$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft File: 649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft (raw, json) Hash identifier: IvUWveJvmJUUg+1SQQtiWvQ7hSAXsqOhvp+hi0qjUl0= Subject key identifier: D3:7C:AB:72:45:7D:FD:66:F5:DB:CD:8D:1B:02:76:62:C8:36:AB:7B Authority key identifier: 64:9C:72:EB:AF:6A:2D:61:ED:79:4B:72:CD:64:67:0B:B9:A3:B7:C1 Certificate issuer: /CN=649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1 Certificate serial: 07D235B51D1516809C6B2D6E0BF270D755BFB71C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft Manifest number: 36 Signing time: Sun 10 Aug 2025 09:14:38 +0000 Manifest this update: Sun 10 Aug 2025 09:09:38 +0000 Manifest next update: Thu 14 Aug 2025 14:15:38 +0000 Files and hashes: 1: 649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.crl (hash: o2wNXx+q6Bkl4Cr6HuynwRxCYA3DljJQPOveCTwP/Ps=) 2: 34352e3138302e3131322e302f32342d3234203d3e20323632313836.roa (hash: Og5J+rpPp4Vp87XQG3NQD9vZQTPUEhPnlQ/hAPJJ438=) 3: 323830333a666536303a3a2f33322d3332203d3e20323632313836.roa (hash: G6lA26EesVdz3xusZzUuvRd7KjZBVyoxDf6DJnxUL6g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.crl rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 Aug 2025 14:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d2:35:b5:1d:15:16:80:9c:6b:2d:6e:0b:f2:70:d7:55:bf:b7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1 Validity Not Before: Aug 10 09:09:38 2025 GMT Not After : Aug 14 14:15:38 2025 GMT Subject: CN=D37CAB72457DFD66F5DBCD8D1B027662C836AB7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:e7:b4:bd:ed:76:c4:b0:27:30:07:01:4a: 97:2c:81:77:e3:56:32:fb:26:68:6b:94:76:87:bb: dd:6c:14:74:7d:be:5f:25:aa:43:76:36:0e:6d:ac: 92:a0:39:e6:74:62:d1:46:87:d9:2b:3e:a0:ac:c4: c7:32:f5:53:03:5c:7f:04:e9:5b:ec:4c:f1:4b:3e: 09:ee:71:1c:11:74:e3:91:8c:23:47:1b:c4:10:48: 67:88:82:ad:de:56:28:c3:9e:c6:7b:bf:4a:00:f2: fe:ac:4f:e9:6f:b6:d4:a9:b1:6d:b6:2d:dc:bb:ef: 15:55:ed:d2:15:73:eb:99:ba:b8:48:b2:3d:41:42: 77:67:45:c8:59:b1:04:61:95:66:82:be:76:4a:1d: 62:0b:d0:31:07:e6:71:b5:c6:62:43:fe:1e:92:24: 4d:a6:77:a5:68:cb:ee:8c:7d:36:c1:a0:0e:8a:2c: 91:b8:dc:83:4b:d0:99:d6:27:81:06:8e:e8:a0:c2: d1:ea:b3:17:40:89:65:17:59:d8:50:91:af:50:80: 3d:e4:fb:35:f8:fd:5b:f8:32:8d:02:b3:1e:7c:72: d7:31:d9:14:53:73:10:e6:11:42:ac:46:9a:58:81: 35:34:58:76:e4:a4:23:f4:50:d4:e6:c9:f8:ad:64: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7C:AB:72:45:7D:FD:66:F5:DB:CD:8D:1B:02:76:62:C8:36:AB:7B X509v3 Authority Key Identifier: keyid:64:9C:72:EB:AF:6A:2D:61:ED:79:4B:72:CD:64:67:0B:B9:A3:B7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:79:7c:14:cd:d4:ec:42:a3:f6:d1:54:96:c7:85:86:7e:d8: 11:9e:7a:d8:85:b0:08:13:04:4a:c1:7f:55:55:22:68:fa:40: cf:50:cc:5d:3f:98:30:ed:6e:9a:91:4e:74:c2:6a:b0:b6:95: 86:1c:15:43:dc:d9:4a:a3:ad:4e:4e:ff:52:c2:f1:3b:60:98: 50:f6:be:d4:5f:2a:73:0f:ff:f6:47:6f:b6:66:f7:2a:b4:57: 8a:e6:1a:53:14:40:2e:63:63:a9:fe:9b:66:1b:7a:16:fc:df: c1:bf:8a:25:ac:95:41:d4:a9:81:50:80:27:3b:8b:aa:0c:6c: 66:ca:12:92:47:b3:34:71:d8:7e:fb:41:fb:96:06:8a:9e:de: db:74:26:c3:2c:0c:d2:1a:fd:35:5c:22:ec:9a:cc:d1:e8:fe: 77:8e:ee:8c:36:ba:7b:19:4d:e9:f6:c0:d1:56:a1:60:a5:04: 7f:25:3d:bc:1f:71:f4:39:31:d1:65:2d:5e:b1:2c:e5:66:cb: 5d:7e:22:b9:2f:15:f3:bf:e7:b5:26:16:4e:5f:4a:d2:00:ea: 9e:7e:ab:6c:4a:86:3d:58:68:e4:2f:2c:74:67:a9:3d:b0:86: 09:20:d3:1f:d5:e7:4d:ba:35:1d:13:fd:b3:15:28:44:6f:8c: 5b:f3:1b:05 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUB9I1tR0VFoCcay1uC/Jw11W/txwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5QzcyRUJBRjZBMkQ2MUVENzk0QjcyQ0Q2NDY3MEJC OUEzQjdDMTAeFw0yNTA4MTAwOTA5MzhaFw0yNTA4MTQxNDE1MzhaMDMxMTAvBgNV BAMTKEQzN0NBQjcyNDU3REZENjZGNURCQ0Q4RDFCMDI3NjYyQzgzNkFCN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4+e0ve12xLAnMAcBSpcsgXfj VjL7JmhrlHaHu91sFHR9vl8lqkN2Ng5trJKgOeZ0YtFGh9krPqCsxMcy9VMDXH8E 6VvsTPFLPgnucRwRdOORjCNHG8QQSGeIgq3eVijDnsZ7v0oA8v6sT+lvttSpsW22 Ldy77xVV7dIVc+uZurhIsj1BQndnRchZsQRhlWaCvnZKHWIL0DEH5nG1xmJD/h6S JE2md6Voy+6MfTbBoA6KLJG43INL0JnWJ4EGjuigwtHqsxdAiWUXWdhQka9QgD3k +zX4/Vv4Mo0Csx58ctcx2RRTcxDmEUKsRppYgTU0WHbkpCP0UNTmyfitZIbLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU03yrckV9/Wb1282NGwJ2Ysg2q3swHwYDVR0j BBgwFoAUZJxy669qLWHteUtyzWRnC7mjt8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNUQwN0Y2RThBOEVDNTRDRDZBM0QzMjcwNDExMDI5NDk0 MDE5Q0I5OTZBQTdBNzg5QzNCN0UyQjVFNTMwRTQ2LzAvNjQ5QzcyRUJBRjZBMkQ2 MUVENzk0QjcyQ0Q2NDY3MEJCOUEzQjdDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDlDNzJFQkFGNkEyRDYxRUQ3 OTRCNzJDRDY0NjcwQkI5QTNCN0MxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzVEMDdGNkU4QThFQzU0Q0Q2QTNEMzI3MDQxMTAyOTQ5NDAxOUNCOTk2 QUE3QTc4OUMzQjdFMkI1RTUzMEU0Ni8wLzY0OUM3MkVCQUY2QTJENjFFRDc5NEI3 MkNENjQ2NzBCQjlBM0I3QzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAweXwUzdTsQqP20VSWx4WGftgR nnrYhbAIEwRKwX9VVSJo+kDPUMxdP5gw7W6akU50wmqwtpWGHBVD3NlKo61OTv9S wvE7YJhQ9r7UXypzD//2R2+2ZvcqtFeK5hpTFEAuY2Op/ptmG3oW/N/Bv4olrJVB 1KmBUIAnO4uqDGxmyhKSR7M0cdh++0H7lgaKnt7bdCbDLAzSGv01XCLsmszR6P53 ju6MNrp7GU3p9sDRVqFgpQR/JT28H3H0OTHRZS1esSzlZstdfiK5LxXzv+e1JhZO X0rSAOqefqtsSoY9WGjkLyx0Z6k9sIYJINMf1edNujUdE/2zFShEb4xb8xsF -----END CERTIFICATE-----Generated at Mon Aug 11 07:37:18 2025 by rpki-client