$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft File: 8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft (raw, json) Hash identifier: Cn0GeLtkfc3L31Tk8m6Hb15vO8ZAwFFabdfK49JbTR0= Subject key identifier: BF:DA:DA:3B:78:70:48:03:F3:AC:CA:E9:68:A0:03:43:9C:42:9C:31 Authority key identifier: 88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9 Certificate issuer: /CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9 Certificate serial: 243A144440B54B6D2B702CFC9D218C9D297AB2E9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft Manifest number: FD Signing time: Thu 03 Jul 2025 22:37:50 +0000 Manifest this update: Thu 03 Jul 2025 22:32:50 +0000 Manifest next update: Tue 08 Jul 2025 12:35:50 +0000 Files and hashes: 1: 323830313a31613a623030303a3a2f34382d3438203d3e203237383137.roa (hash: K+HZ4cEzF6IpJH9xj/Ng56sQ7Ue7zd3zmUcJwODVIkI=) 2: 34352e37312e372e302f32342d3234203d3e203237383137.roa (hash: /2UnCZpgKefHe0gwraCvI5JZh1YofAE/fN23mtSk/Dw=) 3: 8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl (hash: lRCWZnq9T2i3xfwrKeJV4SQi0qtQTjZ2/JZpiJzonWk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 14:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3a:14:44:40:b5:4b:6d:2b:70:2c:fc:9d:21:8c:9d:29:7a:b2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9 Validity Not Before: Jul 3 22:32:50 2025 GMT Not After : Jul 8 12:35:50 2025 GMT Subject: CN=BFDADA3B78704803F3ACCAE968A003439C429C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:85:91:fb:f8:6c:9d:a1:8c:d6:0e:b9:38: 4a:c2:4a:b4:f7:f0:48:a2:b9:42:21:84:e1:ba:c4: c2:91:7e:96:fe:d0:58:0b:48:f7:f0:69:db:e8:0d: 13:60:be:b8:c6:97:e1:9a:95:b6:0b:9a:bd:b9:c5: 26:01:44:01:9d:fb:a5:3a:9e:29:2d:0c:ea:d5:02: 60:fb:0c:27:45:67:3c:bd:b8:34:88:82:91:ff:bb: 92:2b:dd:f4:b3:7b:70:e6:b6:b5:23:ad:10:85:d3: 45:18:8e:1c:83:4d:e0:67:84:98:3a:81:63:29:fe: 5d:f7:e9:28:90:57:1b:8a:28:1f:b9:38:93:5e:36: 53:40:01:36:9b:e7:79:fe:9c:53:33:f1:cc:b4:c4: f6:2d:68:47:5c:d3:be:c8:72:f4:da:a1:20:17:82: c4:3e:87:cf:b0:fc:b9:80:3d:71:ef:fc:04:4e:6a: 78:e5:f4:4f:c3:45:1c:2d:35:53:a1:a3:20:70:06: f4:f2:0e:b2:d4:82:df:45:93:64:7a:24:d8:03:d6: b4:2d:6f:2a:30:b7:ee:9e:dc:6b:44:69:8d:a4:a6: 13:48:33:a1:bc:12:22:84:fb:94:b6:61:4b:6d:78: d4:19:53:37:a2:47:01:b7:9f:bb:89:53:db:5c:81: 42:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DA:DA:3B:78:70:48:03:F3:AC:CA:E9:68:A0:03:43:9C:42:9C:31 X509v3 Authority Key Identifier: keyid:88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:10:65:fa:c9:4e:92:0a:de:b8:4b:71:57:a4:d0:7f:2b:46: bb:e1:a7:cb:5f:52:05:84:7f:3f:f2:18:ae:8c:53:62:cc:38: b8:9f:6d:bb:f4:da:1f:cf:5e:af:90:2d:35:20:3e:bf:40:0a: 79:80:f8:42:35:8f:98:c1:42:7e:10:7d:ca:9b:6e:e5:35:f6: 61:58:05:f2:4a:66:1f:e1:cb:d4:6e:0a:03:03:42:01:12:5b: b6:5c:61:11:cd:15:59:6c:d9:b8:9b:e9:6d:4c:9d:b8:ab:0c: 36:8c:ba:c8:39:c0:ad:81:df:e3:cb:b5:c8:93:f7:1c:2b:dc: f1:c5:98:76:05:3d:73:c7:d0:24:bf:c7:a7:e7:d3:76:40:34: 99:b0:a9:25:8e:5b:0b:5c:4c:f9:fc:49:b6:7a:f1:b8:46:cd: 0b:4a:10:93:cf:43:04:2b:49:62:4a:bb:ff:fe:9d:7a:64:6d: 74:08:c5:ba:a5:4c:fa:c4:b7:b3:5b:48:97:43:d1:af:e2:f5: 2c:c4:c0:e1:fa:e7:6e:a0:ab:6f:cc:af:a9:c1:77:00:57:b9: f1:ce:66:a2:f6:12:27:0c:6d:6b:39:17:1e:c3:9b:36:a6:a2: 62:48:31:67:be:39:61:44:c1:d1:92:61:08:e0:dd:23:56:c9: a3:df:55:95 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJDoUREC1S20rcCz8nSGMnSl6sukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyOUI3MkY0MUREREM0MDZFRjA4NjUxMURDN0MwQUYy NkQ4QzNFOTAeFw0yNTA3MDMyMjMyNTBaFw0yNTA3MDgxMjM1NTBaMDMxMTAvBgNV BAMTKEJGREFEQTNCNzg3MDQ4MDNGM0FDQ0FFOTY4QTAwMzQzOUM0MjlDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeMIWR+/hsnaGM1g65OErCSrT3 8EiiuUIhhOG6xMKRfpb+0FgLSPfwadvoDRNgvrjGl+GalbYLmr25xSYBRAGd+6U6 niktDOrVAmD7DCdFZzy9uDSIgpH/u5Ir3fSze3DmtrUjrRCF00UYjhyDTeBnhJg6 gWMp/l336SiQVxuKKB+5OJNeNlNAATab53n+nFMz8cy0xPYtaEdc077IcvTaoSAX gsQ+h8+w/LmAPXHv/AROanjl9E/DRRwtNVOhoyBwBvTyDrLUgt9Fk2R6JNgD1rQt byowt+6e3GtEaY2kphNIM6G8EiKE+5S2YUtteNQZUzeiRwG3n7uJU9tcgUJrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUv9raO3hwSAPzrMrpaKADQ5xCnDEwHwYDVR0j BBgwFoAUiCm3L0Hd3EBu8IZRHcfArybYw+kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wQzI2NkRFQTU3Njc1ODFGMTZGQ0MxQ0RBRTQ0NEFGNUM2 QzVGNTg5QUZCODlFREZDQ0Q5NDQ2QzVBNUUxNzkxLzAvODgyOUI3MkY0MUREREM0 MDZFRjA4NjUxMURDN0MwQUYyNkQ4QzNFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODI5QjcyRjQxREREQzQwNkVG MDg2NTExREM3QzBBRjI2RDhDM0U5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEMyNjZERUE1NzY3NTgxRjE2RkNDMUNEQUU0NDRBRjVDNkM1RjU4OUFG Qjg5RURGQ0NEOTQ0NkM1QTVFMTc5MS8wLzg4MjlCNzJGNDFERERDNDA2RUYwODY1 MTFEQzdDMEFGMjZEOEMzRTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCiEGX6yU6SCt64S3FXpNB/K0a7 4afLX1IFhH8/8hiujFNizDi4n2279Nofz16vkC01ID6/QAp5gPhCNY+YwUJ+EH3K m27lNfZhWAXySmYf4cvUbgoDA0IBElu2XGERzRVZbNm4m+ltTJ24qww2jLrIOcCt gd/jy7XIk/ccK9zxxZh2BT1zx9Akv8en59N2QDSZsKkljlsLXEz5/Em2evG4Rs0L ShCTz0MEK0liSrv//p16ZG10CMW6pUz6xLezW0iXQ9Gv4vUsxMDh+uduoKtvzK+p wXcAV7nxzmai9hInDG1rORcew5s2pqJiSDFnvjlhRMHRkmEI4N0jVsmj31WV -----END CERTIFICATE-----Generated at Fri Jul 4 00:45:02 2025 by rpki-client