$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft File: CD721CE88C796E837A067F6BF32EA1016FA71013.mft (raw, json) Hash identifier: XBtmnCPWtRkKgxFGtZO/kC1lv6o3dEQgtpw9GxvSHkY= Subject key identifier: A4:9B:CA:E6:B7:55:D8:63:79:8E:4D:F8:77:16:13:88:BC:CB:40:FB Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 Certificate issuer: /CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Certificate serial: 0CCB698F9DDB76CE04CD43297AF54C0618E38F14 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft Manifest number: 0102 Signing time: Thu 24 Jul 2025 16:49:16 +0000 Manifest this update: Thu 24 Jul 2025 16:44:16 +0000 Manifest next update: Wed 30 Jul 2025 10:03:16 +0000 Files and hashes: 1: 323830313a3137343a3a2f34342d3438203d3e20323731373830.roa (hash: +A4iKTCl2MV1Tx5ypvBU9+eqzsUV2xgEqANt9HERoD0=) 2: CD721CE88C796E837A067F6BF32EA1016FA71013.crl (hash: /UA7zpC7a08ty7SXUMD/568hnqiPtFMXu2UrnacFA1g=) 3: 34352e3233332e342e302f32322d3234203d3e20323731373830.roa (hash: +Ehqe5AsijtKZOHSCGOIJa3pckbUIwcG5kJITFHRXM0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 10:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cb:69:8f:9d:db:76:ce:04:cd:43:29:7a:f5:4c:06:18:e3:8f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013 Validity Not Before: Jul 24 16:44:16 2025 GMT Not After : Jul 30 10:03:16 2025 GMT Subject: CN=A49BCAE6B755D863798E4DF877161388BCCB40FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:0b:13:f0:a9:50:cc:0e:63:b2:bc:9e:11: c6:7e:a8:0c:52:d7:21:f4:e7:a7:da:66:d0:79:fd: 29:c7:7b:9e:6f:11:95:42:87:02:3c:6e:32:c9:de: 06:d4:ce:94:69:15:78:db:a2:46:ff:b7:52:da:19: 45:31:62:9e:17:04:c5:1a:ae:90:38:92:aa:5c:9b: c7:e4:f7:4d:1a:a8:cb:0e:c4:6e:33:d3:58:10:e7: e7:a3:9e:f9:a3:d9:d5:9b:ba:01:ab:03:06:d5:8b: d2:7b:5b:7b:d1:6b:44:1a:84:c2:79:8e:f7:dc:24: 3c:2f:5c:19:33:74:85:e7:fc:e7:56:13:1b:03:d0: d2:ef:46:62:23:19:aa:41:03:51:4d:e4:fd:4f:6d: 6a:fc:5d:3f:5f:5b:42:28:50:00:87:c4:63:d6:8d: 1a:47:ca:17:06:5f:79:db:09:41:3f:04:35:99:84: e2:38:a2:7c:f9:7b:b1:48:c5:3d:2d:de:bb:27:fa: bd:ac:81:ab:ef:b7:15:b9:14:d4:a9:97:be:ed:b9: 43:53:f9:94:7c:28:b2:02:8c:a0:12:c7:48:61:57: 80:2a:34:e4:c5:57:2f:1c:7e:40:c2:a2:2c:39:ca: 47:4e:31:82:c6:ed:01:b7:b4:7f:77:f8:65:b4:a7: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9B:CA:E6:B7:55:D8:63:79:8E:4D:F8:77:16:13:88:BC:CB:40:FB X509v3 Authority Key Identifier: keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:c4:1d:33:6c:e6:a1:09:e5:4b:94:50:9d:20:2e:1c:45:5c: 4d:cf:cf:51:0f:e7:68:01:a3:9e:b2:dc:98:8c:bd:6a:59:5e: 4a:72:33:89:08:40:cc:30:d2:3a:0d:78:e4:c9:92:33:96:77: 46:81:e5:b9:2c:7b:39:54:53:9a:37:b5:0e:a0:65:c2:ff:98: 3f:94:07:2d:f8:d6:d9:c9:3c:73:d2:fa:52:c5:83:13:96:89: 9a:67:e4:7b:f4:3b:b4:bc:dd:ec:a5:7f:71:b2:e0:2c:55:3d: d3:8e:fd:96:39:db:85:f5:eb:cd:23:d5:0e:2f:75:28:0d:14: 62:34:99:d1:13:62:79:d4:11:ba:82:a3:cb:66:46:1c:41:57: 9a:4e:f5:b8:ea:be:cf:f0:18:4c:dd:7e:68:71:4c:1a:29:6e: 33:5e:48:be:04:ce:c2:db:a9:06:b1:fa:3e:f9:e5:be:df:86: cf:a6:33:c9:3b:1b:25:41:7a:af:4e:c5:16:7f:b0:20:8b:10: d6:69:d5:ef:0d:e2:1e:84:b5:b2:ad:e3:05:fd:3e:a1:17:64: 87:bc:62:9a:da:71:80:22:76:10:cf:fe:bf:3a:8c:c2:54:f5: 82:d3:1f:c7:76:42:32:3b:a0:7d:82:8f:cd:09:8d:84:45:2c: 23:93:15:c9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDMtpj53bds4EzUMpevVMBhjjjxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3MjFDRTg4Qzc5NkU4MzdBMDY3RjZCRjMyRUExMDE2 RkE3MTAxMzAeFw0yNTA3MjQxNjQ0MTZaFw0yNTA3MzAxMDAzMTZaMDMxMTAvBgNV BAMTKEE0OUJDQUU2Qjc1NUQ4NjM3OThFNERGODc3MTYxMzg4QkNDQjQwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dQsT8KlQzA5jsryeEcZ+qAxS 1yH056faZtB5/SnHe55vEZVChwI8bjLJ3gbUzpRpFXjbokb/t1LaGUUxYp4XBMUa rpA4kqpcm8fk900aqMsOxG4z01gQ5+ejnvmj2dWbugGrAwbVi9J7W3vRa0QahMJ5 jvfcJDwvXBkzdIXn/OdWExsD0NLvRmIjGapBA1FN5P1PbWr8XT9fW0IoUACHxGPW jRpHyhcGX3nbCUE/BDWZhOI4onz5e7FIxT0t3rsn+r2sgavvtxW5FNSpl77tuUNT +ZR8KLICjKASx0hhV4AqNOTFVy8cfkDCoiw5ykdOMYLG7QG3tH93+GW0p/SPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUpJvK5rdV2GN5jk34dxYTiLzLQPswHwYDVR0j BBgwFoAUzXIc6Ix5boN6Bn9r8y6hAW+nEBMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GNDg3QUYyQTQwREZFNEExMTQ1RUMzMTgyMzQ0N0YwMDRF QzE0ODlDQkIwQ0I2NDNCRUExOUY5MjQ1MTYyODg3LzAvQ0Q3MjFDRTg4Qzc5NkU4 MzdBMDY3RjZCRjMyRUExMDE2RkE3MTAxMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRDcyMUNFODhDNzk2RTgzN0Ew NjdGNkJGMzJFQTEwMTZGQTcxMDEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRjQ4N0FGMkE0MERGRTRBMTE0NUVDMzE4MjM0NDdGMDA0RUMxNDg5Q0JC MENCNjQzQkVBMTlGOTI0NTE2Mjg4Ny8wL0NENzIxQ0U4OEM3OTZFODM3QTA2N0Y2 QkYzMkVBMTAxNkZBNzEwMTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDKxB0zbOahCeVLlFCdIC4cRVxN z89RD+doAaOestyYjL1qWV5KcjOJCEDMMNI6DXjkyZIzlndGgeW5LHs5VFOaN7UO oGXC/5g/lAct+NbZyTxz0vpSxYMTlomaZ+R79Du0vN3spX9xsuAsVT3Tjv2WOduF 9evNI9UOL3UoDRRiNJnRE2J51BG6gqPLZkYcQVeaTvW46r7P8BhM3X5ocUwaKW4z Xki+BM7C26kGsfo++eW+34bPpjPJOxslQXqvTsUWf7AgixDWadXvDeIehLWyreMF /T6hF2SHvGKa2nGAInYQz/6/OozCVPWC0x/HdkIyO6B9go/NCY2ERSwjkxXJ -----END CERTIFICATE-----Generated at Sat Jul 26 21:22:04 2025 by rpki-client