$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft File: 958AE74C7555B3A115DBFFC8840395CE219F59B5.mft (raw, json) Hash identifier: dfH8lDVvb2TwSvEB3W+sdkIrt66EL2fUwRtJfiv0Hv4= Subject key identifier: BD:AC:37:D7:55:34:E8:83:AE:7B:BB:6A:60:AC:6A:93:12:E6:51:43 Authority key identifier: 95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 Certificate issuer: /CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Certificate serial: 5C66EF1C4DFB0063E3576D008E4F5A1DE781D121 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft Manifest number: 0100 Signing time: Tue 29 Jul 2025 04:08:48 +0000 Manifest this update: Tue 29 Jul 2025 04:03:48 +0000 Manifest next update: Sun 03 Aug 2025 17:31:48 +0000 Files and hashes: 1: 3139322e3134312e34302e302f32342d3234203d3e20323635373934.roa (hash: 1eatcISrRWEjiJa/p7xBX6b+4bgRrTHTtU+86eOUpvs=) 2: 3139322e3134312e34302e302f32322d3232203d3e20323635373934.roa (hash: wrwjTyh9pOptnNw9f/Tc7oUs2AyzWXt8NtoMFsZcyT4=) 3: 3139322e3134312e34322e302f32342d3234203d3e20323635373934.roa (hash: diXk1/Gtwc/ZoVUL78ZJK+xf8Tc+NqK2dFhbBJwjjXQ=) 4: 958AE74C7555B3A115DBFFC8840395CE219F59B5.crl (hash: SUJP0ZVT8wjADbTD42sU3pIH02aTRy5C2WNkWOcRsEU=) 5: 3139322e3134312e34312e302f32342d3234203d3e20323635373934.roa (hash: DsrrF+UUK1Q1sB6PvCAllfUXQz6xxhErCjiWOoHEOPc=) 6: 3139322e3134312e34332e302f32342d3234203d3e20323635373934.roa (hash: lFMPHHji0WkM/od00nWsQTxJbZLHB08h94Wr7OzPf/o=) 7: 323830333a653032303a3a2f33322d3332203d3e20323635373934.roa (hash: kte3CTPUXYYiPA/2fZyA0RgagBOOb+s0KWpcd0MjF1Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:66:ef:1c:4d:fb:00:63:e3:57:6d:00:8e:4f:5a:1d:e7:81:d1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958AE74C7555B3A115DBFFC8840395CE219F59B5 Validity Not Before: Jul 29 04:03:48 2025 GMT Not After : Aug 3 17:31:48 2025 GMT Subject: CN=BDAC37D75534E883AE7BBB6A60AC6A9312E65143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:aa:56:c2:81:24:57:84:09:3a:86:0c:b6: 96:3c:1e:47:4c:33:d8:24:55:02:a3:23:3b:68:fc: 93:76:b8:b7:cb:c7:70:4d:e6:16:ad:95:70:fc:ed: 24:1f:16:55:ce:ec:a2:6e:72:de:f3:3a:0d:8b:e1: bd:ae:8f:81:db:17:14:7c:65:09:1b:d0:3a:3a:99: 6e:d4:2f:c9:5c:f5:7c:cf:6c:76:8a:77:54:46:f9: f8:a8:e7:56:04:de:f7:e2:27:1d:7b:1e:6e:ea:71: 4e:b9:00:9c:de:36:02:da:5c:fd:69:6c:92:90:54: a5:30:d1:66:07:3e:f3:d3:58:d5:70:a6:c5:09:ac: 4a:5e:c4:66:45:93:53:c0:d0:d6:2f:e3:68:4c:07: f9:96:2f:17:ac:25:11:14:28:a5:6e:53:d3:c7:df: ea:59:49:e0:52:a8:fa:52:4d:6a:0d:7a:00:5b:ea: 68:65:31:21:8b:31:59:4a:3e:12:fc:bd:45:5e:90: d7:74:6e:27:5d:24:7e:ed:91:b9:51:b9:68:5a:29: 53:23:be:ec:59:9d:22:6c:67:fd:d7:ce:cf:57:5e: 36:b6:c3:c0:46:b5:76:48:15:9f:95:12:5b:cb:72: 35:c3:e8:5c:db:d8:0a:2f:59:fb:f4:31:62:37:b6: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AC:37:D7:55:34:E8:83:AE:7B:BB:6A:60:AC:6A:93:12:E6:51:43 X509v3 Authority Key Identifier: keyid:95:8A:E7:4C:75:55:B3:A1:15:DB:FF:C8:84:03:95:CE:21:9F:59:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE1350409BE030CABF28CEDE08D3A2799C3628F243F008CE3794778D320CA832/0/958AE74C7555B3A115DBFFC8840395CE219F59B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:47:fb:e9:48:cb:81:81:77:e1:78:82:33:bb:25:ec:17:e1: 45:05:35:8b:40:7e:90:fa:e9:8b:43:4b:11:ba:38:29:05:e3: 32:92:b2:25:2b:da:ff:f4:a0:31:0c:f5:11:ad:27:61:90:28: 1b:82:17:70:73:cf:b2:8b:90:f4:5e:ab:cc:1f:07:65:84:f0: 09:e5:ed:0e:7d:74:52:c7:b9:4e:b1:29:5c:f7:23:5f:d5:31: af:0c:2b:10:8f:2b:a0:ed:c1:ce:75:2a:f4:59:10:5c:2b:33: 70:f3:fc:33:93:6a:d1:25:ce:e6:5c:2c:41:1d:3e:b0:18:bd: 63:33:1d:d2:97:a0:3d:5c:14:8c:e3:d8:a3:f5:4a:1d:bb:2c: c4:10:55:45:c9:f9:f8:98:09:49:4f:76:18:bb:8b:dd:e7:af: 35:29:25:e5:a9:30:a3:7f:b9:34:e8:21:c2:24:47:c2:bc:79: 76:b8:f8:9f:d1:da:7a:d3:4a:b3:0d:db:bb:45:5e:f5:fe:cd: c9:0c:5a:65:a3:df:e2:f9:b4:84:8b:e6:33:96:7a:79:4d:c5: 4c:89:bd:ea:9b:09:f0:4a:7e:f6:fd:2b:a3:2e:1e:4a:9d:72: 0d:1b:f8:ca:cd:3c:1f:1e:0e:49:bc:1f:e4:4b:bf:e5:ca:ab: 19:c1:97:20 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXGbvHE37AGPjV20Ajk9aHeeB0SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU4QUU3NEM3NTU1QjNBMTE1REJGRkM4ODQwMzk1Q0Uy MTlGNTlCNTAeFw0yNTA3MjkwNDAzNDhaFw0yNTA4MDMxNzMxNDhaMDMxMTAvBgNV BAMTKEJEQUMzN0Q3NTUzNEU4ODNBRTdCQkI2QTYwQUM2QTkzMTJFNjUxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsqpWwoEkV4QJOoYMtpY8HkdM M9gkVQKjIzto/JN2uLfLx3BN5hatlXD87SQfFlXO7KJuct7zOg2L4b2uj4HbFxR8 ZQkb0Do6mW7UL8lc9XzPbHaKd1RG+fio51YE3vfiJx17Hm7qcU65AJzeNgLaXP1p bJKQVKUw0WYHPvPTWNVwpsUJrEpexGZFk1PA0NYv42hMB/mWLxesJREUKKVuU9PH 3+pZSeBSqPpSTWoNegBb6mhlMSGLMVlKPhL8vUVekNd0biddJH7tkblRuWhaKVMj vuxZnSJsZ/3Xzs9XXja2w8BGtXZIFZ+VElvLcjXD6Fzb2AovWfv0MWI3tvS7AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvaw311U06IOue7tqYKxqkxLmUUMwHwYDVR0j BBgwFoAUlYrnTHVVs6EV2//IhAOVziGfWbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRTEzNTA0MDlCRTAzMENBQkYyOENFREUwOEQzQTI3OTlD MzYyOEYyNDNGMDA4Q0UzNzk0Nzc4RDMyMENBODMyLzAvOTU4QUU3NEM3NTU1QjNB MTE1REJGRkM4ODQwMzk1Q0UyMTlGNTlCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NThBRTc0Qzc1NTVCM0ExMTVE QkZGQzg4NDAzOTVDRTIxOUY1OUI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUUxMzUwNDA5QkUwMzBDQUJGMjhDRURFMDhEM0EyNzk5QzM2MjhGMjQz RjAwOENFMzc5NDc3OEQzMjBDQTgzMi8wLzk1OEFFNzRDNzU1NUIzQTExNURCRkZD ODg0MDM5NUNFMjE5RjU5QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/R/vpSMuBgXfheIIzuyXsF+FF BTWLQH6Q+umLQ0sRujgpBeMykrIlK9r/9KAxDPURrSdhkCgbghdwc8+yi5D0XqvM HwdlhPAJ5e0OfXRSx7lOsSlc9yNf1TGvDCsQjyug7cHOdSr0WRBcKzNw8/wzk2rR Jc7mXCxBHT6wGL1jMx3Sl6A9XBSM49ij9UoduyzEEFVFyfn4mAlJT3YYu4vd5681 KSXlqTCjf7k06CHCJEfCvHl2uPif0dp600qzDdu7RV71/s3JDFplo9/i+bSEi+Yz lnp5TcVMib3qmwnwSn72/SujLh5KnXING/jKzTwfHg5JvB/kS7/lyqsZwZcg -----END CERTIFICATE-----Generated at Thu Jul 31 02:12:16 2025 by rpki-client