$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft File: 4F43917327673645BD0B520BF95E9CA235CEFEB8.mft (raw, json) Hash identifier: QEvAnZr09dqMM8uuQrNgIzyhkpRQGKdm13R9Vgt2BLg= Subject key identifier: 43:79:3A:E8:D9:85:BA:F4:52:98:B6:77:0E:83:76:6E:78:9A:3C:0B Authority key identifier: 4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8 Certificate issuer: /CN=4F43917327673645BD0B520BF95E9CA235CEFEB8 Certificate serial: 0D2D52D4D4A249DDB555696E89BB620F9FAFD901 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft Manifest number: 0109 Signing time: Wed 30 Jul 2025 11:38:02 +0000 Manifest this update: Wed 30 Jul 2025 11:33:02 +0000 Manifest next update: Mon 04 Aug 2025 00:12:02 +0000 Files and hashes: 1: 323830313a63343a62343a3a2f34382d3438203d3e203238333932.roa (hash: kbCnthVz+5MhFCL27+nzQH5/ndQLzG3N64B1JcdRO7A=) 2: 3230312e3133312e362e302f32332d3234203d3e203238333932.roa (hash: haTEj9ueqYD8WuZx2W+M8FJ05lhj9uhBXjSTgJm0OM4=) 3: 4F43917327673645BD0B520BF95E9CA235CEFEB8.crl (hash: n8+vnW/iOo2mTg/kE4HzPKeqh1boX8NrM/hLbtZbpd8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2d:52:d4:d4:a2:49:dd:b5:55:69:6e:89:bb:62:0f:9f:af:d9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F43917327673645BD0B520BF95E9CA235CEFEB8 Validity Not Before: Jul 30 11:33:02 2025 GMT Not After : Aug 4 00:12:02 2025 GMT Subject: CN=43793AE8D985BAF45298B6770E83766E789A3C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:c0:38:9d:49:e5:29:21:58:0d:cf:a6:8e: 87:56:78:6f:1f:1b:45:b9:a2:cb:e8:b0:5d:34:2f: 48:c0:1b:e1:a4:6a:83:ea:cc:21:09:d6:87:e0:f9: 4f:68:03:58:36:2c:88:e2:5b:10:df:38:52:12:77: bd:7e:ba:11:5b:3e:a8:99:71:00:9b:d3:7e:18:23: 11:ec:a1:c9:67:2d:e2:9b:c2:47:5d:33:e1:80:59: 10:86:21:3e:01:59:a9:95:a4:89:a1:56:9d:e7:f8: b3:72:65:46:c8:c9:da:9b:bc:ee:40:71:bd:04:29: 8c:23:47:31:0a:0f:d0:13:ea:19:1c:d5:2a:ce:d0: 67:6f:aa:03:53:22:b1:71:3d:d9:27:5b:7c:de:42: 15:8e:ad:cf:e2:55:88:f1:3a:9e:ae:c7:c5:33:88: 32:11:6e:b9:a8:18:5e:07:fa:3e:39:26:75:9a:5b: 5f:c5:8a:1c:45:60:54:83:aa:d1:b7:d1:bf:d5:e9: 1c:90:1d:8d:d8:72:3d:ab:24:1a:46:11:45:7f:bf: 02:6c:fd:01:62:9c:04:17:21:d0:4b:f4:40:3a:21: 5a:7a:3e:f7:e4:c4:ab:3b:25:a5:18:ef:e5:53:95: 9c:de:da:98:3a:90:c0:d0:a0:e9:0c:34:d9:82:aa: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:79:3A:E8:D9:85:BA:F4:52:98:B6:77:0E:83:76:6E:78:9A:3C:0B X509v3 Authority Key Identifier: keyid:4F:43:91:73:27:67:36:45:BD:0B:52:0B:F9:5E:9C:A2:35:CE:FE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF8B87503A84E48F7652084EAC8AF0DE7CB357A55CDCA2F4B682724B356B877F/0/4F43917327673645BD0B520BF95E9CA235CEFEB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:59:b6:80:c5:92:70:2f:c0:05:85:27:aa:1d:0f:22:0d:83: 23:5f:a7:15:79:f8:77:4c:fe:14:61:c7:7f:63:a1:47:44:96: 70:94:5c:4f:79:02:27:d1:d6:13:bf:8f:2e:b2:e7:76:f0:29: ef:47:64:0b:e7:31:d6:7d:c1:27:fc:5d:b5:23:55:e3:25:70: 0f:b0:a4:5d:3e:07:66:cc:32:68:99:bb:a8:ea:4e:76:30:4d: 57:d4:02:05:1d:9c:bd:3a:71:63:30:14:1c:1d:84:13:03:0c: cd:1d:e3:82:44:56:cd:08:66:39:02:d7:b8:4d:a9:5b:37:4c: 69:a8:dd:f1:c4:73:be:12:bd:3b:72:4f:de:22:d7:62:bd:0f: 07:03:03:d9:cc:8f:2c:a3:1f:d8:2a:93:e8:f3:29:8d:2d:28: f1:d3:03:64:3f:b0:e8:7e:5c:c7:9d:5e:22:b3:a7:62:ed:45: 37:cc:03:66:79:d4:c2:cd:76:38:cc:06:bb:3c:1d:03:68:d9: 0d:2e:fc:ba:22:ff:73:b0:cf:b3:95:8d:17:33:22:63:c9:46: 7f:be:e0:bd:00:ff:ed:14:3a:3e:e5:78:99:78:79:9b:24:1f: d0:a9:4e:d9:9d:ed:be:e1:cb:37:16:29:2d:5c:83:1a:9a:20: 3c:0c:d3:6c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDS1S1NSiSd21VWluibtiD5+v2QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MzkxNzMyNzY3MzY0NUJEMEI1MjBCRjk1RTlDQTIz NUNFRkVCODAeFw0yNTA3MzAxMTMzMDJaFw0yNTA4MDQwMDEyMDJaMDMxMTAvBgNV BAMTKDQzNzkzQUU4RDk4NUJBRjQ1Mjk4QjY3NzBFODM3NjZFNzg5QTNDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOMA4nUnlKSFYDc+mjodWeG8f G0W5osvosF00L0jAG+GkaoPqzCEJ1ofg+U9oA1g2LIjiWxDfOFISd71+uhFbPqiZ cQCb034YIxHsoclnLeKbwkddM+GAWRCGIT4BWamVpImhVp3n+LNyZUbIydqbvO5A cb0EKYwjRzEKD9AT6hkc1SrO0GdvqgNTIrFxPdknW3zeQhWOrc/iVYjxOp6ux8Uz iDIRbrmoGF4H+j45JnWaW1/FihxFYFSDqtG30b/V6RyQHY3Ycj2rJBpGEUV/vwJs /QFinAQXIdBL9EA6IVp6PvfkxKs7JaUY7+VTlZze2pg6kMDQoOkMNNmCqgZpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQ3k66NmFuvRSmLZ3DoN2bniaPAswHwYDVR0j BBgwFoAUT0ORcydnNkW9C1IL+V6cojXO/rgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRjhCODc1MDNBODRFNDhGNzY1MjA4NEVBQzhBRjBERTdD QjM1N0E1NUNEQ0EyRjRCNjgyNzI0QjM1NkI4NzdGLzAvNEY0MzkxNzMyNzY3MzY0 NUJEMEI1MjBCRjk1RTlDQTIzNUNFRkVCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RjQzOTE3MzI3NjczNjQ1QkQw QjUyMEJGOTVFOUNBMjM1Q0VGRUI4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0Y4Qjg3NTAzQTg0RTQ4Rjc2NTIwODRFQUM4QUYwREU3Q0IzNTdBNTVD RENBMkY0QjY4MjcyNEIzNTZCODc3Ri8wLzRGNDM5MTczMjc2NzM2NDVCRDBCNTIw QkY5NUU5Q0EyMzVDRUZFQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3WbaAxZJwL8AFhSeqHQ8iDYMj X6cVefh3TP4UYcd/Y6FHRJZwlFxPeQIn0dYTv48usud28CnvR2QL5zHWfcEn/F21 I1XjJXAPsKRdPgdmzDJombuo6k52ME1X1AIFHZy9OnFjMBQcHYQTAwzNHeOCRFbN CGY5Ate4TalbN0xpqN3xxHO+Er07ck/eItdivQ8HAwPZzI8sox/YKpPo8ymNLSjx 0wNkP7DoflzHnV4is6di7UU3zANmedTCzXY4zAa7PB0DaNkNLvy6Iv9zsM+zlY0X MyJjyUZ/vuC9AP/tFDo+5XiZeHmbJB/QqU7Zne2+4cs3FiktXIMamiA8DNNs -----END CERTIFICATE-----Generated at Thu Jul 31 05:29:00 2025 by rpki-client