$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft File: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json) Hash identifier: 0v7P2JLwcLb7uOLyiDCvfqU+1nS13x0dvON2TqlbkYk= Subject key identifier: 88:F8:77:80:84:A1:6A:38:CF:80:D9:5A:11:39:24:63:13:E2:5E:E1 Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A Certificate issuer: /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Certificate serial: 13FCBCC8AD38BDD1A58524F3508C5C8799EAE0E2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft Manifest number: 0111 Signing time: Fri 22 Aug 2025 22:38:22 +0000 Manifest this update: Fri 22 Aug 2025 22:33:22 +0000 Manifest next update: Thu 28 Aug 2025 13:24:22 +0000 Files and hashes: 1: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=) 2: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=) 3: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=) 4: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: udF0h4V3ZVLpj7LVaKnrsLM6OBBTUdpxqPQFJOQ9R8s=) 5: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=) 6: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=) 7: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fc:bc:c8:ad:38:bd:d1:a5:85:24:f3:50:8c:5c:87:99:ea:e0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Validity Not Before: Aug 22 22:33:22 2025 GMT Not After : Aug 28 13:24:22 2025 GMT Subject: CN=88F8778084A16A38CF80D95A1139246313E25EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:fb:78:73:59:7a:6a:16:bf:1d:13:b6:36: 0a:7b:8a:ad:16:d1:6c:76:af:a1:e8:70:41:62:f5: 84:e8:aa:a0:57:d4:58:be:4c:68:24:b7:a1:26:75: da:8a:ed:f3:f0:4e:e5:ce:48:40:c1:6f:4b:77:91: c8:db:95:c0:4b:28:2e:32:cc:74:1d:db:ac:e7:09: 5b:cb:dc:f7:ff:8e:9a:73:9e:b0:81:6b:a7:af:66: 63:52:4d:6c:34:05:f8:7e:7a:5b:84:23:a3:75:d9: 7c:3b:0b:a8:78:79:55:dd:ff:d8:c0:79:65:b0:d6: c7:b8:dd:5d:a7:02:5d:8c:3b:b8:a4:ca:85:90:d6: 38:3f:89:9a:43:4e:94:50:1c:d7:6f:13:36:a9:77: 38:b0:0c:5e:7e:ed:be:ed:d1:9e:33:59:83:a0:7b: 7e:d8:bf:35:6b:3c:1c:34:d9:83:53:20:35:34:ba: 77:70:57:b4:7c:0f:36:df:37:26:28:1b:c0:3b:3b: 64:24:ec:9b:04:1c:2f:0d:cd:55:30:05:b6:91:7a: 7c:9b:8f:fb:3c:2c:4a:26:93:32:f5:a1:b5:7b:1b: 42:9e:18:f9:03:33:4b:8f:8c:e9:78:dc:9a:dd:c1: a1:4c:ea:b3:24:8a:a8:79:46:d2:bc:18:2d:96:1d: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:77:80:84:A1:6A:38:CF:80:D9:5A:11:39:24:63:13:E2:5E:E1 X509v3 Authority Key Identifier: keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:9c:a9:0e:9f:c7:ae:ca:1d:5a:74:7a:cd:d1:2b:c8:8a:f2: cd:a3:be:97:c7:a1:25:82:63:cd:a7:8e:00:45:1b:21:53:5f: 2e:73:0f:5b:25:63:e1:fc:50:5c:41:e8:c4:7d:fe:d4:94:a4: 05:00:f7:5b:3e:df:83:56:f0:14:4d:c7:8e:6c:30:cc:7f:c7: 46:0f:5e:cb:b4:b9:91:c5:01:53:fa:79:72:8f:a0:6b:f6:39: 97:ce:48:5b:e1:c3:cd:1b:b7:34:4c:6d:02:40:09:7f:15:25: 2d:ba:dc:7e:cd:65:b3:71:09:d6:be:ec:fc:dc:aa:4d:4d:34: d1:dc:01:eb:5f:5d:20:49:41:0a:4c:80:dc:be:3b:b5:12:8c: ba:d5:8d:65:8b:ff:05:c7:8f:cd:c4:e9:f7:16:22:76:7a:ca: 37:e8:3e:f2:d6:36:91:82:96:50:e6:24:e5:39:58:10:c7:4b: 4a:be:c8:af:19:b6:7a:9e:45:cc:59:f9:9e:50:cc:86:21:92: bd:53:9a:d0:4b:b5:ec:8f:0e:73:fa:d3:de:2d:0f:5e:08:63: ac:ec:04:81:cf:3e:eb:13:07:a0:d4:e1:ca:9e:8c:ab:d1:85: 42:3f:9c:15:d7:1c:c7:c7:3d:40:ac:d8:75:26:94:44:e3:af: 93:e9:ea:ad -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUE/y8yK04vdGlhSTzUIxch5nq4OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdGMDREQ0NEN0M1 QzI2NDA2QTAeFw0yNTA4MjIyMjMzMjJaFw0yNTA4MjgxMzI0MjJaMDMxMTAvBgNV BAMTKDg4Rjg3NzgwODRBMTZBMzhDRjgwRDk1QTExMzkyNDYzMTNFMjVFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0P/t4c1l6aha/HRO2Ngp7iq0W 0Wx2r6HocEFi9YToqqBX1Fi+TGgkt6EmddqK7fPwTuXOSEDBb0t3kcjblcBLKC4y zHQd26znCVvL3Pf/jppznrCBa6evZmNSTWw0Bfh+eluEI6N12Xw7C6h4eVXd/9jA eWWw1se43V2nAl2MO7ikyoWQ1jg/iZpDTpRQHNdvEzapdziwDF5+7b7t0Z4zWYOg e37YvzVrPBw02YNTIDU0undwV7R8DzbfNyYoG8A7O2Qk7JsEHC8NzVUwBbaRenyb j/s8LEomkzL1obV7G0KeGPkDM0uPjOl43JrdwaFM6rMkiqh5RtK8GC2WHYBJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUiPh3gIShajjPgNlaETkkYxPiXuEwHwYDVR0j BBgwFoAUJfKO8ND5OlKLNeB/BNzNfFwmQGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQy M0FEQzQyOEE5NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1 MjhCMzVFMDdGMDREQ0NEN0M1QzI2NDA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUYyOEVGMEQwRjkzQTUyOEIz NUUwN0YwNERDQ0Q3QzVDMjY0MDZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlFMEUyQjUwM0U0MjNBREM0MjhB OTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzI1RjI4RUYwRDBGOTNBNTI4QjM1RTA3 RjA0RENDRDdDNUMyNjQwNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDJnKkOn8euyh1adHrN0SvIivLN o76Xx6ElgmPNp44ARRshU18ucw9bJWPh/FBcQejEff7UlKQFAPdbPt+DVvAUTceO bDDMf8dGD17LtLmRxQFT+nlyj6Br9jmXzkhb4cPNG7c0TG0CQAl/FSUtutx+zWWz cQnWvuz83KpNTTTR3AHrX10gSUEKTIDcvju1Eoy61Y1li/8Fx4/NxOn3FiJ2eso3 6D7y1jaRgpZQ5iTlOVgQx0tKvsivGbZ6nkXMWfmeUMyGIZK9U5rQS7Xsjw5z+tPe LQ9eCGOs7ASBzz7rEweg1OHKnoyr0YVCP5wV1xzHxz1ArNh1JpRE46+T6eqt -----END CERTIFICATE-----Generated at Sat Aug 23 11:06:06 2025 by rpki-client