$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft File: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json) Hash identifier: AWskAj0YS512Q+/oRkcpiy2jUItFxnDSbEEfJusFPs0= Subject key identifier: DA:BF:3C:30:EB:01:59:60:F5:7D:27:9C:76:26:72:FC:4D:DD:74:D7 Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 Certificate issuer: /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Certificate serial: 209E7923B07F9B2B25ADEA426C3CC9C98FE44164 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft Manifest number: E8 Signing time: Tue 03 Jun 2025 22:16:31 +0000 Manifest this update: Tue 03 Jun 2025 22:11:31 +0000 Manifest next update: Mon 09 Jun 2025 07:58:31 +0000 Files and hashes: 1: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: H7aEYtu6WVcmBJ/LYyjuVlTRTtiGzazA09PbwXTdxgA=) 2: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: UhKBVjZ4c273MCTI9dfGwSuSHzT+6a+BRwdvsCgbaF4=) 3: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: AsEHVSdxN/om5UYh7LmOx7ME5F/4rOyHrR6Vp7TmmYs=) 4: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: ki3ZXbLXCKJHkqFilvfhr6bdVrQBibKeIAqRvGGaKaU=) 5: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: yu6Oe96ukjaDp8hbPn99XX1vIiICPSDbRovWaVfLzMY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9e:79:23:b0:7f:9b:2b:25:ad:ea:42:6c:3c:c9:c9:8f:e4:41:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Validity Not Before: Jun 3 22:11:31 2025 GMT Not After : Jun 9 07:58:31 2025 GMT Subject: CN=DABF3C30EB015960F57D279C762672FC4DDD74D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:7a:f7:a8:d4:76:a2:d2:06:ff:8a:0f:2c: e9:50:69:a3:4b:f3:be:19:bc:6d:06:9f:43:74:97: 18:2b:83:b6:69:26:7d:4b:e5:e2:eb:fb:2f:2a:dd: 7a:0c:dd:b1:b9:13:73:48:ef:ba:6e:4d:4a:2b:73: 50:c8:27:f7:36:e4:91:ae:f9:34:73:66:36:25:40: a4:7b:7d:08:a3:b8:aa:c3:3b:d2:b5:6e:2a:9d:b4: fe:b8:f2:ee:53:96:ba:05:6a:a6:6b:31:68:61:e6: 21:28:0b:d5:59:dc:66:9a:e4:94:0f:ea:e5:f1:bc: cc:8b:20:37:a1:77:53:d6:9c:d2:2e:57:ea:e2:24: 70:d2:b5:0e:d4:16:f0:47:85:89:3b:d6:b6:e2:31: f3:bd:52:33:52:d6:9f:ab:b1:e7:a5:a7:69:c2:27: 30:2e:42:cd:bb:86:3d:a8:5b:53:ea:1b:7a:da:c1: 82:f7:c9:20:46:80:a7:81:26:01:0e:e9:4e:3f:dd: 3f:ed:cf:10:99:33:24:c4:ad:42:ce:a4:69:81:89: 7d:7c:76:4a:65:a6:37:63:cb:43:a4:20:e3:0b:e8: e3:c5:68:52:10:8c:64:4c:dd:0d:39:46:10:05:75: 1b:45:fc:3e:25:9b:f2:fa:d1:ad:cd:fb:45:be:ce: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BF:3C:30:EB:01:59:60:F5:7D:27:9C:76:26:72:FC:4D:DD:74:D7 X509v3 Authority Key Identifier: keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:81:d7:f4:b4:f7:99:74:5d:eb:e8:08:bf:1f:84:1a:e3:c8: 5a:48:67:15:d2:28:9b:7f:ea:7f:e6:dd:f9:c5:80:0a:07:33: f8:07:70:8a:04:07:33:4f:61:1f:c7:2a:31:78:91:fd:3e:f1: 0d:3a:dc:3a:c9:c5:d0:a3:4e:6e:b9:22:60:ce:ee:55:32:b8: c0:50:ff:d7:e2:40:26:31:4c:ac:fb:40:65:6f:9c:93:68:da: a7:e1:0a:8d:7c:7e:39:95:f1:c2:30:99:01:7d:c6:f4:4d:c3: 7d:c7:db:ab:ac:ed:ac:83:46:9b:3e:1a:12:ad:3f:5e:52:60: ea:c8:57:a9:79:0f:6d:94:79:a3:67:80:c2:8c:ea:a2:2e:3e: 70:72:95:2f:54:c1:20:7a:0e:91:95:d2:9d:10:38:ff:1e:01: ca:14:a9:58:a7:e4:ac:f5:11:bd:c9:fa:8f:22:ed:e8:3f:c4: 10:ed:2f:fb:eb:74:6e:94:d0:51:3d:bc:53:45:cc:64:34:46: d6:cc:11:d7:d6:e3:3e:a0:83:2f:d9:f4:1a:3b:16:28:c7:fb: 96:f1:ee:e6:c5:d1:8b:f7:f1:9f:71:2c:fb:3c:94:0f:8d:48: 32:17:4a:06:bd:cd:60:c8:b5:f0:a9:2e:0a:6c:29:e7:3d:79: 79:d0:79:14 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIJ55I7B/myslrepCbDzJyY/kQWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz OEE3MTFGNTAeFw0yNTA2MDMyMjExMzFaFw0yNTA2MDkwNzU4MzFaMDMxMTAvBgNV BAMTKERBQkYzQzMwRUIwMTU5NjBGNTdEMjc5Qzc2MjY3MkZDNERERDc0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqHr3qNR2otIG/4oPLOlQaaNL 874ZvG0Gn0N0lxgrg7ZpJn1L5eLr+y8q3XoM3bG5E3NI77puTUorc1DIJ/c25JGu +TRzZjYlQKR7fQijuKrDO9K1biqdtP648u5TlroFaqZrMWhh5iEoC9VZ3Gaa5JQP 6uXxvMyLIDehd1PWnNIuV+riJHDStQ7UFvBHhYk71rbiMfO9UjNS1p+rseelp2nC JzAuQs27hj2oW1PqG3rawYL3ySBGgKeBJgEO6U4/3T/tzxCZMyTErULOpGmBiX18 dkplpjdjy0OkIOML6OPFaFIQjGRM3Q05RhAFdRtF/D4lm/L60a3N+0W+zkl3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2r88MOsBWWD1fSecdiZy/E3ddNcwHwYDVR0j BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzk4OUFGRDNBOTEyNUREQzg4QURDRTJC NkRGQkM2MzdFMzhBNzExRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6gdf0tPeZdF3r6Ai/H4Qa48ha SGcV0iibf+p/5t35xYAKBzP4B3CKBAczT2EfxyoxeJH9PvENOtw6ycXQo05uuSJg zu5VMrjAUP/X4kAmMUys+0Blb5yTaNqn4QqNfH45lfHCMJkBfcb0TcN9x9urrO2s g0abPhoSrT9eUmDqyFepeQ9tlHmjZ4DCjOqiLj5wcpUvVMEgeg6RldKdEDj/HgHK FKlYp+Ss9RG9yfqPIu3oP8QQ7S/763RulNBRPbxTRcxkNEbWzBHX1uM+oIMv2fQa OxYox/uW8e7mxdGL9/GfcSz7PJQPjUgyF0oGvc1gyLXwqS4KbCnnPXl50HkU -----END CERTIFICATE-----Generated at Wed Jun 4 12:37:16 2025 by rpki-client