$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft File: DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft (raw, json) Hash identifier: axiYMXhiKzAw6sFeTehLzev9rzQmsEqDF/fddLZ4GnM= Subject key identifier: 33:02:6C:7A:81:C0:3F:9F:59:8A:C1:BC:4B:C4:16:9D:B7:31:9A:84 Authority key identifier: DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4 Certificate issuer: /CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4 Certificate serial: 27BB57996F703E88B33B6B1936448C91999E12A6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft Manifest number: FA Signing time: Thu 03 Jul 2025 08:35:00 +0000 Manifest this update: Thu 03 Jul 2025 08:30:00 +0000 Manifest next update: Mon 07 Jul 2025 09:28:00 +0000 Files and hashes: 1: DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl (hash: 7Ny7G8jY//w6evTyrsOlZMWoUii1iOYFiZBk/oPMDPg=) 2: 34352e3136332e3134322e302f32342d3234203d3e20323637363836.roa (hash: mvMeIh2MISJvggHqs5zDoolBWo7PgElz3D+QlC+EUWY=) 3: 34352e3136332e3134302e302f32342d3234203d3e20323637363836.roa (hash: +q6gdfD+w5AJaAJOxN0PZrP2kmHqtvaOZk6ilMoo7pw=) 4: 34352e3136332e3134312e302f32342d3234203d3e20323637363836.roa (hash: gUSfEm0EyEsVY5OUx7FMVtkKONHNnt9W0lcvFZeLA0M=) 5: 34352e3136332e3134302e302f32322d3232203d3e20323637363836.roa (hash: kv96iERHgTvVhC0LcH34WP2iDstQqRLJPw2mC+q6o+Q=) 6: 34352e3136332e3134332e302f32342d3234203d3e20323637363836.roa (hash: tJ4bDgPwgul2eyC3W6vgeXHC7oJXlSK8n04SNp46rfU=) 7: 323830333a626561303a3a2f33322d3332203d3e20323637363836.roa (hash: NQqorPu80Ux605LuZRGIfkXfWixSrdHK/FjDkKOotuU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 09:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bb:57:99:6f:70:3e:88:b3:3b:6b:19:36:44:8c:91:99:9e:12:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA19E2D8391E84E168C007F85FDC2E229A1D9BC4 Validity Not Before: Jul 3 08:30:00 2025 GMT Not After : Jul 7 09:28:00 2025 GMT Subject: CN=33026C7A81C03F9F598AC1BC4BC4169DB7319A84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:b4:ab:13:11:40:d1:e2:d2:d5:b7:c1:08: 1a:bd:76:f6:bf:36:a5:e5:37:c9:c5:c9:53:e1:b1: 1f:22:2f:b7:04:e8:a8:b0:b3:68:2f:86:96:58:ee: 32:99:b8:13:30:c8:5a:27:9a:58:78:f8:f3:c6:c1: 0d:db:5c:61:41:56:dd:7a:fd:24:c9:2e:49:c7:3d: 0c:12:4e:e0:91:3c:9b:a9:01:44:96:f9:8a:07:e2: 14:98:8f:f9:c2:89:b7:f6:51:2b:e7:3c:25:41:19: a3:1c:58:02:a3:44:94:98:2a:9e:aa:25:ba:8a:18: 0a:9c:10:cd:55:92:17:65:6e:49:56:be:5c:8b:6e: fd:71:82:4c:6b:04:7c:dc:e1:08:06:f1:27:34:1f: a5:80:ad:38:8e:48:07:5d:c0:86:5f:bb:a6:df:9f: 8d:76:59:1f:1a:eb:3b:74:a0:dc:57:43:2d:8a:b2: 93:4e:ff:ec:df:74:cd:5a:56:22:94:21:27:ff:81: ea:38:1f:df:60:e0:7b:a6:d9:ca:1a:d5:8b:d4:c7: eb:99:35:9b:e9:a7:aa:d6:7c:08:fc:6e:c6:5d:85: b5:07:24:6e:e4:82:04:b3:2a:dc:39:a2:32:b5:ee: f2:6c:98:93:48:69:ab:45:d1:45:5a:7d:42:6a:44: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:02:6C:7A:81:C0:3F:9F:59:8A:C1:BC:4B:C4:16:9D:B7:31:9A:84 X509v3 Authority Key Identifier: keyid:DA:19:E2:D8:39:1E:84:E1:68:C0:07:F8:5F:DC:2E:22:9A:1D:9B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F98BFBFD66B1716EB9E6DB914BF55C965D07B5D9AC084A766E1C9B3770B972E/0/DA19E2D8391E84E168C007F85FDC2E229A1D9BC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:11:9a:c4:b2:20:85:3f:d6:84:d3:1a:cc:b0:50:ab:70:9f: bc:04:4b:5d:ff:33:05:ba:f1:7e:05:c9:c4:4d:ac:ab:40:10: 14:7c:f1:58:b2:13:41:e5:6d:0f:e0:0f:25:8d:a8:fd:94:c3: 4c:27:3e:a7:c1:1b:a7:ee:83:0b:4c:81:ac:69:85:0a:0e:de: 92:fc:32:92:aa:aa:8f:63:a9:f6:dc:91:bb:d9:bb:42:a2:1f: db:e5:c5:58:d7:32:d9:ec:12:76:97:87:48:3c:a4:1b:29:00: b1:cd:d2:c8:14:38:dd:a1:ea:9e:4c:66:3b:66:1f:a1:4d:5b: 9e:ba:ed:f1:0e:c2:95:f4:15:a0:5c:72:24:09:c5:bf:43:ec: 8d:0e:e6:67:4a:ab:5f:5f:b2:64:4e:3d:44:1e:df:52:69:ec: a8:a4:30:77:58:e7:5c:81:28:73:ee:3a:5e:30:72:df:85:4e: e2:f5:0e:10:c8:21:9e:51:cf:75:89:88:08:5e:bb:db:3b:df: 96:f2:a2:6c:24:fa:9a:a2:db:f8:62:a2:a9:c0:78:6d:d3:ae: 1a:e2:7d:dd:1c:d7:d7:ac:82:98:98:86:90:7c:1a:1f:0c:fd: 02:4e:ec:c5:f9:07:5f:27:65:51:27:d5:db:2b:58:54:3d:3c: 0b:3c:f2:60 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJ7tXmW9wPoizO2sZNkSMkZmeEqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREExOUUyRDgzOTFFODRFMTY4QzAwN0Y4NUZEQzJFMjI5 QTFEOUJDNDAeFw0yNTA3MDMwODMwMDBaFw0yNTA3MDcwOTI4MDBaMDMxMTAvBgNV BAMTKDMzMDI2QzdBODFDMDNGOUY1OThBQzFCQzRCQzQxNjlEQjczMTlBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2l7SrExFA0eLS1bfBCBq9dva/ NqXlN8nFyVPhsR8iL7cE6Kiws2gvhpZY7jKZuBMwyFonmlh4+PPGwQ3bXGFBVt16 /STJLknHPQwSTuCRPJupAUSW+YoH4hSYj/nCibf2USvnPCVBGaMcWAKjRJSYKp6q JbqKGAqcEM1VkhdlbklWvlyLbv1xgkxrBHzc4QgG8Sc0H6WArTiOSAddwIZfu6bf n412WR8a6zt0oNxXQy2KspNO/+zfdM1aViKUISf/geo4H99g4Hum2coa1YvUx+uZ NZvpp6rWfAj8bsZdhbUHJG7kggSzKtw5ojK17vJsmJNIaatF0UVafUJqRFYhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMwJseoHAP59ZisG8S8QWnbcxmoQwHwYDVR0j BBgwFoAU2hni2DkehOFowAf4X9wuIpodm8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRjk4QkZCRkQ2NkIxNzE2RUI5RTZEQjkxNEJGNTVDOTY1 RDA3QjVEOUFDMDg0QTc2NkUxQzlCMzc3MEI5NzJFLzAvREExOUUyRDgzOTFFODRF MTY4QzAwN0Y4NUZEQzJFMjI5QTFEOUJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTE5RTJEODM5MUU4NEUxNjhD MDA3Rjg1RkRDMkUyMjlBMUQ5QkM0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEY5OEJGQkZENjZCMTcxNkVCOUU2REI5MTRCRjU1Qzk2NUQwN0I1RDlB QzA4NEE3NjZFMUM5QjM3NzBCOTcyRS8wL0RBMTlFMkQ4MzkxRTg0RTE2OEMwMDdG ODVGREMyRTIyOUExRDlCQzQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1EZrEsiCFP9aE0xrMsFCrcJ+8 BEtd/zMFuvF+BcnETayrQBAUfPFYshNB5W0P4A8ljaj9lMNMJz6nwRun7oMLTIGs aYUKDt6S/DKSqqqPY6n23JG72btCoh/b5cVY1zLZ7BJ2l4dIPKQbKQCxzdLIFDjd oeqeTGY7Zh+hTVueuu3xDsKV9BWgXHIkCcW/Q+yNDuZnSqtfX7JkTj1EHt9Saeyo pDB3WOdcgShz7jpeMHLfhU7i9Q4QyCGeUc91iYgIXrvbO9+W8qJsJPqaotv4YqKp wHht064a4n3dHNfXrIKYmIaQfBofDP0CTuzF+QdfJ2VRJ9XbK1hUPTwLPPJg -----END CERTIFICATE-----Generated at Fri Jul 4 03:29:36 2025 by rpki-client