$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft File: 8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft (raw, json) Hash identifier: Xpf/H+C14Hqk1SAUCnfYJpT5eTp/UN0kdhLViqwrQR8= Subject key identifier: 0C:A6:CB:36:C7:B7:89:4F:FC:AE:FC:96:ED:26:37:54:8B:1F:22:00 Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1 Certificate issuer: /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1 Certificate serial: 0F059B3DD522D736365F93C634CAFA9439F1393A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft Manifest number: E8 Signing time: Mon 02 Jun 2025 04:56:52 +0000 Manifest this update: Mon 02 Jun 2025 04:51:52 +0000 Manifest next update: Sun 08 Jun 2025 01:00:52 +0000 Files and hashes: 1: 8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl (hash: xO8Zj5eCys9htOuPaidghaI/gQJTh+mfvPC25rlFhPI=) 2: 34352e3233392e34342e302f32322d3234203d3e203631353132.roa (hash: pR11TWw7KwD32ZjkppNjXF7VhBow5upeJmBppmcB+rA=) 3: 34352e3233392e34342e302f32322d3234203d3e20323636383538.roa (hash: odM7zbtJXl9RM8ZkLhjcgrYnToyisA/RjF53i3W/C5I=) 4: 34352e3233392e34342e302f32322d3234203d3e20323633373137.roa (hash: delOFgSRNeHIObr57AoKhUMDVOIzwRzEkeje0U8nQRE=) 5: 34352e3233392e34342e302f32322d3234203d3e203532343638.roa (hash: W1P0JJHyVrkCN2RvwUkvswikCLB04L6FchuhIvxucGI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:05:9b:3d:d5:22:d7:36:36:5f:93:c6:34:ca:fa:94:39:f1:39:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1 Validity Not Before: Jun 2 04:51:52 2025 GMT Not After : Jun 8 01:00:52 2025 GMT Subject: CN=0CA6CB36C7B7894FFCAEFC96ED2637548B1F2200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:1c:9e:cb:03:78:90:f2:77:85:31:c4:9d: 6a:93:aa:1e:65:a1:1e:24:99:ce:e2:8b:e4:48:f4: c5:86:e0:f9:bf:cd:e5:21:9c:bb:bb:9d:2e:20:be: 28:0b:64:70:bb:fe:51:b9:c1:9f:a4:43:46:04:0e: 67:2c:8f:13:39:79:8c:e1:54:3a:ee:bc:3c:4e:3b: ff:a4:f2:79:4a:fb:f3:5e:ed:70:d5:5b:ba:64:c9: f2:06:eb:18:33:90:45:ce:da:cd:39:f3:34:dd:4c: e0:f9:b9:6b:a5:bc:df:7c:9e:9f:9f:1c:e6:f2:31: 98:1d:2d:55:e4:04:60:70:ac:9b:4b:00:ed:9e:07: ed:82:3c:fa:6c:ff:59:78:ed:8d:dc:90:6d:8b:a6: 9a:c9:8c:4a:b1:cf:e7:b6:2b:1b:87:35:5e:c4:23: 0e:e5:35:6a:1a:9a:e5:4b:e7:ca:be:52:8b:ea:15: c6:5e:c7:fc:90:b9:18:1e:aa:4a:f8:47:bf:6a:4c: e5:52:4b:ec:1a:d6:ae:ae:41:dc:e9:2d:8d:df:4b: 1c:2f:4a:22:8d:81:ca:4a:33:d5:99:5f:16:e7:1a: b8:ef:d4:76:32:bf:67:02:7f:d1:84:90:67:41:cd: 13:a7:a4:73:37:a6:78:fc:9e:70:90:cd:a9:e5:7d: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A6:CB:36:C7:B7:89:4F:FC:AE:FC:96:ED:26:37:54:8B:1F:22:00 X509v3 Authority Key Identifier: keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:51:04:e4:ec:d9:2c:67:a4:ee:43:79:3b:f2:c0:3e:fb:1a: 64:be:2c:50:12:7e:09:0b:0b:3f:14:8b:a1:f9:35:c0:e9:1b: f1:36:83:34:a2:c9:13:c9:ff:1e:5d:01:70:b0:b2:a5:7f:fe: b5:32:d9:19:b5:9c:ec:c3:5f:20:da:cd:7f:01:4b:9a:21:b4: d4:fa:fd:23:58:6d:35:3b:e9:69:17:6f:6f:cb:68:a4:76:1f: 02:63:7b:81:4c:bd:f6:2b:55:88:d7:a0:8b:af:ad:58:9f:c6: 6e:1c:02:e6:4b:c5:bd:29:01:77:cf:d8:6c:68:5d:10:22:cf: 2e:9b:14:0a:82:9b:2f:6c:45:83:3e:e8:47:3b:ad:26:6d:06: 2e:29:f9:a7:78:5d:50:12:c9:3a:b1:1a:44:35:34:2e:f9:94: b6:2c:01:47:b9:2c:0a:c5:14:ae:bf:de:a9:90:e7:d6:ce:a6: 37:7f:66:be:d6:38:2a:cf:2c:60:5f:e0:70:cc:ed:ca:31:3c: 68:40:f9:e6:23:0e:3f:9b:23:3e:d9:0a:ef:26:b8:15:d7:51: ab:b8:b0:f9:06:e8:e3:d1:50:9f:25:aa:a8:7a:0b:7c:ab:d5: 07:8e:b0:ed:bf:90:28:c0:7e:0a:35:b7:9c:2f:61:01:51:65: 5f:7c:cd:39 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDwWbPdUi1zY2X5PGNMr6lDnxOTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFCODlCRDJEQ0RBQjdCREZGOEY1NjhDMTAwQjI2OENB MjJFNkJDMTAeFw0yNTA2MDIwNDUxNTJaFw0yNTA2MDgwMTAwNTJaMDMxMTAvBgNV BAMTKDBDQTZDQjM2QzdCNzg5NEZGQ0FFRkM5NkVEMjYzNzU0OEIxRjIyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpxyeywN4kPJ3hTHEnWqTqh5l oR4kmc7ii+RI9MWG4Pm/zeUhnLu7nS4gvigLZHC7/lG5wZ+kQ0YEDmcsjxM5eYzh VDruvDxOO/+k8nlK+/Ne7XDVW7pkyfIG6xgzkEXO2s058zTdTOD5uWulvN98np+f HObyMZgdLVXkBGBwrJtLAO2eB+2CPPps/1l47Y3ckG2LpprJjEqxz+e2KxuHNV7E Iw7lNWoamuVL58q+UovqFcZex/yQuRgeqkr4R79qTOVSS+wa1q6uQdzpLY3fSxwv SiKNgcpKM9WZXxbnGrjv1HYyv2cCf9GEkGdBzROnpHM3pnj8nnCQzanlfTEbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDKbLNse3iU/8rvyW7SY3VIsfIgAwHwYDVR0j BBgwFoAUirib0tzat73/j1aMEAsmjKIua8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQzVBN0VDNkQ3RkUwMzRGNDgzRjE1MTkwQkQ4NUI2Nzk5 RTM2MEM5ODNBRDY1ODQ5RTBDRkQwNzdDMzc5NkE1LzAvOEFCODlCRDJEQ0RBQjdC REZGOEY1NjhDMTAwQjI2OENBMjJFNkJDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QUI4OUJEMkRDREFCN0JERkY4 RjU2OEMxMDBCMjY4Q0EyMkU2QkMxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkM1QTdFQzZEN0ZFMDM0RjQ4M0YxNTE5MEJEODVCNjc5OUUzNjBDOTgz QUQ2NTg0OUUwQ0ZEMDc3QzM3OTZBNS8wLzhBQjg5QkQyRENEQUI3QkRGRjhGNTY4 QzEwMEIyNjhDQTIyRTZCQzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsUQTk7NksZ6TuQ3k78sA++xpk vixQEn4JCws/FIuh+TXA6RvxNoM0oskTyf8eXQFwsLKlf/61MtkZtZzsw18g2s1/ AUuaIbTU+v0jWG01O+lpF29vy2ikdh8CY3uBTL32K1WI16CLr61Yn8ZuHALmS8W9 KQF3z9hsaF0QIs8umxQKgpsvbEWDPuhHO60mbQYuKfmneF1QEsk6sRpENTQu+ZS2 LAFHuSwKxRSuv96pkOfWzqY3f2a+1jgqzyxgX+BwzO3KMTxoQPnmIw4/myM+2Qrv JrgV11GruLD5Bujj0VCfJaqoegt8q9UHjrDtv5AowH4KNbecL2EBUWVffM05 -----END CERTIFICATE-----Generated at Wed Jun 4 12:34:32 2025 by rpki-client