$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft File: C3210E1056A6F03E5EBAE928296A603EC46256F1.mft (raw, json) Hash identifier: bGTp4I1DmpeqWwwS/3sSBJlB3/c/PO11mnzV0YzqFNg= Subject key identifier: D6:53:34:61:47:AD:48:4B:8F:AD:DB:96:DC:90:B9:05:60:5B:F3:68 Authority key identifier: C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1 Certificate issuer: /CN=C3210E1056A6F03E5EBAE928296A603EC46256F1 Certificate serial: 61BB20257122A2589DEABFE5C4B21953BDAA8875 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft Manifest number: F8 Signing time: Tue 01 Jul 2025 20:02:26 +0000 Manifest this update: Tue 01 Jul 2025 19:57:26 +0000 Manifest next update: Mon 07 Jul 2025 13:37:26 +0000 Files and hashes: 1: 34352e3138352e3230342e302f32322d3235203d3e20323730303730.roa (hash: ErhQBJyUlBMuhJlb4Bf+Qt+SSONqDViPbMje1gKzDDA=) 2: 323830333a396636303a3a2f33322d3332203d3e20323730303730.roa (hash: 8mVwNlBfQa6sIyuvbEfafzwpC0AbrrRGBvwuKewEQoE=) 3: C3210E1056A6F03E5EBAE928296A603EC46256F1.crl (hash: qyEqI8HB9hJ2LAm0dGPyReNW3nkv4BLtVk7GQ8bEI4Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.crl rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Jul 2025 02:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:bb:20:25:71:22:a2:58:9d:ea:bf:e5:c4:b2:19:53:bd:aa:88:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3210E1056A6F03E5EBAE928296A603EC46256F1 Validity Not Before: Jul 1 19:57:26 2025 GMT Not After : Jul 7 13:37:26 2025 GMT Subject: CN=D653346147AD484B8FADDB96DC90B905605BF368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:aa:a4:55:7f:12:2d:63:95:d7:47:55:f2: 23:46:e7:c3:6a:36:84:12:88:10:9c:36:ec:9f:e3: f0:c1:b9:23:6e:0e:92:92:a7:4b:2a:cb:43:4d:2a: 7b:66:86:d1:3c:4f:91:ec:2d:ba:cb:0f:9f:87:44: c8:d2:ea:15:40:bd:78:90:33:ea:22:26:97:39:55: a2:1a:55:b8:a2:c1:48:7e:4d:41:eb:d5:f3:87:38: 7a:e0:ac:5e:b9:68:55:45:d8:ab:0c:cb:ce:12:11: 43:46:a0:5d:31:37:6c:11:87:1f:1a:98:4b:98:29: 90:10:b8:f1:98:b5:93:a4:03:40:7e:8c:7c:8f:4c: c6:cc:b4:57:3b:d0:71:6d:03:09:1a:ed:ad:ae:7e: cf:cf:fa:11:3a:0a:84:06:2b:42:04:0f:dc:ab:9a: 35:17:36:9a:7d:de:0e:f1:98:05:e4:d9:d9:8c:97: 38:fe:5f:60:65:50:ce:94:13:48:82:68:f5:46:c1: ee:fd:33:f6:8c:fc:e5:6a:b2:f6:87:5c:97:75:81: 3c:ff:62:06:13:db:59:20:f5:bb:0c:ed:a0:09:4e: 38:a9:16:d3:60:25:2a:86:7a:27:9c:52:74:5a:f5: 65:d6:49:af:fa:34:0e:28:94:01:1b:4b:97:26:c3: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:53:34:61:47:AD:48:4B:8F:AD:DB:96:DC:90:B9:05:60:5B:F3:68 X509v3 Authority Key Identifier: keyid:C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0b:f7:eb:70:a7:12:12:c8:59:17:77:f7:63:19:64:c8:9a: ec:94:08:4c:27:2a:04:e9:90:a4:0f:ec:c0:2d:00:95:c1:cf: df:e8:2e:33:e7:c1:b4:c6:2a:ca:81:d5:af:26:68:d4:2a:e0: 13:67:25:b5:32:e5:35:78:72:74:05:b0:ec:84:9f:ce:a7:0c: 9f:e8:07:02:1b:46:11:e0:71:af:45:77:7f:c4:40:ed:9e:5d: c6:ef:fc:2a:ab:55:3f:1e:e2:4e:4a:e0:68:69:47:76:b5:fb: 20:e5:5c:c7:f1:ac:9a:9d:ba:b8:4a:08:df:25:5c:8f:f3:7a: c3:d8:c1:da:ae:e0:0f:32:34:52:1e:15:9d:8c:1b:04:90:da: 9a:65:af:b2:57:c7:79:42:dc:3e:42:0a:72:79:3c:fc:b5:0f: 8b:df:46:7a:80:92:53:87:0a:f8:3a:21:8c:fa:80:20:ff:4c: 15:0a:17:ac:31:4c:ee:dd:ff:f0:fd:5e:97:3e:ce:2c:d8:f3: c5:85:62:ce:26:59:8c:b4:6f:44:bd:c4:4a:43:f7:33:8e:91: 15:f3:b7:d5:8d:d7:3d:29:76:00:3d:c2:1e:47:8a:66:1e:9b: aa:a8:35:5b:d2:f8:be:a0:8a:35:bb:fb:06:13:8a:1f:dc:93: 6f:51:d3:f2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUYbsgJXEiolid6r/lxLIZU72qiHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMyMTBFMTA1NkE2RjAzRTVFQkFFOTI4Mjk2QTYwM0VD NDYyNTZGMTAeFw0yNTA3MDExOTU3MjZaFw0yNTA3MDcxMzM3MjZaMDMxMTAvBgNV BAMTKEQ2NTMzNDYxNDdBRDQ4NEI4RkFEREI5NkRDOTBCOTA1NjA1QkYzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADaqkVX8SLWOV10dV8iNG58Nq NoQSiBCcNuyf4/DBuSNuDpKSp0sqy0NNKntmhtE8T5HsLbrLD5+HRMjS6hVAvXiQ M+oiJpc5VaIaVbiiwUh+TUHr1fOHOHrgrF65aFVF2KsMy84SEUNGoF0xN2wRhx8a mEuYKZAQuPGYtZOkA0B+jHyPTMbMtFc70HFtAwka7a2ufs/P+hE6CoQGK0IED9yr mjUXNpp93g7xmAXk2dmMlzj+X2BlUM6UE0iCaPVGwe79M/aM/OVqsvaHXJd1gTz/ YgYT21kg9bsM7aAJTjipFtNgJSqGeiecUnRa9WXWSa/6NA4olAEbS5cmwzIZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1lM0YUetSEuPrduW3JC5BWBb82gwHwYDVR0j BBgwFoAUwyEOEFam8D5euukoKWpgPsRiVvEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BMzU4RDE1QzlDMDRDMzlGMkRCQUNGQ0FFNkYyNDZCMDk3 RjJCRkQ4NDg5NkRFRTQ1RThBQjE4MDUyOTRDNzFGLzAvQzMyMTBFMTA1NkE2RjAz RTVFQkFFOTI4Mjk2QTYwM0VDNDYyNTZGMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzIxMEUxMDU2QTZGMDNFNUVC QUU5MjgyOTZBNjAzRUM0NjI1NkYxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTM1OEQxNUM5QzA0QzM5RjJEQkFDRkNBRTZGMjQ2QjA5N0YyQkZEODQ4 OTZERUU0NUU4QUIxODA1Mjk0QzcxRi8wL0MzMjEwRTEwNTZBNkYwM0U1RUJBRTky ODI5NkE2MDNFQzQ2MjU2RjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeC/frcKcSEshZF3f3YxlkyJrs lAhMJyoE6ZCkD+zALQCVwc/f6C4z58G0xirKgdWvJmjUKuATZyW1MuU1eHJ0BbDs hJ/Opwyf6AcCG0YR4HGvRXd/xEDtnl3G7/wqq1U/HuJOSuBoaUd2tfsg5VzH8aya nbq4SgjfJVyP83rD2MHaruAPMjRSHhWdjBsEkNqaZa+yV8d5Qtw+QgpyeTz8tQ+L 30Z6gJJThwr4OiGM+oAg/0wVChesMUzu3f/w/V6XPs4s2PPFhWLOJlmMtG9EvcRK Q/czjpEV87fVjdc9KXYAPcIeR4pmHpuqqDVb0vi+oIo1u/sGE4of3JNvUdPy -----END CERTIFICATE-----Generated at Wed Jul 2 01:42:00 2025 by rpki-client