$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft File: 35D619733A3D3A776B2D5FB84305186B942E249A.mft (raw, json) Hash identifier: bytVs2zfcepjXrXfBfzXzv2BJ1WjppkeiAghxJvpHpU= Subject key identifier: 3E:E0:69:C6:39:40:78:3C:01:6E:39:11:3F:54:01:C6:58:66:65:49 Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A Certificate issuer: /CN=35D619733A3D3A776B2D5FB84305186B942E249A Certificate serial: 72074F39136C92488AA016256A63E4AD2D620C14 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft Manifest number: F2 Signing time: Sat 21 Jun 2025 10:06:04 +0000 Manifest this update: Sat 21 Jun 2025 10:01:04 +0000 Manifest next update: Thu 26 Jun 2025 13:20:04 +0000 Files and hashes: 1: 3133382e3235352e3131362e302f32322d3234203d3e20323635353031.roa (hash: LY8m5iymGqWKvIirfivufBi5WC9W6dyP1Ast3ViSTKo=) 2: 323830363a3230393a3a2f33322d3634203d3e20323635353031.roa (hash: nS1OJQh7flpXAeDVq3QSsIPGwMJxKtKknh6/2e/vaZQ=) 3: 35D619733A3D3A776B2D5FB84305186B942E249A.crl (hash: ICBbpUogJf5VqJeI+rPx8GBIQpO0//gCK/iMPfKMBr4=) 4: 3133382e3235352e3131362e302f32322d3234203d3e20323730313536.roa (hash: O6BnIOAS+8L0M3wsNqlmxFo8FVjSJjL+BMueCf7+jP4=) 5: 323830363a3230393a3a2f33322d3634203d3e20323730313536.roa (hash: hZV1guPYhSmEJdBPb1pmv2tiE0YV74XhLiE3oneSZcs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:07:4f:39:13:6c:92:48:8a:a0:16:25:6a:63:e4:ad:2d:62:0c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A Validity Not Before: Jun 21 10:01:04 2025 GMT Not After : Jun 26 13:20:04 2025 GMT Subject: CN=3EE069C63940783C016E39113F5401C658666549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:10:55:b5:53:d5:d3:e3:e3:18:e0:a5:9c: 77:30:b3:ad:08:1f:93:7d:0c:fe:c8:98:ab:a2:9b: 5b:b5:fe:ad:2a:8b:90:80:64:bb:a9:c6:da:2e:fb: 80:ae:33:5e:62:cf:37:d1:76:bb:58:1f:83:02:ce: 02:e9:9b:5f:e5:a7:a3:01:2a:c4:ec:0a:03:dc:a6: 80:36:6f:b5:0d:32:a5:7a:17:e6:0b:ba:85:94:72: aa:80:fd:98:7f:cb:5a:62:75:c9:eb:55:60:b9:1c: 12:57:4c:cc:06:7d:77:6f:a2:b3:ea:75:fd:25:9d: 83:84:8d:6a:9d:86:64:0a:89:36:fc:75:80:ad:ec: 1c:f7:59:a7:1a:3e:f4:02:9f:6a:39:48:79:26:84: 4d:aa:f9:ad:fe:39:e4:8c:4c:63:76:e7:11:31:a1: 56:80:52:5c:8d:04:3b:e7:a7:7e:73:5a:8a:a4:02: d3:bc:cf:ab:84:bc:9f:e7:96:86:d6:2f:a8:d2:fe: 9e:33:9f:9d:a7:42:2b:f2:ff:6d:7e:d7:9a:71:33: 29:e2:43:ac:03:39:3d:2e:47:db:67:08:f6:ca:1f: 15:3b:3e:8a:5b:2c:f2:92:4a:bf:e1:bd:b4:c4:8e: 26:1b:1b:d8:73:2b:d4:99:fc:65:04:3b:0e:69:f0: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E0:69:C6:39:40:78:3C:01:6E:39:11:3F:54:01:C6:58:66:65:49 X509v3 Authority Key Identifier: keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f5:27:31:d5:7c:f2:ff:61:4a:4c:71:ff:20:29:d8:1e:5f: 67:9c:a3:4e:57:26:80:24:de:44:ae:4c:11:30:e4:5e:39:1f: e7:56:cd:e7:60:f4:72:df:54:24:61:47:dc:20:1b:b9:e0:e3: e0:cb:fc:2f:8c:65:a5:9f:55:3c:fc:96:fa:b7:d7:e4:68:02: 42:01:5f:27:1f:67:7c:84:65:80:a6:0f:1a:1e:9d:ce:8a:c4: 0b:29:47:01:5b:c8:8c:d0:de:d8:18:5d:0e:9c:81:d3:d3:83: 7a:b9:8b:be:d5:5e:59:5a:de:be:0d:f4:57:10:83:b1:14:57: c4:f3:71:60:c6:9f:7a:85:5d:83:64:19:59:83:8a:bb:56:32: 80:ef:53:14:8e:ef:3d:d2:e5:30:3b:7a:66:90:66:28:ac:b3: f8:5f:c7:73:01:6a:ce:dd:52:74:5f:ed:eb:cf:33:da:93:e7: b8:27:aa:37:3b:c8:be:79:ea:aa:41:37:fc:d1:60:bd:5a:63: 7d:a9:6d:96:45:56:5b:35:f0:de:53:b1:36:5e:6d:88:6a:20: e5:1b:3f:de:a0:6f:0b:be:14:b8:92:0f:8e:4c:be:40:c3:38: fc:53:dc:12:4c:95:e4:ac:a5:e5:d1:44:94:30:7e:58:fe:78: 81:20:04:f7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcgdPORNskkiKoBYlamPkrS1iDBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVENjE5NzMzQTNEM0E3NzZCMkQ1RkI4NDMwNTE4NkI5 NDJFMjQ5QTAeFw0yNTA2MjExMDAxMDRaFw0yNTA2MjYxMzIwMDRaMDMxMTAvBgNV BAMTKDNFRTA2OUM2Mzk0MDc4M0MwMTZFMzkxMTNGNTQwMUM2NTg2NjY1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabRBVtVPV0+PjGOClnHcws60I H5N9DP7ImKuim1u1/q0qi5CAZLupxtou+4CuM15izzfRdrtYH4MCzgLpm1/lp6MB KsTsCgPcpoA2b7UNMqV6F+YLuoWUcqqA/Zh/y1pidcnrVWC5HBJXTMwGfXdvorPq df0lnYOEjWqdhmQKiTb8dYCt7Bz3WacaPvQCn2o5SHkmhE2q+a3+OeSMTGN25xEx oVaAUlyNBDvnp35zWoqkAtO8z6uEvJ/nlobWL6jS/p4zn52nQivy/21+15pxMyni Q6wDOT0uR9tnCPbKHxU7PopbLPKSSr/hvbTEjiYbG9hzK9SZ/GUEOw5p8HJ/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPuBpxjlAeDwBbjkRP1QBxlhmZUkwHwYDVR0j BBgwFoAUNdYZczo9OndrLV+4QwUYa5QuJJowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRkM5QjBEQzA1QUZBQjdFQ0IzQTM3OUREQzZENTFDNTQ4 RDNBNzExRDlDMTA0NjJGMkI2QUJDMUU3NUUxMDE5LzAvMzVENjE5NzMzQTNEM0E3 NzZCMkQ1RkI4NDMwNTE4NkI5NDJFMjQ5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNUQ2MTk3MzNBM0QzQTc3NkIy RDVGQjg0MzA1MTg2Qjk0MkUyNDlBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUZDOUIwREMwNUFGQUI3RUNCM0EzNzlEREM2RDUxQzU0OEQzQTcxMUQ5 QzEwNDYyRjJCNkFCQzFFNzVFMTAxOS8wLzM1RDYxOTczM0EzRDNBNzc2QjJENUZC ODQzMDUxODZCOTQyRTI0OUEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ9Scx1Xzy/2FKTHH/ICnYHl9n nKNOVyaAJN5ErkwRMOReOR/nVs3nYPRy31QkYUfcIBu54OPgy/wvjGWln1U8/Jb6 t9fkaAJCAV8nH2d8hGWApg8aHp3OisQLKUcBW8iM0N7YGF0OnIHT04N6uYu+1V5Z Wt6+DfRXEIOxFFfE83Fgxp96hV2DZBlZg4q7VjKA71MUju890uUwO3pmkGYorLP4 X8dzAWrO3VJ0X+3rzzPak+e4J6o3O8i+eeqqQTf80WC9WmN9qW2WRVZbNfDeU7E2 Xm2IaiDlGz/eoG8LvhS4kg+OTL5Awzj8U9wSTJXkrKXl0USUMH5Y/niBIAT3 -----END CERTIFICATE-----Generated at Sat Jun 21 22:20:32 2025 by rpki-client