$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft File: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft (raw, json) Hash identifier: eilzIDpaRVWrT/UcRNqFGuhvxcEVBGMsfn5UtKK4tCQ= Subject key identifier: 93:30:08:60:5A:AB:80:DF:F8:D0:17:E6:31:B5:6A:AD:24:ED:AC:40 Authority key identifier: DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 Certificate issuer: /CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Certificate serial: 5212C1AF9EA28FA1A5ADF151C23E5E2AB7DC6E90 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft Manifest number: E2 Signing time: Mon 02 Jun 2025 08:39:08 +0000 Manifest this update: Mon 02 Jun 2025 08:34:08 +0000 Manifest next update: Sat 07 Jun 2025 17:00:08 +0000 Files and hashes: 1: 34352e3233322e39322e302f32322d3234203d3e203532333431.roa (hash: NC3RwdVt5UqW2/N1ehB2fy1qKcsjAb3wdsWcCgiOjWg=) 2: 323830333a336232303a3a2f33322d3438203d3e203532333431.roa (hash: fThQs6XPP9GBXIx/GQcX6pB6oahUwiln/3+wrqw737c=) 3: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl (hash: pN0FATI2S91dSWSQ6tkgOLEGKm8wY5XuclGdjAM265s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 17:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:12:c1:af:9e:a2:8f:a1:a5:ad:f1:51:c2:3e:5e:2a:b7:dc:6e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Validity Not Before: Jun 2 08:34:08 2025 GMT Not After : Jun 7 17:00:08 2025 GMT Subject: CN=933008605AAB80DFF8D017E631B56AAD24EDAC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:2f:ed:ad:d0:16:4c:db:4e:d5:e0:55:fa: e6:75:dc:4c:19:b4:df:a3:20:ff:fe:d4:aa:d1:e3: 9b:14:8e:e3:a1:8e:34:84:cf:87:cf:5d:97:9e:84: ef:95:00:c0:b2:87:b0:f2:67:52:88:4c:c1:07:98: 82:5a:f2:31:ae:10:1d:af:1e:f3:2e:bd:d4:54:db: 8c:db:4c:4a:be:83:4e:fb:00:5a:94:4a:67:bd:c6: c6:a8:d6:c0:d9:c6:7b:23:82:f0:f2:8d:af:de:7d: b5:c1:dc:38:2f:9e:62:75:5f:88:9f:47:be:95:36: 24:7d:5b:75:bd:36:c4:7f:2a:ed:26:6d:31:28:dd: ff:97:fe:49:bd:7a:4b:1b:5e:8e:8d:d7:33:8e:c5: 0c:b8:dd:d6:ee:3b:e0:cc:ef:ae:20:c7:b8:d3:37: 32:e2:2c:82:51:f0:f8:ff:fa:67:8d:96:7b:b0:24: 8c:ca:42:1d:ff:c9:00:78:e9:96:82:55:79:a7:17: 9e:a7:56:f3:73:a1:df:12:ce:e9:1c:c1:ad:ba:25: 53:5f:66:4c:bf:82:f8:bc:b4:89:1c:65:a4:58:43: 08:cc:ae:ff:0a:2a:d6:3d:09:97:db:ab:13:95:6e: 7a:b6:ba:45:b0:c5:e9:6b:91:84:ad:6d:33:a1:e8: 01:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:30:08:60:5A:AB:80:DF:F8:D0:17:E6:31:B5:6A:AD:24:ED:AC:40 X509v3 Authority Key Identifier: keyid:DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8a:66:34:85:3a:3e:f5:16:17:3f:0e:ec:eb:54:49:8d:58: 79:03:1e:b4:ce:7d:45:73:5d:ff:37:fb:3a:a5:b3:53:9a:9c: a5:2a:fd:2a:f3:2f:54:a3:e5:c3:10:20:ac:d0:17:28:5c:ee: cb:39:9f:d3:d0:95:73:c6:71:dd:a6:d8:ae:c1:e1:86:50:1f: 2a:87:26:36:c7:84:f2:3f:06:ae:4f:16:fb:68:3e:e0:cc:e4: 1f:17:f6:83:ce:0c:95:69:be:32:04:b1:98:05:ff:0f:e1:56: 42:40:66:53:c4:32:06:3a:c7:c0:09:13:4b:40:13:0e:ec:4e: 3a:64:a8:c5:36:c5:00:bd:9a:86:08:75:ac:4b:df:30:d2:dc: 07:0d:07:e3:92:0a:04:76:2c:29:37:ce:84:70:28:43:e3:12: 26:ed:a9:f0:19:3a:9d:50:8b:1c:dd:8b:c2:06:02:04:02:3c: eb:59:f8:73:90:f3:a6:a0:7f:58:72:dd:d6:c0:25:15:03:ce: f6:e2:4b:45:01:b0:9c:9a:48:a9:5e:9d:11:aa:ee:fa:d9:c5: bc:be:cf:d0:33:4a:d5:4c:bc:9c:03:a8:fc:0a:47:09:6d:b0: b3:ed:a9:33:8b:58:cf:f1:8b:98:6d:c2:35:7a:57:bc:93:34: 6e:a8:20:38 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUhLBr56ij6GlrfFRwj5eKrfcbpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4M0EzOEMxQjkyNkNENUYyRjk3NDFGOEFGRUU3QzMx NzlENjYwMzAeFw0yNTA2MDIwODM0MDhaFw0yNTA2MDcxNzAwMDhaMDMxMTAvBgNV BAMTKDkzMzAwODYwNUFBQjgwREZGOEQwMTdFNjMxQjU2QUFEMjRFREFDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7S/trdAWTNtO1eBV+uZ13EwZ tN+jIP/+1KrR45sUjuOhjjSEz4fPXZeehO+VAMCyh7DyZ1KITMEHmIJa8jGuEB2v HvMuvdRU24zbTEq+g077AFqUSme9xsao1sDZxnsjgvDyja/efbXB3DgvnmJ1X4if R76VNiR9W3W9NsR/Ku0mbTEo3f+X/km9eksbXo6N1zOOxQy43dbuO+DM764gx7jT NzLiLIJR8Pj/+meNlnuwJIzKQh3/yQB46ZaCVXmnF56nVvNzod8Szukcwa26JVNf Zky/gvi8tIkcZaRYQwjMrv8KKtY9CZfbqxOVbnq2ukWwxelrkYStbTOh6AHFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUkzAIYFqrgN/40BfmMbVqrSTtrEAwHwYDVR0j BBgwFoAU3YOjjBuSbNXy+XQfiv7nwxedZgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjk1MTFFQkE5RTZCQ0NBMzlBMEM0MDdEQkVCRTNFRUYx RjEwMjZGRTQzNjZBNjgzMUUxQjkwNDM3MDY4ODZELzAvREQ4M0EzOEMxQjkyNkNE NUYyRjk3NDFGOEFGRUU3QzMxNzlENjYwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDgzQTM4QzFCOTI2Q0Q1RjJG OTc0MUY4QUZFRTdDMzE3OUQ2NjAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkI5NTExRUJBOUU2QkNDQTM5QTBDNDA3REJFQkUzRUVGMUYxMDI2RkU0 MzY2QTY4MzFFMUI5MDQzNzA2ODg2RC8wL0REODNBMzhDMUI5MjZDRDVGMkY5NzQx RjhBRkVFN0MzMTc5RDY2MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+imY0hTo+9RYXPw7s61RJjVh5 Ax60zn1Fc13/N/s6pbNTmpylKv0q8y9Uo+XDECCs0BcoXO7LOZ/T0JVzxnHdptiu weGGUB8qhyY2x4TyPwauTxb7aD7gzOQfF/aDzgyVab4yBLGYBf8P4VZCQGZTxDIG OsfACRNLQBMO7E46ZKjFNsUAvZqGCHWsS98w0twHDQfjkgoEdiwpN86EcChD4xIm 7anwGTqdUIsc3YvCBgIEAjzrWfhzkPOmoH9Yct3WwCUVA8724ktFAbCcmkipXp0R qu762cW8vs/QM0rVTLycA6j8CkcJbbCz7akzi1jP8YuYbcI1ele8kzRuqCA4 -----END CERTIFICATE-----Generated at Wed Jun 4 11:33:23 2025 by rpki-client