$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft File: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft (raw, json) Hash identifier: AoiS4znE2YnwkZhju+exTNma+QfVwlOo6oZbgABG2r8= Subject key identifier: 8C:38:D6:78:BC:3F:C2:2C:5A:CD:B8:6C:7F:84:A5:A4:F2:DF:48:45 Authority key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 Certificate issuer: /CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Certificate serial: 4EA3ADF44AC25AF9F06658C155A2722AA148BE4F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft Manifest number: F4 Signing time: Thu 03 Jul 2025 19:16:33 +0000 Manifest this update: Thu 03 Jul 2025 19:11:33 +0000 Manifest next update: Wed 09 Jul 2025 16:17:33 +0000 Files and hashes: 1: 323830333a386261303a3a2f33322d3430203d3e203631353132.roa (hash: KfhwmNkUX722XLKGo9HfzZHmGemaga5VvyUW9EoQpLk=) 2: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl (hash: KLGz4o7N3HiftlX4Td7WpTF8gkq1RfxAM0sqMhmfT/0=) 3: 34352e3137302e3132382e302f32322d3234203d3e203631353132.roa (hash: APOmoNKTFye/WKny8Moj2ePsiAP8sSxzy/Nk1SfzBZc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a3:ad:f4:4a:c2:5a:f9:f0:66:58:c1:55:a2:72:2a:a1:48:be:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Validity Not Before: Jul 3 19:11:33 2025 GMT Not After : Jul 9 16:17:33 2025 GMT Subject: CN=8C38D678BC3FC22C5ACDB86C7F84A5A4F2DF4845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:8b:19:a6:9c:35:cd:ed:a2:10:7a:b4:b9: 8f:a2:57:5b:3c:a8:57:9d:d1:60:c4:ab:80:90:5f: 29:3b:ef:8f:fb:b9:5d:5a:75:dd:1a:a1:16:69:fa: 0d:26:9f:25:e9:96:48:03:5d:6f:7b:f0:fc:5d:5f: d1:3c:a4:1e:88:16:3f:3f:2f:b1:35:68:64:95:2c: 6a:11:97:8e:98:24:78:12:71:8d:41:f2:2c:b1:de: 94:6e:b8:0a:56:43:7a:7d:07:83:cb:d2:d0:82:24: 40:d0:79:0c:4b:7d:01:4a:55:5a:b1:c8:3f:81:8c: f1:73:e8:de:04:44:e6:c8:0a:2f:c4:39:6b:0b:d0: 78:bf:2d:d6:db:ca:91:54:b8:31:07:70:70:ea:c8: c3:9e:72:10:85:fa:2f:ff:96:c4:b7:a4:4d:63:65: a2:50:72:25:94:28:a0:35:94:fa:4f:63:d9:53:11: 0e:27:35:73:35:66:e6:40:1e:d5:cc:64:21:f6:20: 7f:b9:c7:da:48:07:67:ca:03:ef:ea:4a:27:c6:81: a0:a0:35:e7:3d:6b:70:d0:3a:ae:2a:2f:4c:ac:33: 5f:56:7b:84:d5:c0:b3:cc:88:a9:3f:93:77:00:56: 69:ac:b8:17:47:92:b0:cd:6a:17:aa:71:a5:b3:bb: 92:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:38:D6:78:BC:3F:C2:2C:5A:CD:B8:6C:7F:84:A5:A4:F2:DF:48:45 X509v3 Authority Key Identifier: keyid:34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:98:c7:53:bb:ba:b2:53:b9:17:36:0e:7f:80:79:01:50:9a: f9:fe:7a:cd:e2:39:30:b0:fb:6a:c4:2d:9f:f4:7d:91:11:f8: ad:f2:5d:dc:cd:bb:83:59:9c:c4:fb:d1:c8:b5:37:7b:65:e6: 82:85:76:45:87:5c:61:f6:37:7e:da:21:58:a8:59:2a:17:73: 37:bb:2b:55:8d:d5:c0:af:0a:cc:dd:c1:2a:17:5e:72:48:d0: c9:8c:3e:fd:5d:ba:eb:6e:d6:d0:09:62:0a:9e:23:52:1c:36: ab:96:0a:2b:36:c8:3c:dd:3c:3a:6b:71:1e:2a:8d:df:b6:b9: 71:5c:8b:cb:93:cd:13:a2:7f:b9:c3:84:0b:95:97:7e:c0:74: 9b:fc:c3:00:9b:97:5b:95:d9:49:ff:31:bf:8b:e5:53:e4:c0: ef:a9:1e:54:51:05:f9:22:7b:d5:86:d3:a4:c7:3b:ae:69:25: 6f:e8:0b:42:dd:ea:db:25:8a:3e:43:96:99:d2:1e:0c:5d:03: eb:68:20:63:76:3b:f6:36:cc:dd:62:7d:6c:f7:58:3b:b8:3a: 29:7e:2c:80:02:a2:3f:61:10:02:25:c9:0a:c9:95:d3:53:5b: 8a:f2:d9:0d:2e:72:92:0b:c9:04:96:fa:dc:1a:8b:a1:fa:88: 5a:2e:4b:6c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTqOt9ErCWvnwZljBVaJyKqFIvk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0OERFQjZCNEYw MkJERkJDNzAeFw0yNTA3MDMxOTExMzNaFw0yNTA3MDkxNjE3MzNaMDMxMTAvBgNV BAMTKDhDMzhENjc4QkMzRkMyMkM1QUNEQjg2QzdGODRBNUE0RjJERjQ4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3b4sZppw1ze2iEHq0uY+iV1s8 qFed0WDEq4CQXyk774/7uV1add0aoRZp+g0mnyXplkgDXW978PxdX9E8pB6IFj8/ L7E1aGSVLGoRl46YJHgScY1B8iyx3pRuuApWQ3p9B4PL0tCCJEDQeQxLfQFKVVqx yD+BjPFz6N4ERObICi/EOWsL0Hi/LdbbypFUuDEHcHDqyMOechCF+i//lsS3pE1j ZaJQciWUKKA1lPpPY9lTEQ4nNXM1ZuZAHtXMZCH2IH+5x9pIB2fKA+/qSifGgaCg Nec9a3DQOq4qL0ysM19We4TVwLPMiKk/k3cAVmmsuBdHkrDNaheqcaWzu5ItAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjDjWeLw/wixazbhsf4SlpPLfSEUwHwYDVR0j BBgwFoAUNHLh/xgYlir7na1EjetrTwK9+8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1 MTFBREE2NTBEQzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYy QUZCOURBRDQ0OERFQjZCNEYwMkJERkJDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDcyRTFGRjE4MTg5NjJBRkI5 REFENDQ4REVCNkI0RjAyQkRGQkM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0NTAwRjYzRkU3NTExQURBNjUw REMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzM0NzJFMUZGMTgxODk2MkFGQjlEQUQ0 NDhERUI2QjRGMDJCREZCQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAwmMdTu7qyU7kXNg5/gHkBUJr5 /nrN4jkwsPtqxC2f9H2REfit8l3czbuDWZzE+9HItTd7ZeaChXZFh1xh9jd+2iFY qFkqF3M3uytVjdXArwrM3cEqF15ySNDJjD79XbrrbtbQCWIKniNSHDarlgorNsg8 3Tw6a3EeKo3ftrlxXIvLk80Ton+5w4QLlZd+wHSb/MMAm5dbldlJ/zG/i+VT5MDv qR5UUQX5InvVhtOkxzuuaSVv6AtC3erbJYo+Q5aZ0h4MXQPraCBjdjv2NszdYn1s 91g7uDopfiyAAqI/YRACJckKyZXTU1uK8tkNLnKSC8kElvrcGouh+ohaLkts -----END CERTIFICATE-----Generated at Fri Jul 4 08:44:06 2025 by rpki-client