$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft File: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft (raw, json) Hash identifier: ty/Og6Mg7XcV4VMdWG75lbtPGOjdXbRy6VvFmetaAQE= Subject key identifier: 35:1E:1A:E4:67:76:1C:69:19:36:2E:C7:20:86:4A:85:0B:85:58:9C Authority key identifier: 3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC Certificate issuer: /CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC Certificate serial: 3C449F79946BC3ADD3582064B5C4746CA918A14E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft Manifest number: 89 Signing time: Wed 02 Jul 2025 21:53:18 +0000 Manifest this update: Wed 02 Jul 2025 21:48:18 +0000 Manifest next update: Tue 08 Jul 2025 19:50:18 +0000 Files and hashes: 1: 34352e3233392e36382e302f32322d3234203d3e203238353339.roa (hash: weojV1OCMtf9wFio1+L4InJ+6+PbsFJGyo6ZF3Bg2Bw=) 2: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl (hash: bo7A1WQVQyW5NmDpiuX+NSBa2V4gOnIrVS0oS35KyYE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:44:9f:79:94:6b:c3:ad:d3:58:20:64:b5:c4:74:6c:a9:18:a1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC Validity Not Before: Jul 2 21:48:18 2025 GMT Not After : Jul 8 19:50:18 2025 GMT Subject: CN=351E1AE467761C6919362EC720864A850B85589C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:f6:69:bd:cc:2f:38:c1:a6:da:56:d4:23: 48:41:4f:e2:8b:a2:78:34:64:c5:56:85:7c:d8:4a: f5:d5:e5:b5:93:ba:75:e2:24:42:25:44:8e:bd:ea: 2c:77:d0:ef:b5:df:8a:c6:ac:11:6f:da:7f:59:56: 65:a6:16:c7:e7:6a:4e:0c:87:fe:49:45:59:85:cb: 3c:46:e9:5b:17:c3:66:a4:01:16:f3:6c:47:88:7f: 52:4b:1a:81:c6:88:10:54:a5:a5:04:ad:f9:2b:a4: ee:cf:c2:7b:0f:27:92:f7:81:c4:94:be:28:ae:4f: e7:83:c5:a3:85:98:e5:79:72:dd:f2:cb:95:4f:ad: 4c:d3:13:86:b6:c8:7f:6f:ab:74:7d:cf:5a:8f:ac: 45:53:90:d2:bd:f0:2c:1d:27:57:ad:e2:8a:ba:bc: d0:3a:7c:bc:34:82:74:49:aa:94:06:74:e1:88:5a: 18:be:f0:9b:32:7f:e5:0e:29:8b:a2:34:58:8e:55: e5:04:a1:a6:40:22:ef:8a:ba:82:48:6a:c7:41:d4: 0d:e2:82:a0:9c:31:94:27:09:50:34:63:dd:e8:ad: 63:14:0d:57:88:2c:ea:5e:f7:c0:2c:6f:fc:b2:b6: fa:d2:c5:40:ad:cc:b7:8c:da:0e:f9:f0:35:3f:f8: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1E:1A:E4:67:76:1C:69:19:36:2E:C7:20:86:4A:85:0B:85:58:9C X509v3 Authority Key Identifier: keyid:3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b2:d0:f5:81:fe:5b:59:22:a9:59:8f:d4:cd:34:a5:9a:51: 48:8f:83:07:5a:f5:e5:cc:87:d9:8f:1c:0b:f1:d5:60:18:58: 7c:7d:e9:f3:95:36:d4:4a:48:31:b6:3e:64:5a:d5:cf:af:82: a9:c5:19:c1:03:c8:e4:5c:25:72:96:07:5f:09:32:da:ec:48: 4a:57:14:49:4c:a8:d6:c1:04:b4:64:fc:e8:de:7e:87:28:21: 86:6a:b0:fb:f8:7f:79:1d:71:56:28:31:ed:3e:4f:96:a0:25: ff:f6:d8:b0:de:66:8c:e7:3d:83:56:6a:d7:c6:9a:1b:2c:5f: 88:2c:87:d3:e2:da:cf:07:f8:27:c6:74:df:be:68:3e:89:30: 68:cd:00:b0:0a:25:4c:fd:63:59:d3:a4:95:f4:0f:4c:45:95: 9b:79:97:27:64:4e:84:4f:c8:45:b4:1c:6a:8b:1b:80:5c:5f: fc:3b:29:78:63:1c:46:26:22:4e:5a:46:74:9d:f6:29:52:bf: 00:9d:c2:3d:bc:ec:15:66:9b:ce:b0:b7:02:55:b4:e9:9a:ec: 9b:8a:b7:4e:3e:31:97:32:25:6a:b1:0c:02:30:7b:db:e4:d3: 0f:9e:b9:2d:b4:ba:9d:7b:68:f4:75:f0:f5:d6:5f:d3:32:e0: 6c:5c:84:86 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPESfeZRrw63TWCBktcR0bKkYoU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4RDhDM0ZGMEMyM0M3RTExRTg5NkNCRkY4QjRFQzYy REVBNkRBQzAeFw0yNTA3MDIyMTQ4MThaFw0yNTA3MDgxOTUwMThaMDMxMTAvBgNV BAMTKDM1MUUxQUU0Njc3NjFDNjkxOTM2MkVDNzIwODY0QTg1MEI4NTU4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZpfZpvcwvOMGm2lbUI0hBT+KL ong0ZMVWhXzYSvXV5bWTunXiJEIlRI696ix30O+134rGrBFv2n9ZVmWmFsfnak4M h/5JRVmFyzxG6VsXw2akARbzbEeIf1JLGoHGiBBUpaUErfkrpO7PwnsPJ5L3gcSU viiuT+eDxaOFmOV5ct3yy5VPrUzTE4a2yH9vq3R9z1qPrEVTkNK98CwdJ1et4oq6 vNA6fLw0gnRJqpQGdOGIWhi+8Jsyf+UOKYuiNFiOVeUEoaZAIu+KuoJIasdB1A3i gqCcMZQnCVA0Y93orWMUDVeILOpe98Asb/yytvrSxUCtzLeM2g758DU/+BgTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNR4a5Gd2HGkZNi7HIIZKhQuFWJwwHwYDVR0j BBgwFoAUO42MP/DCPH4R6JbL/4tOxi3qbawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRjZCQUI0MTJBOTBCQTUzQTBGQzFGM0M1NEIyQjE1NDBG QzJEMTBERTgyMkExOEZERTVFQjA4NkZBOUE4QTg5LzAvM0I4RDhDM0ZGMEMyM0M3 RTExRTg5NkNCRkY4QjRFQzYyREVBNkRBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjhEOEMzRkYwQzIzQzdFMTFF ODk2Q0JGRjhCNEVDNjJERUE2REFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEY2QkFCNDEyQTkwQkE1M0EwRkMxRjNDNTRCMkIxNTQwRkMyRDEwREU4 MjJBMThGREU1RUIwODZGQTlBOEE4OS8wLzNCOEQ4QzNGRjBDMjNDN0UxMUU4OTZD QkZGOEI0RUM2MkRFQTZEQUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQstD1gf5bWSKpWY/UzTSlmlFI j4MHWvXlzIfZjxwL8dVgGFh8fenzlTbUSkgxtj5kWtXPr4KpxRnBA8jkXCVylgdf CTLa7EhKVxRJTKjWwQS0ZPzo3n6HKCGGarD7+H95HXFWKDHtPk+WoCX/9tiw3maM 5z2DVmrXxpobLF+ILIfT4trPB/gnxnTfvmg+iTBozQCwCiVM/WNZ06SV9A9MRZWb eZcnZE6ET8hFtBxqixuAXF/8Oyl4YxxGJiJOWkZ0nfYpUr8AncI9vOwVZpvOsLcC VbTpmuybirdOPjGXMiVqsQwCMHvb5NMPnrkttLqde2j0dfD11l/TMuBsXISG -----END CERTIFICATE-----Generated at Fri Jul 4 04:05:04 2025 by rpki-client