$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft File: 49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft (raw, json) Hash identifier: rxEEAermup9ks0B7T0gHfEkud0KJ5vm6ftkX5FvYI4E= Subject key identifier: 33:31:B6:80:76:67:29:BB:E8:F9:C4:08:B1:A0:A5:50:64:EF:79:7B Authority key identifier: 49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0 Certificate issuer: /CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0 Certificate serial: 5F4EC1EE1A871C5B3E95B0B54CB528E247B161A1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft Manifest number: 0111 Signing time: Fri 22 Aug 2025 22:33:18 +0000 Manifest this update: Fri 22 Aug 2025 22:28:18 +0000 Manifest next update: Tue 26 Aug 2025 23:47:18 +0000 Files and hashes: 1: 323830333a646135303a3a2f33322d3438203d3e20323733313836.roa (hash: tGSUg+hrMpuG15amTGtLHk+JRN/qLIMNB3Dbzl0N+Zg=) 2: 49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl (hash: BIRwNTZmxWfw8PhDfMhjtglk3tjCBjGRqchpa8nWbVc=) 3: 34352e3233302e38362e302f32342d3234203d3e20323733313836.roa (hash: JK1Vni1hKHkzXSWZc80XHztPF971CcEyQvotu/x53z8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 23:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4e:c1:ee:1a:87:1c:5b:3e:95:b0:b5:4c:b5:28:e2:47:b1:61:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0 Validity Not Before: Aug 22 22:28:18 2025 GMT Not After : Aug 26 23:47:18 2025 GMT Subject: CN=3331B680766729BBE8F9C408B1A0A55064EF797B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1f:1a:67:56:cd:c0:f5:ed:e8:dd:4d:ed:37: 70:44:99:8f:f8:c8:f7:b4:64:ac:0c:05:1f:27:1c: 9b:6c:b6:c3:b3:a0:88:ac:b1:bc:8d:85:ad:23:94: 02:74:6f:a9:da:b9:df:c1:b5:6a:16:00:c2:bb:50: 3f:8d:cf:5c:33:08:08:86:4d:80:ab:2a:6f:a1:08: 43:c4:88:35:c1:f2:df:c7:00:8c:17:63:5c:a4:63: 7e:54:ce:7e:7f:6d:1a:d1:69:34:c9:56:ab:09:10: 19:64:4c:88:27:e8:d3:90:8e:3e:cc:f9:ab:97:a6: ae:8d:fb:b2:e1:00:7c:0b:4c:da:07:72:d0:58:e3: 14:bc:d5:f3:a4:37:94:5c:6f:4f:95:cc:b1:e7:66: 38:9e:e9:ca:63:6e:15:97:3f:3d:94:5d:75:47:ff: c1:8c:b1:02:f6:22:6e:da:4f:75:df:16:0c:fa:6f: 57:70:ab:14:91:a9:d5:40:73:20:d4:fc:08:cc:b8: 3a:7e:41:39:6f:22:1c:b0:52:50:ac:55:79:30:6c: c1:21:c4:eb:b9:e9:53:20:49:f6:fa:8b:ff:d0:d1: 59:97:c7:17:7c:4a:4e:01:68:fd:03:d9:44:e7:fb: 95:96:b9:37:3f:b3:2b:96:aa:12:d0:40:03:15:26: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:31:B6:80:76:67:29:BB:E8:F9:C4:08:B1:A0:A5:50:64:EF:79:7B X509v3 Authority Key Identifier: keyid:49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:02:16:0b:e5:c9:79:b7:58:51:29:68:7b:82:34:9b:da:74: ef:19:2e:75:b5:ab:35:e9:c3:45:39:f4:56:6f:ef:b0:6a:93: 88:71:cd:fd:42:57:20:94:ff:ae:1b:38:6e:0b:a2:9a:98:97: 8d:41:12:ca:ee:2b:8b:db:94:98:3c:2c:a9:98:1c:b7:d8:28: 3b:6e:f9:a0:e2:e2:b9:d2:74:00:ba:dc:aa:8a:b8:0f:6e:40: f5:47:0b:75:93:ea:e5:38:51:82:c7:4d:ae:61:0e:ee:08:4a: 3b:15:11:95:5e:09:3e:55:e9:fe:04:c7:d7:1a:f1:ec:6f:f9: 53:e4:18:d8:51:f0:d4:03:47:28:dc:b7:03:5b:26:74:59:5a: 8d:10:6f:b8:7b:87:dd:ea:73:09:8d:ef:97:cb:82:4e:8f:2d: e2:15:b8:ba:60:24:a4:c7:00:01:50:25:61:2c:d4:a8:be:18: 3d:95:5d:37:b0:4a:d3:8e:26:c6:c9:7c:fa:6d:e9:0d:d6:c2: 0c:ea:02:4c:f1:6d:55:36:71:49:95:01:c1:2e:5b:84:4e:bb: 5f:07:29:26:ef:5b:b4:46:ed:6b:15:ea:8d:2d:ea:04:ed:3d: 13:11:4f:84:f9:2d:8c:2d:97:1b:61:d4:e4:8c:4d:3e:6b:58: 31:55:80:c5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUX07B7hqHHFs+lbC1TLUo4kexYaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlBRkU1RDNBRkMzNkU1MTA0RUQ0OUM3MTQ0RDkyMUM1 M0JBMkREMDAeFw0yNTA4MjIyMjI4MThaFw0yNTA4MjYyMzQ3MThaMDMxMTAvBgNV BAMTKDMzMzFCNjgwNzY2NzI5QkJFOEY5QzQwOEIxQTBBNTUwNjRFRjc5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuHxpnVs3A9e3o3U3tN3BEmY/4 yPe0ZKwMBR8nHJtstsOzoIissbyNha0jlAJ0b6naud/BtWoWAMK7UD+Nz1wzCAiG TYCrKm+hCEPEiDXB8t/HAIwXY1ykY35Uzn5/bRrRaTTJVqsJEBlkTIgn6NOQjj7M +auXpq6N+7LhAHwLTNoHctBY4xS81fOkN5Rcb0+VzLHnZjie6cpjbhWXPz2UXXVH /8GMsQL2Im7aT3XfFgz6b1dwqxSRqdVAcyDU/AjMuDp+QTlvIhywUlCsVXkwbMEh xOu56VMgSfb6i//Q0VmXxxd8Sk4BaP0D2UTn+5WWuTc/syuWqhLQQAMVJnVJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUMzG2gHZnKbvo+cQIsaClUGTveXswHwYDVR0j BBgwFoAUSa/l06/DblEE7UnHFE2SHFO6LdAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83NzIwNERERjlGOUFCQjVBNzUzNjVCODc1OTkyNDQwNkFB REE0RjQyN0E2OEMzQUM0MEE2NDg4NTFBOTU1NkEwLzAvNDlBRkU1RDNBRkMzNkU1 MTA0RUQ0OUM3MTQ0RDkyMUM1M0JBMkREMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OUFGRTVEM0FGQzM2RTUxMDRF RDQ5QzcxNDREOTIxQzUzQkEyREQwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzcyMDREREY5RjlBQkI1QTc1MzY1Qjg3NTk5MjQ0MDZBQURBNEY0MjdB NjhDM0FDNDBBNjQ4ODUxQTk1NTZBMC8wLzQ5QUZFNUQzQUZDMzZFNTEwNEVENDlD NzE0NEQ5MjFDNTNCQTJERDAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUAhYL5cl5t1hRKWh7gjSb2nTv GS51tas16cNFOfRWb++wapOIcc39QlcglP+uGzhuC6KamJeNQRLK7iuL25SYPCyp mBy32Cg7bvmg4uK50nQAutyqirgPbkD1Rwt1k+rlOFGCx02uYQ7uCEo7FRGVXgk+ Ven+BMfXGvHsb/lT5BjYUfDUA0co3LcDWyZ0WVqNEG+4e4fd6nMJje+Xy4JOjy3i Fbi6YCSkxwABUCVhLNSovhg9lV03sErTjibGyXz6bekN1sIM6gJM8W1VNnFJlQHB LluETrtfBykm71u0Ru1rFeqNLeoE7T0TEU+E+S2MLZcbYdTkjE0+a1gxVYDF -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:10 2025 by rpki-client