$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.mft File: 7DD319E50D207C28E8350630130153059EE93773.mft (raw, json) Hash identifier: BpNT/iI2KXb+MiNIFrexJnRgsqX5xeIAfE6gjBsXqTI= Subject key identifier: 2C:C4:93:BD:87:EA:2A:FE:8B:8F:A7:C5:FC:10:BC:77:9E:BF:3A:C7 Authority key identifier: 7D:D3:19:E5:0D:20:7C:28:E8:35:06:30:13:01:53:05:9E:E9:37:73 Certificate issuer: /CN=7DD319E50D207C28E8350630130153059EE93773 Certificate serial: 211E3B1D05D8B3D150ECFA7E96D3022AB2FB7EDA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.mft Manifest number: FB Signing time: Sat 02 Aug 2025 11:03:25 +0000 Manifest this update: Sat 02 Aug 2025 10:58:25 +0000 Manifest next update: Thu 07 Aug 2025 13:27:25 +0000 Files and hashes: 1: 3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa (hash: 4FaPtqranh/nyr00S2Dz7TL8OrYdolE5f/5Zq1q55CI=) 2: 7DD319E50D207C28E8350630130153059EE93773.crl (hash: 1kScEM/PVwq+dY0nXRhEYrxC5QhnsMU1XvzK/2mkS9g=) 3: 323830333a633738303a3a2f33322d3332203d3e20323633373132.roa (hash: wPhWGg6ywHsatbSo1xKfxauOutPbdBjU75NEIr7SpmQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.crl rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1e:3b:1d:05:d8:b3:d1:50:ec:fa:7e:96:d3:02:2a:b2:fb:7e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DD319E50D207C28E8350630130153059EE93773 Validity Not Before: Aug 2 10:58:25 2025 GMT Not After : Aug 7 13:27:25 2025 GMT Subject: CN=2CC493BD87EA2AFE8B8FA7C5FC10BC779EBF3AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:91:19:0c:9c:67:70:5b:a5:71:d7:10:3f: c9:1b:81:40:8c:e4:19:32:da:44:96:a3:00:9e:3e: 8d:25:ec:81:75:ab:a5:4a:ef:33:cd:4a:38:2d:d9: 2d:a3:56:d4:76:75:34:96:46:4b:4e:24:bf:36:49: 99:aa:1b:bd:7b:71:6c:da:d4:26:44:e3:03:67:b3: 21:57:cd:a8:c2:21:6d:71:d5:d9:93:2c:bb:97:20: 31:05:ef:29:b4:74:bb:fa:9b:e3:3d:1a:41:89:02: e5:a5:6d:92:27:16:e5:b6:49:c0:28:76:14:38:90: c7:1f:a0:10:40:ee:dd:c8:19:58:ff:e1:a7:6d:c9: 08:ae:29:b8:80:7a:08:1f:62:e3:e4:14:84:21:ba: 0e:ee:97:1e:e1:44:f9:56:4c:43:ea:19:c2:19:c7: 2e:50:fb:66:e4:ad:f9:9a:0c:58:19:62:c7:89:bf: 47:d0:bd:40:7e:3d:11:4a:1c:9a:c4:7d:a2:4a:9f: f5:74:b0:e6:d3:e2:84:c1:b7:46:6c:58:18:50:b7: 3b:eb:14:ee:d2:54:5e:13:07:9a:c7:9c:35:af:4d: 5d:37:6f:93:55:12:c1:b3:a6:b9:49:a5:af:aa:45: 2f:7f:8e:65:48:a6:8e:7b:c1:12:26:2d:9c:a4:26: 7c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C4:93:BD:87:EA:2A:FE:8B:8F:A7:C5:FC:10:BC:77:9E:BF:3A:C7 X509v3 Authority Key Identifier: keyid:7D:D3:19:E5:0D:20:7C:28:E8:35:06:30:13:01:53:05:9E:E9:37:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9b:31:74:0f:df:40:8c:6f:3c:64:cf:3f:08:9b:83:84:89: 5d:76:05:8c:8f:2a:42:fe:47:80:a6:93:e1:9f:cd:62:d3:8e: 11:3f:37:1e:5d:47:db:a9:16:ee:a2:7d:ed:9e:ce:24:58:b7: e5:44:87:6c:95:98:35:1e:69:c0:25:1b:8e:e1:86:ec:31:52: 99:7a:05:6f:ec:74:05:bc:ba:e4:bf:81:18:57:bf:22:9a:60: 34:f9:61:24:e8:95:2f:13:d6:f6:b6:09:f1:b1:df:a0:25:1e: 97:17:da:41:24:ca:a9:38:ba:9f:cb:f0:08:bf:d3:06:e4:b8: e6:49:b0:2a:27:80:f4:2b:a6:e5:ba:97:40:8a:0b:b3:9c:9b: d8:e6:57:18:a8:77:2c:48:b2:95:8e:ac:51:ed:ea:d5:56:34: a3:16:d3:9f:9c:bc:69:8d:69:a6:68:42:57:51:7a:cd:c7:5d: 4f:59:92:c9:91:33:64:a9:e8:20:01:53:c5:77:9b:92:a5:ed: 07:02:6f:a0:e2:27:10:75:af:9e:b1:42:89:87:6d:d9:46:3f: 52:81:2b:dc:f5:e3:90:62:06:aa:67:b9:78:c1:64:b3:cd:c0: 3c:a4:3a:df:b3:33:b8:72:c1:19:e3:35:9a:47:b4:de:a5:9a: 34:a7:00:01 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIR47HQXYs9FQ7Pp+ltMCKrL7ftowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0REMzE5RTUwRDIwN0MyOEU4MzUwNjMwMTMwMTUzMDU5 RUU5Mzc3MzAeFw0yNTA4MDIxMDU4MjVaFw0yNTA4MDcxMzI3MjVaMDMxMTAvBgNV BAMTKDJDQzQ5M0JEODdFQTJBRkU4QjhGQTdDNUZDMTBCQzc3OUVCRjNBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxK5EZDJxncFulcdcQP8kbgUCM 5Bky2kSWowCePo0l7IF1q6VK7zPNSjgt2S2jVtR2dTSWRktOJL82SZmqG717cWza 1CZE4wNnsyFXzajCIW1x1dmTLLuXIDEF7ym0dLv6m+M9GkGJAuWlbZInFuW2ScAo dhQ4kMcfoBBA7t3IGVj/4adtyQiuKbiAeggfYuPkFIQhug7ulx7hRPlWTEPqGcIZ xy5Q+2bkrfmaDFgZYseJv0fQvUB+PRFKHJrEfaJKn/V0sObT4oTBt0ZsWBhQtzvr FO7SVF4TB5rHnDWvTV03b5NVEsGzprlJpa+qRS9/jmVIpo57wRImLZykJnwbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQULMSTvYfqKv6Lj6fF/BC8d56/OscwHwYDVR0j BBgwFoAUfdMZ5Q0gfCjoNQYwEwFTBZ7pN3MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83OEVGRjc3MTE2QUZERjY5RTg0OEQ2NUZDMTcxQjBGOUY1 RDE0ODA3MjY2NUU4QTY0MUEzRjczNzQ5RTAyMEE3LzAvN0REMzE5RTUwRDIwN0My OEU4MzUwNjMwMTMwMTUzMDU5RUU5Mzc3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83REQzMTlFNTBEMjA3QzI4RTgz NTA2MzAxMzAxNTMwNTlFRTkzNzczLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzhFRkY3NzExNkFGREY2OUU4NDhENjVGQzE3MUIwRjlGNUQxNDgwNzI2 NjVFOEE2NDFBM0Y3Mzc0OUUwMjBBNy8wLzdERDMxOUU1MEQyMDdDMjhFODM1MDYz MDEzMDE1MzA1OUVFOTM3NzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEmzF0D99AjG88ZM8/CJuDhIld dgWMjypC/keAppPhn81i044RPzceXUfbqRbuon3tns4kWLflRIdslZg1HmnAJRuO 4YbsMVKZegVv7HQFvLrkv4EYV78immA0+WEk6JUvE9b2tgnxsd+gJR6XF9pBJMqp OLqfy/AIv9MG5LjmSbAqJ4D0K6blupdAiguznJvY5lcYqHcsSLKVjqxR7erVVjSj FtOfnLxpjWmmaEJXUXrNx11PWZLJkTNkqeggAVPFd5uSpe0HAm+g4icQda+esUKJ h23ZRj9SgSvc9eOQYgaqZ7l4wWSzzcA8pDrfszO4csEZ4zWaR7TepZo0pwAB -----END CERTIFICATE-----Generated at Sun Aug 3 08:59:28 2025 by rpki-client