$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.mft File: D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.mft (raw, json) Hash identifier: JaTSaOh1qRqiXw9umgzdbxjHjDUJfGWEAB65VufbbA4= Subject key identifier: B8:72:F6:50:88:4E:2B:C1:C8:6E:CA:76:1D:BA:DD:13:A5:42:0D:24 Authority key identifier: D0:F8:6C:4A:DF:00:47:64:4A:C1:EE:EA:EF:57:C4:26:E9:E5:09:E8 Certificate issuer: /CN=D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8 Certificate serial: 26DF80FAE2207DEEA6ED1E1167FEBAD9908C304A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.mft Manifest number: E0 Signing time: Tue 03 Jun 2025 01:09:07 +0000 Manifest this update: Tue 03 Jun 2025 01:04:07 +0000 Manifest next update: Sat 07 Jun 2025 19:21:07 +0000 Files and hashes: 1: 323830333a333165303a3a2f33322d3438203d3e20323730303032.roa (hash: CGOTbq6HmIymUHSz2+ARG4BEuFtDSfvhgamL1vpZuIs=) 2: 3230302e35392e3231322e302f32322d3234203d3e20323730303032.roa (hash: LF31rAqTnhNi3Memiy/L8t2UZgKuqwN9GoViOg8y8wo=) 3: D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.crl (hash: /X+56ecg9YY8/ddSChwj3fMV8sLrlTl/Pnyr+3oFH1I=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.crl rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 19:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:df:80:fa:e2:20:7d:ee:a6:ed:1e:11:67:fe:ba:d9:90:8c:30:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8 Validity Not Before: Jun 3 01:04:07 2025 GMT Not After : Jun 7 19:21:07 2025 GMT Subject: CN=B872F650884E2BC1C86ECA761DBADD13A5420D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b7:42:9c:c7:ec:49:14:2d:a6:0f:b8:55:cc: 30:95:26:c5:ca:47:ae:ab:75:be:18:00:ba:20:d3: 0e:cd:fb:49:51:89:83:ef:09:77:29:6a:bb:ab:07: 59:74:f8:b8:cb:c4:6c:3c:30:45:c0:b3:1a:96:39: 57:f2:52:b1:56:b2:00:06:4f:cf:94:fc:6b:9e:37: 1e:18:9d:12:26:5a:46:0c:88:bf:4f:f8:f5:2d:08: 94:98:47:85:51:6f:21:88:61:e6:f0:15:df:d7:e4: 82:fc:7c:e5:e3:ec:83:3c:73:ea:89:53:a2:8e:f5: 12:23:52:93:ac:15:82:4d:c2:f7:ca:8d:50:ee:c0: f7:d9:d4:e0:1d:52:8a:ae:a4:d5:2d:2d:cf:a1:a9: 1b:0d:93:af:19:f8:cf:a5:8d:bc:d8:aa:67:17:fa: e9:69:d2:df:17:2d:7d:b7:8e:d2:90:f1:2b:bb:a2: 56:93:da:a7:c8:54:26:0d:13:7f:e3:16:d0:e9:aa: d0:3f:1a:64:51:30:7f:0b:a4:85:23:8f:8f:20:78: d1:ef:9c:a9:98:ff:b5:ff:95:55:5e:27:e7:23:a2: 26:be:26:e2:a1:4b:85:c3:ba:a6:95:28:c4:d0:e1: 7f:ef:5c:55:95:f4:0b:56:a4:0a:f8:3e:13:9e:bc: 4a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:72:F6:50:88:4E:2B:C1:C8:6E:CA:76:1D:BA:DD:13:A5:42:0D:24 X509v3 Authority Key Identifier: keyid:D0:F8:6C:4A:DF:00:47:64:4A:C1:EE:EA:EF:57:C4:26:E9:E5:09:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D10C3DF1C962CAE8BF241C1FA428319CEF7A1DC6476D8E6C35EDC584868BCBFD/0/D0F86C4ADF0047644AC1EEEAEF57C426E9E509E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8b:e1:01:e5:9a:20:70:06:b4:8c:10:98:31:f8:22:8c:0a: 4d:4f:04:60:bc:51:de:43:82:df:85:49:f0:c0:8e:c6:03:26: ec:b2:38:54:b2:a0:45:9c:79:b8:eb:22:21:8c:2b:06:c1:c0: 16:da:bf:fd:89:2b:09:6d:cb:33:ce:f6:e2:f6:36:31:f3:eb: 01:c8:f8:f2:12:72:2b:79:e2:1d:a5:bf:6e:e9:6f:16:be:d4: 67:1e:14:9e:37:65:1c:b0:f1:e2:f4:f2:ee:15:43:20:ba:1c: 0a:c1:ee:a1:e1:3b:f0:8b:b6:f3:c4:3c:37:b3:78:0b:eb:8f: 57:fd:59:72:0a:1f:56:2d:94:cd:77:6b:9d:f1:96:1a:9d:64: 02:b8:af:50:2a:ab:30:4d:7f:f0:fd:cb:80:ce:d0:7f:5f:d2: 37:87:a5:a2:56:fa:67:cc:be:b1:41:42:f1:96:4e:d0:90:30: a3:4c:b5:c8:92:82:a8:0a:69:ea:4e:3b:db:9c:69:c2:51:f7: 6c:34:ae:98:88:5f:97:ae:88:ea:8a:47:e6:95:06:0c:07:b2: e7:e8:c7:b7:3c:02:68:35:ab:bc:2f:92:b8:95:6c:29:de:af: ac:d8:26:84:c4:a3:b1:0f:ea:bd:d3:11:05:01:5e:33:47:96: fb:35:25:ad -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJt+A+uIgfe6m7R4RZ/662ZCMMEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGODZDNEFERjAwNDc2NDRBQzFFRUVBRUY1N0M0MjZF OUU1MDlFODAeFw0yNTA2MDMwMTA0MDdaFw0yNTA2MDcxOTIxMDdaMDMxMTAvBgNV BAMTKEI4NzJGNjUwODg0RTJCQzFDODZFQ0E3NjFEQkFERDEzQTU0MjBEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDat0Kcx+xJFC2mD7hVzDCVJsXK R66rdb4YALog0w7N+0lRiYPvCXcparurB1l0+LjLxGw8MEXAsxqWOVfyUrFWsgAG T8+U/GueNx4YnRImWkYMiL9P+PUtCJSYR4VRbyGIYebwFd/X5IL8fOXj7IM8c+qJ U6KO9RIjUpOsFYJNwvfKjVDuwPfZ1OAdUoqupNUtLc+hqRsNk68Z+M+ljbzYqmcX +ulp0t8XLX23jtKQ8Su7olaT2qfIVCYNE3/jFtDpqtA/GmRRMH8LpIUjj48geNHv nKmY/7X/lVVeJ+cjoia+JuKhS4XDuqaVKMTQ4X/vXFWV9AtWpAr4PhOevEorAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuHL2UIhOK8HIbsp2HbrdE6VCDSQwHwYDVR0j BBgwFoAU0PhsSt8AR2RKwe7q71fEJunlCegwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMTBDM0RGMUM5NjJDQUU4QkYyNDFDMUZBNDI4MzE5Q0VG N0ExREM2NDc2RDhFNkMzNUVEQzU4NDg2OEJDQkZELzAvRDBGODZDNEFERjAwNDc2 NDRBQzFFRUVBRUY1N0M0MjZFOUU1MDlFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMEY4NkM0QURGMDA0NzY0NEFD MUVFRUFFRjU3QzQyNkU5RTUwOUU4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDEwQzNERjFDOTYyQ0FFOEJGMjQxQzFGQTQyODMxOUNFRjdBMURDNjQ3 NkQ4RTZDMzVFREM1ODQ4NjhCQ0JGRC8wL0QwRjg2QzRBREYwMDQ3NjQ0QUMxRUVF QUVGNTdDNDI2RTlFNTA5RTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADi+EB5ZogcAa0jBCYMfgijApN TwRgvFHeQ4LfhUnwwI7GAybssjhUsqBFnHm46yIhjCsGwcAW2r/9iSsJbcszzvbi 9jYx8+sByPjyEnIreeIdpb9u6W8WvtRnHhSeN2UcsPHi9PLuFUMguhwKwe6h4Tvw i7bzxDw3s3gL649X/VlyCh9WLZTNd2ud8ZYanWQCuK9QKqswTX/w/cuAztB/X9I3 h6WiVvpnzL6xQULxlk7QkDCjTLXIkoKoCmnqTjvbnGnCUfdsNK6YiF+Xrojqikfm lQYMB7Ln6Me3PAJoNau8L5K4lWwp3q+s2CaExKOxD+q90xEFAV4zR5b7NSWt -----END CERTIFICATE-----Generated at Wed Jun 4 12:36:00 2025 by rpki-client