$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft File: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json) Hash identifier: Kln5yCplNC3HjhlXTgiq3dO/J8LHVKa8uB/JVPknEF0= Subject key identifier: AC:91:74:BB:17:D4:58:61:6F:A9:2E:E6:20:24:5C:75:B3:10:C0:52 Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A Certificate issuer: /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Certificate serial: 5F2ABCC782F0C219ACB894961AB4D80E09CBD713 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft Manifest number: F7 Signing time: Fri 04 Jul 2025 08:13:47 +0000 Manifest this update: Fri 04 Jul 2025 08:08:47 +0000 Manifest next update: Wed 09 Jul 2025 01:50:47 +0000 Files and hashes: 1: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=) 2: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: OMuv23uZUQKUloH4NrvlJP84AvAsihkF25YMrfQwOWw=) 3: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=) 4: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=) 5: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=) 6: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=) 7: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Jul 2025 01:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2a:bc:c7:82:f0:c2:19:ac:b8:94:96:1a:b4:d8:0e:09:cb:d7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Validity Not Before: Jul 4 08:08:47 2025 GMT Not After : Jul 9 01:50:47 2025 GMT Subject: CN=AC9174BB17D458616FA92EE620245C75B310C052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:3e:0c:0e:d1:9d:48:66:f2:9a:d8:fb:b7: f5:5e:5f:9a:2b:39:fa:37:b5:54:84:2f:0b:3b:a5: 3b:a1:bc:82:c2:a8:22:b7:d0:83:07:5a:f0:01:05: db:9e:63:18:f8:f6:f8:f4:f7:8f:6f:4d:ac:a8:17: d8:94:8f:00:00:59:a1:47:11:69:af:f8:30:bc:8b: 50:d3:c5:8f:e8:86:12:92:1b:42:e1:3a:2b:60:b9: e9:38:10:6f:03:a9:da:28:00:bf:36:e7:a8:b9:a9: d9:18:b5:66:92:8c:3c:24:80:ba:6d:c4:0d:ca:ac: 9d:f6:09:45:e8:7c:f5:24:fb:74:ec:a4:56:5c:04: ce:af:7f:bd:01:6c:e5:5c:f5:c4:8b:3d:d0:30:97: 44:27:2a:20:c5:e7:93:e2:ff:df:db:a6:a8:b2:c3: ec:1b:7d:d4:8e:c7:09:e6:31:f9:8c:36:d1:52:ff: 62:07:d1:85:45:d3:8b:a5:42:44:4b:ba:91:bb:ed: ad:d4:bd:1b:97:49:e7:48:88:b2:57:0a:e2:63:15: 98:44:a7:4b:5e:0e:7b:82:31:13:da:d4:62:ef:ca: 73:c9:16:5b:2c:66:0c:0e:69:ec:6b:aa:ab:75:df: de:34:5b:d7:56:3c:f2:11:29:ff:b7:5c:c5:2d:64: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:91:74:BB:17:D4:58:61:6F:A9:2E:E6:20:24:5C:75:B3:10:C0:52 X509v3 Authority Key Identifier: keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:af:e3:53:01:c8:ff:34:86:ec:46:c4:96:8c:f4:f3:84:64: b4:73:97:80:6b:0c:cf:41:70:fe:7a:f2:92:95:86:f8:2e:d7: db:87:ea:d8:68:71:d8:c9:62:c4:cf:5f:d9:fa:70:9a:96:8e: ed:0e:19:e7:38:4a:e6:01:8c:81:01:c7:af:77:25:71:61:0d: 8b:88:bf:92:45:34:dc:1a:99:45:1f:fd:1c:f3:60:c5:00:67: 71:55:a3:4b:5c:0c:67:5d:0d:ae:b9:b3:2c:cd:97:73:d8:a1: 55:74:b9:ce:66:db:6d:76:cf:a5:22:f4:64:ba:76:6c:dc:b5: 4b:db:4c:0c:a2:22:fa:13:f1:98:01:bb:34:ba:e3:a6:3f:3d: 37:f3:2b:35:e8:79:8c:98:40:ce:9c:b7:62:92:7f:ca:b3:c3: e5:03:1a:6e:3d:39:6b:c5:f3:1e:e6:f6:08:72:61:31:fb:77: 08:0f:ee:10:bc:3c:f7:59:21:4b:7a:2b:11:5c:91:0f:fb:8c: 65:20:26:3c:6c:54:68:6a:95:fa:97:c9:71:0b:5b:61:14:be: c9:21:53:c6:c0:17:73:4c:c0:b7:83:d8:b6:ae:80:da:d0:d8: d4:6a:2a:61:50:31:97:d9:7e:33:1d:30:31:8d:c6:8a:a8:d2: 42:cb:f7:36 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXyq8x4LwwhmsuJSWGrTYDgnL1xMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdGMDREQ0NEN0M1 QzI2NDA2QTAeFw0yNTA3MDQwODA4NDdaFw0yNTA3MDkwMTUwNDdaMDMxMTAvBgNV BAMTKEFDOTE3NEJCMTdENDU4NjE2RkE5MkVFNjIwMjQ1Qzc1QjMxMEMwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ET4MDtGdSGbymtj7t/VeX5or Ofo3tVSELws7pTuhvILCqCK30IMHWvABBdueYxj49vj0949vTayoF9iUjwAAWaFH EWmv+DC8i1DTxY/ohhKSG0LhOitguek4EG8DqdooAL8256i5qdkYtWaSjDwkgLpt xA3KrJ32CUXofPUk+3TspFZcBM6vf70BbOVc9cSLPdAwl0QnKiDF55Pi/9/bpqiy w+wbfdSOxwnmMfmMNtFS/2IH0YVF04ulQkRLupG77a3UvRuXSedIiLJXCuJjFZhE p0teDnuCMRPa1GLvynPJFlssZgwOaexrqqt13940W9dWPPIRKf+3XMUtZDSnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUrJF0uxfUWGFvqS7mICRcdbMQwFIwHwYDVR0j BBgwFoAUJfKO8ND5OlKLNeB/BNzNfFwmQGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQy M0FEQzQyOEE5NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1 MjhCMzVFMDdGMDREQ0NEN0M1QzI2NDA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUYyOEVGMEQwRjkzQTUyOEIz NUUwN0YwNERDQ0Q3QzVDMjY0MDZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlFMEUyQjUwM0U0MjNBREM0MjhB OTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzI1RjI4RUYwRDBGOTNBNTI4QjM1RTA3 RjA0RENDRDdDNUMyNjQwNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwr+NTAcj/NIbsRsSWjPTzhGS0 c5eAawzPQXD+evKSlYb4Ltfbh+rYaHHYyWLEz1/Z+nCalo7tDhnnOErmAYyBAcev dyVxYQ2LiL+SRTTcGplFH/0c82DFAGdxVaNLXAxnXQ2uubMszZdz2KFVdLnOZttt ds+lIvRkunZs3LVL20wMoiL6E/GYAbs0uuOmPz038ys16HmMmEDOnLdikn/Ks8Pl AxpuPTlrxfMe5vYIcmEx+3cID+4QvDz3WSFLeisRXJEP+4xlICY8bFRoapX6l8lx C1thFL7JIVPGwBdzTMC3g9i2roDa0NjUaiphUDGX2X4zHTAxjcaKqNJCy/c2 -----END CERTIFICATE-----Generated at Fri Jul 4 20:33:15 2025 by rpki-client