$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft File: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft (raw, json) Hash identifier: 1fKBhBB7AYxSEDvYzB8QjDFmKiJKazY2uzwyE6OFgvo= Subject key identifier: 76:96:35:02:58:6F:86:BC:73:CB:76:95:0E:36:61:23:4E:33:E6:B3 Authority key identifier: DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 Certificate issuer: /CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Certificate serial: 2F6984599ED507AB59ABEB7E30EE6AB5EBC00DB6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft Manifest number: F9 Signing time: Fri 18 Jul 2025 17:46:27 +0000 Manifest this update: Fri 18 Jul 2025 17:41:27 +0000 Manifest next update: Thu 24 Jul 2025 05:44:27 +0000 Files and hashes: 1: 323830333a336232303a3a2f33322d3438203d3e203532333431.roa (hash: fThQs6XPP9GBXIx/GQcX6pB6oahUwiln/3+wrqw737c=) 2: DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl (hash: OE+cyD1TkTNJcI5tD24xMoR8JRys6OyZoSOJaz6AlHM=) 3: 34352e3233322e39322e302f32322d3234203d3e203532333431.roa (hash: NC3RwdVt5UqW2/N1ehB2fy1qKcsjAb3wdsWcCgiOjWg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Jul 2025 02:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:69:84:59:9e:d5:07:ab:59:ab:eb:7e:30:ee:6a:b5:eb:c0:0d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603 Validity Not Before: Jul 18 17:41:27 2025 GMT Not After : Jul 24 05:44:27 2025 GMT Subject: CN=76963502586F86BC73CB76950E3661234E33E6B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:22:d8:56:ad:bd:4a:6b:59:97:58:f1:33:58: 55:94:f7:fd:88:b5:be:07:64:8e:9c:44:c7:74:11: c6:0b:06:9e:d7:36:b2:37:e7:64:9f:70:b6:c5:d8: 8c:14:39:99:15:fd:4f:64:12:33:77:40:f2:fa:a3: ad:61:fc:d5:7f:bb:03:1a:64:7f:01:5a:4d:8d:f9: 02:d9:d6:c9:2d:39:c3:79:94:5e:7c:80:e0:51:16: bc:42:f4:92:2e:96:f5:c4:c2:29:46:d6:89:71:64: e6:7c:07:1a:7a:29:61:59:0c:3a:a8:36:88:73:8a: 19:79:c6:86:a9:1f:52:0a:d2:aa:ff:d3:33:4a:03: d0:6d:4b:07:6a:ad:73:de:1d:ae:d7:72:73:34:65: cf:e4:ee:97:fb:84:51:26:ed:1a:23:a7:76:9c:58: 65:6f:27:1b:c3:ba:da:b7:66:75:3f:85:eb:21:ca: 3f:f4:e9:b0:bb:28:2b:b4:43:47:99:05:6c:91:5b: fa:b1:5f:ab:c3:d2:b0:53:4c:6f:8d:e7:7b:21:ab: b9:16:0c:ce:45:56:a1:8c:55:2a:fe:56:d5:a5:eb: 1a:d7:6d:4f:a7:9d:6f:8c:31:8f:20:fb:60:43:7c: 5f:96:b6:21:14:35:15:33:48:48:0a:11:4a:b7:b0: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:96:35:02:58:6F:86:BC:73:CB:76:95:0E:36:61:23:4E:33:E6:B3 X509v3 Authority Key Identifier: keyid:DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7f:9f:4a:06:54:1e:a6:20:0b:07:c4:50:b0:76:f0:8d:ec: 2e:99:b7:96:9a:50:f5:d9:a2:8e:ea:4e:b6:6f:35:3f:77:2e: d7:17:8e:da:7f:f9:04:d8:f4:48:c4:bc:51:8f:c2:6d:72:ac: b7:1d:6b:ef:f7:3a:94:bd:5f:9f:d8:27:a6:d2:4e:96:b0:60: ce:8f:5a:fd:c9:7c:65:c0:25:c3:86:c4:83:e6:75:22:b0:90: 4b:a1:e0:1d:77:36:8b:f2:5a:20:95:50:cb:cd:39:b0:8f:34: 3f:73:78:87:66:e4:98:bb:be:42:c0:0c:71:9e:17:20:a1:78: 16:27:1d:0d:96:be:34:a0:67:d9:89:48:f3:c1:6e:ee:3f:c7: 7b:5a:7e:d5:ae:2e:52:b9:0b:5d:9e:07:b0:6a:58:5f:f6:c0: 5d:e8:9e:05:37:6f:39:67:81:50:f0:30:3e:95:d1:89:d3:1a: 6e:c0:90:40:65:9b:cb:b3:8f:f1:7a:ff:dc:a3:23:1c:9b:fe: 30:7e:53:ec:9f:52:cc:b5:7f:8e:f9:28:a2:34:cb:ec:52:4e: d2:6c:43:c9:96:c9:cf:8c:46:5d:0e:bf:33:61:31:cc:ba:aa: a1:79:b3:1f:7c:b9:29:b3:8e:9d:46:4f:ef:15:5d:02:35:84: cd:4a:4c:42 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUL2mEWZ7VB6tZq+t+MO5qtevADbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4M0EzOEMxQjkyNkNENUYyRjk3NDFGOEFGRUU3QzMx NzlENjYwMzAeFw0yNTA3MTgxNzQxMjdaFw0yNTA3MjQwNTQ0MjdaMDMxMTAvBgNV BAMTKDc2OTYzNTAyNTg2Rjg2QkM3M0NCNzY5NTBFMzY2MTIzNEUzM0U2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFIthWrb1Ka1mXWPEzWFWU9/2I tb4HZI6cRMd0EcYLBp7XNrI352SfcLbF2IwUOZkV/U9kEjN3QPL6o61h/NV/uwMa ZH8BWk2N+QLZ1sktOcN5lF58gOBRFrxC9JIulvXEwilG1olxZOZ8Bxp6KWFZDDqo Nohzihl5xoapH1IK0qr/0zNKA9BtSwdqrXPeHa7XcnM0Zc/k7pf7hFEm7Rojp3ac WGVvJxvDutq3ZnU/heshyj/06bC7KCu0Q0eZBWyRW/qxX6vD0rBTTG+N53shq7kW DM5FVqGMVSr+VtWl6xrXbU+nnW+MMY8g+2BDfF+WtiEUNRUzSEgKEUq3sHczAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdpY1Alhvhrxzy3aVDjZhI04z5rMwHwYDVR0j BBgwFoAU3YOjjBuSbNXy+XQfiv7nwxedZgMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjk1MTFFQkE5RTZCQ0NBMzlBMEM0MDdEQkVCRTNFRUYx RjEwMjZGRTQzNjZBNjgzMUUxQjkwNDM3MDY4ODZELzAvREQ4M0EzOEMxQjkyNkNE NUYyRjk3NDFGOEFGRUU3QzMxNzlENjYwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDgzQTM4QzFCOTI2Q0Q1RjJG OTc0MUY4QUZFRTdDMzE3OUQ2NjAzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkI5NTExRUJBOUU2QkNDQTM5QTBDNDA3REJFQkUzRUVGMUYxMDI2RkU0 MzY2QTY4MzFFMUI5MDQzNzA2ODg2RC8wL0REODNBMzhDMUI5MjZDRDVGMkY5NzQx RjhBRkVFN0MzMTc5RDY2MDMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKf59KBlQepiALB8RQsHbwjewu mbeWmlD12aKO6k62bzU/dy7XF47af/kE2PRIxLxRj8Jtcqy3HWvv9zqUvV+f2Cem 0k6WsGDOj1r9yXxlwCXDhsSD5nUisJBLoeAddzaL8loglVDLzTmwjzQ/c3iHZuSY u75CwAxxnhcgoXgWJx0Nlr40oGfZiUjzwW7uP8d7Wn7Vri5SuQtdngewalhf9sBd 6J4FN285Z4FQ8DA+ldGJ0xpuwJBAZZvLs4/xev/coyMcm/4wflPsn1LMtX+O+Sii NMvsUk7SbEPJlsnPjEZdDr8zYTHMuqqhebMffLkps46dRk/vFV0CNYTNSkxC -----END CERTIFICATE-----Generated at Sat Jul 19 20:45:51 2025 by rpki-client