$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json) Hash identifier: 1FXLz3VV5SDf26I8JpjUUBP+nySW5criAX//lPUUaCo= Subject key identifier: 87:7B:C2:BE:DA:09:0F:95:E1:67:37:E4:6A:69:B2:CA:34:EB:4C:70 Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Certificate serial: 23B8C3459F4061091ABF186106DF7D701023CAE2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft Manifest number: 0101 Signing time: Mon 21 Jul 2025 08:54:24 +0000 Manifest this update: Mon 21 Jul 2025 08:49:24 +0000 Manifest next update: Sat 26 Jul 2025 02:40:24 +0000 Files and hashes: 1: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: K19p+yXcy+CgVONhg3MR+0hnwWa+3DKSVXeRZwbG8L8=) 2: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: vZjAfk2z5Z6b+6GTrUBJdEEDa8DBAoi/pI9ehH+AnYk=) 3: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: /D7cnLnJXa5ipFVdP+IaE3sgufXRlHkmM6F8ATrITQk=) 4: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: 0u08Cid5xh0s+ifK8ZpB7h+HuLO4xH8CFKw8rUTG+LU=) 5: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: gfviGrTFnzyeLB88khtlrnlCTNwPw5ULi+OBoE5f+t4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b8:c3:45:9f:40:61:09:1a:bf:18:61:06:df:7d:70:10:23:ca:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Validity Not Before: Jul 21 08:49:24 2025 GMT Not After : Jul 26 02:40:24 2025 GMT Subject: CN=877BC2BEDA090F95E16737E46A69B2CA34EB4C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:ef:06:1b:0c:26:87:68:53:66:54:69:08: bc:a8:6b:98:4f:2d:e0:c0:52:8c:66:31:56:75:8b: 42:ab:74:d9:ee:f4:36:da:3a:64:c5:0e:c4:fa:13: c4:d1:70:81:51:1d:81:84:c0:12:e7:c3:f9:59:11: 18:d7:ed:c3:30:a2:70:d3:42:93:97:68:c4:af:78: a0:33:b2:6c:3e:6e:e3:6f:1c:85:0c:d4:d5:c7:02: db:81:16:d8:11:c7:f2:b8:df:45:cd:27:55:2a:1a: 0d:7e:5a:27:62:76:3e:f2:b9:ab:9c:1c:b6:56:3d: 19:0c:1d:ae:80:af:a7:9e:6a:75:1b:e9:f7:dc:5e: 70:9b:d2:96:c2:6e:12:cf:f7:88:ad:07:7c:51:c1: 5a:d6:85:fa:74:17:b8:fb:32:57:50:8f:1a:92:d1: 27:b9:9a:aa:27:f0:2a:aa:f2:8f:44:03:31:e8:a7: ba:fe:ef:ff:09:f3:fc:6e:c1:4a:59:90:db:54:8e: d1:46:2c:39:94:69:57:23:c1:f5:f0:8a:8f:a1:a3: 6f:ae:1c:61:f1:9a:9f:b5:40:18:2a:80:f1:cd:a4: 2a:24:d7:27:8b:94:20:33:41:82:4b:e6:e5:98:20: 55:01:21:90:7e:48:0a:37:de:bd:41:53:60:b0:f2: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7B:C2:BE:DA:09:0F:95:E1:67:37:E4:6A:69:B2:CA:34:EB:4C:70 X509v3 Authority Key Identifier: keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:19:a2:61:90:75:7b:64:e1:10:80:a5:f4:7d:d7:d9:37:68: f8:e5:36:e5:99:4d:66:f6:a4:d2:c6:5f:e1:0b:fe:e6:b7:3e: c0:29:27:d3:15:03:1c:10:c6:d5:4e:cf:a2:8b:1b:93:a4:38: 68:f4:b7:d5:d8:5f:70:bc:7e:52:1f:8a:6a:db:ab:94:85:13: 26:e8:23:01:14:55:a2:55:3f:3a:02:63:b1:a5:37:77:45:66: 3b:f5:50:f2:1d:14:bc:e9:58:b6:f5:58:4b:8f:95:3f:b1:79: 3c:38:92:67:89:3f:c3:b6:65:a3:e3:3e:96:c1:e7:48:a4:88: 65:b6:cf:30:5c:22:aa:7f:0c:2e:51:d5:b7:0a:cc:28:d3:20: bc:c5:f8:99:47:06:72:26:93:35:55:b2:d0:ca:f0:3b:8f:bc: e0:c4:3c:53:8f:56:e0:b0:81:c0:ec:5b:c1:af:18:75:f7:0c: 5e:39:51:b7:a4:4f:0a:72:41:21:e8:16:04:cc:76:5f:ac:a7: 81:97:9a:88:d5:a0:92:d3:7b:f4:f9:d2:20:23:96:01:d2:67: 92:48:58:fb:d9:9b:c2:5f:e5:93:3a:fd:dc:2c:79:42:5e:1f: bc:68:2d:b6:e3:ed:7f:c4:fa:c8:bd:a1:59:84:e6:f7:d4:09: 09:f1:02:7b -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUI7jDRZ9AYQkavxhhBt99cBAjyuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy NERDRjdGQjAeFw0yNTA3MjEwODQ5MjRaFw0yNTA3MjYwMjQwMjRaMDMxMTAvBgNV BAMTKDg3N0JDMkJFREEwOTBGOTVFMTY3MzdFNDZBNjlCMkNBMzRFQjRDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwtu8GGwwmh2hTZlRpCLyoa5hP LeDAUoxmMVZ1i0KrdNnu9DbaOmTFDsT6E8TRcIFRHYGEwBLnw/lZERjX7cMwonDT QpOXaMSveKAzsmw+buNvHIUM1NXHAtuBFtgRx/K430XNJ1UqGg1+Wididj7yuauc HLZWPRkMHa6Ar6eeanUb6ffcXnCb0pbCbhLP94itB3xRwVrWhfp0F7j7MldQjxqS 0Se5mqon8Cqq8o9EAzHop7r+7/8J8/xuwUpZkNtUjtFGLDmUaVcjwfXwio+ho2+u HGHxmp+1QBgqgPHNpCok1yeLlCAzQYJL5uWYIFUBIZB+SAo33r1BU2Cw8lUrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUh3vCvtoJD5XhZzfkammyyjTrTHAwHwYDVR0j BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wL0RFRkE1QzVBRkU2M0Y2QjAyQzNDMzMz OTlEMkMxOTJFMjREQ0Y3RkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6GaJhkHV7ZOEQgKX0fdfZN2j4 5TblmU1m9qTSxl/hC/7mtz7AKSfTFQMcEMbVTs+iixuTpDho9LfV2F9wvH5SH4pq 26uUhRMm6CMBFFWiVT86AmOxpTd3RWY79VDyHRS86Vi29VhLj5U/sXk8OJJniT/D tmWj4z6WwedIpIhlts8wXCKqfwwuUdW3Cswo0yC8xfiZRwZyJpM1VbLQyvA7j7zg xDxTj1bgsIHA7FvBrxh19wxeOVG3pE8KckEh6BYEzHZfrKeBl5qI1aCS03v0+dIg I5YB0meSSFj72ZvCX+WTOv3cLHlCXh+8aC224+1/xPrIvaFZhOb31AkJ8QJ7 -----END CERTIFICATE-----Generated at Mon Jul 21 13:28:10 2025 by rpki-client