$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.mft File: 57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.mft (raw, json) Hash identifier: SKcVM+zDiE2cavyER9mkntP4tDGImiwpLqoWlexaNos= Subject key identifier: 66:3C:69:45:21:CF:EB:4B:0A:2B:34:F0:FC:93:EE:79:FB:10:49:D5 Authority key identifier: 57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A Certificate issuer: /CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A Certificate serial: 3CCED4212F6A6CA82BC0AB7D5D5175C72FC562BC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.mft Manifest number: FA Signing time: Thu 03 Jul 2025 17:10:10 +0000 Manifest this update: Thu 03 Jul 2025 17:05:10 +0000 Manifest next update: Wed 09 Jul 2025 10:35:10 +0000 Files and hashes: 1: 34352e3137342e3234382e302f32342d3234203d3e20323635353832.roa (hash: XVagGR6piYGJmfnnfd7Arscaq3lxCzxxzV+cmGicGFM=) 2: 34352e3137342e3234392e302f32342d3234203d3e20323635353832.roa (hash: jL0qvGRPc+TQx/BI9CIGWrDHJWgavRc32ujPQqm80dc=) 3: 323830363a3333373a3a2f33322d3438203d3e20323635353832.roa (hash: imPIovcnRNuDQVzc7HRpHTqfyLy/i2g0Cbi6g0+Th/I=) 4: 34352e3137342e3235312e302f32342d3234203d3e20323635353832.roa (hash: qIT6Gqq90fQzynO1GenLXny5e1cVG212Gez7ING0n1Y=) 5: 34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa (hash: CA57jkU2XzX2vChOrm6gQ6g2uiKsQyaWtFsG4XnPmLQ=) 6: 34352e3137342e3234382e302f32322d3234203d3e20323635353832.roa (hash: /WqjMrnN6HPnllPy5KxY3ts0aFM1B0UKKTy2LLZ+HD8=) 7: 57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl (hash: t1Y03DUq3S+AKVQM3GGnurHtEzrl/Zs5CiQV6NyzE+8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ce:d4:21:2f:6a:6c:a8:2b:c0:ab:7d:5d:51:75:c7:2f:c5:62:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A Validity Not Before: Jul 3 17:05:10 2025 GMT Not After : Jul 9 10:35:10 2025 GMT Subject: CN=663C694521CFEB4B0A2B34F0FC93EE79FB1049D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:22:e8:41:3f:52:99:27:bf:12:2f:07:38: d8:be:02:5f:3f:f5:ed:2f:37:3b:35:d9:74:b7:5f: 6a:95:d4:81:7b:92:8a:d2:67:a6:bf:e1:22:0c:d8: a7:8e:77:0e:05:97:14:fa:4f:8b:0e:8c:d0:21:eb: 90:6a:00:36:d4:c2:ed:bc:52:e1:56:05:5b:bf:25: 0d:2a:e0:7b:f9:2c:ba:10:ae:6b:80:5c:a4:bd:9e: 4d:2b:6e:81:4c:2a:f3:1e:91:d3:a2:73:c4:8d:2a: 4b:f9:51:d5:37:14:0e:0c:ec:48:2c:64:68:c4:ba: 45:37:4d:0f:6e:5f:b8:b5:42:0d:0a:37:a3:8f:ad: b6:3f:63:e1:93:df:cf:00:8c:a7:a7:d1:3f:33:8d: b8:b4:2d:13:35:e1:3d:70:e4:90:89:68:ca:db:3d: 27:64:de:3b:d3:bc:86:db:5f:14:43:1a:bd:7e:fb: 90:5a:5d:36:22:22:12:17:98:c2:6f:50:3f:b5:7e: d2:0a:28:06:26:c6:ef:87:9e:22:d0:42:db:24:5e: ce:33:09:0c:b9:8b:74:53:7b:e0:4f:f0:e3:55:0e: d2:5e:ab:d5:31:8e:f6:a3:72:5d:cf:14:f6:17:ca: c4:e2:37:dd:7f:cb:32:d0:96:1b:b0:19:3a:7c:b5: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3C:69:45:21:CF:EB:4B:0A:2B:34:F0:FC:93:EE:79:FB:10:49:D5 X509v3 Authority Key Identifier: keyid:57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ed:47:57:d8:83:58:16:3f:a1:3c:76:fb:21:74:d2:54:a6: 7b:77:e8:db:1f:c0:4a:d9:10:df:a1:83:c1:a6:f8:50:1d:05: 6e:81:55:ad:ff:05:a0:2b:01:5e:0e:5a:68:04:d4:3b:68:11: a5:fb:cc:da:af:98:b0:d2:2b:27:e2:83:47:51:1e:e7:57:d8: ef:72:65:fc:26:5c:23:27:b2:0c:d3:1e:db:2d:45:05:7c:90: 5e:ec:ff:d5:cc:a4:ce:3f:f2:04:95:c8:12:81:9e:40:56:1b: fa:0e:a1:05:e4:68:7a:6d:02:e8:50:3b:f2:a6:29:76:f7:d4: 9f:ad:65:3f:72:d4:53:81:33:9b:6e:08:7b:b0:31:4b:63:44: 30:65:cb:81:74:d7:ec:c3:8d:35:8a:ea:e6:d4:7f:ea:a1:eb: 13:59:cd:7b:51:13:c6:f2:81:fa:5d:d0:6e:17:20:7b:f0:39: 8c:b7:e5:b0:11:7f:61:d5:59:a0:aa:c3:22:19:7c:3e:ba:a5: 42:ce:0d:d5:2f:f5:c6:86:32:28:a1:bf:ef:23:c5:c4:07:9b: 6f:03:82:ae:7c:99:e7:55:1e:71:66:38:21:b8:7b:ef:a9:aa: 79:a7:68:3e:0e:eb:eb:1e:1c:28:33:62:6d:a2:d6:f6:46:49: 19:68:73:b4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPM7UIS9qbKgrwKt9XVF1xy/FYrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBMjRCMkU3RjdCRTk4RUFDQUZERTkzOTJEMTIzOUFB MUU5MkI1QTAeFw0yNTA3MDMxNzA1MTBaFw0yNTA3MDkxMDM1MTBaMDMxMTAvBgNV BAMTKDY2M0M2OTQ1MjFDRkVCNEIwQTJCMzRGMEZDOTNFRTc5RkIxMDQ5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTSLoQT9SmSe/Ei8HONi+Al8/ 9e0vNzs12XS3X2qV1IF7korSZ6a/4SIM2KeOdw4FlxT6T4sOjNAh65BqADbUwu28 UuFWBVu/JQ0q4Hv5LLoQrmuAXKS9nk0rboFMKvMekdOic8SNKkv5UdU3FA4M7Egs ZGjEukU3TQ9uX7i1Qg0KN6OPrbY/Y+GT388AjKen0T8zjbi0LRM14T1w5JCJaMrb PSdk3jvTvIbbXxRDGr1++5BaXTYiIhIXmMJvUD+1ftIKKAYmxu+HniLQQtskXs4z CQy5i3RTe+BP8ONVDtJeq9Uxjvajcl3PFPYXysTiN91/yzLQlhuwGTp8tZLTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZjxpRSHP60sKKzTw/JPuefsQSdUwHwYDVR0j BBgwFoAUV6JLLn976Y6sr96TktEjmqHpK1owDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MDk4RERGQTIxQjdEMzNDQUNGOTBCRkI1Rjk4NDI2MTI3 MUM1RTQ4NjY3OTFGQTAwQzIzRkE0QzA5MTU4RkE0LzAvNTdBMjRCMkU3RjdCRTk4 RUFDQUZERTkzOTJEMTIzOUFBMUU5MkI1QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81N0EyNEIyRTdGN0JFOThFQUNB RkRFOTM5MkQxMjM5QUExRTkyQjVBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzA5OERERkEyMUI3RDMzQ0FDRjkwQkZCNUY5ODQyNjEyNzFDNUU0ODY2 NzkxRkEwMEMyM0ZBNEMwOTE1OEZBNC8wLzU3QTI0QjJFN0Y3QkU5OEVBQ0FGREU5 MzkyRDEyMzlBQTFFOTJCNUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBr7UdX2INYFj+hPHb7IXTSVKZ7 d+jbH8BK2RDfoYPBpvhQHQVugVWt/wWgKwFeDlpoBNQ7aBGl+8zar5iw0isn4oNH UR7nV9jvcmX8JlwjJ7IM0x7bLUUFfJBe7P/VzKTOP/IElcgSgZ5AVhv6DqEF5Gh6 bQLoUDvypil299SfrWU/ctRTgTObbgh7sDFLY0QwZcuBdNfsw401iurm1H/qoesT Wc17URPG8oH6XdBuFyB78DmMt+WwEX9h1VmgqsMiGXw+uqVCzg3VL/XGhjIoob/v I8XEB5tvA4KufJnnVR5xZjghuHvvqap5p2g+DuvrHhwoM2Jtotb2RkkZaHO0 -----END CERTIFICATE-----Generated at Fri Jul 4 08:19:57 2025 by rpki-client