$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: BHP29+bKdIDQeMEWLNkgucw6raLubwoZwWb/HaK5bfw= Subject key identifier: 4E:BF:32:F4:70:95:17:43:95:74:68:48:F1:63:3A:A7:8C:34:89:FC Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 73EB138A43344B38AA7CCF3CD2B30F41B019F2E1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: 0102 Signing time: Sat 02 Aug 2025 20:03:49 +0000 Manifest this update: Sat 02 Aug 2025 19:58:49 +0000 Manifest next update: Fri 08 Aug 2025 05:34:49 +0000 Files and hashes: 1: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: awSHfYu5olO3Sr1hdIR9ko/TcZ0IMSchh5DLzNlGd+k=) 2: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: 41Ynu9x/QeyzjOChSL56tz8Q7gm/sFmC3xbKymzLT+c=) 3: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: Tpu5mtmY/E6RnTTm3zG1QJJywy3a24/BBCfGwU0oGCo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:eb:13:8a:43:34:4b:38:aa:7c:cf:3c:d2:b3:0f:41:b0:19:f2:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: Aug 2 19:58:49 2025 GMT Not After : Aug 8 05:34:49 2025 GMT Subject: CN=4EBF32F47095174395746848F1633AA78C3489FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:2e:3a:e6:61:07:ab:f4:de:b2:23:2c:ff: 42:43:c1:51:d6:a4:3f:27:67:4e:6c:b4:f8:f9:91: d8:d9:1c:37:8f:0b:dd:f8:63:88:a0:eb:61:eb:6e: 51:a8:28:5b:0f:68:21:8e:9a:76:c1:58:e0:9d:b8: a6:e1:86:fe:f9:88:d7:1a:62:b3:69:82:f6:3d:bb: f2:47:86:86:4f:5b:4d:42:6d:f8:f0:1e:d2:9a:ee: 50:fb:2a:c4:6f:97:ad:4e:fa:8d:f9:c6:f9:72:28: 70:43:a7:7e:e7:52:d9:25:c3:21:29:34:a4:39:ad: 75:e4:77:76:74:fc:6e:b0:25:27:45:c6:75:41:95: 36:89:c1:92:db:65:84:51:6c:e8:0a:2d:b0:df:83: 8b:eb:7b:70:d0:6c:05:4c:ed:f5:f6:d7:9b:4f:b9: 09:f1:ab:32:8a:ca:59:ca:03:0d:72:b6:bd:e1:4c: 21:01:6a:c4:49:c4:85:fb:4a:24:24:57:1f:80:8b: 01:22:1d:2f:27:b8:10:d2:38:1f:0a:8c:b0:26:60: e3:e3:93:a0:4d:56:51:81:67:12:3f:79:f8:ef:13: 1c:e7:f3:75:c4:b9:44:ce:36:ef:43:dd:45:b0:6a: 65:62:b0:bf:ed:db:5f:a8:66:33:e0:c7:e3:7b:4f: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:32:F4:70:95:17:43:95:74:68:48:F1:63:3A:A7:8C:34:89:FC X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ce:10:9e:a8:16:c4:62:14:f2:34:25:e7:9d:a2:fe:53:ed: af:f6:cb:35:65:03:61:50:be:0e:ac:d7:b3:7b:cc:50:f3:af: 3e:1e:22:94:ce:60:1a:da:9f:53:0a:b5:ce:be:55:72:46:71: 08:57:ef:5c:11:c9:ee:92:cf:ae:6b:91:23:c4:af:6c:e0:d4: 9a:c9:77:14:bf:94:2e:ac:1f:36:58:97:1e:30:b0:65:10:17: b9:58:79:d0:74:56:c6:1e:93:c3:3c:9f:0f:9e:07:40:70:3c: 51:47:d4:93:18:69:8d:07:60:45:eb:5a:5b:77:3a:7c:9a:e5: 5e:cf:bc:4d:7a:5a:43:5e:f7:9f:e4:54:a6:5a:3e:60:35:a4: 00:28:3a:63:51:36:bb:7b:d0:73:4c:77:e1:92:ea:98:35:ee: 0a:60:1b:00:01:c5:7e:bd:20:fc:45:bf:e7:ac:4f:e6:77:1b: d2:bf:69:23:79:5d:26:00:93:e4:06:c7:a3:81:8f:be:47:c3: 6c:cf:73:03:30:d4:60:6a:5a:a7:6a:42:4d:c0:a6:fb:c3:0f: 06:2a:c5:82:8a:95:4a:49:69:f4:9f:83:95:fa:86:c6:11:d5: 9a:be:0e:53:b9:f7:f8:39:0b:8f:73:87:17:d6:8c:9e:5c:f4: a3:1f:ec:1e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUc+sTikM0SziqfM880rMPQbAZ8uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNTA4MDIxOTU4NDlaFw0yNTA4MDgwNTM0NDlaMDMxMTAvBgNV BAMTKDRFQkYzMkY0NzA5NTE3NDM5NTc0Njg0OEYxNjMzQUE3OEMzNDg5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69S465mEHq/TesiMs/0JDwVHW pD8nZ05stPj5kdjZHDePC934Y4ig62HrblGoKFsPaCGOmnbBWOCduKbhhv75iNca YrNpgvY9u/JHhoZPW01CbfjwHtKa7lD7KsRvl61O+o35xvlyKHBDp37nUtklwyEp NKQ5rXXkd3Z0/G6wJSdFxnVBlTaJwZLbZYRRbOgKLbDfg4vre3DQbAVM7fX215tP uQnxqzKKylnKAw1ytr3hTCEBasRJxIX7SiQkVx+AiwEiHS8nuBDSOB8KjLAmYOPj k6BNVlGBZxI/efjvExzn83XEuUTONu9D3UWwamVisL/t21+oZjPgx+N7T/sZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTr8y9HCVF0OVdGhI8WM6p4w0ifwwHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClzhCeqBbEYhTyNCXnnaL+U+2v 9ss1ZQNhUL4OrNeze8xQ868+HiKUzmAa2p9TCrXOvlVyRnEIV+9cEcnuks+ua5Ej xK9s4NSayXcUv5QurB82WJceMLBlEBe5WHnQdFbGHpPDPJ8PngdAcDxRR9STGGmN B2BF61pbdzp8muVez7xNelpDXvef5FSmWj5gNaQAKDpjUTa7e9BzTHfhkuqYNe4K YBsAAcV+vSD8Rb/nrE/mdxvSv2kjeV0mAJPkBsejgY++R8Nsz3MDMNRgalqnakJN wKb7ww8GKsWCipVKSWn0n4OV+obGEdWavg5Tuff4OQuPc4cX1oyeXPSjH+we -----END CERTIFICATE-----Generated at Sun Aug 3 16:15:35 2025 by rpki-client