$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft File: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft (raw, json) Hash identifier: 3STN9ABQ3TyK5Iq33vnRUbfhpXZoKSe891AKYxIupqM= Subject key identifier: 67:CA:95:9B:EB:AF:B0:5F:F6:26:28:3F:C3:D2:FA:12:59:41:7C:D2 Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Certificate serial: 1DE593CC239A6724B97C25C6FBCDA907E5970F6C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft Manifest number: E1 Signing time: Mon 02 Jun 2025 14:32:42 +0000 Manifest this update: Mon 02 Jun 2025 14:27:42 +0000 Manifest next update: Sun 08 Jun 2025 05:30:42 +0000 Files and hashes: 1: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl (hash: 0yTMFPhFe/N8zAlOFStn6kSwdpZn3F30S+paIrH9Um4=) 2: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (hash: X9cMd3SG7qB808lvePxzwRtZPv+hb5qfR8JIfSFiJN0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e5:93:cc:23:9a:67:24:b9:7c:25:c6:fb:cd:a9:07:e5:97:0f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Validity Not Before: Jun 2 14:27:42 2025 GMT Not After : Jun 8 05:30:42 2025 GMT Subject: CN=67CA959BEBAFB05FF626283FC3D2FA1259417CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:e4:19:f5:79:37:ac:d8:6e:da:f3:07:48: ec:d9:9b:55:ad:f4:3a:9d:e5:5a:52:e4:a5:d8:74: eb:e3:bf:20:86:9e:b1:f0:18:8f:5b:2b:53:f5:0c: 64:76:99:a9:21:7b:32:ec:3d:46:48:a4:2f:aa:bc: 06:ed:10:1e:95:38:35:c8:07:2a:25:de:e9:34:ac: f1:07:fd:bd:5a:68:8b:28:74:d1:85:bd:6f:27:55: e7:ae:79:de:bf:95:aa:c2:2a:ff:12:3b:7e:40:64: 6e:85:58:8c:19:7b:13:52:51:b1:1c:a0:f1:80:87: 3a:1a:81:1e:a1:5b:2d:3c:c0:56:bf:da:d4:74:61: 29:4b:1a:15:1a:43:c6:44:15:f4:5e:6f:ac:96:7d: 98:7f:35:f0:c7:52:0b:4c:2b:9b:66:11:e7:fc:ea: de:5c:10:c4:d9:65:48:65:98:b3:3f:b0:bb:9a:61: d6:12:81:4d:0e:72:6f:19:9f:d0:db:f8:f9:85:84: 03:23:65:f6:87:2a:05:e3:4a:8f:fb:ad:d7:1f:13: 36:42:e7:e3:2e:46:30:81:f1:63:a5:f6:52:aa:bf: ba:0d:40:13:a1:a4:a2:ac:54:b5:88:0c:ca:57:1f: ef:e3:15:d3:28:b0:36:34:9b:68:ad:ac:11:75:76: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CA:95:9B:EB:AF:B0:5F:F6:26:28:3F:C3:D2:FA:12:59:41:7C:D2 X509v3 Authority Key Identifier: keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:10:fc:aa:2c:bf:e9:99:cd:01:84:6b:43:a2:b9:49:b9:ae: be:e0:b5:82:f2:9f:5c:f1:da:34:66:4a:e6:e0:b3:29:4f:06: ae:46:fd:17:79:6c:44:dc:14:37:3a:af:7a:76:8c:52:c1:4b: 39:0d:c6:b0:6f:ff:1c:9b:2e:4f:c1:6d:73:06:af:76:75:0e: cd:a3:45:cf:51:7e:af:78:3c:0e:67:ff:1c:96:ce:e1:aa:4b: fc:48:a9:8d:cc:18:44:2a:65:1c:d3:6d:63:14:58:e4:d9:ac: e6:a1:b2:15:aa:80:cb:f6:40:f7:bb:7b:a3:e9:38:50:40:da: 3f:3f:e3:8c:5d:39:4d:79:42:75:d2:63:33:60:db:15:11:5b: 3e:a4:76:2f:1b:42:0e:61:86:a9:b1:55:e1:4c:64:30:22:0b: 81:b6:ea:a8:76:75:9f:22:9e:a5:bc:d6:9e:de:ee:db:3f:95: 31:45:c8:45:10:80:8e:3b:dc:7b:a3:63:b4:d5:cb:73:1c:83: 98:86:0c:bd:e2:f8:13:c5:69:69:84:1f:39:2c:91:95:6d:f3: 39:8d:b6:7c:a5:a2:14:52:e9:62:78:6d:a9:f3:03:a2:08:51: a1:89:69:40:36:e1:97:84:fd:9e:72:e3:1f:70:b3:3f:27:4b: a3:f4:2f:aa -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHeWTzCOaZyS5fCXG+82pB+WXD2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCNEJGM0Q2MEI0RkYyRkFBOEEzNjQ0NjUyQzJFMkFC RjgzNkFDNTAeFw0yNTA2MDIxNDI3NDJaFw0yNTA2MDgwNTMwNDJaMDMxMTAvBgNV BAMTKDY3Q0E5NTlCRUJBRkIwNUZGNjI2MjgzRkMzRDJGQTEyNTk0MTdDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWeQZ9Xk3rNhu2vMHSOzZm1Wt 9Dqd5VpS5KXYdOvjvyCGnrHwGI9bK1P1DGR2makhezLsPUZIpC+qvAbtEB6VODXI Byol3uk0rPEH/b1aaIsodNGFvW8nVeeued6/larCKv8SO35AZG6FWIwZexNSUbEc oPGAhzoagR6hWy08wFa/2tR0YSlLGhUaQ8ZEFfReb6yWfZh/NfDHUgtMK5tmEef8 6t5cEMTZZUhlmLM/sLuaYdYSgU0Ocm8Zn9Db+PmFhAMjZfaHKgXjSo/7rdcfEzZC 5+MuRjCB8WOl9lKqv7oNQBOhpKKsVLWIDMpXH+/jFdMosDY0m2itrBF1dj0lAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZ8qVm+uvsF/2Jig/w9L6EllBfNIwHwYDVR0j BBgwFoAU/7S/PWC0/y+qijZEZSwuKr+DasUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzZCRjg3OTdFRTE4Mjk4RTE5NjU3OTg0QUZGNEQxMzAy MTlENDM2NzQxNzU0NTU5QTYwMDdBMEVFNzFFOTI2LzAvRkZCNEJGM0Q2MEI0RkYy RkFBOEEzNjQ0NjUyQzJFMkFCRjgzNkFDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkI0QkYzRDYwQjRGRjJGQUE4 QTM2NDQ2NTJDMkUyQUJGODM2QUM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc2QkY4Nzk3RUUxODI5OEUxOTY1Nzk4NEFGRjREMTMwMjE5RDQzNjc0 MTc1NDU1OUE2MDA3QTBFRTcxRTkyNi8wL0ZGQjRCRjNENjBCNEZGMkZBQThBMzY0 NDY1MkMyRTJBQkY4MzZBQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKEPyqLL/pmc0BhGtDorlJua6+ 4LWC8p9c8do0Zkrm4LMpTwauRv0XeWxE3BQ3Oq96doxSwUs5Dcawb/8cmy5PwW1z Bq92dQ7No0XPUX6veDwOZ/8cls7hqkv8SKmNzBhEKmUc021jFFjk2azmobIVqoDL 9kD3u3uj6ThQQNo/P+OMXTlNeUJ10mMzYNsVEVs+pHYvG0IOYYapsVXhTGQwIguB tuqodnWfIp6lvNae3u7bP5UxRchFEICOO9x7o2O01ctzHIOYhgy94vgTxWlphB85 LJGVbfM5jbZ8paIUUulieG2p8wOiCFGhiWlANuGXhP2ecuMfcLM/J0uj9C+q -----END CERTIFICATE-----Generated at Wed Jun 4 12:34:41 2025 by rpki-client