$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: JmEq4o+DhlwmNXq+asFJgeLyO0wTxlk+JCU7kfKZs/k= Subject key identifier: AA:CD:81:56:C0:11:9C:29:14:3D:F7:3A:7D:70:C3:DC:5B:F3:28:CD Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 7D79CF81537BFA65E03657DB919BBBCF7B4B0935 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: 0118 Signing time: Sat 23 Aug 2025 02:36:01 +0000 Manifest this update: Sat 23 Aug 2025 02:31:01 +0000 Manifest next update: Thu 28 Aug 2025 00:40:01 +0000 Files and hashes: 1: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) 2: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) 3: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: sw5IGkHkRT6eL4xgqxzAbM7uWLtFpl4iY/2yBA/Gr/E=) 4: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) 5: 34352e3136342e32322e302f32342d3234203d3e203238343233.roa (hash: jnDQ7QTvt7MtCmcH9i+dr1cBZcskNKDgGPqDpsYzawE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:79:cf:81:53:7b:fa:65:e0:36:57:db:91:9b:bb:cf:7b:4b:09:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Aug 23 02:31:01 2025 GMT Not After : Aug 28 00:40:01 2025 GMT Subject: CN=AACD8156C0119C29143DF73A7D70C3DC5BF328CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:91:ee:17:ea:22:80:20:b9:7f:6e:2d:18:3a: e4:ce:3f:98:6c:ca:2f:71:d3:01:29:60:da:cf:56: 9e:41:ef:85:e9:e3:af:05:bb:d8:5c:9c:61:08:ff: c4:c8:5f:92:27:a1:90:59:4c:a2:1d:0b:e0:8c:42: d5:ea:09:03:c2:a1:97:e3:ff:72:3c:f8:75:92:29: 05:5e:ab:f2:21:9f:ba:50:08:3f:c8:b6:a8:dc:18: bc:0e:18:0c:88:78:a7:8c:47:d7:e2:ab:41:eb:8d: 6a:11:8e:b4:a1:31:46:c7:2a:b1:b3:57:84:ef:8d: fa:c9:72:bc:52:9f:42:ba:49:ba:20:95:7b:60:45: 77:4c:05:5d:56:d6:24:a2:1d:53:ca:09:d4:c5:f0: ca:08:da:45:77:58:e9:6c:10:82:5e:3f:f9:b2:08: f2:35:8c:78:46:13:f0:a3:7f:36:07:ec:ed:60:7b: 8f:2b:11:1f:20:a5:0d:5c:c6:14:51:68:f2:0b:ac: 3c:b0:78:0a:06:97:af:11:54:e2:73:56:03:a3:8d: 92:55:67:ba:b1:c1:46:b3:21:e7:15:c6:01:24:bd: 0b:e4:a6:e2:d8:c8:8d:93:f8:00:bc:c7:14:7d:ca: 6f:f9:2e:88:8f:be:92:91:63:4c:39:2b:26:a7:b8: c0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CD:81:56:C0:11:9C:29:14:3D:F7:3A:7D:70:C3:DC:5B:F3:28:CD X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a3:97:1e:b3:cb:54:5a:ce:c3:ba:f4:69:26:80:d8:3f:10: 01:38:c0:62:f7:00:e9:7a:74:7a:e2:53:99:51:7c:67:32:78: 54:42:22:35:97:f5:83:2e:2d:7c:ae:f1:9c:78:96:f1:09:b7: 64:19:b5:4f:ce:2e:e6:7d:b2:a7:d3:68:b0:3d:89:5b:3e:7f: c4:9a:3f:ed:53:9c:bf:55:eb:34:fc:0d:9e:7d:26:2b:9e:6c: 64:d5:a3:2f:41:52:46:81:db:b5:4f:5f:20:95:8b:f3:64:d7: b1:f7:21:41:1f:ee:32:03:9d:42:8f:2c:44:00:77:16:c8:20: b6:cc:bf:fa:2f:70:78:70:16:4c:24:4c:f4:04:93:9e:4d:d2: 0c:e9:82:dd:d3:af:6b:cc:cf:28:70:d1:b9:7a:7c:bd:69:5f: 10:c4:0a:f4:6f:2e:ea:04:de:30:6d:33:dc:c4:0c:4e:89:26: 93:92:60:95:b3:ba:f2:1f:a5:5a:8e:82:97:9c:82:d1:22:65: c1:81:30:85:2d:26:54:f1:e9:06:cd:4a:ba:6f:83:3d:a8:71: 72:b6:1e:f8:c0:a9:70:84:05:d6:6b:b0:1f:81:f5:e2:c0:bd: 94:49:fa:3f:18:6d:e1:27:da:53:0d:b8:b0:3e:94:2c:c7:cb: ef:37:e2:9f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfXnPgVN7+mXgNlfbkZu7z3tLCTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTA4MjMwMjMxMDFaFw0yNTA4MjgwMDQwMDFaMDMxMTAvBgNV BAMTKEFBQ0Q4MTU2QzAxMTlDMjkxNDNERjczQTdENzBDM0RDNUJGMzI4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDike4X6iKAILl/bi0YOuTOP5hs yi9x0wEpYNrPVp5B74Xp468Fu9hcnGEI/8TIX5InoZBZTKIdC+CMQtXqCQPCoZfj /3I8+HWSKQVeq/Ihn7pQCD/ItqjcGLwOGAyIeKeMR9fiq0HrjWoRjrShMUbHKrGz V4TvjfrJcrxSn0K6SboglXtgRXdMBV1W1iSiHVPKCdTF8MoI2kV3WOlsEIJeP/my CPI1jHhGE/CjfzYH7O1ge48rER8gpQ1cxhRRaPILrDyweAoGl68RVOJzVgOjjZJV Z7qxwUazIecVxgEkvQvkpuLYyI2T+AC8xxR9ym/5LoiPvpKRY0w5KyanuMCBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqs2BVsARnCkUPfc6fXDD3FvzKM0wHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQo5ces8tUWs7DuvRpJoDYPxAB OMBi9wDpenR64lOZUXxnMnhUQiI1l/WDLi18rvGceJbxCbdkGbVPzi7mfbKn02iw PYlbPn/Emj/tU5y/Ves0/A2efSYrnmxk1aMvQVJGgdu1T18glYvzZNex9yFBH+4y A51CjyxEAHcWyCC2zL/6L3B4cBZMJEz0BJOeTdIM6YLd069rzM8ocNG5eny9aV8Q xAr0by7qBN4wbTPcxAxOiSaTkmCVs7ryH6VajoKXnILRImXBgTCFLSZU8ekGzUq6 b4M9qHFyth74wKlwhAXWa7AfgfXiwL2USfo/GG3hJ9pTDbiwPpQsx8vvN+Kf -----END CERTIFICATE-----Generated at Sun Aug 24 07:16:30 2025 by rpki-client