$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.mft File: 047342C3AA3AFAD52A4E32CF9E37034613ECA066.mft (raw, json) Hash identifier: +og2enwAs3g7ZhU2z8o7EzgEwdeLnfMgSvUZsmwmNRs= Subject key identifier: 68:F4:86:46:C9:8D:9D:4C:FE:4A:FD:32:0D:91:86:F5:2B:63:6F:E5 Authority key identifier: 04:73:42:C3:AA:3A:FA:D5:2A:4E:32:CF:9E:37:03:46:13:EC:A0:66 Certificate issuer: /CN=047342C3AA3AFAD52A4E32CF9E37034613ECA066 Certificate serial: 2ED7438F73F1007F2D7242194C885C0E8928650B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.mft Manifest number: F1 Signing time: Thu 03 Jul 2025 18:10:51 +0000 Manifest this update: Thu 03 Jul 2025 18:05:51 +0000 Manifest next update: Wed 09 Jul 2025 16:25:51 +0000 Files and hashes: 1: 047342C3AA3AFAD52A4E32CF9E37034613ECA066.crl (hash: z/GZHhAqWOf9+9yDRlwlS8v4HAQ8XUC1ZTQTq5ysRXg=) 2: 323830313a31333a643030303a3a2f34382d3438203d3e20323635363930.roa (hash: V60pJWxHkCQZvKs/3IWBRcl8qVaseMfk1OHfjmg5CVQ=) 3: 34352e352e31352e302f32342d3234203d3e20323635363930.roa (hash: kt8wJKNW+r3WsB/4IhhbT+PdmnaOCHbiz4NWMaMThos=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.crl rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d7:43:8f:73:f1:00:7f:2d:72:42:19:4c:88:5c:0e:89:28:65:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=047342C3AA3AFAD52A4E32CF9E37034613ECA066 Validity Not Before: Jul 3 18:05:51 2025 GMT Not After : Jul 9 16:25:51 2025 GMT Subject: CN=68F48646C98D9D4CFE4AFD320D9186F52B636FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:3f:a6:bf:6f:7c:9b:e4:38:69:80:8f:ed: 84:50:15:78:fb:71:1c:b9:63:c6:14:62:01:52:d6: be:21:2d:98:55:ef:a0:b2:99:e2:19:76:03:51:e4: e1:42:da:50:bc:16:0b:f4:46:d0:07:87:2e:30:a8: 33:f9:e1:07:9b:7a:8b:9f:4c:7e:64:6f:eb:7a:34: 6a:e3:33:ae:4c:6b:d2:2a:ea:64:f4:5e:c0:30:55: 9a:0e:4a:e0:e2:7a:57:24:3b:6f:56:63:9d:91:42: 78:7b:1f:e5:06:ea:ee:ce:3e:ee:2c:95:bb:1d:d5: af:02:01:aa:ac:42:dc:90:62:a7:2b:46:94:d1:ec: 0b:08:bb:d8:35:c0:ca:98:ad:6c:e9:f3:3d:b4:a1: bb:bc:49:ed:a3:88:99:0c:f0:23:5b:da:98:e2:09: 02:02:dd:23:eb:69:52:6f:f2:3b:99:82:a2:e4:41: 84:1b:c2:f4:77:c2:71:89:3e:d7:24:c6:ab:1c:80: c7:86:64:9f:50:c2:8e:e9:04:70:bf:c7:9d:1e:65: 86:4e:64:28:b9:47:ba:d6:22:9f:e8:7d:ce:5c:72: 7b:e4:a2:92:46:82:f0:0c:d8:35:6e:b0:47:dc:33: f7:bc:05:c1:b3:48:81:c3:3d:07:4e:c2:82:ee:a6: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F4:86:46:C9:8D:9D:4C:FE:4A:FD:32:0D:91:86:F5:2B:63:6F:E5 X509v3 Authority Key Identifier: keyid:04:73:42:C3:AA:3A:FA:D5:2A:4E:32:CF:9E:37:03:46:13:EC:A0:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f2:b8:f1:3f:be:d4:b7:94:9d:fd:95:39:b0:86:4f:4f:46: 5e:18:52:27:a8:54:73:77:80:5b:94:6e:ed:73:d9:76:03:45: 64:8b:55:b0:a4:ac:c3:72:27:80:ef:12:96:9f:02:d0:fe:05: 43:7d:87:8e:8b:ee:5b:e0:4c:1f:e4:5e:4a:69:9b:95:59:ba: 12:70:7d:88:66:f4:54:da:4b:50:17:ac:79:a2:11:34:14:d7: 22:82:2c:2e:09:5c:1f:ca:5d:69:64:34:18:3f:aa:61:f7:eb: 02:0b:5e:98:d5:0a:51:43:7b:77:8a:e1:1f:e5:fe:60:56:f3: a3:cb:7a:9a:8b:fd:cc:f5:2f:74:25:0b:99:7e:a0:f1:aa:d6: 83:7d:58:d6:97:38:ff:27:4d:2e:c5:a8:e9:a1:a4:bf:51:ba: 53:16:d1:79:35:53:c5:c6:a8:1c:54:77:ec:d5:54:81:e6:af: e0:88:b7:5a:70:0a:a8:48:ee:18:da:45:f0:fb:04:33:cb:2f: de:c7:e5:b3:48:e5:fd:8d:eb:0b:f3:4f:e8:21:e2:40:ab:a0: d1:7a:a8:a0:53:ff:f4:af:b5:d6:c8:01:f7:c1:95:27:a8:69: 46:f3:dd:3a:8e:de:d8:d7:4b:63:16:02:1c:05:3b:f5:35:eb: d5:d5:1c:6c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULtdDj3PxAH8tckIZTIhcDokoZQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ3MzQyQzNBQTNBRkFENTJBNEUzMkNGOUUzNzAzNDYx M0VDQTA2NjAeFw0yNTA3MDMxODA1NTFaFw0yNTA3MDkxNjI1NTFaMDMxMTAvBgNV BAMTKDY4RjQ4NjQ2Qzk4RDlENENGRTRBRkQzMjBEOTE4NkY1MkI2MzZGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUz+mv298m+Q4aYCP7YRQFXj7 cRy5Y8YUYgFS1r4hLZhV76CymeIZdgNR5OFC2lC8Fgv0RtAHhy4wqDP54Qebeouf TH5kb+t6NGrjM65Ma9Iq6mT0XsAwVZoOSuDielckO29WY52RQnh7H+UG6u7OPu4s lbsd1a8CAaqsQtyQYqcrRpTR7AsIu9g1wMqYrWzp8z20obu8Se2jiJkM8CNb2pji CQIC3SPraVJv8juZgqLkQYQbwvR3wnGJPtckxqscgMeGZJ9Qwo7pBHC/x50eZYZO ZCi5R7rWIp/ofc5ccnvkopJGgvAM2DVusEfcM/e8BcGzSIHDPQdOwoLupt2HAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaPSGRsmNnUz+Sv0yDZGG9Stjb+UwHwYDVR0j BBgwFoAUBHNCw6o6+tUqTjLPnjcDRhPsoGYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzkzOUYwQkY4RTU2QUVBMzMyRkUzMTk3QzUyMTZGMjRD NzZCM0FEMTdGNDY4ODExMzQ0Mjk1REU4NUU1REM2LzAvMDQ3MzQyQzNBQTNBRkFE NTJBNEUzMkNGOUUzNzAzNDYxM0VDQTA2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNDczNDJDM0FBM0FGQUQ1MkE0 RTMyQ0Y5RTM3MDM0NjEzRUNBMDY2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM5MzlGMEJGOEU1NkFFQTMzMkZFMzE5N0M1MjE2RjI0Qzc2QjNBRDE3 RjQ2ODgxMTM0NDI5NURFODVFNURDNi8wLzA0NzM0MkMzQUEzQUZBRDUyQTRFMzJD RjlFMzcwMzQ2MTNFQ0EwNjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCM8rjxP77Ut5Sd/ZU5sIZPT0Ze GFInqFRzd4BblG7tc9l2A0Vki1WwpKzDcieA7xKWnwLQ/gVDfYeOi+5b4Ewf5F5K aZuVWboScH2IZvRU2ktQF6x5ohE0FNcigiwuCVwfyl1pZDQYP6ph9+sCC16Y1QpR Q3t3iuEf5f5gVvOjy3qai/3M9S90JQuZfqDxqtaDfVjWlzj/J00uxajpoaS/UbpT FtF5NVPFxqgcVHfs1VSB5q/giLdacAqoSO4Y2kXw+wQzyy/ex+WzSOX9jesL80/o IeJAq6DReqigU//0r7XWyAH3wZUnqGlG8906jt7Y10tjFgIcBTv1NevV1Rxs -----END CERTIFICATE-----Generated at Fri Jul 4 09:26:30 2025 by rpki-client