$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft File: 866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft (raw, json) Hash identifier: H9pvmmqtrpVlr1QYYSng7d0a77rkOFVdDdwKPMY6qUo= Subject key identifier: C9:48:F6:29:FA:CB:93:AF:05:56:59:E6:BC:DF:A7:8E:39:1F:2E:A1 Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F Certificate issuer: /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F Certificate serial: 940D15159FC72A33741DA9A4D7B79F5E481ADF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft Manifest number: 0107 Signing time: Thu 31 Jul 2025 01:16:39 +0000 Manifest this update: Thu 31 Jul 2025 01:11:39 +0000 Manifest next update: Tue 05 Aug 2025 21:09:39 +0000 Files and hashes: 1: 323830333a616131303a3a2f33322d3438203d3e20323731393236.roa (hash: C2SltXQZnvvY3PNwNnCpDsytDi4bf1yd876HHt1Z18Y=) 2: 3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa (hash: utKfbItlMxe6olWWK8DsXGD6XCKOJbHF+JuyR7131w0=) 3: 3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa (hash: f660PTLDT2nhjTTrtpq5KZyVrpDQDuQ7Rpbsyr0rhws=) 4: 3139302e3131332e35312e302f32342d3234203d3e20323731393236.roa (hash: sR9coDYh2RgMySmZCppoKng/QyAqpAtqs+YGGc7PG3Y=) 5: 3139302e3131332e34382e302f32322d3232203d3e20323731393236.roa (hash: BE1KVmubb/bReeoI+nfbQXG78miJMdzKDpUPzKYw1Ww=) 6: 3139302e3131332e34382e302f32342d3234203d3e20323731393236.roa (hash: SW2TQjbEF0kUJhHESaaFLZTgmFhhYA4TqzVS2kv01Dk=) 7: 866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl (hash: CfRTDIf9JX3BJyFyEmSmAmZSOrrQpkMl4Go3Ghl9DPc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94:0d:15:15:9f:c7:2a:33:74:1d:a9:a4:d7:b7:9f:5e:48:1a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F Validity Not Before: Jul 31 01:11:39 2025 GMT Not After : Aug 5 21:09:39 2025 GMT Subject: CN=C948F629FACB93AF055659E6BCDFA78E391F2EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:bb:59:43:e4:ef:66:28:0d:c2:37:0b:2f: 75:f3:0d:05:ba:87:d1:c3:33:94:70:d6:d3:13:9e: 89:99:c4:24:6e:6d:6f:ec:ae:b0:2b:d3:1f:a1:21: 04:47:fd:42:45:b3:22:81:ea:2c:f2:87:68:ba:10: 7d:ad:2e:73:3a:eb:09:94:aa:e1:02:55:45:67:2f: ef:90:7e:c0:04:b3:b3:07:94:b3:1e:dd:c6:c2:59: 49:4f:f9:c7:40:8c:6a:da:45:03:2c:36:db:8f:c8: 85:53:ef:40:b1:30:da:5b:6a:08:5c:a6:d5:a8:29: e5:42:af:e0:69:ed:a0:12:44:64:31:a1:88:cb:5f: 62:05:92:0e:04:95:cb:40:e5:2e:f4:3e:04:90:4d: dd:2b:26:20:7a:bc:ac:6b:25:f9:e2:4c:ff:f9:df: 4c:21:ec:93:5e:fd:c7:8b:50:b8:ef:c6:0c:f7:03: 62:ed:76:7f:ec:07:2d:7e:d5:e0:8a:62:c0:f1:79: c5:b3:1c:d2:6b:06:d9:22:89:07:de:70:8c:7b:54: f3:5f:5c:37:10:98:2e:66:49:95:eb:e2:d1:ef:58: 93:9b:50:03:67:2b:87:56:ae:cf:e9:c4:77:c9:63: 19:f8:73:28:6b:10:13:03:7d:d6:20:6e:cf:3c:0b: f3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:48:F6:29:FA:CB:93:AF:05:56:59:E6:BC:DF:A7:8E:39:1F:2E:A1 X509v3 Authority Key Identifier: keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:36:8c:5b:87:d6:8c:c6:bc:68:40:4a:57:9a:f8:9e:6a:06: 25:4b:74:02:14:7d:e9:10:7c:35:9a:c1:40:1b:ea:88:90:4e: ab:96:ba:3c:60:fd:1b:de:67:a5:a6:ed:84:f3:b8:42:8e:5b: 1e:22:9b:ca:17:8e:b2:82:8d:c8:cd:56:86:e7:36:5a:db:38: 7a:c0:c3:24:17:35:a0:ae:ab:dc:db:d9:f7:0d:dc:90:12:2e: f8:9e:00:f3:06:b2:ce:fe:53:8c:0f:6f:4a:8b:25:81:b8:c9: 69:83:fe:a5:e1:8e:dc:26:8e:69:3a:f0:77:29:65:58:34:ca: 80:7a:f5:ef:64:03:bb:de:b1:54:cd:a7:b7:27:6e:b1:a9:e0: da:fe:e1:6a:37:69:ea:7f:fa:a5:a8:d0:a8:b4:f8:13:e6:4a: 55:b3:af:b6:e6:47:de:77:85:50:a3:e6:70:a4:63:5d:90:46: b5:30:19:22:7e:9e:a0:2c:ca:2d:58:23:62:8f:cc:0a:6c:f1: 8e:c2:0d:03:47:73:61:39:32:52:06:d9:bc:a1:3f:70:06:3f: f7:fe:54:0b:a5:06:5d:91:e5:66:54:67:b9:a5:4c:1c:fb:d8: dd:fe:7d:4c:4c:77:34:8e:2c:a9:cc:64:c4:73:bf:c6:cf:98: 45:d8:14:0e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAJQNFRWfxyozdB2ppNe3n15IGt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QjdEQzVCRDlFOUNENTlGMzE2OTNDMzI3QUI3RTBB RURCODQwRjAeFw0yNTA3MzEwMTExMzlaFw0yNTA4MDUyMTA5MzlaMDMxMTAvBgNV BAMTKEM5NDhGNjI5RkFDQjkzQUYwNTU2NTlFNkJDREZBNzhFMzkxRjJFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeA7tZQ+TvZigNwjcLL3XzDQW6 h9HDM5Rw1tMTnomZxCRubW/srrAr0x+hIQRH/UJFsyKB6izyh2i6EH2tLnM66wmU quECVUVnL++QfsAEs7MHlLMe3cbCWUlP+cdAjGraRQMsNtuPyIVT70CxMNpbaghc ptWoKeVCr+Bp7aASRGQxoYjLX2IFkg4ElctA5S70PgSQTd0rJiB6vKxrJfniTP/5 30wh7JNe/ceLULjvxgz3A2Ltdn/sBy1+1eCKYsDxecWzHNJrBtkiiQfecIx7VPNf XDcQmC5mSZXr4tHvWJObUANnK4dWrs/pxHfJYxn4cyhrEBMDfdYgbs88C/M1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUyUj2KfrLk68FVlnmvN+njjkfLqEwHwYDVR0j BBgwFoAUhmt9xb2enNWfMWk8Mnq34K7bhA8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DN0VERTI5RUJCQ0YzM0REOTA1RDU3MTczRTRCMEM4M0M1 RTM3RDY1RTBGRTM2RjlBNzQ2M0FGRDMxRUZFNEFGLzAvODY2QjdEQzVCRDlFOUNE NTlGMzE2OTNDMzI3QUI3RTBBRURCODQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjZCN0RDNUJEOUU5Q0Q1OUYz MTY5M0MzMjdBQjdFMEFFREI4NDBGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzdFREUyOUVCQkNGMzNERDkwNUQ1NzE3M0U0QjBDODNDNUUzN0Q2NUUw RkUzNkY5QTc0NjNBRkQzMUVGRTRBRi8wLzg2NkI3REM1QkQ5RTlDRDU5RjMxNjkz QzMyN0FCN0UwQUVEQjg0MEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKNoxbh9aMxrxoQEpXmvieagYl S3QCFH3pEHw1msFAG+qIkE6rlro8YP0b3melpu2E87hCjlseIpvKF46ygo3IzVaG 5zZa2zh6wMMkFzWgrqvc29n3DdyQEi74ngDzBrLO/lOMD29KiyWBuMlpg/6l4Y7c Jo5pOvB3KWVYNMqAevXvZAO73rFUzae3J26xqeDa/uFqN2nqf/qlqNCotPgT5kpV s6+25kfed4VQo+ZwpGNdkEa1MBkifp6gLMotWCNij8wKbPGOwg0DR3NhOTJSBtm8 oT9wBj/3/lQLpQZdkeVmVGe5pUwc+9jd/n1MTHc0jiypzGTEc7/Gz5hF2BQO -----END CERTIFICATE-----Generated at Thu Jul 31 08:30:20 2025 by rpki-client