$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft File: 8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft (raw, json) Hash identifier: GDrVjO5dILM3I2Mxv+v6dpisPYS3vFxfFBIyNfIb0w8= Subject key identifier: C7:BA:41:80:82:F5:BF:BA:50:E7:42:0C:40:A2:57:74:B9:07:B3:71 Authority key identifier: 8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2 Certificate issuer: /CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2 Certificate serial: 445C415E7A6C7E06E42C0C08348F34FB3A3BD3E8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft Manifest number: F1 Signing time: Wed 02 Jul 2025 17:35:47 +0000 Manifest this update: Wed 02 Jul 2025 17:30:47 +0000 Manifest next update: Tue 08 Jul 2025 11:45:47 +0000 Files and hashes: 1: 323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa (hash: gmZyWHRuo17+avalH47YyUH8mbeC0wS2dX4cGRnd/nI=) 2: 323830313a3139353a313a3a2f34382d3438203d3e20323733313437.roa (hash: wiQlaSvugCZTU4ufbO7Tt8d5DWSP2nZNvKYSV9M3aJ0=) 3: 8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl (hash: ObIoPNfE/EG4dfbYUbX0/s9O4NYxZbRxfCPeiwXdchg=) 4: 323830313a3139353a3a2f34342d3434203d3e20323733313437.roa (hash: ViGrRIzQq4H1WE5XshTWxDOkfU1QVuXT3ezy/ZNgXT0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 14:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5c:41:5e:7a:6c:7e:06:e4:2c:0c:08:34:8f:34:fb:3a:3b:d3:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2 Validity Not Before: Jul 2 17:30:47 2025 GMT Not After : Jul 8 11:45:47 2025 GMT Subject: CN=C7BA418082F5BFBA50E7420C40A25774B907B371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:7a:7a:09:dc:40:12:62:5b:18:54:d3:d8: a1:28:5a:4e:bd:49:38:69:8c:1a:52:06:f0:f8:f1: 07:95:56:b0:92:0d:4c:d0:d8:93:e9:1d:b8:16:09: 68:03:d4:bb:a6:ce:fd:66:ba:a8:fe:f0:9b:e2:e0: 9d:38:9e:34:a9:d9:1c:1d:38:d9:aa:03:f4:5e:4a: 25:65:9c:ae:fa:7b:12:c3:a3:de:92:c1:88:fa:3a: 26:53:87:ce:bb:16:cd:94:09:20:03:59:9a:1c:cb: 95:a2:ed:fa:ef:25:b0:b6:9c:90:7e:63:9d:ef:c2: f6:67:87:df:54:3e:9e:a6:e0:d5:15:c2:88:5e:c6: 77:7c:3f:b5:50:6d:70:0b:41:71:88:a8:5e:fb:60: b4:ff:51:c3:e5:e5:6d:1d:67:33:cb:c4:7e:c3:c2: 17:4f:23:7b:83:ed:13:7e:dc:6b:7e:be:fb:ad:cc: e1:d9:b5:eb:d2:9a:70:84:0f:b4:4b:86:75:0d:66: e3:38:31:68:e4:06:27:20:06:a9:d8:10:17:22:42: fa:c8:b6:d1:c0:26:fa:af:0c:4a:3b:4c:a9:1c:ac: 02:5a:20:51:99:3b:ee:15:6b:4e:a9:0d:5d:79:f7: 00:02:0a:b6:da:63:fc:f5:38:db:a3:f1:49:a6:33: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BA:41:80:82:F5:BF:BA:50:E7:42:0C:40:A2:57:74:B9:07:B3:71 X509v3 Authority Key Identifier: keyid:8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e7:90:61:19:55:22:3d:e2:fd:b0:ad:cf:cb:55:f8:3c:b7: 5c:b6:68:80:71:d9:eb:d0:b7:6f:75:11:e6:55:a0:22:82:65: df:90:f2:b3:c8:22:ee:77:ec:db:f7:96:ea:b4:25:3a:09:50: a1:c6:98:08:26:a2:6e:30:3b:8f:cc:18:31:37:af:85:99:2a: ab:bd:4d:8d:49:a6:bd:db:33:64:ec:64:37:3e:4f:a7:0b:d3: fd:a9:06:a5:34:12:f3:72:4d:1d:0e:70:81:15:48:c9:04:c1: 38:c2:90:88:0f:64:33:15:6c:04:03:69:18:da:be:f4:0a:cc: 81:f7:84:9b:2b:5f:e6:8d:53:6a:9b:ab:78:7b:93:e8:86:0e: 21:93:47:c7:e1:cc:b0:10:12:7e:1a:80:f4:d0:a2:42:fc:22: 77:f8:d4:ec:3b:1a:07:be:57:1b:6b:56:1b:4f:38:dc:d0:42: b5:fa:00:f1:9f:8b:f0:7e:63:b9:f4:6f:8c:f7:2a:8b:28:c9: c8:45:fb:1f:df:01:3d:be:a2:65:99:39:f9:20:16:47:c2:60: 1c:a2:b5:86:9c:ca:3d:72:f0:79:7a:c4:e6:61:99:ac:f2:d5: 98:bd:b6:27:cf:d2:b6:56:af:c1:2a:86:41:3b:e6:f5:97:c4: 70:e2:c8:18 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURFxBXnpsfgbkLAwINI80+zo70+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZFRDc1RkY2REQwMUYxQzhGNDAzNjk3NEM5QUU3NzI3 MUU2QUZGMjAeFw0yNTA3MDIxNzMwNDdaFw0yNTA3MDgxMTQ1NDdaMDMxMTAvBgNV BAMTKEM3QkE0MTgwODJGNUJGQkE1MEU3NDIwQzQwQTI1Nzc0QjkwN0IzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1znp6CdxAEmJbGFTT2KEoWk69 SThpjBpSBvD48QeVVrCSDUzQ2JPpHbgWCWgD1Lumzv1muqj+8Jvi4J04njSp2Rwd ONmqA/ReSiVlnK76exLDo96SwYj6OiZTh867Fs2UCSADWZocy5Wi7frvJbC2nJB+ Y53vwvZnh99UPp6m4NUVwohexnd8P7VQbXALQXGIqF77YLT/UcPl5W0dZzPLxH7D whdPI3uD7RN+3Gt+vvutzOHZtevSmnCED7RLhnUNZuM4MWjkBicgBqnYEBciQvrI ttHAJvqvDEo7TKkcrAJaIFGZO+4Va06pDV159wACCrbaY/z1ONuj8UmmM1YpAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUx7pBgIL1v7pQ50IMQKJXdLkHs3EwHwYDVR0j BBgwFoAUj+11/23QHxyPQDaXTJrncnHmr/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMjY5NUM2OUVCQzY1QzUwNUQ0REJGOERGMjY3QTkwNDMz QjJBNzY1Q0M2N0I0REFDQzg4QUI4NEY4RkM4OUMwLzAvOEZFRDc1RkY2REQwMUYx QzhGNDAzNjk3NEM5QUU3NzI3MUU2QUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RkVENzVGRjZERDAxRjFDOEY0 MDM2OTc0QzlBRTc3MjcxRTZBRkYyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDI2OTVDNjlFQkM2NUM1MDVENERCRjhERjI2N0E5MDQzM0IyQTc2NUND NjdCNERBQ0M4OEFCODRGOEZDODlDMC8wLzhGRUQ3NUZGNkREMDFGMUM4RjQwMzY5 NzRDOUFFNzcyNzFFNkFGRjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCA55BhGVUiPeL9sK3Py1X4PLdc tmiAcdnr0LdvdRHmVaAigmXfkPKzyCLud+zb95bqtCU6CVChxpgIJqJuMDuPzBgx N6+FmSqrvU2NSaa92zNk7GQ3Pk+nC9P9qQalNBLzck0dDnCBFUjJBME4wpCID2Qz FWwEA2kY2r70CsyB94SbK1/mjVNqm6t4e5Pohg4hk0fH4cywEBJ+GoD00KJC/CJ3 +NTsOxoHvlcba1YbTzjc0EK1+gDxn4vwfmO59G+M9yqLKMnIRfsf3wE9vqJlmTn5 IBZHwmAcorWGnMo9cvB5esTmYZms8tWYvbYnz9K2Vq/BKoZBO+b1l8Rw4sgY -----END CERTIFICATE-----Generated at Fri Jul 4 00:45:24 2025 by rpki-client