$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft File: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft (raw, json) Hash identifier: pHlt52O3i79SA459kZUwE+aW6ZmQ6+gboJfAJL4z8n4= Subject key identifier: 60:24:F2:73:63:0B:A1:0D:4A:00:FA:0B:C0:2F:9A:48:07:B9:34:18 Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Certificate serial: 3B7DDFF64DC1C3E352166A91355E00CD6D088693 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft Manifest number: FD Signing time: Wed 30 Jul 2025 07:15:24 +0000 Manifest this update: Wed 30 Jul 2025 07:10:24 +0000 Manifest next update: Sun 03 Aug 2025 22:40:24 +0000 Files and hashes: 1: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl (hash: 0GDelKyINt3VyqWdL50Rsxk1l9YlEyBlr2S6mEmfbuE=) 2: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (hash: X9cMd3SG7qB808lvePxzwRtZPv+hb5qfR8JIfSFiJN0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 03 Aug 2025 18:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7d:df:f6:4d:c1:c3:e3:52:16:6a:91:35:5e:00:cd:6d:08:86:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Validity Not Before: Jul 30 07:10:24 2025 GMT Not After : Aug 3 22:40:24 2025 GMT Subject: CN=6024F273630BA10D4A00FA0BC02F9A4807B93418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:18:56:a4:87:d1:d3:7b:87:d2:a6:a1:27: 48:e3:21:66:1c:cf:fa:ec:42:f1:84:0b:c2:a0:f2: 8d:7b:45:02:2c:66:6a:23:5f:b4:46:c4:54:de:bb: 60:39:ff:91:58:05:e7:26:33:dd:76:3a:8f:da:5d: cd:18:a8:8f:fd:99:58:1a:f3:b5:59:ce:52:44:60: 9d:7e:2b:3f:af:84:dd:31:6e:6f:c5:b3:fb:45:54: f1:b9:ae:36:4b:e9:53:ec:78:f3:07:ec:69:f0:e7: a4:e0:fd:4e:28:a0:d5:7a:7d:a8:14:f3:fd:ac:cc: 34:9e:16:74:50:b0:f1:11:d4:c3:d6:b1:b3:ea:85: f5:30:26:92:56:d4:f1:82:91:a2:a8:5f:62:d4:c8: f9:c5:01:8c:c4:da:8b:a7:ae:f7:41:34:c1:2d:eb: 43:ef:b4:0b:eb:36:39:72:77:63:4f:4d:a0:a7:ec: c3:8e:af:7b:ff:3e:be:cb:b0:cc:10:ae:c4:35:90: da:16:c3:52:c0:9c:83:4c:44:43:1f:58:87:55:f0: 06:0b:17:c0:77:c5:99:cb:f4:8a:75:54:c6:9a:7d: 15:dd:65:ec:de:96:5c:6a:36:f2:9a:8e:53:e7:ea: ed:a5:15:09:c4:b6:74:ce:da:83:05:57:1f:8e:98: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:24:F2:73:63:0B:A1:0D:4A:00:FA:0B:C0:2F:9A:48:07:B9:34:18 X509v3 Authority Key Identifier: keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:49:e8:10:72:ae:55:d0:c0:b5:56:94:29:04:6a:c8:03:72: 8a:0e:47:ea:f6:e6:4e:58:49:52:e3:3d:ca:7f:06:10:3b:1c: 7b:04:ba:a2:cf:96:29:a9:23:86:ef:33:42:bf:e2:1f:37:92: 8e:92:8e:06:80:0b:d2:1b:7b:1e:f6:d8:3a:d9:23:c7:8d:bd: f1:da:3f:86:f1:c1:38:37:b8:a1:a6:22:e6:40:05:21:d2:78: f9:3d:7e:eb:5b:47:fb:fb:19:94:4a:bd:db:b2:bf:d7:06:ec: d5:ef:51:e7:41:0f:2b:18:f3:a3:6d:9f:02:71:9d:8f:62:41: 2d:22:b9:aa:2a:d5:4b:13:8f:8b:6f:5b:0f:1b:9d:57:b3:73: f9:04:5b:62:f9:3f:8a:c4:7f:03:10:7d:74:c6:80:4a:62:36: fb:11:cd:9b:ff:ba:03:2e:c4:cb:e1:51:e8:2c:af:47:b3:82: b2:81:85:56:cf:fa:28:f9:38:f2:ca:55:bb:c4:5e:96:5e:79: 20:30:c6:3c:c1:b1:8b:5d:9d:25:c6:f4:b3:a4:3e:0c:8d:12: 17:20:1e:74:aa:5a:52:20:31:dc:98:d0:8d:96:60:30:e8:a0: 7b:1a:3f:94:5c:3f:a9:04:38:c3:2f:18:7b:94:c1:e7:79:64: c5:20:51:67 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUO33f9k3Bw+NSFmqRNV4AzW0IhpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCNEJGM0Q2MEI0RkYyRkFBOEEzNjQ0NjUyQzJFMkFC RjgzNkFDNTAeFw0yNTA3MzAwNzEwMjRaFw0yNTA4MDMyMjQwMjRaMDMxMTAvBgNV BAMTKDYwMjRGMjczNjMwQkExMEQ0QTAwRkEwQkMwMkY5QTQ4MDdCOTM0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtehhWpIfR03uH0qahJ0jjIWYc z/rsQvGEC8Kg8o17RQIsZmojX7RGxFTeu2A5/5FYBecmM912Oo/aXc0YqI/9mVga 87VZzlJEYJ1+Kz+vhN0xbm/Fs/tFVPG5rjZL6VPsePMH7Gnw56Tg/U4ooNV6fagU 8/2szDSeFnRQsPER1MPWsbPqhfUwJpJW1PGCkaKoX2LUyPnFAYzE2ounrvdBNMEt 60PvtAvrNjlyd2NPTaCn7MOOr3v/Pr7LsMwQrsQ1kNoWw1LAnINMREMfWIdV8AYL F8B3xZnL9Ip1VMaafRXdZezellxqNvKajlPn6u2lFQnEtnTO2oMFVx+OmCg5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYCTyc2MLoQ1KAPoLwC+aSAe5NBgwHwYDVR0j BBgwFoAU/7S/PWC0/y+qijZEZSwuKr+DasUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzZCRjg3OTdFRTE4Mjk4RTE5NjU3OTg0QUZGNEQxMzAy MTlENDM2NzQxNzU0NTU5QTYwMDdBMEVFNzFFOTI2LzAvRkZCNEJGM0Q2MEI0RkYy RkFBOEEzNjQ0NjUyQzJFMkFCRjgzNkFDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkI0QkYzRDYwQjRGRjJGQUE4 QTM2NDQ2NTJDMkUyQUJGODM2QUM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc2QkY4Nzk3RUUxODI5OEUxOTY1Nzk4NEFGRjREMTMwMjE5RDQzNjc0 MTc1NDU1OUE2MDA3QTBFRTcxRTkyNi8wL0ZGQjRCRjNENjBCNEZGMkZBQThBMzY0 NDY1MkMyRTJBQkY4MzZBQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLSegQcq5V0MC1VpQpBGrIA3KK Dkfq9uZOWElS4z3KfwYQOxx7BLqiz5YpqSOG7zNCv+IfN5KOko4GgAvSG3se9tg6 2SPHjb3x2j+G8cE4N7ihpiLmQAUh0nj5PX7rW0f7+xmUSr3bsr/XBuzV71HnQQ8r GPOjbZ8CcZ2PYkEtIrmqKtVLE4+Lb1sPG51Xs3P5BFti+T+KxH8DEH10xoBKYjb7 Ec2b/7oDLsTL4VHoLK9Hs4KygYVWz/oo+TjyylW7xF6WXnkgMMY8wbGLXZ0lxvSz pD4MjRIXIB50qlpSIDHcmNCNlmAw6KB7Gj+UXD+pBDjDLxh7lMHneWTFIFFn -----END CERTIFICATE-----Generated at Thu Jul 31 10:06:15 2025 by rpki-client