$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft File: EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft (raw, json) Hash identifier: lix7QkZyrxwVpDbWASEPWmWqh8yeaswmMQjA4mok8cA= Subject key identifier: 39:C5:DE:9E:15:FB:26:FA:87:68:1C:2D:F1:1E:D4:10:34:81:35:EF Authority key identifier: EF:B3:9A:52:5E:EB:65:C9:FE:9C:A4:4F:A6:CD:FC:90:61:E1:F6:63 Certificate issuer: /CN=EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663 Certificate serial: 1EFED935BEC8044B426D79C9ED081DC5ABA636F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft Manifest number: A1 Signing time: Thu 03 Jul 2025 07:54:36 +0000 Manifest this update: Thu 03 Jul 2025 07:49:36 +0000 Manifest next update: Tue 08 Jul 2025 23:47:36 +0000 Files and hashes: 1: 323830363a3432393a3a2f33322d3438203d3e20323732343035.roa (hash: YpeGDE5rj1bJ2WFHjTpM8LSERk3JHhMXQFiTb8jI8lY=) 2: EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl (hash: Gx3f4jO7zR9j8Klazlp3/5w8C6QjEWTXgplOHckvaAc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Jul 2025 23:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fe:d9:35:be:c8:04:4b:42:6d:79:c9:ed:08:1d:c5:ab:a6:36:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663 Validity Not Before: Jul 3 07:49:36 2025 GMT Not After : Jul 8 23:47:36 2025 GMT Subject: CN=39C5DE9E15FB26FA87681C2DF11ED410348135EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:60:2e:a4:27:b8:de:f9:cb:5e:ac:ce:8e: 88:5d:0c:9b:38:96:24:63:80:82:21:9a:ea:61:92: c5:e2:bf:f0:1d:66:90:66:54:6d:5f:b0:d5:6c:e8: 68:0a:5b:a6:f3:e1:b3:0f:9d:e7:d0:bc:5f:e0:32: 0c:05:8d:be:07:8a:7d:45:35:ea:1c:03:e2:0f:12: 8a:a4:c2:65:43:43:81:8d:cf:4f:b1:a8:6f:41:44: e0:06:11:6e:ff:69:72:bd:8b:86:0b:27:47:88:e5: d6:f2:ba:84:28:bc:0d:ef:a7:c0:d0:4b:09:1f:d0: e7:ee:97:44:e5:ca:c3:56:3b:d5:ab:3c:f4:28:20: 45:80:f3:74:2d:f7:dc:db:81:04:03:30:ba:63:41: d6:7b:97:1e:f0:63:d6:03:e4:c2:b9:93:4e:57:86: 6f:5e:38:8b:e7:dc:e9:72:c0:e1:2e:94:c2:7b:d5: ae:3d:85:88:16:61:27:ff:73:bc:10:c0:f5:63:a1: 23:18:68:de:0d:ce:f3:02:14:f4:47:65:7b:5b:62: 58:f7:4d:d3:b6:1c:23:0e:6f:ca:d1:08:38:21:19: c3:c4:39:3b:4f:67:9c:b5:22:78:59:04:0c:ba:d1: 58:9e:7f:8d:3e:ad:7b:75:f8:9c:21:10:32:3f:af: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C5:DE:9E:15:FB:26:FA:87:68:1C:2D:F1:1E:D4:10:34:81:35:EF X509v3 Authority Key Identifier: keyid:EF:B3:9A:52:5E:EB:65:C9:FE:9C:A4:4F:A6:CD:FC:90:61:E1:F6:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DB52F844AADB95E54DDB427ABB29CB980C8BDA3E8A4CFF560CD977C130F52F2/0/EFB39A525EEB65C9FE9CA44FA6CDFC9061E1F663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1a:46:ec:52:94:fa:bc:53:74:a9:bf:d2:b3:7a:2e:35:03: 96:81:36:4e:21:2e:8a:7c:63:46:4b:b4:15:d7:fd:08:18:e7: c5:2e:d7:1b:c7:d9:b8:1c:11:6d:a0:01:cd:11:ff:90:cc:a3: 30:86:12:5a:ca:9f:9a:2f:65:66:cf:1a:db:99:34:20:54:e9: 08:42:f7:f9:99:9f:98:d0:af:a1:63:60:f9:ea:5a:41:b0:d5: 30:92:5b:c4:0a:e4:8b:ad:10:89:f0:10:12:7e:e1:9e:4c:e8: a9:f8:d8:eb:ff:0a:89:11:19:83:4d:13:d1:73:26:9e:ac:75: 25:c7:2f:d0:e0:8a:1e:78:98:dc:fe:54:63:7d:67:50:57:43: 44:65:64:94:2e:c5:c5:e9:cf:fb:69:80:7e:34:0d:c0:9a:af: ca:e5:9d:c1:32:5f:23:3c:23:77:8f:d2:33:41:5c:09:9e:00: 8a:39:8f:c8:a6:3e:9a:92:d9:32:c6:2d:4e:5b:ca:55:2e:1c: 11:2c:4e:97:01:a0:d1:fc:d0:68:25:c8:45:6d:6e:d7:26:a3: a3:df:f9:81:e9:db:44:a1:9c:8c:22:96:44:aa:69:f6:1b:03: f9:3f:6f:e6:69:89:41:21:a9:8d:82:af:e9:43:83:70:ef:f8: 3f:b2:23:57 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHv7ZNb7IBEtCbXnJ7QgdxaumNvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZCMzlBNTI1RUVCNjVDOUZFOUNBNDRGQTZDREZDOTA2 MUUxRjY2MzAeFw0yNTA3MDMwNzQ5MzZaFw0yNTA3MDgyMzQ3MzZaMDMxMTAvBgNV BAMTKDM5QzVERTlFMTVGQjI2RkE4NzY4MUMyREYxMUVENDEwMzQ4MTM1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6u2AupCe43vnLXqzOjohdDJs4 liRjgIIhmuphksXiv/AdZpBmVG1fsNVs6GgKW6bz4bMPnefQvF/gMgwFjb4Hin1F NeocA+IPEoqkwmVDQ4GNz0+xqG9BROAGEW7/aXK9i4YLJ0eI5dbyuoQovA3vp8DQ Swkf0Oful0TlysNWO9WrPPQoIEWA83Qt99zbgQQDMLpjQdZ7lx7wY9YD5MK5k05X hm9eOIvn3OlywOEulMJ71a49hYgWYSf/c7wQwPVjoSMYaN4NzvMCFPRHZXtbYlj3 TdO2HCMOb8rRCDghGcPEOTtPZ5y1InhZBAy60Vief40+rXt1+JwhEDI/r2XrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOcXenhX7JvqHaBwt8R7UEDSBNe8wHwYDVR0j BBgwFoAU77OaUl7rZcn+nKRPps38kGHh9mMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yREI1MkY4NDRBQURCOTVFNTREREI0MjdBQkIyOUNCOTgw QzhCREEzRThBNENGRjU2MENEOTc3QzEzMEY1MkYyLzAvRUZCMzlBNTI1RUVCNjVD OUZFOUNBNDRGQTZDREZDOTA2MUUxRjY2My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRkIzOUE1MjVFRUI2NUM5RkU5 Q0E0NEZBNkNERkM5MDYxRTFGNjYzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkRCNTJGODQ0QUFEQjk1RTU0RERCNDI3QUJCMjlDQjk4MEM4QkRBM0U4 QTRDRkY1NjBDRDk3N0MxMzBGNTJGMi8wL0VGQjM5QTUyNUVFQjY1QzlGRTlDQTQ0 RkE2Q0RGQzkwNjFFMUY2NjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0GkbsUpT6vFN0qb/Ss3ouNQOW gTZOIS6KfGNGS7QV1/0IGOfFLtcbx9m4HBFtoAHNEf+QzKMwhhJayp+aL2Vmzxrb mTQgVOkIQvf5mZ+Y0K+hY2D56lpBsNUwklvECuSLrRCJ8BASfuGeTOip+Njr/wqJ ERmDTRPRcyaerHUlxy/Q4IoeeJjc/lRjfWdQV0NEZWSULsXF6c/7aYB+NA3Amq/K 5Z3BMl8jPCN3j9IzQVwJngCKOY/Ipj6aktkyxi1OW8pVLhwRLE6XAaDR/NBoJchF bW7XJqOj3/mB6dtEoZyMIpZEqmn2GwP5P2/maYlBIamNgq/pQ4Nw7/g/siNX -----END CERTIFICATE-----Generated at Sat Jul 5 05:51:27 2025 by rpki-client