$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft File: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft (raw, json) Hash identifier: GZuBu+zcmK7ZtLkVAlMqTrqO4IvTFWABZkMppOZMo3Y= Subject key identifier: FB:84:C4:98:9F:B2:F0:6E:B3:16:BC:C7:14:68:D3:52:BC:1A:B1:70 Authority key identifier: 9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF Certificate issuer: /CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF Certificate serial: 1D97D2AD85BE5B18BB06B3CAF1167D36FB4C2982 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft Manifest number: ED Signing time: Wed 02 Jul 2025 18:41:33 +0000 Manifest this update: Wed 02 Jul 2025 18:36:33 +0000 Manifest next update: Mon 07 Jul 2025 08:08:33 +0000 Files and hashes: 1: 34352e3233322e3132302e302f32322d3234203d3e203237373335.roa (hash: qFQcyt6mjuuWxr31xcmCwMXo3qzlGX+FFhSurKpopCQ=) 2: 9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl (hash: ZYdHuj33MJ4df72y9rY6QxY/tCGLnKZ6bqhSwAEtToQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 08:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:97:d2:ad:85:be:5b:18:bb:06:b3:ca:f1:16:7d:36:fb:4c:29:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF Validity Not Before: Jul 2 18:36:33 2025 GMT Not After : Jul 7 08:08:33 2025 GMT Subject: CN=FB84C4989FB2F06EB316BCC71468D352BC1AB170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:33:57:2f:a7:72:f4:44:00:82:87:94:d5: 36:82:1f:38:af:bb:da:c6:3e:93:ca:bd:dc:49:94: 96:26:18:90:1c:7a:fb:2e:e9:f2:1f:ea:98:b9:6e: 7b:b9:94:73:98:b3:b6:cb:2c:2d:7b:85:30:ad:5d: 00:02:96:0f:fc:87:d8:dd:76:90:0c:dd:12:01:f3: df:e2:f2:fa:e9:95:fb:9d:2f:32:c7:5e:c8:89:90: be:0a:bd:bd:f9:c3:16:07:c9:1f:db:28:fc:d8:7e: ff:0b:06:26:02:e0:f3:88:68:87:23:64:25:e5:38: 5f:64:b5:1a:a7:1b:d5:cc:49:8f:fb:71:17:1d:f3: 76:49:9d:d1:82:1c:37:69:0c:04:05:10:ba:70:53: 66:1b:15:1c:03:6d:d9:e3:55:e1:e8:6e:92:38:80: 3f:7d:16:11:10:4d:d9:db:4f:93:89:54:d5:b6:18: c8:c9:75:c9:37:a7:66:4d:73:32:ed:8e:2d:5b:bd: 0f:97:b5:fd:8c:a3:c3:d1:69:64:8f:05:01:1c:81: a4:26:6b:52:c7:78:67:37:5b:b7:dc:93:85:45:48: 1c:8d:63:b1:d1:28:95:23:1f:d1:40:ed:a9:6c:5d: 17:14:4e:79:42:ab:67:66:a9:61:a6:a5:97:e0:0b: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:84:C4:98:9F:B2:F0:6E:B3:16:BC:C7:14:68:D3:52:BC:1A:B1:70 X509v3 Authority Key Identifier: keyid:9D:C3:C9:B2:0B:E6:71:41:0A:46:EE:7B:14:91:D1:ED:FC:F8:D3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E25666FB3BD6768A2D88508B9BE17D643503F0FBDBF76530665B222B14C15F5/0/9DC3C9B20BE671410A46EE7B1491D1EDFCF8D3FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:da:60:ad:5d:55:54:81:2b:ae:01:9a:04:37:01:c3:d2:be: db:20:62:27:f1:6b:a5:51:f7:91:8b:9f:29:f7:9b:cd:84:ea: 3d:de:67:6f:00:5f:f0:bd:e4:94:2c:8f:1b:36:e3:5d:32:1b: 80:d7:f7:b5:d5:34:ae:94:33:34:80:95:03:ef:a8:32:4e:33: 27:7f:3c:74:43:33:1e:50:f3:3f:a9:f6:a5:c4:ff:23:ae:c8: 89:01:f0:0d:72:35:df:ad:af:73:ca:85:ae:1d:9b:75:04:78: 46:15:18:de:5e:58:16:c4:e6:fa:65:11:36:28:bf:bd:34:e8: bc:29:b8:ea:2f:98:c8:57:7c:d4:82:f1:b0:2b:5a:8b:78:3a: 9a:70:61:7b:02:82:6a:a0:21:39:ff:77:70:fe:15:53:70:d5: d3:93:9f:25:a7:e2:6a:9d:97:be:d7:f5:e5:8c:f3:b6:aa:fb: b3:03:32:09:38:4d:85:c2:c1:70:3b:8d:de:dd:12:e9:bb:6d: 2f:5f:6b:0e:e1:d8:f1:0f:b4:2f:cb:ba:9c:8b:d2:5e:1f:c0: 6b:fa:8f:98:5d:fe:12:a6:bf:dd:49:52:de:9d:fd:ce:b1:e8: f7:dc:bb:75:2c:02:0e:eb:80:17:99:76:87:13:6b:9a:1f:f1: e1:fb:19:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHZfSrYW+Wxi7BrPK8RZ9NvtMKYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURDM0M5QjIwQkU2NzE0MTBBNDZFRTdCMTQ5MUQxRURG Q0Y4RDNGRjAeFw0yNTA3MDIxODM2MzNaFw0yNTA3MDcwODA4MzNaMDMxMTAvBgNV BAMTKEZCODRDNDk4OUZCMkYwNkVCMzE2QkNDNzE0NjhEMzUyQkMxQUIxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBTNXL6dy9EQAgoeU1TaCHziv u9rGPpPKvdxJlJYmGJAcevsu6fIf6pi5bnu5lHOYs7bLLC17hTCtXQAClg/8h9jd dpAM3RIB89/i8vrplfudLzLHXsiJkL4Kvb35wxYHyR/bKPzYfv8LBiYC4POIaIcj ZCXlOF9ktRqnG9XMSY/7cRcd83ZJndGCHDdpDAQFELpwU2YbFRwDbdnjVeHobpI4 gD99FhEQTdnbT5OJVNW2GMjJdck3p2ZNczLtji1bvQ+Xtf2Mo8PRaWSPBQEcgaQm a1LHeGc3W7fck4VFSByNY7HRKJUjH9FA7alsXRcUTnlCq2dmqWGmpZfgC0gtAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+4TEmJ+y8G6zFrzHFGjTUrwasXAwHwYDVR0j BBgwFoAUncPJsgvmcUEKRu57FJHR7fz40/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zRTI1NjY2RkIzQkQ2NzY4QTJEODg1MDhCOUJFMTdENjQz NTAzRjBGQkRCRjc2NTMwNjY1QjIyMkIxNEMxNUY1LzAvOURDM0M5QjIwQkU2NzE0 MTBBNDZFRTdCMTQ5MUQxRURGQ0Y4RDNGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85REMzQzlCMjBCRTY3MTQxMEE0 NkVFN0IxNDkxRDFFREZDRjhEM0ZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0UyNTY2NkZCM0JENjc2OEEyRDg4NTA4QjlCRTE3RDY0MzUwM0YwRkJE QkY3NjUzMDY2NUIyMjJCMTRDMTVGNS8wLzlEQzNDOUIyMEJFNjcxNDEwQTQ2RUU3 QjE0OTFEMUVERkNGOEQzRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC02mCtXVVUgSuuAZoENwHD0r7b IGIn8WulUfeRi58p95vNhOo93mdvAF/wveSULI8bNuNdMhuA1/e11TSulDM0gJUD 76gyTjMnfzx0QzMeUPM/qfalxP8jrsiJAfANcjXfra9zyoWuHZt1BHhGFRjeXlgW xOb6ZRE2KL+9NOi8KbjqL5jIV3zUgvGwK1qLeDqacGF7AoJqoCE5/3dw/hVTcNXT k58lp+JqnZe+1/XljPO2qvuzAzIJOE2FwsFwO43e3RLpu20vX2sO4djxD7Qvy7qc i9JeH8Br+o+YXf4Spr/dSVLenf3Osej33Lt1LAIO64AXmXaHE2uaH/Hh+xle -----END CERTIFICATE-----Generated at Fri Jul 4 00:00:53 2025 by rpki-client