$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft File: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft (raw, json) Hash identifier: P8Ff7FSfivI/3dTIVHz49Uq8LPPuCGAFJj+DCHdN61U= Subject key identifier: F7:FD:D4:69:CD:1A:D7:B4:C3:48:F0:D9:5D:09:FA:BC:52:37:5C:D0 Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB Certificate issuer: /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Certificate serial: 0B513FD4AB02693CBE567336C417624E38DAB1C5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft Manifest number: F9 Signing time: Thu 03 Jul 2025 10:21:07 +0000 Manifest this update: Thu 03 Jul 2025 10:16:07 +0000 Manifest next update: Tue 08 Jul 2025 06:07:07 +0000 Files and hashes: 1: DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl (hash: P70iyUO+CX5gR3LtKGyE/Jv4iVSbpGRr433A3ElhQS0=) 2: 34352e3232382e3233322e302f32342d3234203d3e20323636363936.roa (hash: 0u08Cid5xh0s+ifK8ZpB7h+HuLO4xH8CFKw8rUTG+LU=) 3: 323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (hash: gfviGrTFnzyeLB88khtlrnlCTNwPw5ULi+OBoE5f+t4=) 4: 34352e3232382e3233322e302f32342d3234203d3e20323635363834.roa (hash: vZjAfk2z5Z6b+6GTrUBJdEEDa8DBAoi/pI9ehH+AnYk=) 5: 323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (hash: /D7cnLnJXa5ipFVdP+IaE3sgufXRlHkmM6F8ATrITQk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:51:3f:d4:ab:02:69:3c:be:56:73:36:c4:17:62:4e:38:da:b1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB Validity Not Before: Jul 3 10:16:07 2025 GMT Not After : Jul 8 06:07:07 2025 GMT Subject: CN=F7FDD469CD1AD7B4C348F0D95D09FABC52375CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:7f:f5:c9:55:74:4a:e9:84:c5:88:2b:08: 2e:a2:5f:b3:5e:41:dd:e6:86:07:14:8f:70:e4:54: 25:c7:aa:b5:69:69:11:e1:88:3d:83:09:42:1c:f8: 51:51:01:69:f5:58:c0:16:d6:a5:94:c3:a9:7a:1d: 59:54:f7:c4:97:7c:69:3a:ac:6a:42:3b:50:7e:fe: e8:ff:76:bf:80:20:6f:83:65:9f:fc:af:24:e0:6f: ab:f4:28:e3:91:ad:17:33:49:a4:59:15:b8:ac:bd: 36:d0:3e:b0:b6:00:3a:83:83:92:ae:d4:5d:20:73: 80:ea:82:30:cd:00:cd:8b:d0:03:9d:36:16:64:7a: f3:83:ee:83:32:dc:04:18:39:43:ab:b8:db:6b:2c: 4f:4b:10:97:92:55:43:d4:03:a6:7e:6c:52:a5:bc: e6:40:60:9e:ac:f7:97:e2:d6:a0:0b:9f:e4:f9:b5: 89:a3:ee:62:31:91:63:fa:fa:42:ad:1a:d9:7d:0f: 11:8c:d2:78:9f:6c:b2:9b:e5:e3:ae:c5:22:35:fa: f9:5a:aa:ec:2e:b9:fe:92:2f:f8:56:57:c2:61:b5: 91:93:83:7c:9e:e7:3b:9e:3d:ad:1b:9d:ad:64:bd: 6a:95:61:5d:50:d5:01:bc:b9:d6:34:53:5a:0b:53: ce:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FD:D4:69:CD:1A:D7:B4:C3:48:F0:D9:5D:09:FA:BC:52:37:5C:D0 X509v3 Authority Key Identifier: keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:10:26:e6:67:68:1f:41:b4:8d:d2:22:28:de:a4:ba:f7:6f: de:41:7f:71:43:b1:ad:90:40:04:98:8b:1b:a9:d2:59:82:61: 47:70:41:97:11:bd:15:b3:72:67:6e:ea:75:11:ee:49:9a:a1: d2:29:84:48:de:c9:d3:a1:8a:cd:7d:da:73:3d:e5:bb:d9:a9: b0:da:47:e0:8e:1f:a8:22:34:84:09:22:3f:3d:ba:04:8b:5f: a9:31:ea:76:38:2a:34:28:e8:c3:04:db:a9:0d:36:3f:53:63: a3:1d:63:73:38:d4:c5:da:8b:3a:81:ff:8a:41:2a:a2:1b:95: 33:4a:a1:60:54:3d:67:bb:f9:2c:43:0f:73:eb:4e:87:f6:e3: 27:c0:90:e9:1e:f8:6a:40:21:d6:34:b2:8f:b0:8f:f8:5c:a7: 0c:ac:30:4e:24:be:45:c7:91:b2:5e:c9:0c:59:10:0c:08:0c: 56:b3:a3:fa:78:a9:b0:da:a8:10:33:e3:e2:ef:e2:aa:fd:43: 62:0b:d1:04:8c:50:a9:63:91:ff:82:4c:6f:9e:75:9b:ab:31: da:c7:b7:f2:2d:35:da:8c:2f:44:3a:86:42:ef:99:43:82:a4: 6f:2b:69:bf:a1:89:77:49:f7:f7:7d:af:18:c1:82:7e:e6:55: 03:51:03:e9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC1E/1KsCaTy+VnM2xBdiTjjascUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGQTVDNUFGRTYzRjZCMDJDM0MzMzM5OUQyQzE5MkUy NERDRjdGQjAeFw0yNTA3MDMxMDE2MDdaFw0yNTA3MDgwNjA3MDdaMDMxMTAvBgNV BAMTKEY3RkRENDY5Q0QxQUQ3QjRDMzQ4RjBEOTVEMDlGQUJDNTIzNzVDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5H/1yVV0SumExYgrCC6iX7Ne Qd3mhgcUj3DkVCXHqrVpaRHhiD2DCUIc+FFRAWn1WMAW1qWUw6l6HVlU98SXfGk6 rGpCO1B+/uj/dr+AIG+DZZ/8ryTgb6v0KOORrRczSaRZFbisvTbQPrC2ADqDg5Ku 1F0gc4DqgjDNAM2L0AOdNhZkevOD7oMy3AQYOUOruNtrLE9LEJeSVUPUA6Z+bFKl vOZAYJ6s95fi1qALn+T5tYmj7mIxkWP6+kKtGtl9DxGM0nifbLKb5eOuxSI1+vla quwuuf6SL/hWV8JhtZGTg3ye5zuePa0bna1kvWqVYV1Q1QG8udY0U1oLU87xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU9/3Uac0a17TDSPDZXQn6vFI3XNAwHwYDVR0j BBgwFoAU3vpcWv5j9rAsPDM5nSwZLiTc9/swDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTM5RDlBQkVBNjkxNTcwQTVEODA0QzIwMzE0OUIzMEFE QTg3MERGOUQzNjhGRTE1QzUzRTU4QjFCNERFM0ZDLzAvREVGQTVDNUFGRTYzRjZC MDJDM0MzMzM5OUQyQzE5MkUyNERDRjdGQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERUZBNUM1QUZFNjNGNkIwMkMz QzMzMzk5RDJDMTkyRTI0RENGN0ZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkzOUQ5QUJFQTY5MTU3MEE1RDgwNEMyMDMxNDlCMzBBREE4NzBERjlE MzY4RkUxNUM1M0U1OEIxQjRERTNGQy8wL0RFRkE1QzVBRkU2M0Y2QjAyQzNDMzMz OTlEMkMxOTJFMjREQ0Y3RkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJECbmZ2gfQbSN0iIo3qS692/e QX9xQ7GtkEAEmIsbqdJZgmFHcEGXEb0Vs3Jnbup1Ee5JmqHSKYRI3snToYrNfdpz PeW72amw2kfgjh+oIjSECSI/PboEi1+pMep2OCo0KOjDBNupDTY/U2OjHWNzONTF 2os6gf+KQSqiG5UzSqFgVD1nu/ksQw9z606H9uMnwJDpHvhqQCHWNLKPsI/4XKcM rDBOJL5Fx5GyXskMWRAMCAxWs6P6eKmw2qgQM+Pi7+Kq/UNiC9EEjFCpY5H/gkxv nnWbqzHax7fyLTXajC9EOoZC75lDgqRvK2m/oYl3Sff3fa8YwYJ+5lUDUQPp -----END CERTIFICATE-----Generated at Fri Jul 4 16:27:12 2025 by rpki-client