$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft File: 9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft (raw, json) Hash identifier: jiTfPbfiKq6eIlUFkvk1qpgy0tjYHO+plE0Z42Zg2Fo= Subject key identifier: 49:54:FE:C1:11:01:03:5F:75:0A:6A:14:46:B3:73:FF:92:E5:EB:7C Authority key identifier: 9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57 Certificate issuer: /CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57 Certificate serial: 09CE75807F8752C5F2E0A213347E72016DD2C5E0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft Manifest number: FA Signing time: Tue 22 Jul 2025 15:13:21 +0000 Manifest this update: Tue 22 Jul 2025 15:08:21 +0000 Manifest next update: Sun 27 Jul 2025 06:50:21 +0000 Files and hashes: 1: 34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa (hash: oJJaJoFZxUNzBMlvhfvo7IAThHzSf5QJWUMkr7EArxc=) 2: 323830333a663532303a3a2f33322d3332203d3e20323636363935.roa (hash: Jz9l++h+Q5ySZsde2g2nHxqBnS+LLHoermhB+X99QIM=) 3: 9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl (hash: RSASKMrAh4za2CRat0Viiccpk7b5YyUUH+2A5PIG3Xs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 15:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ce:75:80:7f:87:52:c5:f2:e0:a2:13:34:7e:72:01:6d:d2:c5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57 Validity Not Before: Jul 22 15:08:21 2025 GMT Not After : Jul 27 06:50:21 2025 GMT Subject: CN=4954FEC11101035F750A6A1446B373FF92E5EB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:68:14:0f:8b:a2:0e:c0:7e:cc:36:b7:0a: fb:0a:7a:1c:0a:50:9d:ca:c0:98:e9:09:d5:c8:0b: f2:35:44:9b:eb:c9:ed:42:ec:b8:53:e2:56:00:b6: 06:d4:36:36:e8:14:b2:15:22:86:02:e6:64:84:d2: 1a:16:03:4c:a2:9f:dd:b2:62:74:d0:a8:48:70:9a: ed:6c:a4:63:70:d6:d5:04:72:58:17:bb:88:2b:d4: 13:d8:c7:ef:c8:7f:53:8d:46:cf:88:2c:86:aa:49: f2:f7:35:e8:36:cb:53:71:da:01:e8:f5:3e:99:4d: 6b:f4:f6:a2:df:60:4b:12:b1:30:96:9a:70:55:81: b2:1b:a0:bb:ea:17:f4:78:b8:f4:59:59:e8:56:95: a2:5b:df:e8:84:0c:94:04:7a:bf:29:fa:dd:ae:15: fc:31:ef:82:d2:59:fc:de:45:68:c4:d7:de:21:65: ee:dc:18:54:4c:9f:1c:d9:9e:11:1a:51:0c:d5:1c: f5:29:9a:ae:5f:b5:93:96:d9:43:83:0d:28:ff:70: 45:ca:92:06:02:62:75:c9:3c:c2:a0:d9:b3:0a:b9: 57:ac:c6:fe:71:8e:49:30:d0:53:d8:62:6b:94:a7: 4b:e9:99:ed:73:b0:df:35:4c:0a:21:d9:2c:c8:e1: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:54:FE:C1:11:01:03:5F:75:0A:6A:14:46:B3:73:FF:92:E5:EB:7C X509v3 Authority Key Identifier: keyid:9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:12:19:e2:00:dc:11:c7:c9:46:7f:1b:90:8e:12:c2:0e:55: 3b:af:f6:4c:b9:14:a0:2f:38:3c:76:5f:ea:d2:8b:42:98:3b: 2f:28:c2:e3:fb:a0:6e:b0:d2:45:be:c2:b3:df:b2:0a:06:8a: 6d:e8:db:9d:87:2c:cd:b9:b6:65:3b:7b:be:a3:c8:bf:8b:e7: 58:a1:1e:4a:e1:70:c8:1f:f1:99:ac:ef:99:84:e0:af:d0:84: 67:1f:39:bc:66:29:5f:d1:cd:b4:60:31:1b:08:ba:2f:a2:a6: 41:c3:52:3b:01:d7:72:97:25:62:c8:4e:de:7f:ea:12:b2:4a: 30:49:d5:37:d8:52:1d:97:b4:28:b1:6e:e1:70:05:f5:d7:c6: 84:8b:0b:81:98:c6:a0:bb:07:99:a9:df:97:54:8e:dd:ed:89: 3c:6f:19:45:fe:6a:5e:35:b8:b0:dd:58:a4:cb:38:73:6b:e5: f5:7b:95:13:2a:a9:54:a1:62:ea:b1:bd:7c:fa:75:fd:ad:72: 19:ea:c8:bb:f1:17:59:7f:43:73:1a:84:fb:16:91:e2:5e:ae: cb:67:e5:1f:1c:09:99:35:93:cb:47:0c:7c:30:f7:41:37:6a: 5a:1e:76:1a:a5:e2:be:2b:82:b0:e1:08:42:0c:56:53:bc:9d: 83:62:f8:42 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCc51gH+HUsXy4KITNH5yAW3SxeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2RTU2NkNDRkIzOTZGNTBBQTBFRThCNjAxMUNEMTdF N0FGMkU1NzAeFw0yNTA3MjIxNTA4MjFaFw0yNTA3MjcwNjUwMjFaMDMxMTAvBgNV BAMTKDQ5NTRGRUMxMTEwMTAzNUY3NTBBNkExNDQ2QjM3M0ZGOTJFNUVCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QWgUD4uiDsB+zDa3CvsKehwK UJ3KwJjpCdXIC/I1RJvrye1C7LhT4lYAtgbUNjboFLIVIoYC5mSE0hoWA0yin92y YnTQqEhwmu1spGNw1tUEclgXu4gr1BPYx+/If1ONRs+ILIaqSfL3Neg2y1Nx2gHo 9T6ZTWv09qLfYEsSsTCWmnBVgbIboLvqF/R4uPRZWehWlaJb3+iEDJQEer8p+t2u Ffwx74LSWfzeRWjE194hZe7cGFRMnxzZnhEaUQzVHPUpmq5ftZOW2UODDSj/cEXK kgYCYnXJPMKg2bMKuVesxv5xjkkw0FPYYmuUp0vpme1zsN81TAoh2SzI4fQVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSVT+wREBA191CmoURrNz/5Ll63wwHwYDVR0j BBgwFoAUnm5WbM+zlvUKoO6LYBHNF+evLlcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQjQ5ODI4MzU1Q0FFNzhCOEE3MTYyRUMzMkYzNzFFNjVD RDg0MEE4MjIzQzMwNTRBMzNCNUM3REFFODE3RTIzLzAvOUU2RTU2NkNDRkIzOTZG NTBBQTBFRThCNjAxMUNEMTdFN0FGMkU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTZFNTY2Q0NGQjM5NkY1MEFB MEVFOEI2MDExQ0QxN0U3QUYyRTU3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0I0OTgyODM1NUNBRTc4QjhBNzE2MkVDMzJGMzcxRTY1Q0Q4NDBBODIy M0MzMDU0QTMzQjVDN0RBRTgxN0UyMy8wLzlFNkU1NjZDQ0ZCMzk2RjUwQUEwRUU4 QjYwMTFDRDE3RTdBRjJFNTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOEhniANwRx8lGfxuQjhLCDlU7 r/ZMuRSgLzg8dl/q0otCmDsvKMLj+6BusNJFvsKz37IKBopt6NudhyzNubZlO3u+ o8i/i+dYoR5K4XDIH/GZrO+ZhOCv0IRnHzm8Zilf0c20YDEbCLovoqZBw1I7Addy lyViyE7ef+oSskowSdU32FIdl7QosW7hcAX118aEiwuBmMaguweZqd+XVI7d7Yk8 bxlF/mpeNbiw3Vikyzhza+X1e5UTKqlUoWLqsb18+nX9rXIZ6si78RdZf0NzGoT7 FpHiXq7LZ+UfHAmZNZPLRwx8MPdBN2paHnYapeK+K4Kw4QhCDFZTvJ2DYvhC -----END CERTIFICATE-----Generated at Tue Jul 22 20:33:20 2025 by rpki-client