$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft File: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft (raw, json) Hash identifier: Wj4IV/Xl+nHs34Ecp2V5MQlCE5nHzD7VL/K7uKcyGIU= Subject key identifier: 33:C5:A5:96:F1:1C:99:2F:0D:FF:72:1C:09:42:15:65:21:E9:E4:AC Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37 Certificate issuer: /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937 Certificate serial: 38E571CD074529C712941F8ACA0926AEC47F6B5C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft Manifest number: E3 Signing time: Thu 12 Jun 2025 10:32:22 +0000 Manifest this update: Thu 12 Jun 2025 10:27:22 +0000 Manifest next update: Tue 17 Jun 2025 02:22:22 +0000 Files and hashes: 1: 3230302e32352e3232342e302f31392d3234203d3e203237373633.roa (hash: uJjNy8XbLIhMUXWrEaXKzaGqSNEJyYbVqDtNw9Ok8V8=) 2: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl (hash: YqP1f05AnXqoz1hwrjSFWpIq0oFVYM0KwuW3ESRy9fk=) 3: 323830333a373339303a3a2f34382d3438203d3e203237373633.roa (hash: 0o8RGWqfKN0fRTpRONUkAQHkwVbnvvTz+HWYd70HeSc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 02:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e5:71:cd:07:45:29:c7:12:94:1f:8a:ca:09:26:ae:c4:7f:6b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937 Validity Not Before: Jun 12 10:27:22 2025 GMT Not After : Jun 17 02:22:22 2025 GMT Subject: CN=33C5A596F11C992F0DFF721C0942156521E9E4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e4:b3:b8:b3:03:53:b2:47:43:bc:cc:8e:91: 7f:bb:47:da:d2:e9:92:14:be:c4:b4:bc:e7:75:5b: 2f:63:ad:66:f2:32:d5:40:f9:d7:b6:55:44:60:d8: e5:23:08:55:32:ad:f7:40:b6:4b:16:28:24:4e:96: f8:af:31:e2:32:e9:54:b2:82:2e:7c:09:e5:a6:38: 22:17:30:a7:23:ba:4c:9c:ad:3b:18:81:12:7c:17: 0c:09:d9:dc:f6:1a:6d:a4:dc:db:14:02:6f:90:08: b9:0f:95:16:60:63:7e:75:22:72:d4:5e:3a:df:ae: 83:7c:d5:c7:01:9e:b0:cf:3b:2f:ce:55:b5:cf:01: 19:2e:a0:e7:99:49:8d:94:1f:a5:8a:4c:11:7e:14: a3:0e:e2:30:a4:8f:e0:31:d1:cc:c2:48:db:0c:e1: 48:3d:70:3f:a7:25:0e:ee:52:ee:e4:a2:1e:7c:1e: 16:64:63:de:a2:58:93:13:8b:06:d1:4e:5c:e2:df: 65:a0:2f:ee:2b:b7:f4:cc:1f:05:a5:9a:1f:4b:63: 52:47:2a:a4:17:3c:cd:8f:ce:b7:22:3e:fb:db:93: 09:8a:36:23:66:5a:50:2e:a5:0e:b7:eb:38:f5:e6: 0f:23:78:56:a5:50:de:71:b7:ec:67:eb:1a:a0:9c: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C5:A5:96:F1:1C:99:2F:0D:FF:72:1C:09:42:15:65:21:E9:E4:AC X509v3 Authority Key Identifier: keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3f:fd:10:7c:03:dc:0d:0d:65:49:f7:89:70:d1:d9:30:16: 44:07:73:fa:45:25:2b:8c:04:04:78:53:91:71:81:b7:0d:4a: 5c:4e:70:b6:5a:37:9c:27:ae:87:5b:91:3d:96:95:af:fb:df: 2f:4a:ee:89:fc:df:44:2c:23:9f:93:36:cb:4f:ee:f4:fc:5f: 95:9d:0f:7c:52:68:06:94:9d:54:9c:8b:0b:42:33:b9:41:39: 01:15:d1:c0:8c:ec:9c:3c:6e:6b:b4:38:88:5c:25:fe:2e:ef: ae:af:42:c4:1e:e2:7f:f3:51:a6:54:cd:3b:1b:b7:91:e1:d3: 6e:16:80:c3:7f:52:4f:55:de:cd:39:62:d1:54:28:5e:2f:b0: cb:92:fa:73:2b:3f:2a:a1:d9:eb:56:e0:d7:0b:4a:f0:f3:b2: 6a:3b:8c:68:ba:de:ef:4d:2c:aa:1c:96:af:e8:0f:c5:bb:4c: 0c:d3:b8:f4:ab:9e:d2:36:8f:d3:bb:79:f7:4b:40:a1:ca:57: 8e:aa:78:23:7d:ba:2f:79:0b:3d:19:8e:82:35:54:97:ed:7a: 50:74:95:f9:ef:72:49:87:d8:f9:be:e2:d1:e4:5f:dc:15:6a: 7c:47:03:dd:3f:0e:56:06:37:02:19:a6:25:de:b7:a8:7d:5f: ad:e0:f1:01 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOOVxzQdFKccSlB+KygkmrsR/a1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQTUzQ0M2QTQyRDlEM0ZCM0QxREYyNjE4NDY5QzFG MzJENjkzNzAeFw0yNTA2MTIxMDI3MjJaFw0yNTA2MTcwMjIyMjJaMDMxMTAvBgNV BAMTKDMzQzVBNTk2RjExQzk5MkYwREZGNzIxQzA5NDIxNTY1MjFFOUU0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL5LO4swNTskdDvMyOkX+7R9rS 6ZIUvsS0vOd1Wy9jrWbyMtVA+de2VURg2OUjCFUyrfdAtksWKCROlvivMeIy6VSy gi58CeWmOCIXMKcjukycrTsYgRJ8FwwJ2dz2Gm2k3NsUAm+QCLkPlRZgY351InLU XjrfroN81ccBnrDPOy/OVbXPARkuoOeZSY2UH6WKTBF+FKMO4jCkj+Ax0czCSNsM 4Ug9cD+nJQ7uUu7koh58HhZkY96iWJMTiwbRTlzi32WgL+4rt/TMHwWlmh9LY1JH KqQXPM2PzrciPvvbkwmKNiNmWlAupQ636zj15g8jeFalUN5xt+xn6xqgnHH9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUM8WllvEcmS8N/3IcCUIVZSHp5KwwHwYDVR0j BBgwFoAUaOpTzGpC2dP7PR3yYYRpwfMtaTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0QwNTdGQjExRDNDRDk4MzQzQkYzMEZGNTA1QkU4MEVD QUUzRjBGRDUwODI2ODUzOTU3QkI0RDRBODJGOURBLzAvNjhFQTUzQ0M2QTQyRDlE M0ZCM0QxREYyNjE4NDY5QzFGMzJENjkzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEVBNTNDQzZBNDJEOUQzRkIz RDFERjI2MTg0NjlDMUYzMkQ2OTM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdEMDU3RkIxMUQzQ0Q5ODM0M0JGMzBGRjUwNUJFODBFQ0FFM0YwRkQ1 MDgyNjg1Mzk1N0JCNEQ0QTgyRjlEQS8wLzY4RUE1M0NDNkE0MkQ5RDNGQjNEMURG MjYxODQ2OUMxRjMyRDY5MzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbP/0QfAPcDQ1lSfeJcNHZMBZE B3P6RSUrjAQEeFORcYG3DUpcTnC2WjecJ66HW5E9lpWv+98vSu6J/N9ELCOfkzbL T+70/F+VnQ98UmgGlJ1UnIsLQjO5QTkBFdHAjOycPG5rtDiIXCX+Lu+ur0LEHuJ/ 81GmVM07G7eR4dNuFoDDf1JPVd7NOWLRVCheL7DLkvpzKz8qodnrVuDXC0rw87Jq O4xout7vTSyqHJav6A/Fu0wM07j0q57SNo/Tu3n3S0ChyleOqngjfboveQs9GY6C NVSX7XpQdJX573JJh9j5vuLR5F/cFWp8RwPdPw5WBjcCGaYl3reofV+t4PEB -----END CERTIFICATE-----Generated at Fri Jun 13 06:10:39 2025 by rpki-client