$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.mft File: BAD81EEA76E7D45020375CA26672BEA75D5445E2.mft (raw, json) Hash identifier: /93YDDrZ0xlN7aSVxJvEw+aB2xXTGKihqQxf2YETOKE= Subject key identifier: 97:1A:11:DF:C6:8B:A0:14:70:E4:FF:3F:A4:63:3E:02:3D:49:BB:9A Authority key identifier: BA:D8:1E:EA:76:E7:D4:50:20:37:5C:A2:66:72:BE:A7:5D:54:45:E2 Certificate issuer: /CN=BAD81EEA76E7D45020375CA26672BEA75D5445E2 Certificate serial: 1C66BE76BE9DC2C6D85E041C317AE04952EC0C73 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.mft Manifest number: FD Signing time: Fri 25 Jul 2025 06:58:06 +0000 Manifest this update: Fri 25 Jul 2025 06:53:06 +0000 Manifest next update: Wed 30 Jul 2025 22:21:06 +0000 Files and hashes: 1: BAD81EEA76E7D45020375CA26672BEA75D5445E2.crl (hash: pOg5kBv5PptT4m7lhUUrUJRPm69nqbVKs+j/lPFSIBo=) 2: 3138372e3130322e3230382e302f32322d3234203d3e20323730303036.roa (hash: 5G9YqkaiZnk9lxZwK/HIA+CwEIb4VJWjQ4BwMikjegI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.crl rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 22:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:66:be:76:be:9d:c2:c6:d8:5e:04:1c:31:7a:e0:49:52:ec:0c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD81EEA76E7D45020375CA26672BEA75D5445E2 Validity Not Before: Jul 25 06:53:06 2025 GMT Not After : Jul 30 22:21:06 2025 GMT Subject: CN=971A11DFC68BA01470E4FF3FA4633E023D49BB9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:b3:15:0b:4e:60:a2:10:da:76:41:64:ae: 0e:74:64:c7:70:14:0e:a6:e3:dc:9a:d6:a8:2d:4e: e2:f0:9a:76:6b:28:87:74:26:76:46:59:7c:74:ef: 81:d9:bb:7b:11:78:31:fc:86:91:e2:a1:ea:57:ea: 27:b6:31:4c:58:6c:f5:52:d0:da:cb:2c:33:2b:9f: 57:50:a5:97:67:f1:bd:ee:b5:30:51:cd:c7:33:e3: 64:57:1e:32:80:12:48:60:0c:46:90:c4:69:a4:82: ff:ce:d6:6e:81:a5:d3:9b:b3:92:af:9b:38:55:e5: de:dd:c1:58:93:7b:66:0d:5c:38:96:05:89:61:5e: b8:ea:db:dd:23:9a:35:74:f5:02:9c:83:3c:4a:c6: c7:df:7c:ff:9d:59:23:42:6b:c8:8c:9d:c7:89:93: b2:71:9e:3e:50:1c:52:03:20:9d:c2:2c:65:3f:48: ea:fa:2d:8c:77:2a:2e:2c:db:a6:c2:2a:b3:6c:b8: 00:2a:ac:1e:03:1f:4a:35:1b:c3:1a:af:68:85:89: 16:48:0a:a5:75:03:63:29:35:cd:66:00:a7:d3:4d: 1c:b0:a4:db:58:07:1c:a5:32:40:8d:07:5f:85:3f: 11:6a:b8:18:fa:14:61:33:31:cf:11:fd:4d:78:ed: d6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1A:11:DF:C6:8B:A0:14:70:E4:FF:3F:A4:63:3E:02:3D:49:BB:9A X509v3 Authority Key Identifier: keyid:BA:D8:1E:EA:76:E7:D4:50:20:37:5C:A2:66:72:BE:A7:5D:54:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE236FA724016370C44FB9C98CC11BF273D23CA709B26C0B19A51C5A3B97BB5C/0/BAD81EEA76E7D45020375CA26672BEA75D5445E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ec:cf:1d:ac:bf:17:4d:d7:a7:23:51:a6:76:91:5f:ec:42: 92:98:d7:ed:1f:27:ad:1e:47:e4:b5:5f:a7:ee:f0:8d:a9:ab: b5:62:7b:e5:a8:30:63:8e:c6:a6:ea:e7:e4:dc:01:5f:93:4e: 9e:39:eb:9b:3f:8a:0a:d7:da:8a:9a:4b:3c:6f:ff:09:06:ee: b8:7a:c7:5a:cd:ae:04:90:55:51:7e:05:17:19:99:01:04:44: 62:08:4c:3c:56:c4:58:b5:63:0b:31:34:3a:bc:3b:cd:9f:7b: 38:2f:c8:0e:7d:b6:c8:05:45:b2:98:78:4b:bd:8f:d0:d7:9c: 46:8e:f8:f5:2c:2c:54:78:2f:4b:56:2e:2e:16:19:2d:07:45: f5:65:e5:e4:74:00:01:7e:d0:15:50:6c:6a:8d:09:ac:b4:d8: 0b:f3:ae:35:1f:1d:bc:7f:74:e5:6e:3f:8b:b6:cf:9e:3c:07: 70:d0:3c:4b:ed:99:96:6f:10:3b:1b:a6:20:b6:3e:65:cd:63: e6:55:0a:d7:4d:16:c2:92:02:55:07:77:c7:2a:ab:11:0a:4a: 75:f4:5e:b8:d4:71:db:42:03:48:9c:85:a9:db:f5:6e:f6:a4: 60:1c:10:c4:53:7b:30:d5:c0:ee:aa:84:1e:32:df:e2:f8:aa: a1:86:18:25 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHGa+dr6dwsbYXgQcMXrgSVLsDHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEODFFRUE3NkU3RDQ1MDIwMzc1Q0EyNjY3MkJFQTc1 RDU0NDVFMjAeFw0yNTA3MjUwNjUzMDZaFw0yNTA3MzAyMjIxMDZaMDMxMTAvBgNV BAMTKDk3MUExMURGQzY4QkEwMTQ3MEU0RkYzRkE0NjMzRTAyM0Q0OUJCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9LMVC05gohDadkFkrg50ZMdw FA6m49ya1qgtTuLwmnZrKId0JnZGWXx074HZu3sReDH8hpHioepX6ie2MUxYbPVS 0NrLLDMrn1dQpZdn8b3utTBRzccz42RXHjKAEkhgDEaQxGmkgv/O1m6BpdObs5Kv mzhV5d7dwViTe2YNXDiWBYlhXrjq290jmjV09QKcgzxKxsfffP+dWSNCa8iMnceJ k7Jxnj5QHFIDIJ3CLGU/SOr6LYx3Ki4s26bCKrNsuAAqrB4DH0o1G8Mar2iFiRZI CqV1A2MpNc1mAKfTTRywpNtYBxylMkCNB1+FPxFquBj6FGEzMc8R/U147dY/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUlxoR38aLoBRw5P8/pGM+Aj1Ju5owHwYDVR0j BBgwFoAUutge6nbn1FAgN1yiZnK+p11UReIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GRTIzNkZBNzI0MDE2MzcwQzQ0RkI5Qzk4Q0MxMUJGMjcz RDIzQ0E3MDlCMjZDMEIxOUE1MUM1QTNCOTdCQjVDLzAvQkFEODFFRUE3NkU3RDQ1 MDIwMzc1Q0EyNjY3MkJFQTc1RDU0NDVFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUQ4MUVFQTc2RTdENDUwMjAz NzVDQTI2NjcyQkVBNzVENTQ0NUUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkUyMzZGQTcyNDAxNjM3MEM0NEZCOUM5OENDMTFCRjI3M0QyM0NBNzA5 QjI2QzBCMTlBNTFDNUEzQjk3QkI1Qy8wL0JBRDgxRUVBNzZFN0Q0NTAyMDM3NUNB MjY2NzJCRUE3NUQ1NDQ1RTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi7M8drL8XTdenI1GmdpFf7EKS mNftHyetHkfktV+n7vCNqau1YnvlqDBjjsam6ufk3AFfk06eOeubP4oK19qKmks8 b/8JBu64esdaza4EkFVRfgUXGZkBBERiCEw8VsRYtWMLMTQ6vDvNn3s4L8gOfbbI BUWymHhLvY/Q15xGjvj1LCxUeC9LVi4uFhktB0X1ZeXkdAABftAVUGxqjQmstNgL 8641Hx28f3Tlbj+Lts+ePAdw0DxL7ZmWbxA7G6Ygtj5lzWPmVQrXTRbCkgJVB3fH KqsRCkp19F641HHbQgNInIWp2/Vu9qRgHBDEU3sw1cDuqoQeMt/i+Kqhhhgl -----END CERTIFICATE-----Generated at Fri Jul 25 13:35:54 2025 by rpki-client