$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft File: 49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft (raw, json) Hash identifier: WVUID+5r9bv82VWPtkvZgnfyYotz+Jzt+acU5soNK2Y= Subject key identifier: 64:DC:CF:9F:FB:11:F6:16:D0:67:E4:79:9F:A0:A9:95:FC:67:D0:20 Authority key identifier: 49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0 Certificate issuer: /CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0 Certificate serial: 40A2073484BB55A08E884A938CA9775CE61B8CB1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft Manifest number: 0100 Signing time: Sun 20 Jul 2025 00:35:37 +0000 Manifest this update: Sun 20 Jul 2025 00:30:37 +0000 Manifest next update: Fri 25 Jul 2025 10:56:37 +0000 Files and hashes: 1: 49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl (hash: s667mlCT3iW5HO4G9e6hZh6MJ065cFz68nIp2OojVMk=) 2: 323830333a646135303a3a2f33322d3438203d3e20323733313836.roa (hash: 1ACYEiBdK7LX63KO1ztmTvv1FhWHFDGEL8tCAoGjnJ8=) 3: 34352e3233302e38362e302f32342d3234203d3e20323733313836.roa (hash: JK1Vni1hKHkzXSWZc80XHztPF971CcEyQvotu/x53z8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a2:07:34:84:bb:55:a0:8e:88:4a:93:8c:a9:77:5c:e6:1b:8c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0 Validity Not Before: Jul 20 00:30:37 2025 GMT Not After : Jul 25 10:56:37 2025 GMT Subject: CN=64DCCF9FFB11F616D067E4799FA0A995FC67D020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:40:6d:87:1a:ca:f2:77:60:02:8e:87:68: 58:39:0e:0c:c7:59:44:0e:ac:b7:a0:47:1c:b0:76: 0d:dd:a4:89:14:ba:11:bf:a5:fe:19:47:9a:e7:b3: 19:f1:65:5a:e1:35:a1:10:36:33:6c:b9:76:17:33: 0b:52:ac:f3:2c:77:cd:17:a3:95:9b:a7:9a:b5:f3: 67:78:48:34:a8:40:7d:33:c8:bb:1b:88:a0:bc:37: 76:03:5a:fa:c1:92:9a:13:e3:be:d2:78:4d:27:c9: db:cf:31:ee:28:09:28:46:1f:69:56:ab:ce:34:60: 33:80:d7:a1:46:d0:b0:bb:07:c3:56:7d:96:45:5d: c9:c5:d1:87:83:dc:47:58:91:45:43:e5:d3:7b:72: 16:e4:5b:ed:21:79:16:7f:93:f7:13:d5:cf:dd:ec: 2e:76:e5:c5:d7:ad:74:2d:90:e4:05:6e:ef:fc:3c: 58:99:c1:47:5b:af:bd:27:92:7a:89:b5:2f:70:cc: 90:dc:61:ff:08:31:6c:da:f8:6b:6f:ef:9c:2b:b2: 61:a1:9b:f3:00:d5:77:d8:0d:8c:e7:5e:64:04:bf: 65:e5:94:f1:96:e1:00:04:ae:07:c7:b5:27:7c:b2: 5b:85:d9:f2:be:af:5d:df:da:3e:c1:5b:18:71:3d: 89:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DC:CF:9F:FB:11:F6:16:D0:67:E4:79:9F:A0:A9:95:FC:67:D0:20 X509v3 Authority Key Identifier: keyid:49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d4:d4:bc:91:b3:c2:8c:a4:47:c0:af:d5:37:f4:8d:e1:1e: 52:b7:03:b7:62:c7:81:bf:81:b8:b4:b0:46:4b:07:42:23:48: 22:d9:69:b9:ec:bc:47:a4:1d:8c:81:7c:d6:b6:38:76:e9:e8: e2:7a:0a:ae:99:1e:27:63:0f:00:2d:f0:50:3c:ee:0c:94:5f: c1:0e:97:53:33:a4:9d:ea:14:04:b9:3a:a4:29:47:07:47:b5: 5c:1e:fd:24:fb:01:3d:0a:d1:4b:2f:12:e4:15:5a:c7:5e:eb: 9e:f5:0a:fa:6f:1f:4d:0f:dd:72:d9:84:88:6b:a4:f1:b2:62: 58:fd:6a:70:45:10:36:9e:cb:f1:af:48:45:66:34:0d:c7:20: 15:1c:30:25:ae:0f:33:1c:e0:c2:39:7f:b5:eb:1e:d2:b6:ca: 97:e8:18:be:1c:3d:76:e8:a3:79:86:8f:6d:96:7d:ef:c7:47: 83:69:72:d0:1f:c6:09:b0:00:73:c1:e5:0d:79:40:cc:9b:0f: 25:d5:7f:91:f0:f8:14:01:47:dc:9e:51:e8:3e:b8:68:b4:a1: 9a:39:53:98:e4:8f:da:17:c7:41:82:fc:c9:2a:66:53:3a:c8: 5f:c6:7b:fe:0f:6a:72:9d:e6:13:23:d3:54:d5:46:42:fa:8a: e8:ca:e5:95 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQKIHNIS7VaCOiEqTjKl3XOYbjLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlBRkU1RDNBRkMzNkU1MTA0RUQ0OUM3MTQ0RDkyMUM1 M0JBMkREMDAeFw0yNTA3MjAwMDMwMzdaFw0yNTA3MjUxMDU2MzdaMDMxMTAvBgNV BAMTKDY0RENDRjlGRkIxMUY2MTZEMDY3RTQ3OTlGQTBBOTk1RkM2N0QwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+EBthxrK8ndgAo6HaFg5DgzH WUQOrLegRxywdg3dpIkUuhG/pf4ZR5rnsxnxZVrhNaEQNjNsuXYXMwtSrPMsd80X o5Wbp5q182d4SDSoQH0zyLsbiKC8N3YDWvrBkpoT477SeE0nydvPMe4oCShGH2lW q840YDOA16FG0LC7B8NWfZZFXcnF0YeD3EdYkUVD5dN7chbkW+0heRZ/k/cT1c/d 7C525cXXrXQtkOQFbu/8PFiZwUdbr70nknqJtS9wzJDcYf8IMWza+Gtv75wrsmGh m/MA1XfYDYznXmQEv2XllPGW4QAErgfHtSd8sluF2fK+r13f2j7BWxhxPYn9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZNzPn/sR9hbQZ+R5n6Cplfxn0CAwHwYDVR0j BBgwFoAUSa/l06/DblEE7UnHFE2SHFO6LdAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NzIwNERERjlGOUFCQjVBNzUzNjVCODc1OTkyNDQwNkFB REE0RjQyN0E2OEMzQUM0MEE2NDg4NTFBOTU1NkEwLzAvNDlBRkU1RDNBRkMzNkU1 MTA0RUQ0OUM3MTQ0RDkyMUM1M0JBMkREMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OUFGRTVEM0FGQzM2RTUxMDRF RDQ5QzcxNDREOTIxQzUzQkEyREQwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzcyMDREREY5RjlBQkI1QTc1MzY1Qjg3NTk5MjQ0MDZBQURBNEY0MjdB NjhDM0FDNDBBNjQ4ODUxQTk1NTZBMC8wLzQ5QUZFNUQzQUZDMzZFNTEwNEVENDlD NzE0NEQ5MjFDNTNCQTJERDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAy1NS8kbPCjKRHwK/VN/SN4R5S twO3YseBv4G4tLBGSwdCI0gi2Wm57LxHpB2MgXzWtjh26ejiegqumR4nYw8ALfBQ PO4MlF/BDpdTM6Sd6hQEuTqkKUcHR7VcHv0k+wE9CtFLLxLkFVrHXuue9Qr6bx9N D91y2YSIa6TxsmJY/WpwRRA2nsvxr0hFZjQNxyAVHDAlrg8zHODCOX+16x7StsqX 6Bi+HD126KN5ho9tln3vx0eDaXLQH8YJsABzweUNeUDMmw8l1X+R8PgUAUfcnlHo PrhotKGaOVOY5I/aF8dBgvzJKmZTOshfxnv+D2pyneYTI9NU1UZC+oroyuWV -----END CERTIFICATE-----Generated at Mon Jul 21 12:56:48 2025 by rpki-client