$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft File: D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft (raw, json) Hash identifier: p55LeDz9eXipLDpUZBu0F0ur4Pln6YdlUtvGmXk4gZs= Subject key identifier: 83:56:A9:3A:91:47:E5:A3:65:DF:87:FE:F7:7D:95:9F:80:A3:7C:97 Authority key identifier: D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE Certificate issuer: /CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE Certificate serial: 1A8F37BF4E390BF9C99A3AAC0A6385540D68ACB0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft Manifest number: E9 Signing time: Thu 12 Jun 2025 16:30:48 +0000 Manifest this update: Thu 12 Jun 2025 16:25:48 +0000 Manifest next update: Tue 17 Jun 2025 23:08:48 +0000 Files and hashes: 1: D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl (hash: i5VPoGZVO3h4YJJIEuZZlJSCJySkt1la1QAsi2VDToE=) 2: 34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa (hash: 5+0feaWnWVqOge2khHl2R9u7pQ02o9VCNk2gGX2DlsQ=) 3: 34352e3138392e3233332e302f32342d3234203d3e203130373533.roa (hash: 1DfrxIUcmFdLvx+0CYxYpFbtYC2tgWnePALDvqsz1OY=) 4: 34352e3138392e3233332e302f32342d3234203d3e20323639393135.roa (hash: zrbUrDsAcyNmxo8fdPCrK4CIjwGQFu1IQ6Lzczt1A5U=) 5: 34352e3138372e38392e302f32342d3234203d3e20323639393135.roa (hash: eH4mEzmSIlFH4LH2Sb1+aclqCYyUA34THwvryUcZUcU=) 6: 34352e3138392e3233322e302f32342d3234203d3e20323639393135.roa (hash: uQDnVHdtB0qXC0HOj6lYDQXopqo7nCO59AQFm9IVTJs=) 7: 323830333a336365303a3a2f33322d3332203d3e20323639393135.roa (hash: EW5/U1SDjlIkCCd0SSMXKzhpnkPvbQgYu2Pg6zQD46s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 23:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8f:37:bf:4e:39:0b:f9:c9:9a:3a:ac:0a:63:85:54:0d:68:ac:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE Validity Not Before: Jun 12 16:25:48 2025 GMT Not After : Jun 17 23:08:48 2025 GMT Subject: CN=8356A93A9147E5A365DF87FEF77D959F80A37C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:07:54:92:c9:62:32:61:0a:c1:3a:be:b9: 6a:64:75:a9:1a:60:6e:35:30:d1:c8:04:eb:30:d7: ca:a6:ee:34:b8:f3:94:74:05:24:65:5c:bb:e0:b6: 83:6d:e7:e9:14:29:e1:7c:1d:7d:8a:f6:f1:e0:81: 79:9f:00:83:72:d8:7c:85:17:95:dd:8a:b6:93:be: d8:3b:87:dd:4f:b0:3d:63:18:b9:bf:d3:e2:3d:4a: 7c:12:61:ce:6f:52:36:42:0a:36:53:7a:06:fa:0c: ff:5e:ea:55:46:4f:34:ca:e9:a1:98:9e:38:8f:d9: f3:75:7b:a2:dd:dc:3f:f2:c0:c4:02:b5:00:15:87: ce:f6:0b:8d:1c:01:fe:40:36:8a:98:07:56:73:c1: 9c:33:91:77:bf:4f:88:05:ef:64:44:3c:4f:20:ea: ec:bb:6a:d9:c8:0a:eb:49:83:1e:4a:41:a0:95:a8: dd:b9:90:bb:56:1d:b3:5a:10:62:0e:ae:61:31:07: 4a:f1:44:7d:48:98:c2:89:32:c7:bb:b4:33:e1:7b: 21:b7:d3:69:cd:64:3c:5b:f1:91:29:2e:a4:e3:9a: 3a:a0:40:e2:a8:ca:ae:04:77:5a:02:0e:b1:c3:80: be:1a:e3:4f:95:0a:7f:71:cb:d1:a1:af:44:93:65: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:56:A9:3A:91:47:E5:A3:65:DF:87:FE:F7:7D:95:9F:80:A3:7C:97 X509v3 Authority Key Identifier: keyid:D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:37:c0:25:33:71:a1:30:69:38:c4:7a:7f:9d:c0:ad:c1:4d: f5:c8:3e:14:f3:1c:19:63:8e:e8:10:c5:30:05:8c:70:96:5b: 43:50:51:09:2b:bd:16:b6:ea:3d:06:1c:99:ff:b8:ad:68:c3: e3:69:f2:f9:2f:30:7b:4a:85:04:35:dd:70:51:d5:b8:9c:6d: 1e:2e:83:91:27:44:26:ce:22:ec:08:7d:72:5e:1a:f6:0f:a3: 3b:6a:36:cc:ef:09:7e:a9:13:cb:d1:b0:4c:cb:ff:f0:87:e3: b5:11:99:67:2e:83:c3:1e:74:98:62:b0:c5:e9:0d:1e:ee:e1: 85:d6:ef:a0:9c:b9:10:29:40:4a:74:c6:e9:3d:8d:5c:99:38: 5f:64:1d:24:2f:1e:ff:73:9f:be:c1:9a:f0:99:31:7d:78:75: 02:e3:d0:05:c7:12:9d:67:d6:74:f9:2f:4d:4f:2e:35:5e:62: a6:62:bb:62:42:68:5d:47:ef:55:4e:b9:22:07:72:6c:87:57: 43:23:2d:7b:76:ae:e9:6c:7e:3c:88:97:ff:5f:7e:b6:0d:2a: 12:bd:2c:7b:fb:e0:da:42:ae:f8:98:54:8e:5c:fb:94:50:5d: 05:69:4a:7b:78:50:ba:96:b3:99:3f:6b:b1:a6:8c:12:06:b5: 54:dc:88:76 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGo83v045C/nJmjqsCmOFVA1orLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDMkM4MENCNTlDOEUzM0M3QkI0RUQxMEJFQTU3RTIx Q0U3NkNFRTAeFw0yNTA2MTIxNjI1NDhaFw0yNTA2MTcyMzA4NDhaMDMxMTAvBgNV BAMTKDgzNTZBOTNBOTE0N0U1QTM2NURGODdGRUY3N0Q5NTlGODBBMzdDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDgdUksliMmEKwTq+uWpkdaka YG41MNHIBOsw18qm7jS485R0BSRlXLvgtoNt5+kUKeF8HX2K9vHggXmfAINy2HyF F5XdiraTvtg7h91PsD1jGLm/0+I9SnwSYc5vUjZCCjZTegb6DP9e6lVGTzTK6aGY njiP2fN1e6Ld3D/ywMQCtQAVh872C40cAf5ANoqYB1ZzwZwzkXe/T4gF72REPE8g 6uy7atnICutJgx5KQaCVqN25kLtWHbNaEGIOrmExB0rxRH1ImMKJMse7tDPheyG3 02nNZDxb8ZEpLqTjmjqgQOKoyq4Ed1oCDrHDgL4a40+VCn9xy9Ghr0STZTtVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUg1apOpFH5aNl34f+932Vn4CjfJcwHwYDVR0j BBgwFoAU18LIDLWcjjPHu07RC+pX4hznbO4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EQkUxREYxNDEwMkQyMjlEMkEzMkVGODMwOTI3RTAzQ0Q2 NDI5MDQ0RjY3RUQ4RTIzOUVGNjExNEI5Q0EyRkY2LzAvRDdDMkM4MENCNTlDOEUz M0M3QkI0RUQxMEJFQTU3RTIxQ0U3NkNFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0MyQzgwQ0I1OUM4RTMzQzdC QjRFRDEwQkVBNTdFMjFDRTc2Q0VFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREJFMURGMTQxMDJEMjI5RDJBMzJFRjgzMDkyN0UwM0NENjQyOTA0NEY2 N0VEOEUyMzlFRjYxMTRCOUNBMkZGNi8wL0Q3QzJDODBDQjU5QzhFMzNDN0JCNEVE MTBCRUE1N0UyMUNFNzZDRUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATN8AlM3GhMGk4xHp/ncCtwU31 yD4U8xwZY47oEMUwBYxwlltDUFEJK70Wtuo9BhyZ/7itaMPjafL5LzB7SoUENd1w UdW4nG0eLoORJ0QmziLsCH1yXhr2D6M7ajbM7wl+qRPL0bBMy//wh+O1EZlnLoPD HnSYYrDF6Q0e7uGF1u+gnLkQKUBKdMbpPY1cmThfZB0kLx7/c5++wZrwmTF9eHUC 49AFxxKdZ9Z0+S9NTy41XmKmYrtiQmhdR+9VTrkiB3Jsh1dDIy17dq7pbH48iJf/ X362DSoSvSx7++DaQq74mFSOXPuUUF0FaUp7eFC6lrOZP2uxpowSBrVU3Ih2 -----END CERTIFICATE-----Generated at Fri Jun 13 10:39:24 2025 by rpki-client