$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft File: 3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft (raw, json) Hash identifier: gXBoRL2MdMmJt5HmjY7RmriP+whqScFXZJB+6YRb/UY= Subject key identifier: EF:3A:43:EA:AC:E9:6F:F8:C4:43:7E:07:09:00:01:BA:9A:4A:96:04 Authority key identifier: 38:34:E0:AC:0F:6F:E4:7D:0E:28:19:D7:BD:DE:CC:70:CC:B2:EB:E0 Certificate issuer: /CN=3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0 Certificate serial: 1552CF33B0C7EC25FF9AB2DFF4A891E2195DCE1F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft Manifest number: F5 Signing time: Sat 05 Jul 2025 05:11:53 +0000 Manifest this update: Sat 05 Jul 2025 05:06:53 +0000 Manifest next update: Thu 10 Jul 2025 22:29:53 +0000 Files and hashes: 1: 3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl (hash: OI0uWhLev8p+TNqlt4D9MmLUiWNWQTtdCn9vAFhGBVw=) 2: 3137392e36332e342e302f32322d3234203d3e20323732383031.roa (hash: unVIWL9Rb/hAm0sECiQuIqJTRQGUJ5jwcSLWiyoxrJM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Jul 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:52:cf:33:b0:c7:ec:25:ff:9a:b2:df:f4:a8:91:e2:19:5d:ce:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0 Validity Not Before: Jul 5 05:06:53 2025 GMT Not After : Jul 10 22:29:53 2025 GMT Subject: CN=EF3A43EAACE96FF8C4437E07090001BA9A4A9604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c9:92:0d:a4:f5:32:79:00:c9:ee:92:a8:71: 2e:97:38:f9:5d:55:15:8a:19:4e:5b:20:96:11:d7: 01:d6:67:38:6c:5a:62:e1:16:1c:2c:23:17:b4:2c: 29:ee:0b:ad:05:06:de:f6:e0:3f:30:72:62:52:73: e1:aa:18:61:db:70:90:72:0a:95:34:72:db:68:06: ae:26:a0:63:e5:75:22:0a:c0:19:b3:1a:1c:de:5e: f2:09:64:11:64:4e:a7:4a:32:34:40:e2:3d:89:f0: 69:60:75:d8:80:04:85:54:2a:eb:56:50:65:2d:7a: 81:fe:46:0f:19:03:a9:a6:7f:6b:b4:4f:fd:31:fa: 49:92:30:df:8e:af:d5:ad:d2:17:0b:7e:15:f8:b6: 86:98:a2:a7:0a:a5:9f:18:b6:0c:29:6a:25:6c:c9: 2b:db:ef:3c:62:ee:fd:b0:2b:a2:21:31:40:2b:76: 9d:3e:21:67:68:0b:19:84:5e:6c:ae:1a:eb:22:64: 2e:69:c9:a3:fa:6e:64:c3:58:fa:95:4c:69:7c:e7: 03:88:95:db:7b:7f:ea:0f:22:73:4f:16:61:b7:01: 8a:4b:ac:14:55:3c:5a:75:89:8e:45:76:26:fa:07: eb:f1:84:45:2c:f8:1b:f7:ed:99:93:ac:db:4d:fb: 1a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:43:EA:AC:E9:6F:F8:C4:43:7E:07:09:00:01:BA:9A:4A:96:04 X509v3 Authority Key Identifier: keyid:38:34:E0:AC:0F:6F:E4:7D:0E:28:19:D7:BD:DE:CC:70:CC:B2:EB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1D6657CEB424D9660DC3B21325EDFE92E85EBDAA3A89692035272E258E405A3/0/3834E0AC0F6FE47D0E2819D7BDDECC70CCB2EBE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d3:ac:d5:2c:0f:07:08:fa:81:10:6a:09:2d:31:ff:38:77: a3:e1:5c:a8:6a:6e:43:96:3c:09:49:6c:10:00:d5:e5:ce:e9: 11:de:ad:61:05:c9:82:b7:84:a3:91:f8:3f:12:2d:26:82:7d: 98:76:6c:2c:bb:ba:44:f9:e9:60:ad:47:da:19:83:93:1b:fe: bf:8f:5a:89:5f:55:60:71:76:32:38:ff:a8:0e:45:54:fe:19: 15:ac:05:00:88:25:8b:43:ea:47:7f:b2:0e:f0:c1:44:23:6d: c6:7a:b4:46:f7:8f:04:da:5a:07:ad:c5:a4:18:c1:56:d9:32: 90:9b:9f:06:d1:ce:17:8b:e4:57:58:4d:7e:7e:8d:b7:0b:ff: 0e:3c:be:11:9f:5e:98:5d:ef:d4:48:73:74:f0:50:f6:97:81: 1e:9c:57:77:78:eb:e3:48:99:0d:b9:c0:90:b5:bf:35:06:53: e6:0f:25:15:ce:88:ad:7f:71:db:2a:dd:47:39:30:83:c2:1c: 42:a8:7c:89:20:25:44:73:b5:fd:41:ac:97:76:ee:54:48:60: e5:ce:d6:cd:fd:f9:51:e2:54:2e:71:44:61:69:e3:df:d4:4b: 4a:a2:35:ca:b9:e1:b9:83:44:ab:57:61:14:2e:70:1b:fe:f3: 89:de:58:59 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFVLPM7DH7CX/mrLf9KiR4hldzh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgzNEUwQUMwRjZGRTQ3RDBFMjgxOUQ3QkRERUNDNzBD Q0IyRUJFMDAeFw0yNTA3MDUwNTA2NTNaFw0yNTA3MTAyMjI5NTNaMDMxMTAvBgNV BAMTKEVGM0E0M0VBQUNFOTZGRjhDNDQzN0UwNzA5MDAwMUJBOUE0QTk2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqyZINpPUyeQDJ7pKocS6XOPld VRWKGU5bIJYR1wHWZzhsWmLhFhwsIxe0LCnuC60FBt724D8wcmJSc+GqGGHbcJBy CpU0cttoBq4moGPldSIKwBmzGhzeXvIJZBFkTqdKMjRA4j2J8GlgddiABIVUKutW UGUteoH+Rg8ZA6mmf2u0T/0x+kmSMN+Or9Wt0hcLfhX4toaYoqcKpZ8YtgwpaiVs ySvb7zxi7v2wK6IhMUArdp0+IWdoCxmEXmyuGusiZC5pyaP6bmTDWPqVTGl85wOI ldt7f+oPInNPFmG3AYpLrBRVPFp1iY5Fdib6B+vxhEUs+Bv37ZmTrNtN+xrjAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7zpD6qzpb/jEQ34HCQABuppKlgQwHwYDVR0j BBgwFoAUODTgrA9v5H0OKBnXvd7McMyy6+AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMUQ2NjU3Q0VCNDI0RDk2NjBEQzNCMjEzMjVFREZFOTJF ODVFQkRBQTNBODk2OTIwMzUyNzJFMjU4RTQwNUEzLzAvMzgzNEUwQUMwRjZGRTQ3 RDBFMjgxOUQ3QkRERUNDNzBDQ0IyRUJFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODM0RTBBQzBGNkZFNDdEMEUy ODE5RDdCRERFQ0M3MENDQjJFQkUwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDFENjY1N0NFQjQyNEQ5NjYwREMzQjIxMzI1RURGRTkyRTg1RUJEQUEz QTg5NjkyMDM1MjcyRTI1OEU0MDVBMy8wLzM4MzRFMEFDMEY2RkU0N0QwRTI4MTlE N0JEREVDQzcwQ0NCMkVCRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP06zVLA8HCPqBEGoJLTH/OHej 4Vyoam5DljwJSWwQANXlzukR3q1hBcmCt4Sjkfg/Ei0mgn2Ydmwsu7pE+elgrUfa GYOTG/6/j1qJX1VgcXYyOP+oDkVU/hkVrAUAiCWLQ+pHf7IO8MFEI23GerRG948E 2loHrcWkGMFW2TKQm58G0c4Xi+RXWE1+fo23C/8OPL4Rn16YXe/USHN08FD2l4Ee nFd3eOvjSJkNucCQtb81BlPmDyUVzoitf3HbKt1HOTCDwhxCqHyJICVEc7X9QayX du5USGDlztbN/flR4lQucURhaePf1EtKojXKueG5g0SrV2EULnAb/vOJ3lhZ -----END CERTIFICATE-----Generated at Sat Jul 5 21:16:50 2025 by rpki-client