$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: 3KQAlDEY+9GYV/4grR6glpsQrJYPFKj/PKMQYg8ev60= Subject key identifier: BD:09:F8:6C:62:06:47:D6:70:71:58:A2:BD:34:4E:0A:95:36:88:08 Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 38541DF4DEF6FA641953291E4B5AEDE5FD8B4176 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: 0101 Signing time: Sun 20 Jul 2025 16:02:58 +0000 Manifest this update: Sun 20 Jul 2025 15:57:58 +0000 Manifest next update: Sat 26 Jul 2025 06:38:58 +0000 Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: YTELi/ooAIakWrD8RJSRTu9XJTBLzGK18trDxURtPTw=) 2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:54:1d:f4:de:f6:fa:64:19:53:29:1e:4b:5a:ed:e5:fd:8b:41:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Jul 20 15:57:58 2025 GMT Not After : Jul 26 06:38:58 2025 GMT Subject: CN=BD09F86C620647D6707158A2BD344E0A95368808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:0a:0d:4c:23:45:86:9d:a3:f6:90:92:d7: c1:58:ac:74:af:f3:e9:f2:bd:94:ba:7f:1a:eb:bd: 1c:1a:6c:58:bb:66:18:76:3d:07:c7:24:3a:26:23: 75:bc:79:db:ce:c3:41:17:41:94:8b:23:13:20:19: 98:5f:40:eb:26:8f:dc:e6:38:1c:dd:87:9c:2d:a1: 4e:e4:30:49:96:3e:5e:f9:0f:c2:2a:aa:fa:ae:d6: 44:2a:08:b2:dd:87:33:26:28:41:91:29:15:37:5b: 51:2a:c1:aa:29:fc:3b:49:1e:df:cb:d5:3b:e3:3f: b2:3a:bb:f5:d1:b8:7d:9d:42:70:db:a6:6e:23:c2: 59:38:82:f6:37:82:36:3a:91:ae:a4:95:3d:eb:e8: e3:8f:f3:46:c3:c2:e3:b8:41:65:c7:57:b9:17:12: 54:8b:75:ef:99:f0:28:51:90:83:43:59:ec:fc:8c: ff:3c:63:57:d1:77:91:02:0d:8e:32:f2:a1:af:1c: 84:e1:83:9e:12:ac:b0:09:61:2d:16:39:c6:61:1b: 91:43:b6:6b:c8:33:e8:a2:8a:72:74:26:1b:05:6f: 7c:82:e3:fb:30:fb:5e:02:96:0f:2f:b8:9f:7c:6d: e6:14:8d:c8:69:d0:d7:4a:6e:c7:8d:9c:0e:81:ce: 0d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:09:F8:6C:62:06:47:D6:70:71:58:A2:BD:34:4E:0A:95:36:88:08 X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:00:0e:35:ed:d5:6f:e1:c0:d4:88:41:df:9b:c9:08:9e:25: 60:ca:21:cc:80:b4:2a:f3:7e:1a:97:d2:3e:10:84:b4:e1:01: 28:f4:2b:25:22:97:2a:d0:0a:39:d6:da:d3:b1:68:fe:27:8d: b1:21:04:7b:6b:2a:80:9a:2a:2e:84:da:14:87:19:79:25:94: d6:1f:a2:d2:8e:95:25:9a:5c:6c:42:34:4c:ef:e5:1e:dc:93: 5b:1b:83:87:66:70:45:a8:a0:f9:06:78:24:a3:8f:3a:42:3c: 9a:71:2f:52:a4:1d:ce:fc:45:5b:c0:d2:16:85:cb:ea:54:0f: cb:47:a6:f0:05:7d:6c:fb:73:fb:f2:04:50:1b:79:19:41:94: b4:31:79:f7:80:5d:13:fe:45:e3:68:5d:d2:7b:dd:cf:09:9a: 23:ab:7e:74:7e:28:61:fe:1a:9a:df:4d:43:6d:c5:9b:9a:fc: 79:b9:d5:5a:bc:14:14:ef:9a:f8:e4:61:cb:76:cd:df:1d:95: 20:8c:f9:73:84:6f:f4:23:c2:f2:50:77:d3:52:ac:59:54:72: e1:1a:0f:b4:7a:0a:11:25:21:e1:6a:cc:47:de:d8:3b:78:c2: da:00:7d:63:11:c0:85:32:35:31:57:c3:8b:37:f9:86:41:0f: 6a:9a:3e:54 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOFQd9N72+mQZUykeS1rt5f2LQXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTA3MjAxNTU3NThaFw0yNTA3MjYwNjM4NThaMDMxMTAvBgNV BAMTKEJEMDlGODZDNjIwNjQ3RDY3MDcxNThBMkJEMzQ0RTBBOTUzNjg4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FwoNTCNFhp2j9pCS18FYrHSv 8+nyvZS6fxrrvRwabFi7Zhh2PQfHJDomI3W8edvOw0EXQZSLIxMgGZhfQOsmj9zm OBzdh5wtoU7kMEmWPl75D8Iqqvqu1kQqCLLdhzMmKEGRKRU3W1Eqwaop/DtJHt/L 1TvjP7I6u/XRuH2dQnDbpm4jwlk4gvY3gjY6ka6klT3r6OOP80bDwuO4QWXHV7kX ElSLde+Z8ChRkINDWez8jP88Y1fRd5ECDY4y8qGvHIThg54SrLAJYS0WOcZhG5FD tmvIM+iiinJ0JhsFb3yC4/sw+14Clg8vuJ98beYUjchp0NdKbseNnA6Bzg0nAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvQn4bGIGR9ZwcViivTROCpU2iAgwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABAA417dVv4cDUiEHfm8kIniVg yiHMgLQq834al9I+EIS04QEo9CslIpcq0Ao51trTsWj+J42xIQR7ayqAmiouhNoU hxl5JZTWH6LSjpUlmlxsQjRM7+Ue3JNbG4OHZnBFqKD5Bngko486QjyacS9SpB3O /EVbwNIWhcvqVA/LR6bwBX1s+3P78gRQG3kZQZS0MXn3gF0T/kXjaF3Se93PCZoj q350fihh/hqa301DbcWbmvx5udVavBQU75r45GHLds3fHZUgjPlzhG/0I8LyUHfT UqxZVHLhGg+0egoRJSHhasxH3tg7eMLaAH1jEcCFMjUxV8OLN/mGQQ9qmj5U -----END CERTIFICATE-----Generated at Sun Jul 20 22:58:48 2025 by rpki-client