$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: mvkXVxy8oWxpQngZCu4dX93fuLAAi/yiCD7CC3BJRz0= Subject key identifier: 85:EA:20:3F:85:D5:DD:9D:DE:1E:E3:44:50:60:B9:21:81:FF:BB:66 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 76F92B2AA3284055348E702E13E3A9A67ED126E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: EF Signing time: Mon 09 Jun 2025 02:58:38 +0000 Manifest this update: Mon 09 Jun 2025 02:53:38 +0000 Manifest next update: Sat 14 Jun 2025 05:17:38 +0000 Files and hashes: 1: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: RHU9+6A6Iv1y7gjG985L7Laq5WfWPssW7lhAvpXzpok=) 2: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) 3: 34352e3136342e32322e302f32342d3234203d3e203233343730.roa (hash: 575QiKowVCRz4op0BzHVRduNC7OYEq4japp+XRIL7j0=) 4: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) 5: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 08:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f9:2b:2a:a3:28:40:55:34:8e:70:2e:13:e3:a9:a6:7e:d1:26:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Jun 9 02:53:38 2025 GMT Not After : Jun 14 05:17:38 2025 GMT Subject: CN=85EA203F85D5DD9DDE1EE3445060B92181FFBB66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:73:41:9b:4c:c3:62:34:33:5d:0a:0b:4e:fa: 32:ec:5d:a2:0e:cd:62:73:c8:50:70:89:3e:0b:b4: fb:13:56:21:39:2a:54:6d:24:ae:7d:2e:61:65:3c: 38:bb:5f:6e:25:93:24:0b:85:97:81:bc:03:57:7e: 9c:e1:60:62:5e:f8:c2:b7:05:15:de:0d:12:b3:b5: f4:c3:49:af:7c:22:57:6a:2e:10:06:db:e7:b7:3c: 76:29:00:d0:9a:79:74:2f:79:75:6a:59:c9:9c:c5: 92:0e:76:00:c1:c6:76:a4:d7:6e:47:4f:25:68:57: 1a:71:7b:aa:4b:54:3d:21:66:fd:f0:50:b3:7a:63: 89:4c:d9:35:b8:fb:b9:bb:15:81:d4:2f:7e:f6:d4: 80:ef:79:14:b1:d8:d7:af:f5:e1:1f:87:a8:05:ec: 64:f2:5c:df:a9:75:23:a9:62:62:57:3b:1c:87:97: e0:07:6d:17:f4:44:b4:3a:d9:f5:ae:b9:3a:89:d8: d3:87:a3:a8:05:1b:6b:8a:b5:94:1d:c2:4c:36:9c: 64:6a:2b:8d:cd:50:8f:ea:16:5e:96:08:81:e8:61: a4:13:98:ec:ba:3e:d1:67:e5:b4:c4:5b:4b:e9:a8: b4:4c:c9:b5:66:66:b6:7f:78:aa:24:91:37:ae:06: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:20:3F:85:D5:DD:9D:DE:1E:E3:44:50:60:B9:21:81:FF:BB:66 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f8:09:19:9d:d2:f6:27:fd:7f:b1:d9:17:c8:87:98:2f:e4: 4e:c3:ec:61:0b:37:0a:74:28:e0:06:27:c1:3e:7a:5f:5d:8a: 93:92:6f:c6:dd:cf:43:e1:55:6f:47:12:d2:f5:44:09:03:8a: 51:e1:4b:3c:4b:00:d3:96:5a:f8:d5:a5:5d:e4:4e:70:b1:f7: b7:27:60:50:de:c6:8e:d8:f7:79:1e:76:d7:1a:47:49:78:87: 4a:75:9b:a0:4c:84:26:0d:b4:fd:c4:16:19:fd:68:cd:5c:dd: 19:86:45:81:47:13:e3:cf:f3:8c:9b:29:60:f9:b4:36:3c:9d: 8e:34:9c:f3:a6:97:34:4a:c9:5d:c7:70:e9:e7:cf:f6:fc:2d: dd:b3:51:25:c4:e3:74:e4:70:2e:ad:87:29:aa:96:63:c5:65: ad:d9:88:89:c8:ce:38:af:71:9f:38:97:43:14:bd:38:75:f8: 4b:db:3a:8c:b3:97:51:33:a0:c4:63:e8:83:dd:6a:c8:97:9f: 7f:ce:99:30:22:ce:33:63:27:0f:4f:23:75:4e:a6:30:67:18: 62:5e:e5:53:c1:b9:54:7e:b7:fb:b3:d0:dd:86:21:74:11:a3: d9:13:db:7a:b7:8e:5b:7e:b4:73:d6:a5:6d:40:d6:87:0e:f6: bc:a0:64:60 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdvkrKqMoQFU0jnAuE+Oppn7RJucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTA2MDkwMjUzMzhaFw0yNTA2MTQwNTE3MzhaMDMxMTAvBgNV BAMTKDg1RUEyMDNGODVENUREOURERTFFRTM0NDUwNjBCOTIxODFGRkJCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgc0GbTMNiNDNdCgtO+jLsXaIO zWJzyFBwiT4LtPsTViE5KlRtJK59LmFlPDi7X24lkyQLhZeBvANXfpzhYGJe+MK3 BRXeDRKztfTDSa98IldqLhAG2+e3PHYpANCaeXQveXVqWcmcxZIOdgDBxnak125H TyVoVxpxe6pLVD0hZv3wULN6Y4lM2TW4+7m7FYHUL3721IDveRSx2Nev9eEfh6gF 7GTyXN+pdSOpYmJXOxyHl+AHbRf0RLQ62fWuuTqJ2NOHo6gFG2uKtZQdwkw2nGRq K43NUI/qFl6WCIHoYaQTmOy6PtFn5bTEW0vpqLRMybVmZrZ/eKokkTeuBqHhAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUheogP4XV3Z3eHuNEUGC5IYH/u2YwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCc+AkZndL2J/1/sdkXyIeYL+RO w+xhCzcKdCjgBifBPnpfXYqTkm/G3c9D4VVvRxLS9UQJA4pR4Us8SwDTllr41aVd 5E5wsfe3J2BQ3saO2Pd5HnbXGkdJeIdKdZugTIQmDbT9xBYZ/WjNXN0ZhkWBRxPj z/OMmylg+bQ2PJ2ONJzzppc0Ssldx3Dp58/2/C3ds1ElxON05HAurYcpqpZjxWWt 2YiJyM44r3GfOJdDFL04dfhL2zqMs5dRM6DEY+iD3WrIl59/zpkwIs4zYycPTyN1 TqYwZxhiXuVTwblUfrf7s9DdhiF0EaPZE9t6t45bfrRz1qVtQNaHDva8oGRg -----END CERTIFICATE-----Generated at Tue Jun 10 09:18:04 2025 by rpki-client