$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft File: 20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft (raw, json) Hash identifier: /gKXC9zQUEXjApfL8DN+1VxExXcD9si+JkyZ1GyMPRE= Subject key identifier: EC:3F:BA:23:F8:7F:4A:4C:38:F2:88:AA:51:CC:6B:E6:9E:93:65:84 Authority key identifier: 20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75 Certificate issuer: /CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75 Certificate serial: 209FBB4D36431AE36B6A7F880CBB7284EAE93D57 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft Manifest number: FA Signing time: Wed 02 Jul 2025 01:35:57 +0000 Manifest this update: Wed 02 Jul 2025 01:30:57 +0000 Manifest next update: Mon 07 Jul 2025 11:03:57 +0000 Files and hashes: 1: 323830333a653363303a3a2f33322d3438203d3e20323635373339.roa (hash: dvzwargEWguyR8iOmj+URH/WbQtPtG3se+Bb5q/B/+w=) 2: 34352e372e3235322e302f32322d3234203d3e20323635373339.roa (hash: oWQSqlcdx4/yT7qjsV+illIbnlSc+E/9dg4NF7vSbYk=) 3: 20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl (hash: s5gidFLVqkQ3h7qnkB6NUhpCIMgIKJ7w57oK6DEhRxo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 11:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9f:bb:4d:36:43:1a:e3:6b:6a:7f:88:0c:bb:72:84:ea:e9:3d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75 Validity Not Before: Jul 2 01:30:57 2025 GMT Not After : Jul 7 11:03:57 2025 GMT Subject: CN=EC3FBA23F87F4A4C38F288AA51CC6BE69E936584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:8e:3b:af:c2:ec:88:01:a6:a5:d2:85:e1: 86:b8:66:79:a1:0b:07:7b:0a:87:e8:dc:8d:dc:53: 1d:e8:f7:3f:ce:b1:e5:b2:b6:8e:c3:95:54:35:67: 0a:04:ba:8e:06:3c:86:f9:fd:58:57:ab:a2:22:4d: e9:65:43:f0:13:5b:e3:80:06:bf:b7:41:f4:9e:35: b7:de:6d:95:b5:b4:bb:96:42:36:f2:4e:a6:df:d2: 54:14:48:79:96:0d:fb:da:ad:e9:0d:9a:ff:de:2d: 69:85:a2:47:8a:3a:98:55:52:75:ff:78:5f:3a:24: e5:9f:9f:05:03:82:1a:50:e2:4d:97:e4:f8:fe:4e: a7:46:fc:29:95:1b:1f:9f:a3:aa:c5:53:ec:ba:5f: 01:f4:f2:5b:0f:c6:9c:0e:f7:3d:cd:35:2e:55:d8: 4c:b9:d6:3b:68:bd:cd:73:5f:00:3c:0d:1a:c8:82: 60:83:90:66:f2:bc:e4:51:c1:82:08:5e:48:87:78: 50:eb:37:a9:f8:cb:bf:bf:2b:dd:7a:6b:7e:f1:97: 5d:77:56:54:cf:15:60:14:2f:bd:7f:4c:e5:28:b8: 62:72:82:c6:fd:43:10:aa:58:57:87:83:17:84:f9: 31:8b:d9:56:c5:7f:cc:65:e1:32:40:7f:d7:12:35: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3F:BA:23:F8:7F:4A:4C:38:F2:88:AA:51:CC:6B:E6:9E:93:65:84 X509v3 Authority Key Identifier: keyid:20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ae:2c:ab:1a:e3:6e:4a:03:e9:3d:b1:65:a1:04:7c:cb:cd: dc:e5:97:eb:cd:a2:87:f9:d4:0e:7a:bc:d6:10:6b:51:99:c0: 19:ed:17:84:dc:25:de:68:5e:be:71:92:2b:23:4d:ed:6d:b8: ca:2b:41:e5:e0:f1:8d:32:78:d0:47:b7:07:6f:7a:52:b2:c9: aa:d4:91:25:b9:03:1f:d7:6a:09:f6:d3:a9:8e:12:df:e6:f8: c4:d1:e0:52:7b:71:f6:4c:59:0b:96:07:80:6a:18:2a:3e:20: fc:d1:5e:12:d5:64:5a:af:b9:15:ab:46:b1:bc:7b:cc:d3:a0: c9:a5:fd:7d:a1:df:be:49:f0:d6:4d:c9:ae:8b:84:88:f3:a1: 98:d6:6b:ba:ba:75:36:b8:78:2a:e0:8a:01:ae:c0:cd:d3:b4: ac:06:f0:39:0e:5b:b2:71:ea:10:17:e2:5b:59:d8:ba:d5:38: 25:f1:e6:f5:df:cf:95:92:f2:6a:1c:7d:fc:65:1e:b7:7f:70: 1d:30:cd:c8:8f:6d:e9:90:1a:ba:6c:3c:8e:ef:6d:60:d2:9a: 17:95:b3:73:c2:c7:ee:15:95:9b:e3:5c:74:a3:5c:d7:f5:36: 1d:b9:a3:43:26:ac:83:64:6a:2c:f2:55:cb:34:a2:6d:16:ae: 4a:4e:55:52 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIJ+7TTZDGuNran+IDLtyhOrpPVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNTgwQTUyQzE1QTdCMEVDMkI1QTI0M0U1RTUyMTdE NkRFOUU3NTAeFw0yNTA3MDIwMTMwNTdaFw0yNTA3MDcxMTAzNTdaMDMxMTAvBgNV BAMTKEVDM0ZCQTIzRjg3RjRBNEMzOEYyODhBQTUxQ0M2QkU2OUU5MzY1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHY47r8LsiAGmpdKF4Ya4Znmh Cwd7Cofo3I3cUx3o9z/OseWyto7DlVQ1ZwoEuo4GPIb5/VhXq6IiTellQ/ATW+OA Br+3QfSeNbfebZW1tLuWQjbyTqbf0lQUSHmWDfvarekNmv/eLWmFokeKOphVUnX/ eF86JOWfnwUDghpQ4k2X5Pj+TqdG/CmVGx+fo6rFU+y6XwH08lsPxpwO9z3NNS5V 2Ey51jtovc1zXwA8DRrIgmCDkGbyvORRwYIIXkiHeFDrN6n4y7+/K916a37xl113 VlTPFWAUL71/TOUouGJygsb9QxCqWFeHgxeE+TGL2VbFf8xl4TJAf9cSNTd1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7D+6I/h/Skw48oiqUcxr5p6TZYQwHwYDVR0j BBgwFoAUILWApSwVp7DsK1okPl5SF9bennUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNzFGQTkxN0FDNUQ0QkIxRTI1ODNEMTBFQjk0N0RFOUQ3 MENBMzQwMkE1NzAzOEQzNkNEMUIwMjYwOTMxMDA1LzAvMjBCNTgwQTUyQzE1QTdC MEVDMkI1QTI0M0U1RTUyMTdENkRFOUU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEI1ODBBNTJDMTVBN0IwRUMy QjVBMjQzRTVFNTIxN0Q2REU5RTc1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjcxRkE5MTdBQzVENEJCMUUyNTgzRDEwRUI5NDdERTlENzBDQTM0MDJB NTcwMzhEMzZDRDFCMDI2MDkzMTAwNS8wLzIwQjU4MEE1MkMxNUE3QjBFQzJCNUEy NDNFNUU1MjE3RDZERTlFNzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyriyrGuNuSgPpPbFloQR8y83c 5ZfrzaKH+dQOerzWEGtRmcAZ7ReE3CXeaF6+cZIrI03tbbjKK0Hl4PGNMnjQR7cH b3pSssmq1JEluQMf12oJ9tOpjhLf5vjE0eBSe3H2TFkLlgeAahgqPiD80V4S1WRa r7kVq0axvHvM06DJpf19od++SfDWTcmui4SI86GY1mu6unU2uHgq4IoBrsDN07Ss BvA5DluyceoQF+JbWdi61Tgl8eb138+VkvJqHH38ZR63f3AdMM3Ij23pkBq6bDyO 721g0poXlbNzwsfuFZWb41x0o1zX9TYduaNDJqyDZGos8lXLNKJtFq5KTlVS -----END CERTIFICATE-----Generated at Fri Jul 4 00:59:04 2025 by rpki-client