$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.mft File: 8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.mft (raw, json) Hash identifier: gVvSlSecf3NRZqnDiesG3r80RX4Z5ys75n0d5il6ZiE= Subject key identifier: E7:BE:02:AD:34:D3:EE:18:1A:2A:A3:1C:BE:4F:76:2C:E1:F7:F0:17 Authority key identifier: 8B:9D:DD:50:E4:E6:07:E9:1D:CE:53:C6:A3:EA:EC:20:EC:DD:00:5B Certificate issuer: /CN=8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B Certificate serial: 1F4A5F918F7B4D6580C97235405E6CFE2488F4F7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.mft Manifest number: 23 Signing time: Tue 03 Jun 2025 17:54:03 +0000 Manifest this update: Tue 03 Jun 2025 17:49:03 +0000 Manifest next update: Sun 08 Jun 2025 04:47:03 +0000 Files and hashes: 1: 8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.crl (hash: JpRp0pb4FW1QqsoZ2PcCt0x1WYnA1L6bwrz/WhUsdHI=) 2: 323830333a326164303a3a2f33322d3438203d3e20323734303639.roa (hash: ojcOT696xUSzm4i+WKkdWNCo5opQ5pu4oanqtEUXO+c=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.crl rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4a:5f:91:8f:7b:4d:65:80:c9:72:35:40:5e:6c:fe:24:88:f4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B Validity Not Before: Jun 3 17:49:03 2025 GMT Not After : Jun 8 04:47:03 2025 GMT Subject: CN=E7BE02AD34D3EE181A2AA31CBE4F762CE1F7F017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:33:81:07:e9:c5:ed:9b:65:92:4a:8a:62: b3:fb:c9:71:89:f0:da:99:64:73:9a:4e:08:aa:f2: 7d:a8:dc:98:ae:4a:a4:67:37:41:13:94:9e:33:a3: dc:12:37:40:94:2e:7c:4e:94:7d:d9:35:db:af:3f: d3:c7:8c:5e:26:d3:52:5a:61:38:82:cd:55:6d:f3: 42:f7:98:2f:2a:c2:45:78:36:31:dd:07:2c:8c:d2: 30:55:e6:08:2e:07:fa:a3:27:59:4d:6f:9b:06:49: 35:56:f0:47:aa:b1:d3:40:e3:2d:fa:f7:24:ba:a3: 30:22:c5:e1:cd:0d:8e:62:a7:a5:3a:ae:74:17:9a: c9:9b:23:ca:9f:80:9f:20:7e:ce:57:7b:c0:ab:8e: 9b:a3:8b:5d:ed:e1:f0:96:24:0d:7c:dd:7c:59:8d: d9:d3:f8:68:77:62:af:38:84:8c:13:df:a8:c0:04: a3:c9:2d:21:e9:8a:ff:38:91:7f:03:3e:96:da:4c: 28:af:be:40:1e:34:76:9f:b5:9d:05:bb:86:ac:26: 98:94:d0:61:8a:4a:b1:ef:c6:4b:15:76:68:66:0c: 2b:56:7f:75:c5:c6:7c:f7:59:a4:37:06:00:5d:76: 15:55:9e:1a:5b:70:0d:9c:bd:9b:b2:ab:ca:51:5f: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BE:02:AD:34:D3:EE:18:1A:2A:A3:1C:BE:4F:76:2C:E1:F7:F0:17 X509v3 Authority Key Identifier: keyid:8B:9D:DD:50:E4:E6:07:E9:1D:CE:53:C6:A3:EA:EC:20:EC:DD:00:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99890007CD81E71BA94EAA2E362A2F76393A17CA7942A97FC88EC31D7A064B34/0/8B9DDD50E4E607E91DCE53C6A3EAEC20ECDD005B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:39:af:f8:a1:c9:f9:6e:46:44:80:a5:d6:b3:48:95:18:3b: e7:25:69:44:a7:cd:6f:70:9d:34:fc:82:0e:af:e6:b4:01:4d: 5d:a6:c5:c7:b1:7f:69:52:6e:6f:94:f1:fe:e5:88:a9:ea:f9: aa:3d:a7:75:b4:50:17:f0:93:79:84:ba:81:b8:52:7e:ad:24: cd:ca:91:7c:ba:40:29:6b:be:1d:fb:03:aa:df:83:ba:14:53: f5:21:01:18:df:b6:80:7d:4b:dc:10:3e:6d:59:99:ad:e6:ad: 3f:e0:b0:f5:38:8f:27:af:e2:d6:8e:10:fe:9a:28:0e:a0:e9: ba:92:96:f8:6b:32:ad:5a:4a:a8:76:c0:07:91:93:05:3e:05: 34:57:23:11:86:08:d1:a8:b1:38:53:67:d1:33:fb:a0:dd:7d: 1a:71:ca:89:7c:a3:33:ec:da:3e:1f:a6:40:55:49:fc:df:66: 28:f8:fe:78:b5:87:fd:7b:9f:b5:94:44:ef:32:3a:00:70:81: 40:09:a2:ee:91:ea:79:77:cc:c6:10:ab:2c:e0:86:4c:39:1e: 20:43:f9:4f:af:4f:45:7a:dd:75:e5:d1:68:dc:87:12:e0:bf: 70:0b:32:8e:97:eb:79:cb:4a:88:91:33:0d:77:c7:b1:5d:54: d4:72:a0:3a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUH0pfkY97TWWAyXI1QF5s/iSI9PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI5RERENTBFNEU2MDdFOTFEQ0U1M0M2QTNFQUVDMjBF Q0REMDA1QjAeFw0yNTA2MDMxNzQ5MDNaFw0yNTA2MDgwNDQ3MDNaMDMxMTAvBgNV BAMTKEU3QkUwMkFEMzREM0VFMTgxQTJBQTMxQ0JFNEY3NjJDRTFGN0YwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tDOBB+nF7ZtlkkqKYrP7yXGJ 8NqZZHOaTgiq8n2o3JiuSqRnN0ETlJ4zo9wSN0CULnxOlH3ZNduvP9PHjF4m01Ja YTiCzVVt80L3mC8qwkV4NjHdByyM0jBV5gguB/qjJ1lNb5sGSTVW8EeqsdNA4y36 9yS6ozAixeHNDY5ip6U6rnQXmsmbI8qfgJ8gfs5Xe8Crjpuji13t4fCWJA183XxZ jdnT+Gh3Yq84hIwT36jABKPJLSHpiv84kX8DPpbaTCivvkAeNHaftZ0Fu4asJpiU 0GGKSrHvxksVdmhmDCtWf3XFxnz3WaQ3BgBddhVVnhpbcA2cvZuyq8pRX4odAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU574CrTTT7hgaKqMcvk92LOH38BcwHwYDVR0j BBgwFoAUi53dUOTmB+kdzlPGo+rsIOzdAFswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85OTg5MDAwN0NEODFFNzFCQTk0RUFBMkUzNjJBMkY3NjM5 M0ExN0NBNzk0MkE5N0ZDODhFQzMxRDdBMDY0QjM0LzAvOEI5RERENTBFNEU2MDdF OTFEQ0U1M0M2QTNFQUVDMjBFQ0REMDA1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QjlEREQ1MEU0RTYwN0U5MURD RTUzQzZBM0VBRUMyMEVDREQwMDVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTk4OTAwMDdDRDgxRTcxQkE5NEVBQTJFMzYyQTJGNzYzOTNBMTdDQTc5 NDJBOTdGQzg4RUMzMUQ3QTA2NEIzNC8wLzhCOURERDUwRTRFNjA3RTkxRENFNTND NkEzRUFFQzIwRUNERDAwNUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEOa/4ocn5bkZEgKXWs0iVGDvn JWlEp81vcJ00/IIOr+a0AU1dpsXHsX9pUm5vlPH+5Yip6vmqPad1tFAX8JN5hLqB uFJ+rSTNypF8ukApa74d+wOq34O6FFP1IQEY37aAfUvcED5tWZmt5q0/4LD1OI8n r+LWjhD+migOoOm6kpb4azKtWkqodsAHkZMFPgU0VyMRhgjRqLE4U2fRM/ug3X0a ccqJfKMz7No+H6ZAVUn832Yo+P54tYf9e5+1lETvMjoAcIFACaLukep5d8zGEKss 4IZMOR4gQ/lPr09Fet115dFo3IcS4L9wCzKOl+t5y0qIkTMNd8exXVTUcqA6 -----END CERTIFICATE-----Generated at Wed Jun 4 12:35:43 2025 by rpki-client