$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft File: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft (raw, json) Hash identifier: 4P8rvbt6G0Jq/4u4WG0ktZ3nMvgpE0fMdPuWwr867hU= Subject key identifier: 43:DF:20:F2:D3:A4:82:2D:AB:0F:A0:6A:0A:63:54:09:58:9F:6B:7A Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE Certificate issuer: /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE Certificate serial: 1C0DA3EA98B07C0B7EF104CBA344BA4CFE598248 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft Manifest number: FE Signing time: Fri 04 Jul 2025 06:52:54 +0000 Manifest this update: Fri 04 Jul 2025 06:47:54 +0000 Manifest next update: Wed 09 Jul 2025 00:24:54 +0000 Files and hashes: 1: 3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (hash: M6ORRmOjHmMsQNf1kdyef1dJN1SWSdh126U+iO1IFbI=) 2: 323830333a326330303a3a2f33322d3332203d3e20323632323331.roa (hash: U8WxyTNq4zMrD7zIgmZG7H6X5lZodDFo/vZmQoIl41A=) 3: 3134332e302e38302e302f32322d3234203d3e20323632323331.roa (hash: swrsgDe0o9qSKgaY5vzkAmT9scHwb/lYIccWTU1JQlo=) 4: 3139302e35322e38302e302f32302d3234203d3e20323632323331.roa (hash: zqIKyXjJi80cBIksZ5XjThzAWTyFD1sdNLptjXJQgX8=) 5: 4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl (hash: UyFmQ/ScUPG6FwNKlkuxlpTYTqy9kwQZmCvlUZIT2So=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0d:a3:ea:98:b0:7c:0b:7e:f1:04:cb:a3:44:ba:4c:fe:59:82:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE Validity Not Before: Jul 4 06:47:54 2025 GMT Not After : Jul 9 00:24:54 2025 GMT Subject: CN=43DF20F2D3A4822DAB0FA06A0A635409589F6B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:da:8d:d0:99:ee:69:16:0e:a6:be:3a:89: 60:21:7f:af:06:a7:91:56:27:99:e7:a7:b8:19:d5: b5:97:dc:3f:48:61:cb:06:de:fc:47:d3:e6:bb:db: 2e:f0:76:51:5e:2c:ca:57:7a:7b:aa:ae:d0:a8:52: 97:48:81:e0:01:a4:69:2d:06:92:5d:27:1a:be:d0: e5:ab:29:8f:15:59:5a:14:ff:e1:92:c9:0e:84:78: 79:5e:21:3d:08:f7:7e:58:b2:f8:ef:6d:a3:52:8d: 4d:aa:d9:12:eb:ae:0a:d0:75:ff:79:5d:70:47:3b: 77:67:3b:de:46:59:24:1a:e8:6d:ae:77:42:02:10: 84:20:62:bd:58:e5:66:19:f2:b4:16:8d:5f:54:2e: 21:ea:b2:b5:0c:74:d0:a1:51:a8:13:2f:67:6b:12: 48:36:a4:5e:e9:e3:10:57:4d:2a:62:32:ec:7e:a6: 40:31:3e:da:6e:29:92:ea:30:ba:8f:5b:17:0d:02: f2:dd:84:b3:e3:b6:05:c3:bc:8f:05:6f:05:80:fa: 7f:6a:cb:96:1d:7e:3d:da:cf:ff:c4:96:a9:07:4d: b1:80:e7:65:17:e8:ad:b6:7e:84:85:db:e7:d8:07: 03:d3:62:d5:6a:f0:3a:00:4a:ea:f4:2a:7a:4e:d8: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DF:20:F2:D3:A4:82:2D:AB:0F:A0:6A:0A:63:54:09:58:9F:6B:7A X509v3 Authority Key Identifier: keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7f:60:ec:8d:b5:7d:2a:02:ba:76:5b:d0:47:cd:2b:82:77: f8:95:7f:83:5f:02:b2:53:f5:b1:f1:00:50:5e:e1:88:50:ed: a9:87:20:22:e2:4b:6c:b1:d7:82:1f:00:ac:17:21:3f:7c:03: d5:a4:9e:6a:bd:32:ae:56:06:b5:47:73:81:ae:8d:70:75:a0: a1:c1:ec:24:23:dc:27:3e:3f:9a:85:51:d5:4e:51:98:d1:74: 3d:83:61:51:d6:52:a6:25:4b:34:15:ca:75:a8:c6:66:07:30: 37:cf:6b:a3:ac:49:74:9d:9f:f7:b1:c5:25:dd:8d:71:6f:46: 18:d9:13:bb:ce:67:c4:0a:8f:d6:fb:2f:ee:fc:7a:82:50:fd: 3e:32:1e:43:a8:f4:df:7c:81:49:9d:7c:3d:f2:6d:16:ef:9f: 89:a4:be:d2:98:ee:ee:a8:31:57:a6:48:ff:db:82:03:2c:00: 11:ad:76:e3:7c:fc:d7:e8:a9:a3:28:d4:8f:5d:57:43:a1:54: 65:67:52:6f:7f:8b:d7:e6:0f:24:d4:9c:f0:fd:1e:83:60:01: 0b:24:86:cc:05:75:d4:b7:97:ca:9d:c1:10:b2:2a:29:da:97: 54:c5:56:21:2b:45:d2:36:3d:b2:bf:ce:8c:4e:f8:5e:66:56: d3:2c:68:29 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHA2j6piwfAt+8QTLo0S6TP5ZgkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIzM0I1QzlGQjA1MDMyRUU0RDMyM0Y1ODk4NEM5QkIy MzUzRjlBRTAeFw0yNTA3MDQwNjQ3NTRaFw0yNTA3MDkwMDI0NTRaMDMxMTAvBgNV BAMTKDQzREYyMEYyRDNBNDgyMkRBQjBGQTA2QTBBNjM1NDA5NTg5RjZCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlwNqN0JnuaRYOpr46iWAhf68G p5FWJ5nnp7gZ1bWX3D9IYcsG3vxH0+a72y7wdlFeLMpXenuqrtCoUpdIgeABpGkt BpJdJxq+0OWrKY8VWVoU/+GSyQ6EeHleIT0I935YsvjvbaNSjU2q2RLrrgrQdf95 XXBHO3dnO95GWSQa6G2ud0ICEIQgYr1Y5WYZ8rQWjV9ULiHqsrUMdNChUagTL2dr Ekg2pF7p4xBXTSpiMux+pkAxPtpuKZLqMLqPWxcNAvLdhLPjtgXDvI8FbwWA+n9q y5Ydfj3az//ElqkHTbGA52UX6K22foSF2+fYBwPTYtVq8DoASur0KnpO2GP1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQ98g8tOkgi2rD6BqCmNUCVifa3owHwYDVR0j BBgwFoAUQjO1yfsFAy7k0yP1iYTJuyNT+a4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQUYwMkU4MjI1MTQ2NDREMzBFQjlDNjMzNTA3NTYyMEFG RUM4OTNCREI5OTQwRkExRUEyNTY4RkJERDhDQjE3LzAvNDIzM0I1QzlGQjA1MDMy RUU0RDMyM0Y1ODk4NEM5QkIyMzUzRjlBRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjMzQjVDOUZCMDUwMzJFRTRE MzIzRjU4OTg0QzlCQjIzNTNGOUFFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkFGMDJFODIyNTE0NjQ0RDMwRUI5QzYzMzUwNzU2MjBBRkVDODkzQkRC OTk0MEZBMUVBMjU2OEZCREQ4Q0IxNy8wLzQyMzNCNUM5RkIwNTAzMkVFNEQzMjNG NTg5ODRDOUJCMjM1M0Y5QUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhf2DsjbV9KgK6dlvQR80rgnf4 lX+DXwKyU/Wx8QBQXuGIUO2phyAi4ktssdeCHwCsFyE/fAPVpJ5qvTKuVga1R3OB ro1wdaChwewkI9wnPj+ahVHVTlGY0XQ9g2FR1lKmJUs0Fcp1qMZmBzA3z2ujrEl0 nZ/3scUl3Y1xb0YY2RO7zmfECo/W+y/u/HqCUP0+Mh5DqPTffIFJnXw98m0W75+J pL7SmO7uqDFXpkj/24IDLAARrXbjfPzX6KmjKNSPXVdDoVRlZ1Jvf4vX5g8k1Jzw /R6DYAELJIbMBXXUt5fKncEQsiop2pdUxVYhK0XSNj2yv86MTvheZlbTLGgp -----END CERTIFICATE-----Generated at Fri Jul 4 08:20:55 2025 by rpki-client