$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft File: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft (raw, json) Hash identifier: i9xRXTtsrRczd6LMAFG3MzUIeBPj2F//crMOvMj4NhM= Subject key identifier: A7:BC:CC:30:02:32:B7:A5:60:7A:33:EB:34:16:30:67:8F:D2:C4:63 Authority key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 Certificate issuer: /CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Certificate serial: 763865CA5A9DDF4C0441B54BB03157617ACF5418 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft Manifest number: 0100 Signing time: Mon 28 Jul 2025 17:36:52 +0000 Manifest this update: Mon 28 Jul 2025 17:31:52 +0000 Manifest next update: Sun 03 Aug 2025 17:00:52 +0000 Files and hashes: 1: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl (hash: cOTBIQ27esrU4EJoM+ESO6EU/iU3UxOYNqCx+N1INbs=) 2: 34352e3137302e3132382e302f32322d3234203d3e203631353132.roa (hash: APOmoNKTFye/WKny8Moj2ePsiAP8sSxzy/Nk1SfzBZc=) 3: 323830333a386261303a3a2f33322d3430203d3e203631353132.roa (hash: KfhwmNkUX722XLKGo9HfzZHmGemaga5VvyUW9EoQpLk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:38:65:ca:5a:9d:df:4c:04:41:b5:4b:b0:31:57:61:7a:cf:54:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Validity Not Before: Jul 28 17:31:52 2025 GMT Not After : Aug 3 17:00:52 2025 GMT Subject: CN=A7BCCC300232B7A5607A33EB341630678FD2C463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:96:65:01:75:0e:dc:f7:7e:9e:e7:09:71: 19:ef:38:eb:8b:bc:b3:6f:b3:5a:30:db:4d:90:69: 30:db:ff:67:a7:4e:dd:00:3a:ad:7c:97:52:d4:5c: 7a:28:75:4a:f7:6e:5c:d0:88:3c:6e:ad:85:ad:ab: 02:12:e8:cc:0b:a2:02:ba:32:78:68:51:2c:28:16: 23:6e:d7:9e:a4:ca:94:8b:c3:84:95:4d:50:d8:9e: 64:75:f0:09:5f:fe:44:60:68:dc:b1:be:c5:85:0f: a1:f1:3f:71:60:64:82:44:c3:db:93:47:40:7e:36: d7:18:73:2b:1d:1a:b9:43:ab:c0:06:9b:0d:fd:b7: b5:6e:10:3c:ca:4d:9a:8a:4a:5f:b6:ad:c9:48:f2: 4a:4d:b4:e4:90:ca:65:a5:7e:43:09:17:fb:4e:44: 97:1e:2f:98:ee:0e:45:87:a7:50:9b:1e:3b:b1:e9: af:66:b5:ff:ed:3e:39:b9:cd:ea:b2:1b:ad:98:bc: 53:c1:c7:28:88:64:21:dd:23:8f:2e:df:e4:84:f6: 52:81:3b:98:cf:77:f8:76:14:af:df:65:35:30:21: 85:85:45:60:71:9e:a4:2d:f4:0f:80:da:60:14:1a: 82:de:73:29:8e:c8:31:d0:bd:20:5f:6c:d9:0f:b4: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BC:CC:30:02:32:B7:A5:60:7A:33:EB:34:16:30:67:8F:D2:C4:63 X509v3 Authority Key Identifier: keyid:34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2d:fd:9f:0b:fc:ce:63:39:9b:b7:56:3f:47:b9:e4:fb:e1: d3:c4:d3:56:3f:20:a5:f1:6a:2a:03:df:39:c2:b4:f8:9e:a3: ce:ff:69:e2:99:99:7c:75:be:4e:8b:04:df:32:b9:41:c7:c8: d7:0a:5b:8e:36:37:4c:21:69:3d:f6:31:51:f7:ee:92:e4:3f: f7:67:cd:1e:26:69:7e:db:fe:1d:f1:03:c6:2a:4e:0c:06:f8: 55:65:65:18:e0:f6:f7:56:55:ac:1a:aa:c8:6a:be:f8:ff:a9: b4:04:ba:f5:fe:a5:6b:10:09:b0:ff:36:2b:80:be:56:50:57: ab:dc:82:2e:29:dd:db:2a:28:95:7b:e1:25:df:4b:15:df:bc: 61:ad:7c:c4:dd:78:98:5c:cc:e3:b7:07:0d:16:6d:b2:74:fa: d3:9f:ec:5a:fb:c2:86:4f:2c:af:0b:7e:8f:29:9b:93:08:7d: 98:31:6b:0d:67:5a:5a:be:0a:43:98:c0:0b:9c:b6:d3:5d:4f: 1e:5a:69:88:4b:2d:57:df:6c:29:a8:84:19:b1:05:94:bc:34: 88:9e:65:52:6c:51:4c:8d:82:2f:1a:cd:49:5d:38:9a:60:b8: 27:92:5d:42:a4:e5:f7:a7:6d:7b:a3:f1:35:83:be:47:8a:aa: 3e:20:d2:13 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdjhlylqd30wEQbVLsDFXYXrPVBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0OERFQjZCNEYw MkJERkJDNzAeFw0yNTA3MjgxNzMxNTJaFw0yNTA4MDMxNzAwNTJaMDMxMTAvBgNV BAMTKEE3QkNDQzMwMDIzMkI3QTU2MDdBMzNFQjM0MTYzMDY3OEZEMkM0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqR5ZlAXUO3Pd+nucJcRnvOOuL vLNvs1ow202QaTDb/2enTt0AOq18l1LUXHoodUr3blzQiDxurYWtqwIS6MwLogK6 MnhoUSwoFiNu156kypSLw4SVTVDYnmR18Alf/kRgaNyxvsWFD6HxP3FgZIJEw9uT R0B+NtcYcysdGrlDq8AGmw39t7VuEDzKTZqKSl+2rclI8kpNtOSQymWlfkMJF/tO RJceL5juDkWHp1CbHjux6a9mtf/tPjm5zeqyG62YvFPBxyiIZCHdI48u3+SE9lKB O5jPd/h2FK/fZTUwIYWFRWBxnqQt9A+A2mAUGoLecymOyDHQvSBfbNkPtCvjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUp7zMMAIyt6VgejPrNBYwZ4/SxGMwHwYDVR0j BBgwFoAUNHLh/xgYlir7na1EjetrTwK9+8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1 MTFBREE2NTBEQzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYy QUZCOURBRDQ0OERFQjZCNEYwMkJERkJDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDcyRTFGRjE4MTg5NjJBRkI5 REFENDQ4REVCNkI0RjAyQkRGQkM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0NTAwRjYzRkU3NTExQURBNjUw REMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzM0NzJFMUZGMTgxODk2MkFGQjlEQUQ0 NDhERUI2QjRGMDJCREZCQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCLf2fC/zOYzmbt1Y/R7nk++HT xNNWPyCl8WoqA985wrT4nqPO/2nimZl8db5OiwTfMrlBx8jXCluONjdMIWk99jFR 9+6S5D/3Z80eJml+2/4d8QPGKk4MBvhVZWUY4Pb3VlWsGqrIar74/6m0BLr1/qVr EAmw/zYrgL5WUFer3IIuKd3bKiiVe+El30sV37xhrXzE3XiYXMzjtwcNFm2ydPrT n+xa+8KGTyyvC36PKZuTCH2YMWsNZ1pavgpDmMALnLbTXU8eWmmISy1X32wpqIQZ sQWUvDSInmVSbFFMjYIvGs1JXTiaYLgnkl1CpOX3p217o/E1g75Hiqo+INIT -----END CERTIFICATE-----Generated at Thu Jul 31 10:07:58 2025 by rpki-client