$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft File: CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft (raw, json) Hash identifier: GSGcbdUx8KaLCdi/fOlyKTQcM+qwjnH+6f2rvWZHQjk= Subject key identifier: AF:F6:4F:B0:DE:DB:F3:09:34:E4:E7:0B:D8:A7:0D:06:05:2D:8F:CC Authority key identifier: CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC Certificate issuer: /CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC Certificate serial: 021018B37C5D4129D7A692450FE9CC159ABDA311 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft Manifest number: E9 Signing time: Tue 03 Jun 2025 15:47:42 +0000 Manifest this update: Tue 03 Jun 2025 15:42:42 +0000 Manifest next update: Sun 08 Jun 2025 22:23:42 +0000 Files and hashes: 1: 323830333a343538303a383231303a3a2f34342d3438203d3e203532343638.roa (hash: SSLK6hbYj9qXklhUwKCDBgygOVCAVVt4ouUKSkwrito=) 2: 323830333a343538303a3a2f33322d3438203d3e203532343638.roa (hash: /6K+xrx79hp+Vsg2PT5w28Bi9veUajpIvFLG9fMYIcg=) 3: 3230302e3232392e3134342e302f32322d3234203d3e203532343638.roa (hash: kqk0FVT3Avr003dFwjqxdZpHIM9oOM/l/YzONjSQKlw=) 4: 323830333a343538303a393130303a3a2f34302d3438203d3e203532343638.roa (hash: HSrJfGxmZU+Z5MOr6vZnq38dNgaA4hFjOkMnDk+vcRA=) 5: CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl (hash: WL1Vs2VxiPzSqG3PvNRhoMso3Ve9t6YZR7A7HSWcOzA=) 6: 3138362e3137392e36342e302f32302d3234203d3e203532343638.roa (hash: zkMjyQ9YuxxNrSWSHViqsoqWXFtH6nfFKMmPI6XhXkQ=) 7: 323830333a343538303a393230303a3a2f34302d3438203d3e203532343638.roa (hash: 1wtUMbnLOMBq5oNtn1FuywsbTz5Q1EwM+4Rtv8Pr3Xg=) 8: 323830333a376130303a3a2f33322d3438203d3e203532343638.roa (hash: Bmt/RHBOuR6KqQ9AY04ZI4o2cxEoy+x1DalEkocgsmw=) 9: 323830333a343538303a633030303a3a2f33352d3438203d3e203532343638.roa (hash: pXcUltmPJX1mPRX60MEEtE51m78n1eywr0krDtE4BZE=) 10: 323830333a343538303a383130303a3a2f34302d3438203d3e203532343638.roa (hash: RGbcxUVpDXE6cYzEOhP4C/BPlUKymxgZsW3JP5M4ZPg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:10:18:b3:7c:5d:41:29:d7:a6:92:45:0f:e9:cc:15:9a:bd:a3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC Validity Not Before: Jun 3 15:42:42 2025 GMT Not After : Jun 8 22:23:42 2025 GMT Subject: CN=AFF64FB0DEDBF30934E4E70BD8A70D06052D8FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:6b:93:0a:4d:7c:ef:44:6d:4b:c9:0a:8c: 1d:6e:75:08:8a:84:a4:ee:17:6d:54:81:3d:df:38: 9a:16:45:52:da:a2:91:1a:02:4a:77:61:87:a0:14: 3a:20:18:a9:2b:7f:4c:89:7f:b9:81:01:27:5b:7e: 42:fb:ff:00:38:c2:77:1f:ee:d6:15:63:4a:a3:56: be:9f:b1:64:80:81:68:9f:5c:6a:d0:60:a5:68:13: ce:62:85:54:b5:c8:24:53:c5:2f:24:e3:54:4d:8c: ea:f2:c1:38:98:72:a7:f2:ae:44:18:ac:89:38:50: c7:67:dd:e7:0a:70:f0:0f:42:26:88:6d:79:17:ad: 04:7b:98:dc:8c:98:c9:3a:7c:a1:40:63:fe:b7:f8: ea:b8:3b:f1:e4:93:fd:29:03:fe:87:b4:47:9d:ff: 7b:d6:7c:6f:07:a6:f3:d3:01:63:11:c6:37:a5:11: 32:fa:18:e7:3b:d8:0e:4c:5d:39:84:11:bb:7b:85: a5:00:d5:43:a1:5b:1a:5e:7d:1a:02:2c:5f:8f:82: 29:d3:db:11:f1:ed:52:c3:23:b3:57:79:59:34:38: 50:44:e7:64:d2:66:1c:73:04:7d:06:3a:db:f3:3a: b3:e4:45:2f:39:67:4f:11:d7:f3:14:c0:cc:22:92: 13:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F6:4F:B0:DE:DB:F3:09:34:E4:E7:0B:D8:A7:0D:06:05:2D:8F:CC X509v3 Authority Key Identifier: keyid:CE:C9:A4:88:D0:79:AE:E7:FE:0B:21:66:4A:1A:4A:EE:1C:89:9F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35EA57EDCFB8D3C555B7B09D2E5D658E6D2412BC89F1BC7A54777FDC15C93873/0/CEC9A488D079AEE7FE0B21664A1A4AEE1C899FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:37:03:c2:f1:f8:b0:f5:d7:93:00:80:a5:ea:75:99:14:74: c4:d2:09:43:13:26:bb:7e:f2:2d:e7:e6:8e:34:ec:6a:27:63: 37:94:7a:63:1b:bf:af:30:21:3a:f0:67:8f:03:5d:a5:96:33: e1:9e:53:14:6c:c6:10:27:7e:8d:ab:2c:bf:71:9a:01:02:d6: 6f:35:fe:e1:0b:c5:32:54:b6:fb:26:c7:8f:f5:47:f8:2a:d6: a3:b2:43:86:51:40:ec:c0:2c:d5:31:1d:51:86:e1:9d:ae:66: 5f:8a:77:5b:a4:14:90:28:9c:c0:a9:03:85:02:60:dc:7b:a4: fa:0a:a6:cc:ea:83:c1:a2:35:44:7a:9c:43:b0:93:14:17:49: 8b:f4:43:c6:ae:6a:ca:c2:84:bb:13:b8:32:99:73:79:f3:b0: af:96:ce:63:17:a5:50:5a:ba:ce:e2:87:8c:27:e8:1c:a6:19: bb:83:f1:ef:62:99:a9:15:3d:16:ea:dd:65:cf:f3:37:17:17: 1f:5f:01:bf:a2:8b:bc:08:63:3e:55:d1:c5:09:12:95:ca:9e: 37:b0:ae:2e:5b:5c:60:a5:fa:1f:ae:35:82:16:ae:19:43:88: b7:1c:a5:37:1d:d7:1e:46:0c:50:29:d2:ca:b7:1f:4e:c3:7c: 56:80:b2:b0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAhAYs3xdQSnXppJFD+nMFZq9oxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDOUE0ODhEMDc5QUVFN0ZFMEIyMTY2NEExQTRBRUUx Qzg5OUZEQzAeFw0yNTA2MDMxNTQyNDJaFw0yNTA2MDgyMjIzNDJaMDMxMTAvBgNV BAMTKEFGRjY0RkIwREVEQkYzMDkzNEU0RTcwQkQ4QTcwRDA2MDUyRDhGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJmuTCk1870RtS8kKjB1udQiK hKTuF21UgT3fOJoWRVLaopEaAkp3YYegFDogGKkrf0yJf7mBASdbfkL7/wA4wncf 7tYVY0qjVr6fsWSAgWifXGrQYKVoE85ihVS1yCRTxS8k41RNjOrywTiYcqfyrkQY rIk4UMdn3ecKcPAPQiaIbXkXrQR7mNyMmMk6fKFAY/63+Oq4O/Hkk/0pA/6HtEed /3vWfG8HpvPTAWMRxjelETL6GOc72A5MXTmEEbt7haUA1UOhWxpefRoCLF+PginT 2xHx7VLDI7NXeVk0OFBE52TSZhxzBH0GOtvzOrPkRS85Z08R1/MUwMwikhNZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUr/ZPsN7b8wk05OcL2KcNBgUtj8wwHwYDVR0j BBgwFoAUzsmkiNB5ruf+CyFmShpK7hyJn9wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNUVBNTdFRENGQjhEM0M1NTVCN0IwOUQyRTVENjU4RTZE MjQxMkJDODlGMUJDN0E1NDc3N0ZEQzE1QzkzODczLzAvQ0VDOUE0ODhEMDc5QUVF N0ZFMEIyMTY2NEExQTRBRUUxQzg5OUZEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUM5QTQ4OEQwNzlBRUU3RkUw QjIxNjY0QTFBNEFFRTFDODk5RkRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzVFQTU3RURDRkI4RDNDNTU1QjdCMDlEMkU1RDY1OEU2RDI0MTJCQzg5 RjFCQzdBNTQ3NzdGREMxNUM5Mzg3My8wL0NFQzlBNDg4RDA3OUFFRTdGRTBCMjE2 NjRBMUE0QUVFMUM4OTlGREMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCONwPC8fiw9deTAICl6nWZFHTE 0glDEya7fvIt5+aONOxqJ2M3lHpjG7+vMCE68GePA12lljPhnlMUbMYQJ36Nqyy/ cZoBAtZvNf7hC8UyVLb7JseP9Uf4KtajskOGUUDswCzVMR1RhuGdrmZfindbpBSQ KJzAqQOFAmDce6T6CqbM6oPBojVEepxDsJMUF0mL9EPGrmrKwoS7E7gymXN587Cv ls5jF6VQWrrO4oeMJ+gcphm7g/HvYpmpFT0W6t1lz/M3FxcfXwG/oou8CGM+VdHF CRKVyp43sK4uW1xgpfofrjWCFq4ZQ4i3HKU3HdceRgxQKdLKtx9Ow3xWgLKw -----END CERTIFICATE-----Generated at Wed Jun 4 12:33:23 2025 by rpki-client