$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft File: 72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft (raw, json) Hash identifier: mHcpbEepQJX0gxirNnvUMH07WLmTCOgSNq2LrV9uMlQ= Subject key identifier: 03:F5:D0:0F:59:20:A8:30:D2:78:1E:AA:9D:EA:6D:AC:BB:43:51:36 Authority key identifier: 72:B6:7F:DA:04:24:6C:53:AE:1C:1A:7E:BE:6E:F5:7B:4E:9C:84:2C Certificate issuer: /CN=72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C Certificate serial: 52B60AB0760376FE0A88AFCF01D1832719DDAE6E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft Manifest number: 0112 Signing time: Sat 23 Aug 2025 09:25:39 +0000 Manifest this update: Sat 23 Aug 2025 09:20:39 +0000 Manifest next update: Thu 28 Aug 2025 12:52:39 +0000 Files and hashes: 1: 3230302e32332e37352e302f32342d3234203d3e203134303830.roa (hash: KnfwwIYtHcF05AtqEtmr1AHp+x2BiOl5tGw8DeE/FHg=) 2: 323830313a3164613a3a2f34342d3434203d3e203134303830.roa (hash: 7a1zzEOFKOUUGKKnjajv6de3PBlOFhDHmUObkPDAFwI=) 3: 323830313a3164613a3a2f34342d3438203d3e20323730303138.roa (hash: bNx20jMhFEU1iVaLpxcvD4IwX+BjbktWSS+MJ0RvPvM=) 4: 72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.crl (hash: cApscPYL0FXkmV+cG6RG09E6yN3I9GH7l8q6x1nEK+w=) 5: 3230302e32332e37352e302f32342d3234203d3e20323730303138.roa (hash: lMpsyzfntTB6YlvtXy5QJdmxj1aWE0Ga+lUusoxgmqc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.crl rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Aug 2025 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b6:0a:b0:76:03:76:fe:0a:88:af:cf:01:d1:83:27:19:dd:ae:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C Validity Not Before: Aug 23 09:20:39 2025 GMT Not After : Aug 28 12:52:39 2025 GMT Subject: CN=03F5D00F5920A830D2781EAA9DEA6DACBB435136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:15:af:c6:42:c8:5f:19:94:d3:08:08:33: 6d:2e:8e:be:a6:26:3a:7e:04:b1:3c:79:6d:92:cd: c4:60:a0:30:6d:67:e1:e7:1e:8d:61:91:fd:dc:dc: c9:ab:d7:e0:76:76:02:f2:26:ff:b1:9c:aa:59:d0: 1d:ac:dd:80:9e:75:cd:cc:71:73:fe:c7:6c:da:f5: 35:5e:ab:cd:e8:ad:bf:ce:59:b9:66:e7:b0:a7:b2: 8a:2c:bc:d5:54:4b:ef:b3:0d:c0:1c:98:e7:f0:83: 35:f5:0e:c5:fe:a1:23:8f:e1:c7:c5:04:bc:36:25: b6:5b:52:38:ae:a5:76:c9:e3:0a:60:d7:88:eb:7d: ce:af:41:66:32:9b:a0:73:8c:4a:df:ae:2e:61:dc: d7:ca:fc:44:7c:c7:13:ce:b2:05:f3:9f:86:41:3b: a4:49:e4:17:e0:1f:fa:28:6f:b5:6e:ed:2a:5b:7b: 8a:57:07:20:49:3f:58:5d:18:a2:c3:9a:65:9a:26: a8:c6:a9:81:20:84:fd:2a:2f:ec:43:e2:6e:12:dd: fb:dc:7b:56:85:99:b6:fe:ee:d7:11:9a:99:e5:f5: 7d:87:91:8a:f7:56:47:f9:c7:15:86:b5:9d:3c:8d: d1:1f:f1:f3:0e:4a:41:5f:31:ff:d2:dd:db:f1:cc: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F5:D0:0F:59:20:A8:30:D2:78:1E:AA:9D:EA:6D:AC:BB:43:51:36 X509v3 Authority Key Identifier: keyid:72:B6:7F:DA:04:24:6C:53:AE:1C:1A:7E:BE:6E:F5:7B:4E:9C:84:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C32A8D50921BD87E43FA761FF973EE18169DD40683D0E47F21FE7576E4C359E0/0/72B67FDA04246C53AE1C1A7EBE6EF57B4E9C842C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:bb:5d:6a:6c:a7:78:56:43:9b:f0:88:b6:2d:14:eb:fc:2f: 02:19:b0:3c:cf:02:45:84:1c:f2:cc:9c:9c:86:5b:05:47:68: b7:ba:9f:1b:14:18:d9:cb:70:68:3c:fb:48:ee:48:bf:49:63: 16:eb:2b:a9:25:84:69:90:b4:c5:0e:6e:be:d7:d6:13:42:99: af:28:0a:da:cd:eb:38:93:86:fc:f0:84:df:51:34:59:07:a9: d7:a1:78:fc:c4:d5:4a:d0:ea:73:a7:20:8b:90:3e:a2:5d:63: 53:c9:31:94:f3:5d:a5:89:48:b6:b7:84:db:9b:65:d5:09:0d: ee:bf:ea:c2:b4:7e:4d:db:b4:18:b0:28:35:c5:f0:02:b0:ff: a8:c7:f6:d7:88:bc:0d:97:ce:db:b6:b6:5a:f6:a6:71:d7:3c: 50:1f:eb:7f:5c:35:7c:8c:82:58:1d:90:a3:b3:ea:d2:da:08: 45:7c:f0:31:a2:cb:b7:1c:c7:0e:da:5a:e7:82:c2:ec:36:e1: 77:2e:c8:8f:67:31:cd:84:d2:dd:6c:27:55:98:a6:88:75:79: c0:39:c8:89:c1:62:f8:68:ae:17:77:d8:c4:72:a7:aa:4a:1d: bd:f6:70:9c:dc:08:3e:f5:53:80:97:22:9b:d5:24:fe:99:8f: d4:d3:4e:46 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUrYKsHYDdv4KiK/PAdGDJxndrm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNjdGREEwNDI0NkM1M0FFMUMxQTdFQkU2RUY1N0I0 RTlDODQyQzAeFw0yNTA4MjMwOTIwMzlaFw0yNTA4MjgxMjUyMzlaMDMxMTAvBgNV BAMTKDAzRjVEMDBGNTkyMEE4MzBEMjc4MUVBQTlERUE2REFDQkI0MzUxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5hWvxkLIXxmU0wgIM20ujr6m Jjp+BLE8eW2SzcRgoDBtZ+HnHo1hkf3c3Mmr1+B2dgLyJv+xnKpZ0B2s3YCedc3M cXP+x2za9TVeq83orb/OWblm57CnsoosvNVUS++zDcAcmOfwgzX1DsX+oSOP4cfF BLw2JbZbUjiupXbJ4wpg14jrfc6vQWYym6BzjErfri5h3NfK/ER8xxPOsgXzn4ZB O6RJ5BfgH/oob7Vu7Spbe4pXByBJP1hdGKLDmmWaJqjGqYEghP0qL+xD4m4S3fvc e1aFmbb+7tcRmpnl9X2HkYr3Vkf5xxWGtZ08jdEf8fMOSkFfMf/S3dvxzI99AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUA/XQD1kgqDDSeB6qneptrLtDUTYwHwYDVR0j BBgwFoAUcrZ/2gQkbFOuHBp+vm71e06chCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DMzJBOEQ1MDkyMUJEODdFNDNGQTc2MUZGOTczRUUxODE2 OURENDA2ODNEMEU0N0YyMUZFNzU3NkU0QzM1OUUwLzAvNzJCNjdGREEwNDI0NkM1 M0FFMUMxQTdFQkU2RUY1N0I0RTlDODQyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MkI2N0ZEQTA0MjQ2QzUzQUUx QzFBN0VCRTZFRjU3QjRFOUM4NDJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzMyQThENTA5MjFCRDg3RTQzRkE3NjFGRjk3M0VFMTgxNjlERDQwNjgz RDBFNDdGMjFGRTc1NzZFNEMzNTlFMC8wLzcyQjY3RkRBMDQyNDZDNTNBRTFDMUE3 RUJFNkVGNTdCNEU5Qzg0MkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCku11qbKd4VkOb8Ii2LRTr/C8C GbA8zwJFhBzyzJychlsFR2i3up8bFBjZy3BoPPtI7ki/SWMW6yupJYRpkLTFDm6+ 19YTQpmvKArazes4k4b88ITfUTRZB6nXoXj8xNVK0OpzpyCLkD6iXWNTyTGU812l iUi2t4Tbm2XVCQ3uv+rCtH5N27QYsCg1xfACsP+ox/bXiLwNl87btrZa9qZx1zxQ H+t/XDV8jIJYHZCjs+rS2ghFfPAxosu3HMcO2lrngsLsNuF3LsiPZzHNhNLdbCdV mKaIdXnAOciJwWL4aK4Xd9jEcqeqSh299nCc3Ag+9VOAlyKb1ST+mY/U005G -----END CERTIFICATE-----Generated at Sat Aug 23 21:40:58 2025 by rpki-client