$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft File: E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft (raw, json) Hash identifier: UJwyQY6SzbN84QvUtscI1aSaaYXzDxsRkJq0DvPSxpM= Subject key identifier: 34:21:FE:E4:1E:01:66:0D:66:CB:36:89:73:0E:4A:D6:C1:6B:04:D4 Authority key identifier: E9:53:CD:EA:A1:48:62:B4:6A:8E:00:1F:1A:D0:70:18:7A:8B:1B:F0 Certificate issuer: /CN=E953CDEAA14862B46A8E001F1AD070187A8B1BF0 Certificate serial: 52F1EB3CCA215FB02AD1D383D560CD5A75F65B4A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft Manifest number: 6F Signing time: Fri 04 Jul 2025 06:32:44 +0000 Manifest this update: Fri 04 Jul 2025 06:27:44 +0000 Manifest next update: Tue 08 Jul 2025 17:32:44 +0000 Files and hashes: 1: 34352e3233392e39322e302f32322d3234203d3e20323636383734.roa (hash: bwDmodhEXijpeqVMBO6JGlmEwPcPsBZr9JeQ1RwL7qQ=) 2: E953CDEAA14862B46A8E001F1AD070187A8B1BF0.crl (hash: 1VCnpCSrBYQbCHgkOLKZDJX14PG7ng1Dcw0tytWcx5Y=) 3: 323830333a356161303a3a2f33322d3438203d3e20323636383734.roa (hash: QMV6K2hJHTP6yDI1MdIXW+NaxElYanISkh0iMPtoUWw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.crl rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f1:eb:3c:ca:21:5f:b0:2a:d1:d3:83:d5:60:cd:5a:75:f6:5b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E953CDEAA14862B46A8E001F1AD070187A8B1BF0 Validity Not Before: Jul 4 06:27:44 2025 GMT Not After : Jul 8 17:32:44 2025 GMT Subject: CN=3421FEE41E01660D66CB3689730E4AD6C16B04D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:11:b4:62:0c:fb:06:7e:c6:fc:cc:33:14: ca:ea:eb:de:58:64:d2:23:e6:30:3f:33:ae:ce:a0: 07:e0:84:6f:d9:e1:db:49:3c:07:52:67:4b:d0:ae: 55:5f:81:5a:fe:41:d7:9d:35:2b:02:a6:00:5c:ce: 3f:65:f8:ef:51:28:6d:1a:80:58:5e:c3:cc:ad:5b: 15:5b:2f:d3:82:c3:07:c1:e6:ba:98:54:a2:85:3d: 31:34:af:31:f3:42:d5:50:9c:a3:f7:91:ec:c3:36: 9b:63:d3:cf:84:0e:2a:78:13:75:e2:aa:a8:04:2c: 86:e9:7a:4b:9e:8d:5a:93:43:28:74:6a:09:bf:dd: e3:a9:8b:3b:e8:61:1b:0c:21:0e:50:1e:ac:91:83: 78:13:36:20:3e:47:38:95:47:f7:6a:af:63:ba:d7: e8:97:3d:ef:21:4f:e1:6b:69:7c:ca:15:bd:65:d8: 07:84:da:69:4a:29:3f:50:86:ad:32:3e:63:cc:84: 09:91:2a:f7:2b:46:73:10:7d:30:5c:fc:07:83:5f: 6b:11:d5:5b:d9:5b:4d:61:0e:f2:6a:ea:99:02:38: af:78:45:8f:ea:a6:69:20:4f:40:85:c1:37:29:e1: eb:a9:86:83:de:37:d2:de:12:0a:55:e0:06:58:35: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:FE:E4:1E:01:66:0D:66:CB:36:89:73:0E:4A:D6:C1:6B:04:D4 X509v3 Authority Key Identifier: keyid:E9:53:CD:EA:A1:48:62:B4:6A:8E:00:1F:1A:D0:70:18:7A:8B:1B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03126C3A7957DBEC9ACA437125A50F79CD3DF7CDE05FC89822BAE0BE6227D565/0/E953CDEAA14862B46A8E001F1AD070187A8B1BF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fd:88:1d:bd:bb:60:d7:5e:de:03:f3:4c:44:8b:f0:73:b4: 09:b3:20:8d:46:24:c5:e0:16:ee:25:7b:2b:3e:6f:67:4f:dc: cb:89:13:42:2a:eb:df:0f:63:60:e8:70:a2:d5:30:08:9b:0b: 82:59:3d:0e:00:f1:84:83:05:24:66:34:9e:a9:a6:d8:05:13: d3:1b:93:0e:d5:5b:49:18:6b:04:8a:da:77:77:d3:ea:55:f2: 6a:a3:a0:02:dd:40:9b:e3:d3:ea:ed:c0:b8:c1:a6:69:b4:fa: 55:27:97:b1:96:a6:e7:ab:ae:73:83:58:e9:54:a2:37:9c:93: f0:6d:c6:c7:2b:97:17:1a:28:97:c8:2c:80:9a:c2:fd:a6:a8: da:10:05:6a:70:52:32:8f:76:79:db:53:8f:1f:8e:ca:d8:56: f7:7d:25:a3:6a:52:6d:47:79:af:6f:c9:13:18:1f:d6:c3:69: 83:f4:48:ec:ad:25:a3:cd:c3:1e:b2:b5:16:1d:c1:84:79:58: 3f:0e:9c:37:d2:69:09:7c:f2:a7:7a:50:b5:b2:1e:42:97:57: a9:18:1f:6e:79:cd:14:54:78:e7:28:41:bd:a8:c5:85:8d:e2: 95:29:59:74:9c:80:2d:a5:fa:12:c4:8e:8a:c7:7b:5f:f2:ca: 2f:05:a4:3c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUvHrPMohX7Aq0dOD1WDNWnX2W0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk1M0NERUFBMTQ4NjJCNDZBOEUwMDFGMUFEMDcwMTg3 QThCMUJGMDAeFw0yNTA3MDQwNjI3NDRaFw0yNTA3MDgxNzMyNDRaMDMxMTAvBgNV BAMTKDM0MjFGRUU0MUUwMTY2MEQ2NkNCMzY4OTczMEU0QUQ2QzE2QjA0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavBG0Ygz7Bn7G/MwzFMrq695Y ZNIj5jA/M67OoAfghG/Z4dtJPAdSZ0vQrlVfgVr+QdedNSsCpgBczj9l+O9RKG0a gFhew8ytWxVbL9OCwwfB5rqYVKKFPTE0rzHzQtVQnKP3kezDNptj08+EDip4E3Xi qqgELIbpekuejVqTQyh0agm/3eOpizvoYRsMIQ5QHqyRg3gTNiA+RziVR/dqr2O6 1+iXPe8hT+FraXzKFb1l2AeE2mlKKT9Qhq0yPmPMhAmRKvcrRnMQfTBc/AeDX2sR 1VvZW01hDvJq6pkCOK94RY/qpmkgT0CFwTcp4euphoPeN9LeEgpV4AZYNRGBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNCH+5B4BZg1myzaJcw5K1sFrBNQwHwYDVR0j BBgwFoAU6VPN6qFIYrRqjgAfGtBwGHqLG/AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzEyNkMzQTc5NTdEQkVDOUFDQTQzNzEyNUE1MEY3OUNE M0RGN0NERTA1RkM4OTgyMkJBRTBCRTYyMjdENTY1LzAvRTk1M0NERUFBMTQ4NjJC NDZBOEUwMDFGMUFEMDcwMTg3QThCMUJGMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTUzQ0RFQUExNDg2MkI0NkE4 RTAwMUYxQUQwNzAxODdBOEIxQkYwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDMxMjZDM0E3OTU3REJFQzlBQ0E0MzcxMjVBNTBGNzlDRDNERjdDREUw NUZDODk4MjJCQUUwQkU2MjI3RDU2NS8wL0U5NTNDREVBQTE0ODYyQjQ2QThFMDAx RjFBRDA3MDE4N0E4QjFCRjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBm/Ygdvbtg117eA/NMRIvwc7QJ syCNRiTF4BbuJXsrPm9nT9zLiRNCKuvfD2Ng6HCi1TAImwuCWT0OAPGEgwUkZjSe qabYBRPTG5MO1VtJGGsEitp3d9PqVfJqo6AC3UCb49Pq7cC4waZptPpVJ5exlqbn q65zg1jpVKI3nJPwbcbHK5cXGiiXyCyAmsL9pqjaEAVqcFIyj3Z521OPH47K2Fb3 fSWjalJtR3mvb8kTGB/Ww2mD9EjsrSWjzcMesrUWHcGEeVg/Dpw30mkJfPKnelC1 sh5Cl1epGB9uec0UVHjnKEG9qMWFjeKVKVl0nIAtpfoSxI6Kx3tf8sovBaQ8 -----END CERTIFICATE-----Generated at Fri Jul 4 08:56:25 2025 by rpki-client