$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft File: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft (raw, json) Hash identifier: QM2W0slWXytE7m/jDRAKm2ofjvDBRTm/fc5QXlBo8aM= Subject key identifier: 40:D7:2D:76:B6:23:09:7E:CF:73:57:E0:43:D9:89:2B:02:BF:B2:66 Authority key identifier: D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5 Certificate issuer: /CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5 Certificate serial: 20D273F881DFB50C39D48E8FA6A4BE11806C1A07 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft Manifest number: F9 Signing time: Thu 31 Jul 2025 00:26:05 +0000 Manifest this update: Thu 31 Jul 2025 00:21:05 +0000 Manifest next update: Mon 04 Aug 2025 04:24:05 +0000 Files and hashes: 1: D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl (hash: ZtIRvR92aaPViCoffeb5dC2lwGumkk9ztxtBZW7LJJ0=) 2: 323830313a31353a373030303a3a2f34382d3438203d3e20323639383637.roa (hash: 0wS+mvLE2Nv0YFVR+HZgUIyvob6LC2FurHqmQHnQRLo=) 3: 34352e3138392e3131392e302f32342d3234203d3e20323639383637.roa (hash: vY+MQl3uNJuLOfblqtskseOQr2WJVp4QQCG30RccBB4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 04 Aug 2025 04:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d2:73:f8:81:df:b5:0c:39:d4:8e:8f:a6:a4:be:11:80:6c:1a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90439A53A2E3BC90DB01BECE26E7C0888E47EF5 Validity Not Before: Jul 31 00:21:05 2025 GMT Not After : Aug 4 04:24:05 2025 GMT Subject: CN=40D72D76B623097ECF7357E043D9892B02BFB266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:32:84:78:64:92:7d:26:eb:dc:6a:34:d6: 24:05:dd:e7:d7:8b:25:5d:94:f0:2e:86:ff:f8:de: 90:ad:56:75:f1:96:64:e5:f3:32:23:aa:a9:43:67: 4b:c0:9a:a7:87:48:1d:c0:45:d1:c4:7f:ba:95:c2: 0c:a2:41:d4:24:23:fa:71:09:99:57:32:41:5d:2f: 99:71:8f:f9:b2:26:19:1d:34:71:72:e9:fb:b0:ec: 1f:6c:40:a9:9a:d8:7e:f4:db:99:c3:81:51:7d:a4: 78:3b:c7:b7:71:1f:3e:25:88:7d:12:b1:da:76:0e: 31:83:e2:c3:4e:77:6a:5e:f0:c3:d6:79:1e:e0:84: be:fa:3b:f5:2f:a5:16:af:55:96:16:c6:66:7c:78: cb:39:69:3d:db:48:f2:c7:86:96:dd:74:ca:8d:d4: 0d:1c:7e:2f:e0:1c:4b:4e:e2:4c:c0:6e:41:eb:7c: 7d:e3:2e:e1:a6:27:09:af:96:a5:67:a5:ad:09:e7: 0a:09:03:7d:78:4a:e1:9d:62:71:e2:9c:0f:16:37: fc:32:da:2c:a0:83:69:a4:27:99:ca:a7:a2:21:5d: fc:ac:1a:25:b9:23:f9:64:01:d1:b9:87:8b:06:e6: b0:74:5c:53:fc:4d:a8:7e:ee:46:5b:8c:33:c3:4d: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D7:2D:76:B6:23:09:7E:CF:73:57:E0:43:D9:89:2B:02:BF:B2:66 X509v3 Authority Key Identifier: keyid:D9:04:39:A5:3A:2E:3B:C9:0D:B0:1B:EC:E2:6E:7C:08:88:E4:7E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEA7D74FE761070910FDBF9BBC72FEF6AC4776CFE236633F4F33C241E813BED6/0/D90439A53A2E3BC90DB01BECE26E7C0888E47EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:07:75:ed:b4:8e:b1:59:d0:8f:fb:58:e0:27:24:63:09:82: de:69:63:90:90:ef:17:4d:51:fd:20:05:e1:35:aa:21:bf:08: cb:66:9c:0a:d0:83:71:98:c7:f7:69:f3:38:aa:71:2c:e0:6d: 69:73:1b:c1:8d:fa:e8:53:58:7a:7d:aa:5d:f2:50:55:a6:43: 53:9e:3e:37:73:c1:c0:2a:a9:ba:89:38:66:34:2f:7c:83:a4: a8:a3:c4:02:7c:27:6f:13:d5:8e:04:17:a8:08:db:3f:a0:d0: 84:c9:8a:7b:f1:bb:b9:8a:7a:14:74:7e:9f:1b:8a:8a:d8:61: 40:23:87:1a:79:49:5a:01:c8:79:7a:a0:df:25:fd:fd:60:d5: fc:d3:0b:2c:41:dc:89:34:6b:43:02:e0:e3:7d:20:0f:47:92: 0d:a5:3c:41:0b:bd:38:25:06:dd:f0:a9:5f:27:de:f2:46:fc: 17:ed:34:95:23:36:ab:6d:3f:cd:ca:cb:6c:ee:8f:d7:5c:e7: a6:fe:4b:e5:48:68:16:6f:d4:e7:3b:09:87:a0:f6:ed:44:12: 78:aa:9e:62:e8:72:b8:4b:db:a2:01:96:80:cb:b5:71:1b:8b: 70:54:bb:69:d7:a0:56:08:df:88:65:6d:ff:ae:a5:40:fa:69: be:36:13:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUINJz+IHftQw51I6PpqS+EYBsGgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwNDM5QTUzQTJFM0JDOTBEQjAxQkVDRTI2RTdDMDg4 OEU0N0VGNTAeFw0yNTA3MzEwMDIxMDVaFw0yNTA4MDQwNDI0MDVaMDMxMTAvBgNV BAMTKDQwRDcyRDc2QjYyMzA5N0VDRjczNTdFMDQzRDk4OTJCMDJCRkIyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWwzKEeGSSfSbr3Go01iQF3efX iyVdlPAuhv/43pCtVnXxlmTl8zIjqqlDZ0vAmqeHSB3ARdHEf7qVwgyiQdQkI/px CZlXMkFdL5lxj/myJhkdNHFy6fuw7B9sQKma2H7025nDgVF9pHg7x7dxHz4liH0S sdp2DjGD4sNOd2pe8MPWeR7ghL76O/UvpRavVZYWxmZ8eMs5aT3bSPLHhpbddMqN 1A0cfi/gHEtO4kzAbkHrfH3jLuGmJwmvlqVnpa0J5woJA314SuGdYnHinA8WN/wy 2iygg2mkJ5nKp6IhXfysGiW5I/lkAdG5h4sG5rB0XFP8Tah+7kZbjDPDTT6zAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQNctdrYjCX7Pc1fgQ9mJKwK/smYwHwYDVR0j BBgwFoAU2QQ5pTouO8kNsBvs4m58CIjkfvUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRUE3RDc0RkU3NjEwNzA5MTBGREJGOUJCQzcyRkVGNkFD NDc3NkNGRTIzNjYzM0Y0RjMzQzI0MUU4MTNCRUQ2LzAvRDkwNDM5QTUzQTJFM0JD OTBEQjAxQkVDRTI2RTdDMDg4OEU0N0VGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOTA0MzlBNTNBMkUzQkM5MERC MDFCRUNFMjZFN0MwODg4RTQ3RUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0VBN0Q3NEZFNzYxMDcwOTEwRkRCRjlCQkM3MkZFRjZBQzQ3NzZDRkUy MzY2MzNGNEYzM0MyNDFFODEzQkVENi8wL0Q5MDQzOUE1M0EyRTNCQzkwREIwMUJF Q0UyNkU3QzA4ODhFNDdFRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiB3XttI6xWdCP+1jgJyRjCYLe aWOQkO8XTVH9IAXhNaohvwjLZpwK0INxmMf3afM4qnEs4G1pcxvBjfroU1h6fapd 8lBVpkNTnj43c8HAKqm6iThmNC98g6Soo8QCfCdvE9WOBBeoCNs/oNCEyYp78bu5 inoUdH6fG4qK2GFAI4caeUlaAch5eqDfJf39YNX80wssQdyJNGtDAuDjfSAPR5IN pTxBC704JQbd8KlfJ97yRvwX7TSVIzarbT/Nysts7o/XXOem/kvlSGgWb9TnOwmH oPbtRBJ4qp5i6HK4S9uiAZaAy7VxG4twVLtp16BWCN+IZW3/rqVA+mm+NhMC -----END CERTIFICATE-----Generated at Thu Jul 31 21:11:25 2025 by rpki-client