$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: 6dqxsRxrmUiUD3CP+TRQLbIDLZDiWGoQQN6fmqEzg68= Subject key identifier: 03:A4:1F:A0:A3:B0:6F:4F:EA:50:A1:5F:51:A8:7F:46:02:B8:64:33 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 1E3CAD40F05CFD9E5D99CE7E90ED261DFF35445D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 010C Signing time: Wed 30 Jul 2025 01:21:43 +0000 Manifest this update: Wed 30 Jul 2025 01:16:43 +0000 Manifest next update: Mon 04 Aug 2025 18:16:43 +0000 Files and hashes: 1: 34352e3136342e32322e302f32342d3234203d3e203233343730.roa (hash: 575QiKowVCRz4op0BzHVRduNC7OYEq4japp+XRIL7j0=) 2: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) 3: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: QKtV6XcJG+yU36TsXijmjyaQKBsu5xHvsEYEsqUMbEs=) 4: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) 5: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3c:ad:40:f0:5c:fd:9e:5d:99:ce:7e:90:ed:26:1d:ff:35:44:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Jul 30 01:16:43 2025 GMT Not After : Aug 4 18:16:43 2025 GMT Subject: CN=03A41FA0A3B06F4FEA50A15F51A87F4602B86433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:2d:9a:d8:f2:0d:fb:e9:d8:f8:6c:7b:fa: 6e:f0:f9:ec:12:99:dc:41:0a:35:c6:44:ab:88:7e: 53:43:32:fd:57:26:a5:a0:1a:c1:7c:4a:64:ea:89: f3:35:42:0c:c1:db:20:68:34:01:f7:53:7b:a5:9a: d2:5b:09:b6:7d:a0:7e:22:1d:70:02:a4:b1:38:b0: be:dc:5d:fe:69:8c:de:3b:ad:86:d0:72:4f:a8:f0: 35:e0:c5:7d:6f:59:ec:55:61:29:b9:80:be:2a:cf: cd:c9:36:a1:a3:83:4f:84:6c:58:0a:c6:8f:20:f0: 46:45:8e:bd:3a:8d:80:f0:c4:8d:d0:2b:46:c7:c6: 8e:1b:d6:20:79:70:f9:63:9d:b2:aa:af:79:e8:81: 72:c8:f1:29:33:d5:42:6e:75:51:85:eb:ec:94:70: ba:30:56:db:1e:fb:5c:6d:65:66:68:33:fb:ae:5f: bd:e4:f5:e9:9f:72:39:ab:d2:6e:fa:fb:1c:89:72: 09:fc:4d:24:74:50:c5:51:c8:02:4b:28:48:53:1c: 7c:89:f7:3b:6f:24:a0:31:03:b9:ed:f3:af:43:7b: 98:78:be:b5:a2:37:e3:0d:92:00:4a:68:19:a6:05: 01:b4:58:68:d7:ee:74:a6:24:63:85:32:b1:15:94: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A4:1F:A0:A3:B0:6F:4F:EA:50:A1:5F:51:A8:7F:46:02:B8:64:33 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a7:29:fe:b1:8f:12:6c:20:77:93:23:0b:d9:c2:82:bc:b7: 73:d8:b7:62:52:1f:b6:d8:94:ba:2c:49:e1:72:8b:ce:c4:6d: 66:36:47:7f:e3:41:52:d2:2b:07:3e:ab:82:5e:64:db:59:93: 28:91:7e:06:9c:a1:b8:34:f3:14:02:7c:6b:71:e9:69:04:ac: 7a:f8:77:9d:73:4f:37:2c:7c:ad:64:08:9d:29:62:b6:5d:30: 8a:88:3d:8f:e7:3f:ab:27:d2:c2:5e:07:79:26:11:6d:30:8f: 60:f3:64:d5:dc:f5:69:9e:3c:66:56:90:00:98:b5:e4:27:ff: 3a:2d:f6:ed:00:85:82:99:08:2c:2a:10:8e:7f:21:45:6a:6b: 12:5b:7c:e4:9b:18:96:4b:b9:23:7e:84:b6:ca:46:91:8e:ae: 2f:67:be:a0:74:27:04:08:0f:1b:9d:d6:50:28:7c:e2:10:e4: 19:ff:b8:57:f8:5e:91:a9:5c:5d:48:a2:81:fd:fb:a7:28:01: 68:87:42:7a:4c:a9:52:b3:63:f1:3a:71:6c:b0:b2:4b:25:dc: 27:a5:1f:d6:2b:e5:13:f8:6b:af:5f:82:ee:88:f5:27:58:b8: e8:60:7a:ec:12:c7:92:07:7a:c0:13:e4:21:69:3f:87:e1:d6: 7b:66:08:44 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHjytQPBc/Z5dmc5+kO0mHf81RF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTA3MzAwMTE2NDNaFw0yNTA4MDQxODE2NDNaMDMxMTAvBgNV BAMTKDAzQTQxRkEwQTNCMDZGNEZFQTUwQTE1RjUxQTg3RjQ2MDJCODY0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL3y2a2PIN++nY+Gx7+m7w+ewS mdxBCjXGRKuIflNDMv1XJqWgGsF8SmTqifM1QgzB2yBoNAH3U3ulmtJbCbZ9oH4i HXACpLE4sL7cXf5pjN47rYbQck+o8DXgxX1vWexVYSm5gL4qz83JNqGjg0+EbFgK xo8g8EZFjr06jYDwxI3QK0bHxo4b1iB5cPljnbKqr3nogXLI8Skz1UJudVGF6+yU cLowVtse+1xtZWZoM/uuX73k9emfcjmr0m76+xyJcgn8TSR0UMVRyAJLKEhTHHyJ 9ztvJKAxA7nt869De5h4vrWiN+MNkgBKaBmmBQG0WGjX7nSmJGOFMrEVlG2lAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUA6QfoKOwb0/qUKFfUah/RgK4ZDMwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYpyn+sY8SbCB3kyML2cKCvLdz 2LdiUh+22JS6LEnhcovOxG1mNkd/40FS0isHPquCXmTbWZMokX4GnKG4NPMUAnxr celpBKx6+Hedc083LHytZAidKWK2XTCKiD2P5z+rJ9LCXgd5JhFtMI9g82TV3PVp njxmVpAAmLXkJ/86LfbtAIWCmQgsKhCOfyFFamsSW3zkmxiWS7kjfoS2ykaRjq4v Z76gdCcECA8bndZQKHziEOQZ/7hX+F6RqVxdSKKB/funKAFoh0J6TKlSs2PxOnFs sLJLJdwnpR/WK+UT+GuvX4LuiPUnWLjoYHrsEseSB3rAE+QhaT+H4dZ7ZghE -----END CERTIFICATE-----Generated at Thu Jul 31 10:18:39 2025 by rpki-client