$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft File: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft (raw, json) Hash identifier: KFq2mgMgY3ALNvcWaDt+qQLnyXKEARrnwmkJVG7V+R4= Subject key identifier: 8A:0D:DB:2B:E6:DE:D7:87:64:47:8E:81:03:2D:3C:F2:F7:82:AF:CD Authority key identifier: 0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 Certificate issuer: /CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Certificate serial: 201E1E1A786F639ED09C29E3ABB789F20ACEABE2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft Manifest number: E9 Signing time: Mon 02 Jun 2025 10:25:12 +0000 Manifest this update: Mon 02 Jun 2025 10:20:12 +0000 Manifest next update: Sun 08 Jun 2025 10:13:12 +0000 Files and hashes: 1: 3230302e37312e38382e302f32312d3234203d3e203237393936.roa (hash: r/EnoAJ/QDLRyKJ2eUMGsfZEAwWctbmLg0N+5EAKcZA=) 2: 3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa (hash: ALd1zdR/wdEwWr8XpENniianx6ebOr87tR/bFvCA3As=) 3: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl (hash: AdBN764bX37u9kDvFvPPXBJZMNL3X2EssO5OQBfSKIM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1e:1e:1a:78:6f:63:9e:d0:9c:29:e3:ab:b7:89:f2:0a:ce:ab:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Validity Not Before: Jun 2 10:20:12 2025 GMT Not After : Jun 8 10:13:12 2025 GMT Subject: CN=8A0DDB2BE6DED78764478E81032D3CF2F782AFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:11:bf:0f:97:ff:a4:50:3f:98:bd:d9:42: 4c:80:f8:f1:82:d2:ac:d2:09:0f:8a:98:88:fb:4c: 95:05:54:7e:ad:7f:65:83:14:40:24:48:d4:c3:2c: 14:c0:bb:6f:82:29:7d:8e:e4:6d:c4:02:1f:47:4b: da:87:21:a8:02:fe:9b:0b:40:90:36:2d:6c:9a:da: 83:fa:5a:45:d1:31:db:45:65:de:d5:34:07:d7:b5: 2f:80:68:4c:6c:ad:12:25:d0:b9:f5:c4:ed:32:02: 87:11:54:c9:a5:1f:f3:24:8d:f1:53:c6:89:bd:01: ad:77:ad:68:26:47:4f:01:09:ff:ef:63:f3:e4:20: c4:80:dd:ad:73:ec:ff:a7:e6:70:9b:03:7c:99:7b: 1c:57:09:4f:a9:92:df:2a:a6:ca:d9:86:d3:bc:cf: e3:c8:c2:ad:92:5f:0a:06:e3:f2:a3:b7:ca:93:85: 0b:c1:92:61:d4:c6:e4:10:46:0a:fa:7f:cd:5f:1b: 99:03:05:91:50:ee:b7:25:49:47:d6:4e:64:71:43: 9f:15:9e:df:cf:57:a6:82:71:15:5f:56:83:6f:16: 67:26:5a:bd:da:fa:e1:53:07:31:48:a9:cf:9b:ef: 8e:10:15:97:13:95:d2:1b:76:d1:29:0d:ad:21:d5: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0D:DB:2B:E6:DE:D7:87:64:47:8E:81:03:2D:3C:F2:F7:82:AF:CD X509v3 Authority Key Identifier: keyid:0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:59:82:2e:dc:b7:60:56:a4:0c:66:10:9e:42:e6:e3:9a:b6: 6d:46:40:5a:85:f9:78:ac:e0:4d:be:80:cd:e8:30:ee:7c:10: 04:13:dc:72:7c:a1:d3:43:e1:46:46:29:47:78:d9:cb:e3:14: 17:10:a5:04:62:93:fc:9d:f5:1f:a4:a9:42:c4:fe:8c:ec:40: 18:76:76:df:ad:2f:74:f7:a0:ba:1f:d4:41:d3:62:c4:f8:4f: aa:3c:d9:42:de:5d:12:d1:a5:df:ab:66:99:b5:80:63:77:f7: 14:63:71:78:ce:40:04:a1:0c:1e:30:dc:51:f6:f3:49:5c:88: 08:c5:06:e6:f0:dc:4c:ad:80:dd:c8:c9:dd:c8:7a:92:bc:69: dc:72:6a:18:f6:a1:34:03:47:a3:25:67:6e:29:5e:3e:2e:5f: 9f:16:f2:f5:b5:f4:c0:17:04:a5:9c:ab:e2:4f:18:14:98:d1: 0e:af:92:fd:70:1b:df:c1:40:a4:d5:72:46:10:7b:04:82:2c: 9d:c6:8a:db:38:91:f5:b9:78:aa:33:85:ed:49:ac:49:47:0f: 57:2f:ed:ec:8d:0d:ac:c6:50:07:dc:77:84:ab:0a:ee:46:b7: 39:b6:11:2d:95:b4:71:99:08:3e:5f:5c:90:8b:8e:6a:c3:40: bf:49:1e:0c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIB4eGnhvY57QnCnjq7eJ8grOq+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENCMEM3NzY2ODcwMDFBNkJFRkE5RUREMjBGOUJBNkM4 ODhFRTg1NDAeFw0yNTA2MDIxMDIwMTJaFw0yNTA2MDgxMDEzMTJaMDMxMTAvBgNV BAMTKDhBMEREQjJCRTZERUQ3ODc2NDQ3OEU4MTAzMkQzQ0YyRjc4MkFGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTEhG/D5f/pFA/mL3ZQkyA+PGC 0qzSCQ+KmIj7TJUFVH6tf2WDFEAkSNTDLBTAu2+CKX2O5G3EAh9HS9qHIagC/psL QJA2LWya2oP6WkXRMdtFZd7VNAfXtS+AaExsrRIl0Ln1xO0yAocRVMmlH/MkjfFT xom9Aa13rWgmR08BCf/vY/PkIMSA3a1z7P+n5nCbA3yZexxXCU+pkt8qpsrZhtO8 z+PIwq2SXwoG4/Kjt8qThQvBkmHUxuQQRgr6f81fG5kDBZFQ7rclSUfWTmRxQ58V nt/PV6aCcRVfVoNvFmcmWr3a+uFTBzFIqc+b744QFZcTldIbdtEpDa0h1QFhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUig3bK+be14dkR46BAy088veCr80wHwYDVR0j BBgwFoAUDLDHdmhwAaa++p7dIPm6bIiO6FQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkY0RjNFMUEyQkY5RkExNTVGMzM4RkNCREE1RjYwNDIy QkRCODEwRDc0OUZEMTE2N0VDQUQ4RURCNERCOEQxLzAvMENCMEM3NzY2ODcwMDFB NkJFRkE5RUREMjBGOUJBNkM4ODhFRTg1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0IwQzc3NjY4NzAwMUE2QkVG QTlFREQyMEY5QkE2Qzg4OEVFODU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZGNEYzRTFBMkJGOUZBMTU1RjMzOEZDQkRBNUY2MDQyMkJEQjgxMEQ3 NDlGRDExNjdFQ0FEOEVEQjREQjhEMS8wLzBDQjBDNzc2Njg3MDAxQTZCRUZBOUVE RDIwRjlCQTZDODg4RUU4NTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxWYIu3LdgVqQMZhCeQubjmrZt RkBahfl4rOBNvoDN6DDufBAEE9xyfKHTQ+FGRilHeNnL4xQXEKUEYpP8nfUfpKlC xP6M7EAYdnbfrS9096C6H9RB02LE+E+qPNlC3l0S0aXfq2aZtYBjd/cUY3F4zkAE oQweMNxR9vNJXIgIxQbm8NxMrYDdyMndyHqSvGnccmoY9qE0A0ejJWduKV4+Ll+f FvL1tfTAFwSlnKviTxgUmNEOr5L9cBvfwUCk1XJGEHsEgiydxorbOJH1uXiqM4Xt SaxJRw9XL+3sjQ2sxlAH3HeEqwruRrc5thEtlbRxmQg+X1yQi45qw0C/SR4M -----END CERTIFICATE-----Generated at Wed Jun 4 12:33:53 2025 by rpki-client