$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft File: B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft (raw, json) Hash identifier: Sh70Pr0hgzkzlOrUTgbGNcw09FmVuf+fTMc41696SmY= Subject key identifier: 9A:68:7B:9A:90:E7:38:E3:8E:A7:2E:93:59:9C:0C:6E:19:E1:E7:2E Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C Certificate issuer: /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C Certificate serial: 110B88734F7D2A57D75F0EA11F7EE3CB5083D1FB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft Manifest number: 21 Signing time: Thu 31 Jul 2025 04:33:49 +0000 Manifest this update: Thu 31 Jul 2025 04:28:49 +0000 Manifest next update: Mon 04 Aug 2025 21:51:49 +0000 Files and hashes: 1: 3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa (hash: YCi00WPXCoH+LgxMFocBT7un54JV2nliIXmT+l48sxk=) 2: 3133382e3131372e34322e302f32332d3234203d3e20323639393830.roa (hash: E5LqNaN3vz2pDbnV2zQffecdaqEFCwiCwo6Rk9fPoUw=) 3: 3133382e3131372e34312e302f32342d3234203d3e20323732383132.roa (hash: Yt36B7paDtRu4f6ICSs4KBJtd8+g3vYrJ7uxpyvXZbs=) 4: 3137302e3235342e302e302f32342d3234203d3e20323733383938.roa (hash: tszXPe25GBxu/9UDfFXI4a21YVCnnv5vf5oBOy24eSk=) 5: 3137302e3235342e312e302f32342d3234203d3e20323639393830.roa (hash: 43QsRslbnOnwz5eucThnScAyAORAVUvwdtIkI+tGO8Y=) 6: 3137302e3235342e322e302f32332d3234203d3e20323639393830.roa (hash: CItMQH29ECgQCakcJvSYI5xDtTvSW3JNHbBhHKOGzZ4=) 7: 323830333a316135303a3a2f33322d3332203d3e20323639393830.roa (hash: yjxjeOB1Q5ACKTd4vciwlK8fAjFY+aglQpK8KDxgyfY=) 8: B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl (hash: KzVFLZuN6ZL4ufSEh/TvdSYKBlQMWpNmbONm/K1xfzY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0b:88:73:4f:7d:2a:57:d7:5f:0e:a1:1f:7e:e3:cb:50:83:d1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C Validity Not Before: Jul 31 04:28:49 2025 GMT Not After : Aug 4 21:51:49 2025 GMT Subject: CN=9A687B9A90E738E38EA72E93599C0C6E19E1E72E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:2e:2a:db:27:d5:33:73:2e:a7:8c:ff:7d: 07:03:31:a4:94:53:9f:4c:cb:08:12:c1:ce:47:a2: 3d:f2:7d:ec:01:ec:b5:58:f5:0c:a4:e5:12:cd:26: 04:ba:28:aa:5f:98:38:43:3e:45:53:40:dd:67:81: 87:f8:db:dd:fc:c1:bf:6a:af:39:f1:b6:22:1f:27: 1d:51:52:5f:cc:e1:51:c7:d8:00:e0:46:83:08:a5: eb:c6:2e:52:18:0d:07:f7:c5:dc:6c:57:28:f2:24: 8b:34:09:56:4d:99:11:1d:2e:45:40:c7:90:ab:91: 61:a2:ed:85:0b:05:c0:dc:17:ed:69:e1:2e:6d:50: 37:d8:92:d7:f1:5e:e6:12:b2:4e:9b:7e:62:9e:78: 41:2f:82:03:a2:49:83:05:46:51:75:f9:6e:9f:3b: 58:0f:6d:2f:bd:f4:ee:65:92:64:85:0d:9b:5f:27: a3:61:1e:cc:95:95:00:15:09:6b:9c:9f:57:9a:4a: 92:ad:fc:51:7e:e6:ce:0a:c6:c0:6c:98:5d:2d:2b: b0:17:80:c0:b9:1d:e8:9c:22:a9:25:32:df:e2:d8: 13:d4:f0:77:09:e6:f2:48:94:9d:8b:96:2d:6a:4e: 72:d9:81:fa:40:cf:ad:30:7a:62:60:c1:a4:4f:fb: 7e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:68:7B:9A:90:E7:38:E3:8E:A7:2E:93:59:9C:0C:6E:19:E1:E7:2E X509v3 Authority Key Identifier: keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:60:8c:eb:f5:7e:08:e5:d1:9c:4f:a5:fb:63:18:4e:6a:8f: 5a:0d:dc:c3:0a:05:51:0d:11:5a:0a:78:a8:1e:07:d1:84:e0: 42:0d:e0:64:de:a8:b6:67:ca:89:44:fb:6e:b0:f0:51:45:3c: ff:cc:c5:a6:25:04:5b:b8:be:55:e9:a6:03:5f:b7:16:cf:ab: ff:02:74:dc:6b:0b:2a:f7:5b:56:4e:34:41:8f:07:40:4b:e0: 5c:cf:20:c4:6d:0d:e9:94:17:38:92:dc:1c:38:bc:7f:07:ae: 26:77:9d:37:3c:35:b7:eb:e9:15:08:dd:8a:1e:cb:cf:6f:8a: 5c:86:39:b3:0e:a2:5e:9f:b0:c9:99:0b:9c:18:f7:ab:30:ba: 3e:f9:b8:49:a5:34:c5:85:fb:e0:cd:c5:14:3a:6d:79:3d:56: 24:43:69:e2:6c:f7:ae:d0:6b:a3:f8:1d:6f:ca:5e:fe:78:f2: 07:71:8e:e3:0a:a0:91:2d:f6:99:27:78:3d:15:ff:d8:8a:db: f1:30:97:f5:a0:7c:ce:e8:63:a2:b9:70:b6:08:72:ff:96:cc: 43:cb:fd:36:87:14:00:f3:e5:c7:b3:04:f4:f7:bc:d2:d8:70: 26:47:43:a9:24:c8:52:6c:ba:81:ec:8c:8d:12:97:b5:a1:53: 0d:1c:b9:48 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEQuIc099KlfXXw6hH37jy1CD0fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5RENEQjY0RTUwNkVBQzVDODBFOUE2QTBFMjJGMERG MjVENzIzQzAeFw0yNTA3MzEwNDI4NDlaFw0yNTA4MDQyMTUxNDlaMDMxMTAvBgNV BAMTKDlBNjg3QjlBOTBFNzM4RTM4RUE3MkU5MzU5OUMwQzZFMTlFMUU3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nS4q2yfVM3Mup4z/fQcDMaSU U59MywgSwc5Hoj3yfewB7LVY9Qyk5RLNJgS6KKpfmDhDPkVTQN1ngYf42938wb9q rznxtiIfJx1RUl/M4VHH2ADgRoMIpevGLlIYDQf3xdxsVyjyJIs0CVZNmREdLkVA x5CrkWGi7YULBcDcF+1p4S5tUDfYktfxXuYSsk6bfmKeeEEvggOiSYMFRlF1+W6f O1gPbS+99O5lkmSFDZtfJ6NhHsyVlQAVCWucn1eaSpKt/FF+5s4KxsBsmF0tK7AX gMC5HeicIqklMt/i2BPU8HcJ5vJIlJ2Lli1qTnLZgfpAz60wemJgwaRP+36nAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmmh7mpDnOOOOpy6TWZwMbhnh5y4wHwYDVR0j BBgwFoAUsZ3Ntk5QbqxcgOmmoOIvDfJdcjwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTMyQjY5Q0JFMzQxNDAzMjdEMzgwMjk3MEJGRkZCRTkx MTJDMEM4NEI0QUQ1OEMyOEQ0NEUxNTc4NTUwMDYxLzAvQjE5RENEQjY0RTUwNkVB QzVDODBFOUE2QTBFMjJGMERGMjVENzIzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTlEQ0RCNjRFNTA2RUFDNUM4 MEU5QTZBMEUyMkYwREYyNUQ3MjNDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzMkI2OUNCRTM0MTQwMzI3RDM4MDI5NzBCRkZGQkU5MTEyQzBDODRC NEFENThDMjhENDRFMTU3ODU1MDA2MS8wL0IxOURDREI2NEU1MDZFQUM1QzgwRTlB NkEwRTIyRjBERjI1RDcyM0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfYIzr9X4I5dGcT6X7YxhOao9a DdzDCgVRDRFaCnioHgfRhOBCDeBk3qi2Z8qJRPtusPBRRTz/zMWmJQRbuL5V6aYD X7cWz6v/AnTcawsq91tWTjRBjwdAS+BczyDEbQ3plBc4ktwcOLx/B64md503PDW3 6+kVCN2KHsvPb4pchjmzDqJen7DJmQucGPerMLo++bhJpTTFhfvgzcUUOm15PVYk Q2nibPeu0Guj+B1vyl7+ePIHcY7jCqCRLfaZJ3g9Ff/YitvxMJf1oHzO6GOiuXC2 CHL/lsxDy/02hxQA8+XHswT097zS2HAmR0OpJMhSbLqB7IyNEpe1oVMNHLlI -----END CERTIFICATE-----Generated at Thu Jul 31 10:05:40 2025 by rpki-client