$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.mft File: 5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.mft (raw, json) Hash identifier: cbPZ+giufZIGdJAtd3X81a1R4TPLDDi6MHXzGM/xAO4= Subject key identifier: 86:8C:68:B5:96:4E:4A:5A:49:CC:AC:E6:CD:C3:2C:7D:BF:09:71:22 Authority key identifier: 5F:89:F0:CB:70:B3:F5:E0:08:FB:B3:9F:CB:83:61:77:2A:6E:FB:B2 Certificate issuer: /CN=5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2 Certificate serial: 3039A3D5FC77137941B35E09B3D57A761DE1150C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.mft Manifest number: 1C Signing time: Wed 02 Jul 2025 19:11:48 +0000 Manifest this update: Wed 02 Jul 2025 19:06:48 +0000 Manifest next update: Tue 08 Jul 2025 05:56:48 +0000 Files and hashes: 1: 5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.crl (hash: 8e83wf211fI2IqmnbW9Mj3H6GfmF9blEA+PgUYDjrCQ=) 2: 323830333a356164303a3a2f33322d3438203d3e20323734303739.roa (hash: csxd7M5rKKXdcvxf5CsOncjm5bwY0Xp3CxjSvslIJiQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.crl rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:39:a3:d5:fc:77:13:79:41:b3:5e:09:b3:d5:7a:76:1d:e1:15:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2 Validity Not Before: Jul 2 19:06:48 2025 GMT Not After : Jul 8 05:56:48 2025 GMT Subject: CN=868C68B5964E4A5A49CCACE6CDC32C7DBF097122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:33:7f:81:62:15:85:26:b4:30:cc:35:83: 10:c4:e6:2f:77:1a:76:ea:93:7b:55:9c:a1:11:29: e1:01:57:24:d8:b0:eb:49:c2:a8:78:42:95:65:04: 55:6c:e8:dc:b2:af:20:26:bb:e5:1e:db:3e:a4:fc: 0b:37:2c:c8:af:d4:0f:b2:a5:fc:fd:4f:b9:63:5f: 9d:a8:f7:0f:84:20:7c:67:1f:06:94:01:89:6d:cc: 49:06:9d:39:1e:00:72:c8:42:dd:a5:10:c5:db:ea: 36:e0:ab:59:f8:1b:03:79:b1:fa:ad:04:8a:f2:3a: b5:b5:b6:12:24:69:0f:2d:3a:e1:4a:bf:7a:b3:97: 6b:a2:61:09:75:a9:91:98:45:e5:7e:7f:85:da:68: 17:5b:ea:dd:e1:65:36:2d:9f:28:b7:d1:37:6a:77: 9f:a7:fa:b8:fe:05:07:0c:5c:94:8c:93:7e:a9:8d: f2:80:7d:d6:c3:2a:0b:52:eb:17:d4:98:b3:df:a4: e4:2d:90:a0:6d:de:16:f2:40:8a:ea:70:c5:f0:1a: 34:40:f5:49:4e:f2:36:6b:11:93:76:da:88:5b:27: 58:35:81:2f:dd:47:f6:e3:2e:b8:d9:e7:7b:2e:b7: 4e:33:16:55:7e:68:24:d2:e2:c9:2b:3b:75:07:00: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8C:68:B5:96:4E:4A:5A:49:CC:AC:E6:CD:C3:2C:7D:BF:09:71:22 X509v3 Authority Key Identifier: keyid:5F:89:F0:CB:70:B3:F5:E0:08:FB:B3:9F:CB:83:61:77:2A:6E:FB:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2D66870EAB0E4932805F4DB0951805820E1B8AF8C9798AB906AEF05EFEB6C1D6/0/5F89F0CB70B3F5E008FBB39FCB8361772A6EFBB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:20:3b:79:82:49:64:2d:9d:8c:49:b0:f1:dc:6c:9f:6e:16: 7b:16:17:12:6f:9e:3a:58:aa:23:37:47:9f:d6:a1:9b:5c:47: 47:9d:2d:ec:bd:d6:dc:d4:42:63:de:ec:fc:a7:24:ef:9c:ff: e0:15:a3:95:dd:6a:34:76:c4:c5:30:50:fe:09:93:4a:4f:06: 4f:a1:c5:1f:16:85:7e:8f:e8:ff:f3:37:83:88:46:2e:b6:6c: 62:2f:0d:8a:fe:45:2c:84:0c:69:1b:a4:13:ef:3b:7e:4c:2e: 85:9b:59:1f:f9:61:a7:3e:ec:59:95:1e:ef:76:bb:95:b6:27: 83:05:c4:aa:28:c5:f9:d0:89:e4:e9:e8:fe:59:6a:d3:7f:91: a4:05:bf:24:4c:93:db:94:f5:00:d8:5f:fe:f0:b1:a5:94:bd: b8:2a:a0:e2:58:f4:2e:84:d4:38:ea:f2:93:17:54:92:79:be: 13:21:0d:24:2f:42:9c:80:b1:e9:5f:69:55:0e:c2:5a:6b:e3: 22:5d:ef:e3:a1:3a:14:7f:d3:a0:28:33:2b:f3:0b:13:49:7a: 8b:f5:75:76:f9:22:d9:7d:eb:7d:3a:47:82:49:8b:a2:a2:df: d7:b3:a9:88:56:73:69:02:66:06:e6:b4:57:bb:cb:b5:6a:0d: 59:a1:8e:c5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMDmj1fx3E3lBs14Js9V6dh3hFQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY4OUYwQ0I3MEIzRjVFMDA4RkJCMzlGQ0I4MzYxNzcy QTZFRkJCMjAeFw0yNTA3MDIxOTA2NDhaFw0yNTA3MDgwNTU2NDhaMDMxMTAvBgNV BAMTKDg2OEM2OEI1OTY0RTRBNUE0OUNDQUNFNkNEQzMyQzdEQkYwOTcxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8jN/gWIVhSa0MMw1gxDE5i93 Gnbqk3tVnKERKeEBVyTYsOtJwqh4QpVlBFVs6NyyryAmu+Ue2z6k/As3LMiv1A+y pfz9T7ljX52o9w+EIHxnHwaUAYltzEkGnTkeAHLIQt2lEMXb6jbgq1n4GwN5sfqt BIryOrW1thIkaQ8tOuFKv3qzl2uiYQl1qZGYReV+f4XaaBdb6t3hZTYtnyi30Tdq d5+n+rj+BQcMXJSMk36pjfKAfdbDKgtS6xfUmLPfpOQtkKBt3hbyQIrqcMXwGjRA 9UlO8jZrEZN22ohbJ1g1gS/dR/bjLrjZ53sut04zFlV+aCTS4skrO3UHAGQFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUhoxotZZOSlpJzKzmzcMsfb8JcSIwHwYDVR0j BBgwFoAUX4nwy3Cz9eAI+7Ofy4Nhdypu+7IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRDY2ODcwRUFCMEU0OTMyODA1RjREQjA5NTE4MDU4MjBF MUI4QUY4Qzk3OThBQjkwNkFFRjA1RUZFQjZDMUQ2LzAvNUY4OUYwQ0I3MEIzRjVF MDA4RkJCMzlGQ0I4MzYxNzcyQTZFRkJCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81Rjg5RjBDQjcwQjNGNUUwMDhG QkIzOUZDQjgzNjE3NzJBNkVGQkIyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkQ2Njg3MEVBQjBFNDkzMjgwNUY0REIwOTUxODA1ODIwRTFCOEFGOEM5 Nzk4QUI5MDZBRUYwNUVGRUI2QzFENi8wLzVGODlGMENCNzBCM0Y1RTAwOEZCQjM5 RkNCODM2MTc3MkE2RUZCQjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjIDt5gklkLZ2MSbDx3GyfbhZ7 FhcSb546WKojN0ef1qGbXEdHnS3svdbc1EJj3uz8pyTvnP/gFaOV3Wo0dsTFMFD+ CZNKTwZPocUfFoV+j+j/8zeDiEYutmxiLw2K/kUshAxpG6QT7zt+TC6Fm1kf+WGn PuxZlR7vdruVtieDBcSqKMX50Ink6ej+WWrTf5GkBb8kTJPblPUA2F/+8LGllL24 KqDiWPQuhNQ46vKTF1SSeb4TIQ0kL0KcgLHpX2lVDsJaa+MiXe/joToUf9OgKDMr 8wsTSXqL9XV2+SLZfet9OkeCSYuiot/Xs6mIVnNpAmYG5rRXu8u1ag1ZoY7F -----END CERTIFICATE-----Generated at Fri Jul 4 08:40:36 2025 by rpki-client