$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft File: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft (raw, json) Hash identifier: NzA6e4Yc+6JNpkyzaqS4+OHIhm6HxIU3lL6Pouh4/vM= Subject key identifier: 7F:59:BC:83:E9:7E:E4:F1:86:13:63:D3:16:95:B5:80:65:21:A4:EA Authority key identifier: D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 Certificate issuer: /CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Certificate serial: 28E10901C6FA924724810D71F8CF0AE231E045AD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft Manifest number: ED Signing time: Sat 21 Jun 2025 14:43:44 +0000 Manifest this update: Sat 21 Jun 2025 14:38:44 +0000 Manifest next update: Fri 27 Jun 2025 02:39:44 +0000 Files and hashes: 1: 34352e3138342e3132342e302f32322d3234203d3e20323635353938.roa (hash: uKlYknlH6eACUcPldvmZgtLq4BGG754AwHjUVlk6W6w=) 2: D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl (hash: MWO8rWzvKew0DF3PJ4k/6pm1WA140SGoRjMXxzJI7Co=) 3: 323830363a3334383a3a2f33322d3634203d3e20323635353938.roa (hash: mBKhXxYsc1vM9qDvar5UCFnx02/AKC+zK1K7wPk+Ot0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 23:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e1:09:01:c6:fa:92:47:24:81:0d:71:f8:cf:0a:e2:31:e0:45:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9 Validity Not Before: Jun 21 14:38:44 2025 GMT Not After : Jun 27 02:39:44 2025 GMT Subject: CN=7F59BC83E97EE4F1861363D31695B5806521A4EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fa:8c:79:27:2f:19:a4:2b:ca:24:1e:df:cf: f4:c7:5b:1a:5f:83:7f:b3:68:b4:ad:05:51:ce:19: f4:07:e1:c3:71:09:6b:c3:0b:aa:45:6a:99:fb:f4: c5:07:2b:13:7a:5f:b4:aa:ec:e9:e3:58:96:70:5c: 1b:37:86:f6:d5:78:56:6b:04:bd:6e:5d:79:80:44: 68:7e:0c:65:19:5f:29:bb:1c:35:33:b4:97:c7:b9: 65:2f:c9:1b:8f:e5:d2:3a:b2:a8:40:d1:d8:09:c5: 16:9b:94:8c:e5:a2:7c:86:44:21:52:82:3e:42:fc: 1d:f6:ff:b6:06:cd:ac:e2:17:72:80:c1:08:7a:8f: 42:0c:b3:4b:ff:8e:e0:da:08:f3:db:55:13:32:31: 9f:c3:be:7c:bb:ae:ca:f8:b2:1e:8e:a8:a1:01:63: 34:ba:d8:6e:94:10:e8:2b:27:1a:f6:73:4b:10:a8: ce:af:4b:71:90:96:59:b6:33:28:74:40:89:fc:04: 01:5b:da:4f:9b:f8:0a:29:69:ca:7f:3b:98:ba:84: 12:c8:bd:4e:01:a5:a9:0d:7c:2f:ca:2b:18:32:22: 38:c1:76:c4:3f:74:38:64:7e:68:1f:7e:81:9d:1c: 40:8e:4a:08:a0:ab:3a:bd:82:ed:45:b1:c3:58:c3: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:59:BC:83:E9:7E:E4:F1:86:13:63:D3:16:95:B5:80:65:21:A4:EA X509v3 Authority Key Identifier: keyid:D8:6F:0C:0B:DF:DA:71:AF:B4:F7:57:47:F7:6A:9A:F7:F3:59:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43A21AA959DB6B1A026FD8134C5739D2C52E118C743382AB657E576518C987BE/0/D86F0C0BDFDA71AFB4F75747F76A9AF7F359FAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1a:3a:2c:46:76:2d:2a:d9:8c:89:d1:2d:6b:11:37:fa:d9: 34:c1:55:de:4d:74:b6:62:2b:2f:1a:17:4a:e5:da:ce:9a:08: 95:93:98:a7:ef:f2:3e:11:66:be:f1:33:e2:16:f5:d8:96:ea: b7:e7:fe:df:e1:80:4c:49:f4:dd:ab:a4:1a:96:ad:1f:e7:ef: 4b:57:7f:96:3e:1b:16:5e:5c:fc:c5:f9:48:6d:7a:54:0a:13: 2d:6b:a5:d6:b7:cc:e3:c7:65:0d:cc:92:91:44:d5:66:f0:55: 08:8c:bb:31:4a:80:35:27:be:55:e3:c9:b5:f6:a0:56:a7:b5: c2:3a:7e:67:0e:72:cd:4d:70:d2:c6:7a:3f:08:ef:40:99:01: 84:f1:1d:f2:26:0b:dd:ff:84:89:c7:a3:f0:a5:3a:dc:57:e3: b2:13:8a:8d:8a:34:de:33:ec:59:29:8d:b4:eb:83:3c:8c:ff: 03:42:43:f5:db:38:f2:88:80:f7:5d:7e:8b:c3:ae:e3:95:dd: 95:12:8a:11:01:24:3f:4b:89:81:54:ed:9b:20:24:b3:3a:4b: af:5d:c1:bf:cc:df:fd:48:2a:59:ce:3b:9d:d8:98:7c:dc:75: 5e:85:ab:4a:b0:a9:b0:8b:dd:82:2b:4d:bf:d6:b9:35:fd:b0: 28:09:cb:1d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKOEJAcb6kkckgQ1x+M8K4jHgRa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2RjBDMEJERkRBNzFBRkI0Rjc1NzQ3Rjc2QTlBRjdG MzU5RkFEOTAeFw0yNTA2MjExNDM4NDRaFw0yNTA2MjcwMjM5NDRaMDMxMTAvBgNV BAMTKDdGNTlCQzgzRTk3RUU0RjE4NjEzNjNEMzE2OTVCNTgwNjUyMUE0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+ox5Jy8ZpCvKJB7fz/THWxpf g3+zaLStBVHOGfQH4cNxCWvDC6pFapn79MUHKxN6X7Sq7OnjWJZwXBs3hvbVeFZr BL1uXXmARGh+DGUZXym7HDUztJfHuWUvyRuP5dI6sqhA0dgJxRablIzlonyGRCFS gj5C/B32/7YGzaziF3KAwQh6j0IMs0v/juDaCPPbVRMyMZ/Dvny7rsr4sh6OqKEB YzS62G6UEOgrJxr2c0sQqM6vS3GQllm2Myh0QIn8BAFb2k+b+Aopacp/O5i6hBLI vU4BpakNfC/KKxgyIjjBdsQ/dDhkfmgffoGdHECOSgigqzq9gu1FscNYw7IDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUf1m8g+l+5PGGE2PTFpW1gGUhpOowHwYDVR0j BBgwFoAU2G8MC9/aca+091dH92qa9/NZ+tkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80M0EyMUFBOTU5REI2QjFBMDI2RkQ4MTM0QzU3MzlEMkM1 MkUxMThDNzQzMzgyQUI2NTdFNTc2NTE4Qzk4N0JFLzAvRDg2RjBDMEJERkRBNzFB RkI0Rjc1NzQ3Rjc2QTlBRjdGMzU5RkFEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODZGMEMwQkRGREE3MUFGQjRG NzU3NDdGNzZBOUFGN0YzNTlGQUQ5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDNBMjFBQTk1OURCNkIxQTAyNkZEODEzNEM1NzM5RDJDNTJFMTE4Qzc0 MzM4MkFCNjU3RTU3NjUxOEM5ODdCRS8wL0Q4NkYwQzBCREZEQTcxQUZCNEY3NTc0 N0Y3NkE5QUY3RjM1OUZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvGjosRnYtKtmMidEtaxE3+tk0 wVXeTXS2YisvGhdK5drOmgiVk5in7/I+EWa+8TPiFvXYluq35/7f4YBMSfTdq6Qa lq0f5+9LV3+WPhsWXlz8xflIbXpUChMta6XWt8zjx2UNzJKRRNVm8FUIjLsxSoA1 J75V48m19qBWp7XCOn5nDnLNTXDSxno/CO9AmQGE8R3yJgvd/4SJx6PwpTrcV+Oy E4qNijTeM+xZKY2064M8jP8DQkP12zjyiID3XX6Lw67jld2VEooRASQ/S4mBVO2b ICSzOkuvXcG/zN/9SCpZzjud2Jh83HVehatKsKmwi92CK02/1rk1/bAoCcsd -----END CERTIFICATE-----Generated at Sun Jun 22 20:52:20 2025 by rpki-client