$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft File: C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft (raw, json) Hash identifier: uzlhLzipk2/00PTOUJmpHJ42gfshu8PnUC5nhb222l8= Subject key identifier: 7A:5D:43:4F:1A:84:D3:24:AB:9E:A3:A6:CD:A5:B9:25:34:4E:B8:B6 Authority key identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34 Certificate issuer: /CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134 Certificate serial: 1C4B6C59852A74AD9DC1D8C540F93F92F9E8F6A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft Manifest number: FA Signing time: Tue 29 Jul 2025 05:09:26 +0000 Manifest this update: Tue 29 Jul 2025 05:04:26 +0000 Manifest next update: Mon 04 Aug 2025 02:54:26 +0000 Files and hashes: 1: 3137372e3230302e3233362e302f32332d3234203d3e20323730303333.roa (hash: iPZkMidbV6j7qs4Tb72Amx6IwnPxc0DSpDdNVkH9fFw=) 2: C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl (hash: U1FQS9AtTxqvEtoL4d6M75Cz3Kmcd0vh13qtvQo2zRE=) 3: 323830313a31353a323830303a3a2f34382d3438203d3e20323730303333.roa (hash: tMILc0tohyw7gwHf6b6U5pH4Ve8I1lOt1edGi60IOJs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4b:6c:59:85:2a:74:ad:9d:c1:d8:c5:40:f9:3f:92:f9:e8:f6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134 Validity Not Before: Jul 29 05:04:26 2025 GMT Not After : Aug 4 02:54:26 2025 GMT Subject: CN=7A5D434F1A84D324AB9EA3A6CDA5B925344EB8B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:e6:bf:ee:f3:58:47:ca:e9:8a:de:66:ce: fa:2c:d1:d9:fe:36:25:51:1d:a1:5b:52:07:12:a3: e8:08:1c:30:c9:a6:07:19:52:2d:a4:15:53:1d:7b: c1:93:fa:60:e7:ba:5f:18:2c:90:b1:87:f3:67:c7: 00:96:94:58:de:8e:9c:31:41:f7:4a:41:98:be:78: 07:d8:10:27:e6:a0:80:6d:41:22:79:18:61:fc:c0: 86:53:70:19:56:89:cb:8d:d7:72:0c:a3:64:a6:a9: 5d:d5:8d:e0:e3:a5:ee:89:8a:7c:8c:91:85:64:39: c6:1f:08:0f:d7:9b:05:1d:d8:6b:d5:09:04:86:d3: 65:b5:fd:df:2a:b7:da:ff:56:a7:c7:85:fb:4e:a4: 9f:0b:18:01:9f:c8:6c:ac:56:22:66:a9:6f:90:db: cb:c1:95:18:3c:1b:ab:1b:1d:b6:cf:b3:75:2e:40: 8b:8f:ec:3b:e4:a8:e1:fd:41:f4:a6:aa:ee:52:32: 64:85:6f:94:52:66:ba:ea:fd:06:66:78:5a:a8:34: 15:e9:45:3b:ef:14:e1:73:71:52:02:72:4f:c1:80: 3b:4e:f2:8e:7f:f2:cf:9f:bf:7c:e0:bf:ad:99:0d: 89:91:64:c0:68:44:e2:62:7e:3e:80:01:ff:53:9b: 0a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5D:43:4F:1A:84:D3:24:AB:9E:A3:A6:CD:A5:B9:25:34:4E:B8:B6 X509v3 Authority Key Identifier: keyid:C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6d:86:e9:e9:b8:86:b8:db:4d:6e:16:f5:c7:8a:1d:63:f6: fa:74:e7:10:97:26:f8:d0:05:d6:90:59:98:88:2f:41:d2:63: a4:38:10:a5:9a:57:a8:df:ef:d4:cd:fc:66:f3:51:64:05:92: 59:c5:0a:31:6a:1f:35:bd:3a:b5:75:4e:12:19:0b:c4:ba:61: 2c:0d:cd:3d:99:97:8e:12:68:ab:fa:bd:cd:c2:83:44:b4:a1: a4:b0:0b:6e:87:2b:4c:d5:b9:59:fc:54:62:09:1e:a1:75:1a: 6f:b2:db:49:35:c7:c7:d0:fd:5e:8e:80:de:f5:1e:92:7d:e1: ee:c4:48:f5:c5:d2:b8:73:b8:d6:ae:9e:35:4b:bb:e7:dc:bd: b6:25:4f:1a:96:25:d9:7f:37:4a:0e:3e:a2:86:a6:16:72:aa: 74:5e:ff:26:1f:ad:0c:9a:66:cf:bd:70:dc:9e:01:e5:b7:79: f0:20:70:c3:cf:6b:97:2e:e6:c6:73:c6:a4:5a:97:05:12:f6: b1:25:4a:96:ac:71:c0:21:31:f7:e9:dd:09:e3:e5:e6:d5:4f: 03:3d:93:28:dd:a0:de:14:fc:1a:9e:ea:32:e9:13:de:d5:7b: 2f:23:4f:7b:b1:33:70:aa:78:e8:6d:f1:ba:68:5d:57:33:d8: 9a:44:98:1a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHEtsWYUqdK2dwdjFQPk/kvno9qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDRTc2RDI4NzUyRjgzMkFFMUFBQjRBQjZFQjhDMzgz QkZCMjEzNDAeFw0yNTA3MjkwNTA0MjZaFw0yNTA4MDQwMjU0MjZaMDMxMTAvBgNV BAMTKDdBNUQ0MzRGMUE4NEQzMjRBQjlFQTNBNkNEQTVCOTI1MzQ0RUI4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQ+a/7vNYR8rpit5mzvos0dn+ NiVRHaFbUgcSo+gIHDDJpgcZUi2kFVMde8GT+mDnul8YLJCxh/NnxwCWlFjejpwx QfdKQZi+eAfYECfmoIBtQSJ5GGH8wIZTcBlWicuN13IMo2SmqV3VjeDjpe6JinyM kYVkOcYfCA/XmwUd2GvVCQSG02W1/d8qt9r/VqfHhftOpJ8LGAGfyGysViJmqW+Q 28vBlRg8G6sbHbbPs3UuQIuP7DvkqOH9QfSmqu5SMmSFb5RSZrrq/QZmeFqoNBXp RTvvFOFzcVICck/BgDtO8o5/8s+fv3zgv62ZDYmRZMBoROJifj6AAf9TmwpRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUel1DTxqE0ySrnqOmzaW5JTROuLYwHwYDVR0j BBgwFoAUxc520odS+DKuGqtKtuuMODv7ITQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNDcwNDVBQjZGNjcwNzUzOThDMzc1NkUwNTQ4MUE5QjE2 RjFDN0QyNEExMDFERjZDODVFOUVFQUMxODVCMUFBLzAvQzVDRTc2RDI4NzUyRjgz MkFFMUFBQjRBQjZFQjhDMzgzQkZCMjEzNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNUNFNzZEMjg3NTJGODMyQUUx QUFCNEFCNkVCOEMzODNCRkIyMTM0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTQ3MDQ1QUI2RjY3MDc1Mzk4QzM3NTZFMDU0ODFBOUIxNkYxQzdEMjRB MTAxREY2Qzg1RTlFRUFDMTg1QjFBQS8wL0M1Q0U3NkQyODc1MkY4MzJBRTFBQUI0 QUI2RUI4QzM4M0JGQjIxMzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzbYbp6biGuNtNbhb1x4odY/b6 dOcQlyb40AXWkFmYiC9B0mOkOBClmleo3+/Uzfxm81FkBZJZxQoxah81vTq1dU4S GQvEumEsDc09mZeOEmir+r3NwoNEtKGksAtuhytM1blZ/FRiCR6hdRpvsttJNcfH 0P1ejoDe9R6SfeHuxEj1xdK4c7jWrp41S7vn3L22JU8aliXZfzdKDj6ihqYWcqp0 Xv8mH60MmmbPvXDcngHlt3nwIHDDz2uXLubGc8akWpcFEvaxJUqWrHHAITH36d0J 4+Xm1U8DPZMo3aDeFPwanuoy6RPe1XsvI097sTNwqnjobfG6aF1XM9iaRJga -----END CERTIFICATE-----Generated at Thu Jul 31 10:12:34 2025 by rpki-client