f:ec:0f:05:70:8e:5a: ea:dd:12:65:08:f5:50:cf:66:ea:b1:17:0b:72:fc:43:0b:35: d9:98:7e:21:fc:f9:f4:30:1c:39:ae:64:c1:6b:fc:ef:8f:f4: b0:61:db:bd:42:58:8f:80:fd:d1:96:ec:ce:0d:df:57:96:0d: 4f:08:0b:30:e3:f2:c4:17:0d:5a:83:64:0b:7a:bd:a0:39:93: f8:c5:03:ee:88:5e:9d:04:15:9e:39:5c:cb:45:72:83:08:26: 33:03:b2:99:f4:3c:1a:60:63:dc:3a:d9:01:09:71:bb:96:c3: 14:6f:58:bf:1a:9f:82:bd:4a:f9:e0:c2:ec:9f:ac:3a:83:23: 8e:d9:b3:75 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGq/1jL80RL75/7l6hgtI4LKCxl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQyOEEzRDA1NzVGOEUzRENGQUUxQUEzQ0M3OTM5MjI0 N0M4N0ZEQjAeFw0yNTA3MjkwNTI0NDBaFw0yNTA4MDMyMDAwNDBaMDMxMTAvBgNV BAMTKEM5QTk1REU2QzBBRTJCOTQ5MzQ2QzM2RjBBQ0YyMjg0QzQ2QzdFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjdegM4LjveNxsItCjAVLukTL F3DquZ8O9VBVSjK7/mAnOLr+uR3MFu+EGylKxVR+Qe8FP4SUdOrjtdr/tj6HXQ39 8DFfO/nEpEnfXOAeJXveSaY9KI146l8UAwPPN5XAmAdiODZ1EBrs/or0K9rmryRc RN80Y9zVbhvPLdCZYXeGENTRWFu2aEkCQ1sDhkzsujqkUynXxhNss8x0ZB+uCryT eyUjI6BtHUmvPtuc3f4GMwCYP8WxaGJql7dQKp/6/kd5bdXybt+Ii3I0rXMX0c/E h/WgnzNc1H8mtK45nMTyC/sns31Hu1cLKmZzt2lgPSafYcj6nKDTW+zsqXi7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyald5sCuK5STRsNvCs8ihMRsfqMwHwYDVR0j BBgwFoAUxCij0Fdfjj3PrhqjzHk5IkfIf9swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDQyREI1Q0Y3RDNDNDBCODAzMDg4QkUzODU3MkQ5RDUw RDg1N0M1ODgzQUUyMkVBRDkwNkZDRjM3NDY4OTU5LzAvQzQyOEEzRDA1NzVGOEUz RENGQUUxQUEzQ0M3OTM5MjI0N0M4N0ZEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNDI4QTNEMDU3NUY4RTNEQ0ZB RTFBQTNDQzc5MzkyMjQ3Qzg3RkRCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTA0MkRCNUNGN0QzQzQwQjgwMzA4OEJFMzg1NzJEOUQ1MEQ4NTdDNTg4 M0FFMjJFQUQ5MDZGQ0YzNzQ2ODk1OS8wL0M0MjhBM0QwNTc1RjhFM0RDRkFFMUFB M0NDNzkzOTIyNDdDODdGREIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiDyk9TUTXL4YtU8/aHVgvO5lC cF6qL1rMOiSoHIsZjHSqIk5fAnXNnTCFTzZxlVRfiib0W7oSoLREBzVN47UJOb+0 QQCU9B/OsGsVPqmNv1ZS3iQ9034qWYz6ESRp+FyxMexMDz5GYSYkVsAeQ5KHE5ju DWL6aT/sDwVwjlrq3RJlCPVQz2bqsRcLcvxDCzXZmH4h/Pn0MBw5rmTBa/zvj/Sw Ydu9QliPgP3RluzODd9Xlg1PCAsw4/LEFw1ag2QLer2gOZP4xQPuiF6dBBWeOVzL RXKDCCYzA7KZ9DwaYGPcOtkBCXG7lsMUb1i/Gp+CvUr54MLsn6w6gyOO2bN1 -----END CERTIFICATE-----Generated at Thu Jul 31 10:07:05 2025 by rpki-client