$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft File: 2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft (raw, json) Hash identifier: dDIlpXimw2tDJKsa+UgLKrbyBYRZsofs8vITvR9neW8= Subject key identifier: 8D:D0:76:8A:42:8E:5C:2B:04:1D:FF:49:97:00:F2:E6:67:FC:60:5F Authority key identifier: 2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8 Certificate issuer: /CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8 Certificate serial: 5EE5DE65BDCE54C5DE18AC4E31DA8169455CA1B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft Manifest number: F5 Signing time: Tue 01 Jul 2025 07:24:48 +0000 Manifest this update: Tue 01 Jul 2025 07:19:48 +0000 Manifest next update: Mon 07 Jul 2025 04:19:48 +0000 Files and hashes: 1: 34352e3137322e31302e302f32342d3236203d3e20323637383030.roa (hash: SoVmeHj928LIj8a6LrBZucd0JCuIuUicywvkFm39lIE=) 2: 34352e3137322e392e302f32342d3236203d3e20323635353534.roa (hash: O9X81cqgbQlzGezeSH7CYaXC0FhGuZSky/G1iUrEPNY=) 3: 34352e3137322e382e302f32342d3236203d3e20323637383030.roa (hash: buQeDOjuWZflX/svGb7bwld/4KhEc6l9GQ5TS3xg5g8=) 4: 34352e3137322e31312e302f32342d3236203d3e20323637383030.roa (hash: gpvN29o3V2n6zjXz7C3D4xAYZM4ZFmQZmPtoFgCCV7M=) 5: 2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl (hash: F0FUTBEZQojMJaiKbWwCYtQJNlLRweJcMqB7QxBBAY8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 04:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e5:de:65:bd:ce:54:c5:de:18:ac:4e:31:da:81:69:45:5c:a1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8 Validity Not Before: Jul 1 07:19:48 2025 GMT Not After : Jul 7 04:19:48 2025 GMT Subject: CN=8DD0768A428E5C2B041DFF499700F2E667FC605F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:37:25:6f:ab:18:20:77:15:e3:f2:52:ce:4d: 9d:33:b1:44:17:ca:7d:af:e6:f6:69:7c:f1:82:48: 73:c1:75:4f:11:43:e4:9a:6a:f4:e0:75:24:e6:29: 1e:ae:0b:c9:af:41:4b:98:d2:23:4c:a3:0e:e7:ef: 2f:82:e0:b4:85:ff:ab:08:73:31:65:a1:ea:ce:70: a1:ed:74:9f:db:aa:78:d3:b8:a7:8c:46:c6:f4:f2: a7:29:6b:4e:a7:6d:97:36:e7:c7:4c:d1:3c:92:4f: 62:e8:4b:71:56:2b:16:6e:c5:a3:15:b5:b1:66:3c: 89:5b:25:7b:66:88:cf:23:f7:0b:43:e2:ba:0a:27: 40:f4:36:5d:04:c6:6f:98:21:f4:11:e8:4a:b4:bf: 4c:c5:f6:c3:be:ae:6e:3d:cf:ce:93:63:f6:ca:d0: 7f:4a:6d:bd:b4:48:43:6e:ca:da:55:e3:c5:21:24: c5:4e:04:62:d9:56:ae:2c:e3:16:08:c0:02:fa:07: 38:2c:50:ed:ca:d4:ab:86:d9:55:94:7e:93:6c:fc: 10:35:90:7c:0c:7f:d8:66:6c:e2:ac:ac:f7:ec:df: dd:52:e0:7e:78:6b:9a:b6:f3:31:06:0d:69:98:db: 53:8c:a0:07:fb:90:b5:bb:7a:f6:2d:6e:c4:95:c2: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D0:76:8A:42:8E:5C:2B:04:1D:FF:49:97:00:F2:E6:67:FC:60:5F X509v3 Authority Key Identifier: keyid:2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5d:17:62:ca:05:02:f0:3f:87:49:e0:e5:da:91:ae:dd:a8: 8d:5c:4f:85:fb:d8:1e:8b:39:3d:d5:18:eb:b8:17:c0:3b:92: ee:e0:f9:01:7a:9c:ab:cf:b9:44:85:e4:fc:46:a8:ec:10:b2: e8:a3:af:c8:c1:19:58:0f:ab:66:05:99:a0:7b:9b:22:09:ba: 44:73:77:0a:33:d7:03:51:eb:4f:68:c3:d9:cb:18:10:05:c9: e3:1d:fd:d5:ad:0d:ae:92:43:e3:3a:66:e2:a5:b9:b7:c9:21: c5:3e:d7:e2:3b:7f:22:24:64:e6:e4:84:db:fc:4c:f4:6e:1c: e0:6c:7a:90:0b:50:61:ba:a5:90:a4:d7:9a:ca:78:a3:6f:d0: 5c:65:f4:25:e1:7f:50:94:ed:52:ca:76:30:3a:b6:73:c9:05: ab:1b:f7:65:ef:99:fe:3f:46:b5:6f:2e:b6:16:12:a3:49:b3: bd:68:9c:60:c7:57:3a:82:00:f6:df:d7:84:e7:c2:6f:3a:57: 66:e1:23:fc:a6:cc:de:95:9b:19:88:4d:d4:fa:07:5e:cb:ff: a5:c9:66:d4:e5:44:00:e9:1b:87:98:21:64:4b:5a:06:da:dc: 0a:78:a6:41:80:39:74:72:22:1b:fe:a9:ef:f8:f9:a6:65:35: 78:20:2d:17 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXuXeZb3OVMXeGKxOMdqBaUVcobcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU0MUZGNEZFOEVCQTYzNjlCQUExQkJDNThCQkQ3MUJG RkQzMUVBODAeFw0yNTA3MDEwNzE5NDhaFw0yNTA3MDcwNDE5NDhaMDMxMTAvBgNV BAMTKDhERDA3NjhBNDI4RTVDMkIwNDFERkY0OTk3MDBGMkU2NjdGQzYwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrNyVvqxggdxXj8lLOTZ0zsUQX yn2v5vZpfPGCSHPBdU8RQ+SaavTgdSTmKR6uC8mvQUuY0iNMow7n7y+C4LSF/6sI czFloerOcKHtdJ/bqnjTuKeMRsb08qcpa06nbZc258dM0TyST2LoS3FWKxZuxaMV tbFmPIlbJXtmiM8j9wtD4roKJ0D0Nl0Exm+YIfQR6Eq0v0zF9sO+rm49z86TY/bK 0H9Kbb20SENuytpV48UhJMVOBGLZVq4s4xYIwAL6BzgsUO3K1KuG2VWUfpNs/BA1 kHwMf9hmbOKsrPfs391S4H54a5q28zEGDWmY21OMoAf7kLW7evYtbsSVwuR/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjdB2ikKOXCsEHf9JlwDy5mf8YF8wHwYDVR0j BBgwFoAULkH/T+jrpjabqhu8WLvXG//THqgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xOEFFMUNCREFCNzc2QUFENDNEM0E5RkVDQjZCNEU5OEM2 QjUwNzI3NDkxRDVFNTQ0NUI2NjYyMEUzMkQ0Q0E5LzAvMkU0MUZGNEZFOEVCQTYz NjlCQUExQkJDNThCQkQ3MUJGRkQzMUVBOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTQxRkY0RkU4RUJBNjM2OUJB QTFCQkM1OEJCRDcxQkZGRDMxRUE4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMThBRTFDQkRBQjc3NkFBRDQzRDNBOUZFQ0I2QjRFOThDNkI1MDcyNzQ5 MUQ1RTU0NDVCNjY2MjBFMzJENENBOS8wLzJFNDFGRjRGRThFQkE2MzY5QkFBMUJC QzU4QkJENzFCRkZEMzFFQTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAXRdiygUC8D+HSeDl2pGu3aiN XE+F+9geizk91RjruBfAO5Lu4PkBepyrz7lEheT8RqjsELLoo6/IwRlYD6tmBZmg e5siCbpEc3cKM9cDUetPaMPZyxgQBcnjHf3VrQ2ukkPjOmbipbm3ySHFPtfiO38i JGTm5ITb/Ez0bhzgbHqQC1BhuqWQpNeaynijb9BcZfQl4X9QlO1SynYwOrZzyQWr G/dl75n+P0a1by62FhKjSbO9aJxgx1c6ggD239eE58JvOldm4SP8pszelZsZiE3U +gdey/+lyWbU5UQA6RuHmCFkS1oG2twKeKZBgDl0ciIb/qnv+PmmZTV4IC0X -----END CERTIFICATE-----Generated at Fri Jul 4 04:02:40 2025 by rpki-client