$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft File: 3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft (raw, json) Hash identifier: o1wOiLThtL+AigpClbJWDYRMa5+JKI+JrKtxnymuPRM= Subject key identifier: 83:0F:70:D3:4A:0C:30:15:1F:59:DD:40:94:D6:EF:1C:20:17:1D:E6 Authority key identifier: 3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E Certificate issuer: /CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E Certificate serial: 1B7FDEFECC02029B0D018706FCEBD92E93F2C5BE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft Manifest number: F4 Signing time: Tue 01 Jul 2025 21:53:39 +0000 Manifest this update: Tue 01 Jul 2025 21:48:39 +0000 Manifest next update: Mon 07 Jul 2025 19:32:39 +0000 Files and hashes: 1: 3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl (hash: lMn2Md9v6ex213UVJCnu1vd/LFKdFUKVkeNGrUMl6LE=) 2: 3139302e31322e3134342e302f32322d3234203d3e20323730313237.roa (hash: i/aGyey4Qp/zhDcDPEyURyQoAJmparKePo+PPRJ2tqU=) 3: 323830313a63343a32613a3a2f34382d3438203d3e20323730313237.roa (hash: zz+ykG6PTIUfeyVW8QkHjl9sWUdAPa6Jxjy6RpuzCSA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7f:de:fe:cc:02:02:9b:0d:01:87:06:fc:eb:d9:2e:93:f2:c5:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CF3E435C7AF14892CAA1CB37514E4D15F6D852E Validity Not Before: Jul 1 21:48:39 2025 GMT Not After : Jul 7 19:32:39 2025 GMT Subject: CN=830F70D34A0C30151F59DD4094D6EF1C20171DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:9d:8c:3c:b0:07:63:e0:59:a8:04:d7:43: 3a:ab:89:d3:b8:6f:5b:e9:48:3b:25:97:1d:ba:3e: 54:c3:77:5d:95:eb:c0:56:35:ca:f5:e5:80:fd:b2: 36:b5:c9:c2:53:f5:ae:7a:d4:9f:81:c8:63:9d:3e: b9:e9:0e:91:c7:c8:a5:e4:b0:ab:34:38:02:eb:6f: 23:be:c3:7d:e5:be:6a:12:8c:a2:be:38:19:0f:6d: d6:b3:1f:23:f7:f7:c1:1a:01:43:bc:2a:43:d1:6d: 99:77:b0:ad:fd:89:4e:0b:5c:05:cf:24:f6:c6:ea: 3e:db:6e:db:16:f0:94:52:03:14:1e:d9:44:7c:f0: 95:bf:0a:ca:4c:6d:b7:5c:6f:ab:0f:ab:fc:63:a6: 6b:de:a3:22:e5:f2:e5:bb:04:0d:3a:f7:c4:79:a8: b2:7d:97:ee:b6:a3:75:87:ba:31:74:3b:13:db:e1: b1:c5:ab:f2:8d:50:10:df:47:b1:31:a3:e1:72:c0: 12:0f:e3:7e:43:19:41:c0:3f:bc:bd:86:a7:a5:a9: 9e:13:62:64:f8:5b:fc:37:31:2e:cb:ee:2d:51:cf: 95:77:f2:55:07:db:27:f2:75:b7:85:14:7f:4d:fa: ae:28:5c:ba:e3:87:d7:d7:96:00:43:d7:f4:9b:03: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0F:70:D3:4A:0C:30:15:1F:59:DD:40:94:D6:EF:1C:20:17:1D:E6 X509v3 Authority Key Identifier: keyid:3C:F3:E4:35:C7:AF:14:89:2C:AA:1C:B3:75:14:E4:D1:5F:6D:85:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57E3E94907A4D524A56DA41D7235AE1F55C14D0B971BAE39F174104179A1BD0F/0/3CF3E435C7AF14892CAA1CB37514E4D15F6D852E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d3:5c:58:55:2d:eb:fc:2c:68:ec:1a:bf:22:f5:c6:66:71: eb:27:29:e5:64:85:52:36:34:80:66:a2:0c:f2:43:70:e7:c3: dc:8c:de:7e:67:d0:24:ee:8b:19:30:fa:0a:26:6e:d4:a1:07: 7b:05:b9:fd:68:02:8f:85:2d:d5:a7:5b:6f:a9:a0:13:7d:b1: ca:eb:84:80:42:47:4e:c3:6a:2e:bd:53:9e:58:13:04:52:29: 38:14:07:61:96:26:6b:17:7f:c5:51:80:8c:78:6f:a0:5a:ea: 59:c1:06:46:69:52:d5:38:e5:f3:c4:40:fb:59:3c:e7:ac:f3: c2:7c:8d:e1:f5:7c:50:90:bd:12:3e:8f:73:ea:7a:73:f6:db: 5c:b6:32:58:60:5b:ee:fc:48:65:a3:fa:a7:6e:7f:20:16:cb: 17:df:c9:e8:65:5f:f5:6d:0d:e6:b4:cf:a0:1b:c3:cf:d5:58: 33:be:e4:16:7f:ad:c3:8e:1b:83:5f:2a:df:9d:e0:7c:d0:0f: 56:a7:c9:74:93:60:18:fd:60:6c:7e:f8:74:84:38:17:fc:71: c7:75:db:a8:be:3a:0d:a8:6a:d2:07:4f:c9:e4:f1:8a:4b:21: be:e4:e1:dc:74:2d:79:36:95:20:b2:31:23:6b:73:07:a5:91: 3f:e5:b2:8a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUG3/e/swCApsNAYcG/OvZLpPyxb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGM0U0MzVDN0FGMTQ4OTJDQUExQ0IzNzUxNEU0RDE1 RjZEODUyRTAeFw0yNTA3MDEyMTQ4MzlaFw0yNTA3MDcxOTMyMzlaMDMxMTAvBgNV BAMTKDgzMEY3MEQzNEEwQzMwMTUxRjU5REQ0MDk0RDZFRjFDMjAxNzFERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT652MPLAHY+BZqATXQzqridO4 b1vpSDsllx26PlTDd12V68BWNcr15YD9sja1ycJT9a561J+ByGOdPrnpDpHHyKXk sKs0OALrbyO+w33lvmoSjKK+OBkPbdazHyP398EaAUO8KkPRbZl3sK39iU4LXAXP JPbG6j7bbtsW8JRSAxQe2UR88JW/CspMbbdcb6sPq/xjpmveoyLl8uW7BA0698R5 qLJ9l+62o3WHujF0OxPb4bHFq/KNUBDfR7Exo+FywBIP435DGUHAP7y9hqelqZ4T YmT4W/w3MS7L7i1Rz5V38lUH2yfydbeFFH9N+q4oXLrjh9fXlgBD1/SbA6YFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUgw9w00oMMBUfWd1AlNbvHCAXHeYwHwYDVR0j BBgwFoAUPPPkNcevFIksqhyzdRTk0V9thS4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81N0UzRTk0OTA3QTRENTI0QTU2REE0MUQ3MjM1QUUxRjU1 QzE0RDBCOTcxQkFFMzlGMTc0MTA0MTc5QTFCRDBGLzAvM0NGM0U0MzVDN0FGMTQ4 OTJDQUExQ0IzNzUxNEU0RDE1RjZEODUyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0YzRTQzNUM3QUYxNDg5MkNB QTFDQjM3NTE0RTREMTVGNkQ4NTJFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTdFM0U5NDkwN0E0RDUyNEE1NkRBNDFENzIzNUFFMUY1NUMxNEQwQjk3 MUJBRTM5RjE3NDEwNDE3OUExQkQwRi8wLzNDRjNFNDM1QzdBRjE0ODkyQ0FBMUNC Mzc1MTRFNEQxNUY2RDg1MkUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB601xYVS3r/Cxo7Bq/IvXGZnHr JynlZIVSNjSAZqIM8kNw58PcjN5+Z9Ak7osZMPoKJm7UoQd7Bbn9aAKPhS3Vp1tv qaATfbHK64SAQkdOw2ouvVOeWBMEUik4FAdhliZrF3/FUYCMeG+gWupZwQZGaVLV OOXzxED7WTznrPPCfI3h9XxQkL0SPo9z6npz9ttctjJYYFvu/Ehlo/qnbn8gFssX 38noZV/1bQ3mtM+gG8PP1VgzvuQWf63DjhuDXyrfneB80A9Wp8l0k2AY/WBsfvh0 hDgX/HHHdduovjoNqGrSB0/J5PGKSyG+5OHcdC15NpUgsjEja3MHpZE/5bKK -----END CERTIFICATE-----Generated at Fri Jul 4 08:24:30 2025 by rpki-client