$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft File: 866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft (raw, json) Hash identifier: w62ePFyhRsI4gG9pukT9BfiAvWR1AeNf+/LwJqE5WGA= Subject key identifier: 38:E7:F4:B2:B9:28:06:75:2F:E2:A6:37:78:A7:5F:9D:04:DA:E2:C3 Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F Certificate issuer: /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F Certificate serial: 6DE91A1F5384374A38408837786D880C1E8A8D25 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft Manifest number: 0108 Signing time: Sat 02 Aug 2025 21:14:32 +0000 Manifest this update: Sat 02 Aug 2025 21:09:32 +0000 Manifest next update: Fri 08 Aug 2025 19:47:32 +0000 Files and hashes: 1: 3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa (hash: utKfbItlMxe6olWWK8DsXGD6XCKOJbHF+JuyR7131w0=) 2: 3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa (hash: f660PTLDT2nhjTTrtpq5KZyVrpDQDuQ7Rpbsyr0rhws=) 3: 3139302e3131332e34382e302f32322d3232203d3e20323731393236.roa (hash: BE1KVmubb/bReeoI+nfbQXG78miJMdzKDpUPzKYw1Ww=) 4: 3139302e3131332e34382e302f32342d3234203d3e20323731393236.roa (hash: SW2TQjbEF0kUJhHESaaFLZTgmFhhYA4TqzVS2kv01Dk=) 5: 323830333a616131303a3a2f33322d3438203d3e20323731393236.roa (hash: C2SltXQZnvvY3PNwNnCpDsytDi4bf1yd876HHt1Z18Y=) 6: 866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl (hash: vfdlV40sw2wYi7xl/pEHv1OiuGxDRXd6WQgF1K5FDrQ=) 7: 3139302e3131332e35312e302f32342d3234203d3e20323731393236.roa (hash: sR9coDYh2RgMySmZCppoKng/QyAqpAtqs+YGGc7PG3Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e9:1a:1f:53:84:37:4a:38:40:88:37:78:6d:88:0c:1e:8a:8d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F Validity Not Before: Aug 2 21:09:32 2025 GMT Not After : Aug 8 19:47:32 2025 GMT Subject: CN=38E7F4B2B92806752FE2A63778A75F9D04DAE2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:43:87:78:00:c5:ce:7a:ac:b8:40:0f:d7: 43:82:a4:d9:35:bd:79:e1:cb:59:b9:83:c3:61:86: 6c:15:c0:c7:14:e7:f6:56:42:fe:71:cb:23:95:f7: 22:8d:91:d9:27:b3:70:54:cc:3b:68:0f:60:06:19: 76:6b:07:83:a9:20:88:0e:fb:6b:77:78:4e:b7:cb: ca:9c:f9:f2:d6:3e:a3:34:d4:6f:f9:77:78:c8:46: 15:10:4c:b0:23:cf:0c:d8:f5:9f:3e:9c:a0:d0:ee: 55:7c:af:f2:e4:74:21:1a:2e:bb:57:75:10:12:3c: a1:4a:f6:b0:6e:35:10:14:1b:fa:41:94:d2:5b:9d: 9b:b6:cd:73:2a:64:37:29:5f:91:0b:14:f4:92:a3: ea:5f:14:82:9c:9b:f0:f9:25:2e:da:d8:65:9b:88: 7e:e4:f5:55:6f:17:70:6f:89:ac:87:d2:25:cd:b5: 9d:1e:d9:f4:80:11:ca:04:92:5f:a8:55:95:c8:57: 1a:16:d7:49:10:3e:11:4c:04:27:97:31:15:67:ef: a1:71:60:13:7c:f0:9b:22:46:cf:a1:46:4b:22:b5: f4:ae:86:0e:93:7d:ec:c0:f7:d7:fa:76:83:e0:4f: 2d:6d:8f:59:73:79:d2:50:88:98:2b:a7:18:6e:ef: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:F4:B2:B9:28:06:75:2F:E2:A6:37:78:A7:5F:9D:04:DA:E2:C3 X509v3 Authority Key Identifier: keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:49:59:81:e5:5d:69:63:fe:b7:57:9f:56:56:11:6c:e7:a7: 01:67:26:f4:11:e9:0c:b4:51:b3:53:43:59:9f:f1:c7:ad:83: 4b:97:0c:e2:49:4c:63:8f:c4:c6:4e:f2:99:db:78:fa:66:45: 3a:92:0f:12:38:45:89:61:e2:85:ff:98:9c:97:3a:63:e7:5d: b0:d2:a2:42:89:0d:c1:78:29:59:49:57:8e:1e:4a:9d:a5:21: 22:a8:7d:52:f4:55:b9:97:7a:74:4a:0f:72:18:16:40:77:2c: 16:49:08:60:82:0d:3a:72:67:30:04:29:52:db:46:c8:86:c7: 7d:8c:84:03:c0:bd:fe:5e:44:54:d1:7b:8f:76:c3:db:58:21: c6:97:d4:78:7e:92:39:15:37:ce:ff:7c:c9:ec:17:a0:a9:5c: 27:39:db:6e:9d:fb:bb:92:ab:8c:a2:1d:2f:31:e8:fe:5e:a1: 38:98:cd:10:96:3e:62:b7:91:2f:fa:47:e5:26:fa:7a:c5:36: f2:af:cb:5a:fa:7f:5b:0d:5f:66:4f:cd:7a:f3:46:0b:fa:c8: ab:e8:ed:a7:4c:a9:8e:69:34:e0:d9:d5:ad:a4:2d:03:4e:3c: e0:08:76:61:ed:14:7c:1a:9d:f4:23:9f:3d:55:02:8f:f8:ab: 9c:92:6f:99 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbekaH1OEN0o4QIg3eG2IDB6KjSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QjdEQzVCRDlFOUNENTlGMzE2OTNDMzI3QUI3RTBB RURCODQwRjAeFw0yNTA4MDIyMTA5MzJaFw0yNTA4MDgxOTQ3MzJaMDMxMTAvBgNV BAMTKDM4RTdGNEIyQjkyODA2NzUyRkUyQTYzNzc4QTc1RjlEMDREQUUyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdckOHeADFznqsuEAP10OCpNk1 vXnhy1m5g8NhhmwVwMcU5/ZWQv5xyyOV9yKNkdkns3BUzDtoD2AGGXZrB4OpIIgO +2t3eE63y8qc+fLWPqM01G/5d3jIRhUQTLAjzwzY9Z8+nKDQ7lV8r/LkdCEaLrtX dRASPKFK9rBuNRAUG/pBlNJbnZu2zXMqZDcpX5ELFPSSo+pfFIKcm/D5JS7a2GWb iH7k9VVvF3BviayH0iXNtZ0e2fSAEcoEkl+oVZXIVxoW10kQPhFMBCeXMRVn76Fx YBN88JsiRs+hRksitfSuhg6TfezA99f6doPgTy1tj1lzedJQiJgrpxhu783zAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOOf0srkoBnUv4qY3eKdfnQTa4sMwHwYDVR0j BBgwFoAUhmt9xb2enNWfMWk8Mnq34K7bhA8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DN0VERTI5RUJCQ0YzM0REOTA1RDU3MTczRTRCMEM4M0M1 RTM3RDY1RTBGRTM2RjlBNzQ2M0FGRDMxRUZFNEFGLzAvODY2QjdEQzVCRDlFOUNE NTlGMzE2OTNDMzI3QUI3RTBBRURCODQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjZCN0RDNUJEOUU5Q0Q1OUYz MTY5M0MzMjdBQjdFMEFFREI4NDBGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQzdFREUyOUVCQkNGMzNERDkwNUQ1NzE3M0U0QjBDODNDNUUzN0Q2NUUw RkUzNkY5QTc0NjNBRkQzMUVGRTRBRi8wLzg2NkI3REM1QkQ5RTlDRDU5RjMxNjkz QzMyN0FCN0UwQUVEQjg0MEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCySVmB5V1pY/63V59WVhFs56cB Zyb0EekMtFGzU0NZn/HHrYNLlwziSUxjj8TGTvKZ23j6ZkU6kg8SOEWJYeKF/5ic lzpj512w0qJCiQ3BeClZSVeOHkqdpSEiqH1S9FW5l3p0Sg9yGBZAdywWSQhggg06 cmcwBClS20bIhsd9jIQDwL3+XkRU0XuPdsPbWCHGl9R4fpI5FTfO/3zJ7BegqVwn Odtunfu7kquMoh0vMej+XqE4mM0Qlj5it5Ev+kflJvp6xTbyr8ta+n9bDV9mT816 80YL+sir6O2nTKmOaTTg2dWtpC0DTjzgCHZh7RR8Gp30I589VQKP+Kuckm+Z -----END CERTIFICATE-----Generated at Sun Aug 3 16:02:02 2025 by rpki-client