$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft File: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft (raw, json) Hash identifier: LwrqBJ3muTW9zh2ftKKKBGQW+2kapNO2J9kbi/XtDR8= Subject key identifier: 8E:D4:23:8C:E5:ED:FA:C1:31:81:FC:6D:D4:51:77:CD:97:5B:AB:19 Authority key identifier: DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 Certificate issuer: /CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Certificate serial: 6DBD2066A98973A34523C2068F2314F82119AE2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft Manifest number: FA Signing time: Mon 21 Jul 2025 05:47:24 +0000 Manifest this update: Mon 21 Jul 2025 05:42:24 +0000 Manifest next update: Sat 26 Jul 2025 23:23:24 +0000 Files and hashes: 1: 323830333a336232303a3a2f33322d3438203d3e203532333431.roa (hash: fThQs6XPP9GBXIx/GQcX6pB6oahUwiln/3+wrqw737c=) 2: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl (hash: hurzPU59H7IwpMBo/c3QWRA9LwuxzELDBbRbFHdRRHw=) 3: 34352e3233322e39322e302f32322d3234203d3e203532333431.roa (hash: NC3RwdVt5UqW2/N1ehB2fy1qKcsjAb3wdsWcCgiOjWg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:bd:20:66:a9:89:73:a3:45:23:c2:06:8f:23:14:f8:21:19:ae:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Validity Not Before: Jul 21 05:42:24 2025 GMT Not After : Jul 26 23:23:24 2025 GMT Subject: CN=8ED4238CE5EDFAC13181FC6DD45177CD975BAB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:98:a8:05:09:5a:44:e1:3f:19:e8:9f:4d: dd:2c:5a:78:e2:0d:f5:25:03:23:8b:84:fe:f1:bc: c3:7e:13:4d:aa:48:34:0b:8d:75:c0:d1:a3:72:0f: 5d:09:f0:ed:96:d0:0e:20:a3:d6:e1:72:d7:7e:9e: 84:14:0d:93:0d:87:12:ea:f4:1a:3e:b7:89:56:62: 01:7a:1e:f5:16:ba:f8:87:61:66:c3:c6:62:06:75: f4:83:e9:b2:4f:3c:96:60:8b:81:47:07:25:54:23: eb:4d:f9:3e:fe:e2:b9:0d:cb:59:fd:b7:38:6a:dd: 05:37:81:86:01:57:f5:f8:aa:89:59:4e:cd:8f:2a: ef:29:92:11:3a:a6:30:cd:3f:c6:62:a8:64:ba:ec: 92:40:27:fa:37:6c:ab:35:e3:2b:bc:a3:19:b3:0a: 11:9a:1d:6a:49:5f:bf:3f:9d:a2:c9:f1:e9:ea:95: f2:01:83:99:31:aa:94:e7:3c:80:72:10:76:9a:ef: cd:54:64:92:51:a6:1a:fc:bf:09:5d:7d:73:e5:17: ca:a8:a5:5c:a3:0c:21:22:a2:59:17:91:8d:75:ab: 9c:90:f6:d1:25:96:2a:36:c8:0f:31:42:f0:d6:10: b2:13:d9:a1:3f:8b:74:bb:e4:e4:ac:fd:79:95:f8: f1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:23:8C:E5:ED:FA:C1:31:81:FC:6D:D4:51:77:CD:97:5B:AB:19 X509v3 Authority Key Identifier: keyid:DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f8:d7:c0:0e:59:00:9e:ae:7f:bb:82:b7:e7:4a:26:d6:11: 19:a6:65:99:8c:ca:f4:d1:df:37:b5:3f:ec:d1:df:67:db:36: 79:8c:9f:37:f8:c1:7d:28:53:4b:40:44:e6:d6:42:1a:b1:f4: 50:af:06:07:65:0c:85:89:f9:de:d4:2b:73:88:7e:fd:a7:f8: 79:e4:44:88:c8:df:77:5a:34:02:3e:5c:ce:a2:2f:1c:1e:c9: ed:89:f5:17:ec:66:c6:fe:24:b2:66:b3:bc:37:9b:1a:f5:ee: f3:f4:23:6d:bf:5f:70:cf:72:24:94:4f:99:93:3d:98:d8:37: bc:50:ac:bb:b7:ae:fb:8f:2c:1c:c4:85:8e:e0:cd:99:a9:39: 7a:51:a9:17:8e:ed:44:d8:87:9f:71:64:41:ed:23:74:1b:a8: fa:84:2e:2c:48:c5:14:5a:ef:f9:8a:06:db:37:30:c3:21:83: f8:d6:99:02:2c:d2:47:c9:53:cd:b2:d7:05:b1:17:9c:6e:b0: fe:3b:0a:73:7d:ff:20:96:6f:2b:58:a8:75:9b:14:34:1d:e9: a9:3a:fd:66:5b:ed:6e:47:ad:8a:78:a0:1f:b3:69:57:20:cf: bb:4d:85:99:75:17:70:9a:97:e3:51:0c:2e:7e:25:2f:54:84: 88:3d:e6:09 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbb0gZqmJc6NFI8IGjyMU+CEZri8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4M0EzOEMxQjkyNkNENUYyRjk3NDFGOEFGRUU3QzMx NzlENjYwMzAeFw0yNTA3MjEwNTQyMjRaFw0yNTA3MjYyMzIzMjRaMDMxMTAvBgNV BAMTKDhFRDQyMzhDRTVFREZBQzEzMTgxRkM2REQ0NTE3N0NEOTc1QkFCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHpioBQlaROE/GeifTd0sWnji DfUlAyOLhP7xvMN+E02qSDQLjXXA0aNyD10J8O2W0A4go9bhctd+noQUDZMNhxLq 9Bo+t4lWYgF6HvUWuviHYWbDxmIGdfSD6bJPPJZgi4FHByVUI+tN+T7+4rkNy1n9 tzhq3QU3gYYBV/X4qolZTs2PKu8pkhE6pjDNP8ZiqGS67JJAJ/o3bKs14yu8oxmz ChGaHWpJX78/naLJ8enqlfIBg5kxqpTnPIByEHaa781UZJJRphr8vwldfXPlF8qo pVyjDCEiolkXkY11q5yQ9tEllio2yA8xQvDWELIT2aE/i3S75OSs/XmV+PETAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjtQjjOXt+sExgfxt1FF3zZdbqxkwHwYDVR0j BBgwFoAU3YOjjBuSbNXy+XQfiv7nwxedZgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjk1MTFFQkE5RTZCQ0NBMzlBMEM0MDdEQkVCRTNFRUYx RjEwMjZGRTQzNjZBNjgzMUUxQjkwNDM3MDY4ODZELzAvREQ4M0EzOEMxQjkyNkNE NUYyRjk3NDFGOEFGRUU3QzMxNzlENjYwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDgzQTM4QzFCOTI2Q0Q1RjJG OTc0MUY4QUZFRTdDMzE3OUQ2NjAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkI5NTExRUJBOUU2QkNDQTM5QTBDNDA3REJFQkUzRUVGMUYxMDI2RkU0 MzY2QTY4MzFFMUI5MDQzNzA2ODg2RC8wL0REODNBMzhDMUI5MjZDRDVGMkY5NzQx RjhBRkVFN0MzMTc5RDY2MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBp+NfADlkAnq5/u4K350om1hEZ pmWZjMr00d83tT/s0d9n2zZ5jJ83+MF9KFNLQETm1kIasfRQrwYHZQyFifne1Ctz iH79p/h55ESIyN93WjQCPlzOoi8cHsntifUX7GbG/iSyZrO8N5sa9e7z9CNtv19w z3IklE+Zkz2Y2De8UKy7t677jywcxIWO4M2ZqTl6UakXju1E2IefcWRB7SN0G6j6 hC4sSMUUWu/5igbbNzDDIYP41pkCLNJHyVPNstcFsRecbrD+Owpzff8glm8rWKh1 mxQ0HempOv1mW+1uR62KeKAfs2lXIM+7TYWZdRdwmpfjUQwufiUvVISIPeYJ -----END CERTIFICATE-----Generated at Mon Jul 21 08:49:45 2025 by rpki-client