$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft File: D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft (raw, json) Hash identifier: 8BbZ7YXmkISBZGAPImQfgrUt6eQccLU0mDS/vw1TSR4= Subject key identifier: 55:8B:64:3D:4C:03:06:0B:0D:00:49:C5:6A:97:D8:A2:22:A2:D9:53 Authority key identifier: D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4 Certificate issuer: /CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4 Certificate serial: 25375D49324A295828D18B30C4BE9594419B2B08 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft Manifest number: 0104 Signing time: Thu 24 Jul 2025 12:21:37 +0000 Manifest this update: Thu 24 Jul 2025 12:16:37 +0000 Manifest next update: Wed 30 Jul 2025 11:37:37 +0000 Files and hashes: 1: D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl (hash: TLJEmkOTELGQes0jdo1MwNVvZkly1ZiH8DZUAUUAKXM=) 2: 3134332e3230382e34342e302f32322d3234203d3e20323633383039.roa (hash: rWUrUFUbpH7MhKijm3A1z4zeGHfwub32yD+sCdybpVc=) 3: 323830333a353234303a3a2f33322d3438203d3e20323633383039.roa (hash: iN2G0KfjphALZWiPbhnV7MbnqGOYSvmiwgW3jPpmug8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 22:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:37:5d:49:32:4a:29:58:28:d1:8b:30:c4:be:95:94:41:9b:2b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4 Validity Not Before: Jul 24 12:16:37 2025 GMT Not After : Jul 30 11:37:37 2025 GMT Subject: CN=558B643D4C03060B0D0049C56A97D8A222A2D953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:d6:5d:12:36:ec:e9:e9:c8:9f:86:6d:7c: c9:e7:0b:d5:3f:d5:8b:ef:62:da:07:6c:84:3a:28: 9e:c3:4e:c8:f9:e5:03:bc:e5:28:8b:f6:7c:55:3a: 8b:5f:5a:97:fd:ff:78:ab:77:f0:24:0e:31:a6:98: 64:48:73:db:c6:86:c5:a8:e7:67:7f:de:ef:32:c8: f5:56:05:38:30:cd:9c:dc:40:a2:74:77:53:e6:18: b3:0e:93:e4:91:e3:1b:4c:1c:ce:af:e7:81:3e:32: 6b:5e:19:89:fa:2a:2d:e2:5e:c4:bd:98:9c:72:c5: ec:08:ae:37:b2:a8:2f:47:ba:83:f1:3f:30:2f:7d: a1:9d:80:f3:bb:d9:9f:5a:da:9b:61:a3:ae:84:e8: 96:bb:40:d0:26:75:a7:02:bd:93:38:64:f5:82:13: e6:48:44:d4:f8:6a:29:15:ed:b9:67:ed:62:36:d7: ac:a4:32:6c:43:5c:18:74:69:44:88:dc:fe:04:17: 13:62:eb:98:94:dd:f1:10:b1:af:60:98:03:97:eb: 24:ec:8f:63:02:4c:69:35:28:0b:4f:16:11:79:23: 95:09:43:9d:ba:dc:c3:33:66:2f:7a:d3:18:02:61: e9:24:01:3e:8c:da:4e:76:36:97:97:8e:f3:ae:a6: 88:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8B:64:3D:4C:03:06:0B:0D:00:49:C5:6A:97:D8:A2:22:A2:D9:53 X509v3 Authority Key Identifier: keyid:D6:24:E8:0C:8C:B9:C3:5D:4D:B5:ED:41:AB:AA:3B:7F:47:1A:CC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D604048489DF8B40EF37EE26DA3623E54DBD51D2B9EAFA8574AC81CAFB1B2411/0/D624E80C8CB9C35D4DB5ED41ABAA3B7F471ACCE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9a:a3:da:e6:87:c0:df:f9:36:de:ea:0e:97:44:8c:86:98: b3:77:32:2f:d4:f3:40:8b:a8:76:ce:7c:38:7c:45:0d:87:c3: 15:76:a0:94:9f:b0:d3:bd:4f:13:d1:3c:45:0d:ec:5a:6e:2d: 6e:b1:36:e7:0f:ad:b8:50:a2:b4:60:49:3d:26:ed:8e:e4:8f: 70:94:ee:8a:86:44:3e:3e:85:74:56:d2:05:c1:2c:2b:c8:9d: 66:ef:49:26:df:fb:7f:fd:91:de:d7:e4:e9:5d:8d:ca:1b:00: 4f:76:10:0f:12:56:1e:73:be:69:5b:cc:ba:a4:a9:39:8a:92: e0:98:46:94:4c:84:29:c7:e5:17:29:46:08:2d:de:3f:17:0f: 94:ec:0f:ba:1a:2a:b2:17:3a:06:cf:ae:f5:d1:e7:8a:9e:81: 9f:28:72:9e:a3:6e:6b:a6:ea:6f:28:86:80:e5:8d:b6:ba:0d: 8c:71:65:d6:8d:9b:9c:70:42:be:bd:f4:86:cb:90:a4:35:6f: 9f:75:35:6d:bc:fb:f3:90:2c:e5:2a:44:9a:a2:2a:0f:c6:3d: c6:cc:1f:1f:14:1a:50:10:3b:28:40:1d:9c:9e:6f:17:1e:04: b8:ca:19:ea:ff:65:57:ff:75:a4:df:ff:bf:49:7c:26:5c:e9: a7:f8:4f:46 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJTddSTJKKVgo0YswxL6VlEGbKwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYyNEU4MEM4Q0I5QzM1RDREQjVFRDQxQUJBQTNCN0Y0 NzFBQ0NFNDAeFw0yNTA3MjQxMjE2MzdaFw0yNTA3MzAxMTM3MzdaMDMxMTAvBgNV BAMTKDU1OEI2NDNENEMwMzA2MEIwRDAwNDlDNTZBOTdEOEEyMjJBMkQ5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRjNZdEjbs6enIn4ZtfMnnC9U/ 1YvvYtoHbIQ6KJ7DTsj55QO85SiL9nxVOotfWpf9/3ird/AkDjGmmGRIc9vGhsWo 52d/3u8yyPVWBTgwzZzcQKJ0d1PmGLMOk+SR4xtMHM6v54E+MmteGYn6Ki3iXsS9 mJxyxewIrjeyqC9HuoPxPzAvfaGdgPO72Z9a2ptho66E6Ja7QNAmdacCvZM4ZPWC E+ZIRNT4aikV7bln7WI216ykMmxDXBh0aUSI3P4EFxNi65iU3fEQsa9gmAOX6yTs j2MCTGk1KAtPFhF5I5UJQ5263MMzZi960xgCYekkAT6M2k52NpeXjvOupoh5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUVYtkPUwDBgsNAEnFapfYoiKi2VMwHwYDVR0j BBgwFoAU1iToDIy5w11Nte1Bq6o7f0cazOQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENjA0MDQ4NDg5REY4QjQwRUYzN0VFMjZEQTM2MjNFNTRE QkQ1MUQyQjlFQUZBODU3NEFDODFDQUZCMUIyNDExLzAvRDYyNEU4MEM4Q0I5QzM1 RDREQjVFRDQxQUJBQTNCN0Y0NzFBQ0NFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjI0RTgwQzhDQjlDMzVENERC NUVENDFBQkFBM0I3RjQ3MUFDQ0U0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDYwNDA0ODQ4OURGOEI0MEVGMzdFRTI2REEzNjIzRTU0REJENTFEMkI5 RUFGQTg1NzRBQzgxQ0FGQjFCMjQxMS8wL0Q2MjRFODBDOENCOUMzNUQ0REI1RUQ0 MUFCQUEzQjdGNDcxQUNDRTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkmqPa5ofA3/k23uoOl0SMhpiz dzIv1PNAi6h2znw4fEUNh8MVdqCUn7DTvU8T0TxFDexabi1usTbnD624UKK0YEk9 Ju2O5I9wlO6KhkQ+PoV0VtIFwSwryJ1m70km3/t//ZHe1+TpXY3KGwBPdhAPElYe c75pW8y6pKk5ipLgmEaUTIQpx+UXKUYILd4/Fw+U7A+6GiqyFzoGz6710eeKnoGf KHKeo25rpupvKIaA5Y22ug2McWXWjZuccEK+vfSGy5CkNW+fdTVtvPvzkCzlKkSa oioPxj3GzB8fFBpQEDsoQB2cnm8XHgS4yhnq/2VX/3Wk3/+/SXwmXOmn+E9G -----END CERTIFICATE-----Generated at Fri Jul 25 13:32:28 2025 by rpki-client