$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft File: 643132A8FE5198797F39AACB314EC77EE8C6D84D.mft (raw, json) Hash identifier: NMGE3SLUNGQBb1QNwR9hOVs2kABxllZMsdaoB+J5wfU= Subject key identifier: AA:3E:5D:04:E0:2A:2A:1F:71:55:C3:AA:77:CD:5C:CE:C2:3A:A6:D8 Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D Certificate issuer: /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D Certificate serial: 12295B88509F62F183C9120141CC9F5F0F3651A5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft Manifest number: 0113 Signing time: Fri 22 Aug 2025 05:37:33 +0000 Manifest this update: Fri 22 Aug 2025 05:32:33 +0000 Manifest next update: Wed 27 Aug 2025 04:46:33 +0000 Files and hashes: 1: 323830333a616261303a323330303a3a2f34382d3438203d3e20323635353534.roa (hash: vz29HZXSnhGXB4jcgjq6M5wxxZl9dHu3+FggQoHspFM=) 2: 323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa (hash: 2Ql7e3hVwH0F3NK+rxzouDkq/Ai85EN7SZR6mWD136o=) 3: 323830333a616261303a323230303a3a2f34302d3430203d3e20323635353534.roa (hash: XrwE8xbBK/Ge9x8sWJ5WSN7CFyZ8q9OX3U9qEgzihjw=) 4: 34352e3137302e3133332e302f32342d3234203d3e20313937393931.roa (hash: 5iStZFuCiYEptjp5cVLWQULMDU2BuSicuIAhGlXBvrs=) 5: 34352e3137302e3133342e302f32332d3234203d3e20323635353534.roa (hash: RIgb5icKuHMz9C3jXNywXMn33mp77AfaOYFQYhJomJ8=) 6: 643132A8FE5198797F39AACB314EC77EE8C6D84D.crl (hash: vZP235pFm47hUgw38PR5PYeNIO4uO5c94VszLmrzcLU=) 7: 34352e3137302e3133322e302f32342d3234203d3e20313937393931.roa (hash: 617gKf8X0ngkdp01rN8fOsSiqnDA7sAMPBNzNtCcVpM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 04:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:29:5b:88:50:9f:62:f1:83:c9:12:01:41:cc:9f:5f:0f:36:51:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D Validity Not Before: Aug 22 05:32:33 2025 GMT Not After : Aug 27 04:46:33 2025 GMT Subject: CN=AA3E5D04E02A2A1F7155C3AA77CD5CCEC23AA6D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:42:8e:7b:3e:4f:bb:fc:5c:f9:a3:fa:11: 9a:3e:cf:67:5f:0f:64:4c:66:53:1b:7b:fe:75:b5: 28:60:e5:d4:a1:0f:96:f2:94:01:84:77:1a:6d:1e: 4b:cc:81:c7:2f:50:ec:12:c4:89:fd:d0:7c:15:bf: e4:5f:1f:d7:cf:ba:75:ba:c4:4a:43:09:18:3b:67: 34:ce:ad:1e:22:c5:d2:44:9d:13:03:50:b6:e3:e1: c5:46:55:22:80:5d:50:29:49:c6:12:18:68:96:01: 75:24:47:0d:08:f6:1f:bb:2f:34:47:a6:12:bb:1d: 23:4f:2e:72:9d:df:e8:1e:d5:58:91:59:df:64:00: 3b:d7:8c:42:1e:09:4b:9e:ea:68:10:0f:6d:f5:72: 04:bf:40:00:b0:3d:ab:95:23:10:74:3e:0c:79:a5: a9:f2:c4:6f:b9:78:a5:36:00:bc:87:71:57:e1:fd: 04:1f:3d:26:35:d5:61:e4:55:17:00:0d:8a:80:85: 7e:20:33:12:c1:9b:5f:5a:f3:0a:ef:8d:bc:7a:27: 24:a1:e7:f1:e6:c2:c5:1e:e7:4f:21:f4:0b:be:97: 2f:8f:9d:48:69:6e:f1:0b:d7:ed:45:41:21:72:0f: 03:c7:15:9e:6b:3f:fd:5c:de:1e:c5:8f:f6:9a:42: 71:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3E:5D:04:E0:2A:2A:1F:71:55:C3:AA:77:CD:5C:CE:C2:3A:A6:D8 X509v3 Authority Key Identifier: keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:42:14:6a:95:af:f4:c7:82:0f:0b:d8:47:ea:3a:88:53:8f: 70:bd:22:12:7e:fd:23:a1:4e:31:53:74:c3:30:ac:82:c0:ec: 92:8c:86:93:56:fa:a4:ae:63:4a:0a:c4:de:99:ff:48:93:17: e7:c6:10:81:54:2c:bc:e3:53:fc:95:bd:1d:79:0f:72:f0:f1: 34:a8:a5:2c:02:88:a5:d0:0a:b9:a1:83:f1:6d:1b:8a:24:5d: f2:e0:f7:8a:36:d7:89:68:38:60:30:ee:77:ee:70:df:c0:80: a7:15:50:ca:65:7a:eb:6f:b0:cc:ab:c3:85:c8:b5:ea:d4:7c: 95:f7:1b:7e:e3:9b:b9:a3:c8:8a:e7:96:15:56:e1:e1:32:6b: 8b:19:d7:52:9e:ae:2c:e5:1b:46:24:79:86:60:e0:fe:df:30: 5a:a7:c8:71:72:b7:bd:cd:fa:28:55:18:11:3a:e2:e7:b8:84: 0d:96:53:e0:7d:22:e5:bf:55:ca:b6:21:4c:5c:5f:4d:a3:6f: c5:de:23:49:cc:25:e7:58:66:0e:d6:34:4e:be:b1:28:d7:55: b5:9c:99:a3:44:fe:db:12:b2:e9:14:d4:b7:d2:90:bd:24:df: 08:46:30:67:9f:1d:3a:84:4e:ac:40:f2:d4:fc:78:28:01:76: 67:8e:90:64 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEilbiFCfYvGDyRIBQcyfXw82UaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzMTMyQThGRTUxOTg3OTdGMzlBQUNCMzE0RUM3N0VF OEM2RDg0RDAeFw0yNTA4MjIwNTMyMzNaFw0yNTA4MjcwNDQ2MzNaMDMxMTAvBgNV BAMTKEFBM0U1RDA0RTAyQTJBMUY3MTU1QzNBQTc3Q0Q1Q0NFQzIzQUE2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkO0KOez5Pu/xc+aP6EZo+z2df D2RMZlMbe/51tShg5dShD5bylAGEdxptHkvMgccvUOwSxIn90HwVv+RfH9fPunW6 xEpDCRg7ZzTOrR4ixdJEnRMDULbj4cVGVSKAXVApScYSGGiWAXUkRw0I9h+7LzRH phK7HSNPLnKd3+ge1ViRWd9kADvXjEIeCUue6mgQD231cgS/QACwPauVIxB0Pgx5 panyxG+5eKU2ALyHcVfh/QQfPSY11WHkVRcADYqAhX4gMxLBm19a8wrvjbx6JySh 5/HmwsUe508h9Au+ly+PnUhpbvEL1+1FQSFyDwPHFZ5rP/1c3h7Fj/aaQnErAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqj5dBOAqKh9xVcOqd81czsI6ptgwHwYDVR0j BBgwFoAUZDEyqP5RmHl/OarLMU7HfujG2E0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMkMyMkEwNzY0RTRDRDQ1ODRFNDMwNTk1MTM3NjNFOTQz MzY1QzkzMDUwNDVFRkIzMDFGNTE1NDczNTBBNTQwLzAvNjQzMTMyQThGRTUxOTg3 OTdGMzlBQUNCMzE0RUM3N0VFOEM2RDg0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDMxMzJBOEZFNTE5ODc5N0Yz OUFBQ0IzMTRFQzc3RUU4QzZEODRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjJDMjJBMDc2NEU0Q0Q0NTg0RTQzMDU5NTEzNzYzRTk0MzM2NUM5MzA1 MDQ1RUZCMzAxRjUxNTQ3MzUwQTU0MC8wLzY0MzEzMkE4RkU1MTk4Nzk3RjM5QUFD QjMxNEVDNzdFRThDNkQ4NEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJQhRqla/0x4IPC9hH6jqIU49w vSISfv0joU4xU3TDMKyCwOySjIaTVvqkrmNKCsTemf9IkxfnxhCBVCy841P8lb0d eQ9y8PE0qKUsAoil0Aq5oYPxbRuKJF3y4PeKNteJaDhgMO537nDfwICnFVDKZXrr b7DMq8OFyLXq1HyV9xt+45u5o8iK55YVVuHhMmuLGddSnq4s5RtGJHmGYOD+3zBa p8hxcre9zfooVRgROuLnuIQNllPgfSLlv1XKtiFMXF9No2/F3iNJzCXnWGYO1jRO vrEo11W1nJmjRP7bErLpFNS30pC9JN8IRjBnnx06hE6sQPLU/HgoAXZnjpBk -----END CERTIFICATE-----Generated at Sat Aug 23 10:56:18 2025 by rpki-client