$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: O22bPFp3892dU/lO8h1kdDxdBmSmn56aFVWLmui1FYk= Subject key identifier: D3:16:F9:3A:28:0A:83:DF:5E:E1:93:AA:20:BB:29:E2:6B:C7:54:65 Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 22F1562226098DB5F0DF4C02DB3C524FDF69BA3F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: E0 Signing time: Sun 01 Jun 2025 22:37:57 +0000 Manifest this update: Sun 01 Jun 2025 22:32:57 +0000 Manifest next update: Sat 07 Jun 2025 18:08:57 +0000 Files and hashes: 1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: kvXq/7xFBcYihjCboY6sXmggXJS5RFgBzNm9B4FD6Yk=) 2: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: g6DNKjZekU2uDpQLAA16qySYRWAhC+pOHrCuJlds2qw=) 3: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: krz1Nj8XIl2CECDbXG44XKYcPlpflHBt5JafZOhZV80=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 18:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f1:56:22:26:09:8d:b5:f0:df:4c:02:db:3c:52:4f:df:69:ba:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Jun 1 22:32:57 2025 GMT Not After : Jun 7 18:08:57 2025 GMT Subject: CN=D316F93A280A83DF5EE193AA20BB29E26BC75465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:0e:0f:b1:3f:ad:80:31:f4:b0:ab:a9:a8: 22:30:09:33:55:b1:d2:12:d5:80:18:a9:0a:ac:86: bd:3d:e3:49:26:8a:6c:47:09:c4:6e:2f:4f:6a:e2: ea:ae:aa:8c:01:fd:b4:f0:65:55:36:df:6c:69:7d: b5:b4:bc:dd:c2:49:11:00:1e:cb:9b:d3:59:5b:1c: a3:b5:67:7d:c8:62:84:5d:46:65:bd:74:77:31:74: 8c:96:c9:a5:bf:1a:fe:cc:4b:78:ff:21:5a:97:44: 89:a4:79:5f:16:61:26:28:dc:64:e1:c7:f0:80:4b: 31:db:34:71:7c:02:7c:9d:7e:86:55:7d:22:56:93: e7:b0:69:80:68:66:98:88:11:59:52:1a:a2:1c:c7: 21:60:9a:2e:35:db:05:e8:82:d9:0d:7e:b1:cb:20: 04:07:68:79:e4:62:10:b5:60:98:7e:15:b6:f4:2f: a6:54:4a:81:82:84:13:a7:66:b6:b2:7f:4f:ad:ba: 4b:56:03:df:d7:10:37:8e:15:e6:2f:8f:22:03:1c: 3f:f1:18:eb:a4:67:12:76:bb:32:10:92:e9:53:dd: 48:3b:7e:93:1a:c6:70:7f:51:95:1e:06:84:5c:0d: d0:d3:a5:a0:9c:3b:5e:15:d4:62:f4:0f:c8:58:23: 73:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:16:F9:3A:28:0A:83:DF:5E:E1:93:AA:20:BB:29:E2:6B:C7:54:65 X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1b:84:3d:78:35:20:9b:99:42:0d:55:84:a4:79:1e:83:9b: 45:67:fa:85:f1:ac:6c:87:f1:90:17:9b:0c:0a:1f:10:9e:84: 94:90:7e:9d:38:e4:64:7b:a3:9d:40:fb:da:0d:b0:ed:49:59: 65:38:38:c9:f0:b8:df:fa:72:bc:40:d8:8d:3c:a9:f4:96:ca: f5:58:2a:cc:2c:20:44:5b:be:05:4a:5f:d4:b3:1a:22:47:58: 8a:95:b2:1d:33:22:48:6d:76:4e:c0:56:05:ef:e5:6d:36:15: 8a:6d:36:48:40:37:be:95:5f:9c:1c:6f:23:d8:36:dc:ac:4f: d0:ce:af:7c:07:49:3b:ae:36:c4:7f:1c:c0:d1:31:e1:32:0d: ec:d8:bc:6e:f5:67:1b:4f:fc:b8:5b:c1:b6:3f:52:d0:c0:f5: 98:e3:5f:56:5d:b0:f8:e0:87:73:0d:bf:cd:b3:08:1a:b1:56: c4:24:28:e0:4e:86:9c:c0:6f:0f:bc:f5:e1:e8:c2:11:4c:f1: f0:63:fa:25:39:78:fd:83:77:e3:f8:8b:57:c1:55:47:a9:c5: 16:d7:bf:3f:6f:d9:d0:10:33:af:fc:2f:6d:de:8e:b7:a3:4b: be:44:c7:e4:d0:02:97:91:09:b0:33:31:14:14:bd:39:5f:ee: 6d:e8:67:af -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIvFWIiYJjbXw30wC2zxST99puj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNTA2MDEyMjMyNTdaFw0yNTA2MDcxODA4NTdaMDMxMTAvBgNV BAMTKEQzMTZGOTNBMjgwQTgzREY1RUUxOTNBQTIwQkIyOUUyNkJDNzU0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mg4PsT+tgDH0sKupqCIwCTNV sdIS1YAYqQqshr0940kmimxHCcRuL09q4uquqowB/bTwZVU232xpfbW0vN3CSREA Hsub01lbHKO1Z33IYoRdRmW9dHcxdIyWyaW/Gv7MS3j/IVqXRImkeV8WYSYo3GTh x/CASzHbNHF8AnydfoZVfSJWk+ewaYBoZpiIEVlSGqIcxyFgmi412wXogtkNfrHL IAQHaHnkYhC1YJh+Fbb0L6ZUSoGChBOnZrayf0+tuktWA9/XEDeOFeYvjyIDHD/x GOukZxJ2uzIQkulT3Ug7fpMaxnB/UZUeBoRcDdDTpaCcO14V1GL0D8hYI3NbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0xb5OigKg99e4ZOqILsp4mvHVGUwHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKG4Q9eDUgm5lCDVWEpHkeg5tF Z/qF8axsh/GQF5sMCh8QnoSUkH6dOORke6OdQPvaDbDtSVllODjJ8Ljf+nK8QNiN PKn0lsr1WCrMLCBEW74FSl/UsxoiR1iKlbIdMyJIbXZOwFYF7+VtNhWKbTZIQDe+ lV+cHG8j2DbcrE/Qzq98B0k7rjbEfxzA0THhMg3s2Lxu9WcbT/y4W8G2P1LQwPWY 419WXbD44IdzDb/NswgasVbEJCjgToacwG8PvPXh6MIRTPHwY/olOXj9g3fj+ItX wVVHqcUW178/b9nQEDOv/C9t3o63o0u+RMfk0AKXkQmwMzEUFL05X+5t6Gev -----END CERTIFICATE-----Generated at Wed Jun 4 12:33:44 2025 by rpki-client