$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft File: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft (raw, json) Hash identifier: QtfFitjXU4iuNRaVRVL0uQZY+gWaVolsbKjk7hCMPss= Subject key identifier: 60:C0:32:FA:4B:E5:FD:C5:F2:89:7A:26:62:05:CD:F3:06:54:8E:99 Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD Certificate issuer: /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Certificate serial: 6DB3353D307E8DB5F673889E4157F09EFD081F7E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft Manifest number: 43 Signing time: Sat 21 Jun 2025 07:39:28 +0000 Manifest this update: Sat 21 Jun 2025 07:34:28 +0000 Manifest next update: Wed 25 Jun 2025 19:44:28 +0000 Files and hashes: 1: 323830333a643235303a3a2f33322d3438203d3e20323732383237.roa (hash: e58Gafs3SHJ2RbKcTBdQ4etki7t0Yu0X9IXpmL+ZrFM=) 2: 323830333a643235303a3a2f33322d3438203d3e20323733313430.roa (hash: geoujJRGCj9IdFnQTVkXi07vvN0KssDDUghEY7PjuWI=) 3: 323830333a643235303a3a2f33322d3438203d3e20323733313637.roa (hash: zqMMKCkFdouQccillLfonx6zoQUGUVMhftJE8TOMWWc=) 4: D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl (hash: w6d+FYOD1luZ5VdsLRavTJkqqQdX+hmeSYRqTRCMW2Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b3:35:3d:30:7e:8d:b5:f6:73:88:9e:41:57:f0:9e:fd:08:1f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD Validity Not Before: Jun 21 07:34:28 2025 GMT Not After : Jun 25 19:44:28 2025 GMT Subject: CN=60C032FA4BE5FDC5F2897A266205CDF306548E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:d0:cd:22:0a:0b:2f:c8:5a:57:6a:67:fe: 1a:ec:79:f2:73:12:c8:13:78:9b:5b:06:34:bf:41: 10:ef:2a:24:b9:d4:08:b3:89:5c:b1:66:b4:9e:13: f3:7f:61:df:c4:67:22:d1:dd:ee:31:b5:1e:91:27: 95:08:44:ca:bf:e7:63:59:17:45:03:9c:24:ed:43: a1:aa:4f:45:c3:30:4f:9f:23:30:c0:6d:1e:f3:05: a8:70:13:9b:52:94:23:7d:ac:3b:b1:8e:77:0b:87: bd:f6:1b:68:4d:a9:57:b0:e4:b2:8b:51:5b:f3:75: 88:de:76:99:da:16:51:a1:4f:57:6b:67:d9:22:cd: 71:20:0d:67:91:1e:0e:27:20:fd:9e:5d:de:42:5e: 05:79:96:15:78:95:76:01:0b:44:e8:5f:bb:62:35: 0b:02:06:eb:93:be:2e:be:30:96:70:98:03:d9:74: 5d:fa:e6:1e:63:5f:c3:72:ce:45:dc:61:d5:82:6e: f2:f7:46:7f:30:e5:8b:7d:c8:ef:f1:50:86:52:1d: 19:65:f2:22:1f:9b:94:9c:ad:77:35:5e:da:43:81: d2:5d:7f:3e:db:9d:f0:9f:0a:bb:53:72:8c:b2:a0: 41:2d:a1:f4:2b:1e:9f:a4:e8:6d:ce:0e:1f:92:af: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C0:32:FA:4B:E5:FD:C5:F2:89:7A:26:62:05:CD:F3:06:54:8E:99 X509v3 Authority Key Identifier: keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7d:8c:03:49:1e:76:2a:bd:75:b5:76:df:7b:5a:ec:8b:3b: 03:3c:ba:9d:d0:40:c4:19:46:aa:d9:30:b7:bc:f4:9c:24:e1: 6c:8a:fa:f8:77:fc:f1:78:d7:73:37:fb:de:50:00:0b:65:b4: db:4b:56:2d:71:b2:ff:20:8b:41:fb:57:20:ea:8d:33:91:8b: 15:f1:c9:40:58:95:19:c9:81:6b:f3:fa:3d:ff:76:a7:5d:f1: ef:a6:5d:d0:ba:f2:db:b1:cf:e0:9e:b1:f0:6c:eb:ba:7f:38: c4:03:f4:c2:ac:9f:4b:b2:93:11:14:c8:70:ec:95:27:4d:21: 35:06:87:43:04:06:27:c7:b1:bf:f8:52:3e:8a:38:9f:83:51: 27:24:e3:6a:27:48:29:0c:68:fc:bd:e2:c5:97:a1:63:67:9a: 40:37:86:bc:29:84:ba:f5:fc:9b:22:80:7a:57:de:46:74:b2: f8:51:63:96:41:e3:49:7a:cf:bd:56:ad:ad:62:dc:2b:fa:94: 0d:f9:04:9b:17:30:d2:44:06:2e:18:f9:26:a2:bf:93:d0:c4: ba:81:d3:0b:4f:63:f1:61:70:d3:68:9c:37:f3:38:28:10:ff: 68:95:cc:83:aa:79:56:c6:1d:38:23:70:38:32:aa:5e:91:27: e8:a2:c1:32 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbbM1PTB+jbX2c4ieQVfwnv0IH34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzRUFERTVCOENENkRDRDgwRjcwRkQ0NkE2RDFCRjRD NzUwRENCRDAeFw0yNTA2MjEwNzM0MjhaFw0yNTA2MjUxOTQ0MjhaMDMxMTAvBgNV BAMTKDYwQzAzMkZBNEJFNUZEQzVGMjg5N0EyNjYyMDVDREYzMDY1NDhFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDct9DNIgoLL8haV2pn/hrsefJz EsgTeJtbBjS/QRDvKiS51AiziVyxZrSeE/N/Yd/EZyLR3e4xtR6RJ5UIRMq/52NZ F0UDnCTtQ6GqT0XDME+fIzDAbR7zBahwE5tSlCN9rDuxjncLh732G2hNqVew5LKL UVvzdYjedpnaFlGhT1drZ9kizXEgDWeRHg4nIP2eXd5CXgV5lhV4lXYBC0ToX7ti NQsCBuuTvi6+MJZwmAPZdF365h5jX8NyzkXcYdWCbvL3Rn8w5Yt9yO/xUIZSHRll 8iIfm5ScrXc1XtpDgdJdfz7bnfCfCrtTcoyyoEEtofQrHp+k6G3ODh+Sr/hxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYMAy+kvl/cXyiXomYgXN8wZUjpkwHwYDVR0j BBgwFoAU1D6t5bjNbc2A9w/Uam0b9MdQ3L0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzRDQTJFNTMwRDVEODc2NTEzNDMwOTgzQUE0MkJCRThF RkVCMDY5MTI1MzlEQjdEMkI4REVDRkVBNTE2MjE5LzAvRDQzRUFERTVCOENENkRD RDgwRjcwRkQ0NkE2RDFCRjRDNzUwRENCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENDNFQURFNUI4Q0Q2RENEODBG NzBGRDQ2QTZEMUJGNEM3NTBEQ0JELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc0Q0EyRTUzMEQ1RDg3NjUxMzQzMDk4M0FBNDJCQkU4RUZFQjA2OTEy NTM5REI3RDJCOERFQ0ZFQTUxNjIxOS8wL0Q0M0VBREU1QjhDRDZEQ0Q4MEY3MEZE NDZBNkQxQkY0Qzc1MERDQkQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGfYwDSR52Kr11tXbfe1rsizsD PLqd0EDEGUaq2TC3vPScJOFsivr4d/zxeNdzN/veUAALZbTbS1YtcbL/IItB+1cg 6o0zkYsV8clAWJUZyYFr8/o9/3anXfHvpl3QuvLbsc/gnrHwbOu6fzjEA/TCrJ9L spMRFMhw7JUnTSE1BodDBAYnx7G/+FI+ijifg1EnJONqJ0gpDGj8veLFl6FjZ5pA N4a8KYS69fybIoB6V95GdLL4UWOWQeNJes+9Vq2tYtwr+pQN+QSbFzDSRAYuGPkm or+T0MS6gdMLT2PxYXDTaJw38zgoEP9olcyDqnlWxh04I3A4MqpekSfoosEy -----END CERTIFICATE-----Generated at Sun Jun 22 11:47:46 2025 by rpki-client