$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: 7knZ6vpm5gcUTNJIntyHIu/LZ+pKe4aiBBLqbu6zGr0= Subject key identifier: A6:5F:70:95:3F:C1:54:F3:17:C0:44:D0:B8:70:7D:B8:F2:3F:6B:48 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 7FD850DE57D62A74BF52213FAEBDF75DE5C6C94F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 0124 Signing time: Mon 15 Sep 2025 18:36:35 +0000 Manifest this update: Mon 15 Sep 2025 18:31:35 +0000 Manifest next update: Sun 21 Sep 2025 06:26:35 +0000 Files and hashes: 1: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=) 2: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) 3: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) 4: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: n4RlE7eiZWuGm8AUPcuZGtbVafMaebFXtNq877FCfP4=) 5: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 21:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d8:50:de:57:d6:2a:74:bf:52:21:3f:ae:bd:f7:5d:e5:c6:c9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Sep 15 18:31:35 2025 GMT Not After : Sep 21 06:26:35 2025 GMT Subject: CN=A65F70953FC154F317C044D0B8707DB8F23F6B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:74:47:1a:0c:6b:6c:a3:f0:f5:0d:3e:31: ac:e8:65:96:80:e9:f8:0d:33:12:94:0a:24:87:50: ee:25:fd:f0:61:a0:10:8e:2c:16:a7:19:b7:28:ed: 70:f8:21:64:71:6c:f4:d2:8b:fb:d4:31:33:b2:00: 03:b1:4e:d5:cf:cf:04:a4:8f:b6:2e:29:5e:4f:51: 84:0d:a3:a9:19:ee:77:94:b9:ff:55:09:57:93:7b: a3:8b:88:b8:a8:80:93:1f:7a:bc:17:c4:a6:07:a9: 02:44:7e:35:d8:95:35:15:b0:f3:86:f2:ef:84:2d: 6e:ab:6a:02:3d:da:e2:39:c6:d6:c8:e0:11:6c:a0: b6:bf:b9:56:4a:dc:97:db:c1:14:2b:5c:81:5d:55: ca:4a:9f:d3:c1:a1:9b:dc:6a:1a:7c:38:79:cb:fd: fd:8f:d5:c8:a9:45:b1:d0:87:27:7f:5c:d7:a8:01: 1a:47:98:89:2d:f3:74:01:dc:ff:e9:15:3e:e0:f7: 33:c8:4b:75:6d:cd:d2:ac:9b:ad:76:54:26:27:91: bc:2f:78:f2:d9:43:91:62:c5:4b:84:0d:6f:64:21: 75:ab:92:06:4a:c0:ab:d5:2d:6d:53:a3:8b:ad:48: 87:20:64:ce:2b:15:c3:6e:11:d8:ff:48:f5:4f:d1: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5F:70:95:3F:C1:54:F3:17:C0:44:D0:B8:70:7D:B8:F2:3F:6B:48 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:4f:b7:c0:a3:1c:7b:ed:99:39:61:f3:d1:f2:ee:0c:f6:07: bd:b2:1f:91:b9:91:e7:e5:7a:43:5c:42:01:87:2d:3b:51:9f: 4d:4c:ec:c4:d7:c1:a3:cf:1c:92:d7:ad:60:1e:2d:59:5e:31: 01:67:c2:79:85:1e:10:34:51:75:29:24:de:90:e3:2c:bd:e1: b1:54:5c:8c:07:3c:a2:f9:28:b8:98:9e:dc:9a:8c:e1:95:65: 14:a7:7a:ab:1f:e1:95:c9:cf:24:81:03:fb:57:34:9e:b0:47: 5e:f1:42:db:e6:84:46:79:1e:97:fd:11:26:a7:f7:25:b7:2e: b3:a6:e0:cb:77:ed:47:4a:a1:81:15:2a:8c:aa:f8:b5:b1:96: da:5f:04:48:28:8c:b7:a5:59:30:cf:e3:c7:f5:ea:a7:22:37: 60:9e:5c:9c:b2:1a:2a:4a:8e:65:39:60:8d:6c:d4:74:ef:9d: 35:06:fc:95:e2:c5:9b:ff:7e:d4:3f:97:90:9f:89:69:42:ec: 09:08:3a:ad:77:2a:f6:e4:98:1c:4e:1f:3f:e4:80:98:8c:f5: 06:7f:ca:2b:1a:d0:0a:da:10:24:ab:fc:24:17:04:fe:ec:a9: fb:b2:4a:87:d8:bf:87:6e:51:2a:bf:75:0c:1e:5b:22:a0:a8: 82:45:0f:01 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUf9hQ3lfWKnS/UiE/rr33XeXGyU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTA5MTUxODMxMzVaFw0yNTA5MjEwNjI2MzVaMDMxMTAvBgNV BAMTKEE2NUY3MDk1M0ZDMTU0RjMxN0MwNDREMEI4NzA3REI4RjIzRjZCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vXRHGgxrbKPw9Q0+MazoZZaA 6fgNMxKUCiSHUO4l/fBhoBCOLBanGbco7XD4IWRxbPTSi/vUMTOyAAOxTtXPzwSk j7YuKV5PUYQNo6kZ7neUuf9VCVeTe6OLiLiogJMferwXxKYHqQJEfjXYlTUVsPOG 8u+ELW6ragI92uI5xtbI4BFsoLa/uVZK3JfbwRQrXIFdVcpKn9PBoZvcahp8OHnL /f2P1cipRbHQhyd/XNeoARpHmIkt83QB3P/pFT7g9zPIS3VtzdKsm612VCYnkbwv ePLZQ5FixUuEDW9kIXWrkgZKwKvVLW1To4utSIcgZM4rFcNuEdj/SPVP0U3DAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpl9wlT/BVPMXwETQuHB9uPI/a0gwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCT7fAoxx77Zk5YfPR8u4M9ge9 sh+RuZHn5XpDXEIBhy07UZ9NTOzE18GjzxyS161gHi1ZXjEBZ8J5hR4QNFF1KSTe kOMsveGxVFyMBzyi+Si4mJ7cmozhlWUUp3qrH+GVyc8kgQP7VzSesEde8ULb5oRG eR6X/REmp/clty6zpuDLd+1HSqGBFSqMqvi1sZbaXwRIKIy3pVkwz+PH9eqnIjdg nlycshoqSo5lOWCNbNR07501BvyV4sWb/37UP5eQn4lpQuwJCDqtdyr25JgcTh8/ 5ICYjPUGf8orGtAK2hAkq/wkFwT+7Kn7skqH2L+HblEqv3UMHlsioKiCRQ8B -----END CERTIFICATE-----Generated at Tue Sep 16 08:13:30 2025 by rpki-client