$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft File: 2AA949233251849B5F79085FA81406E588FF36E5.mft (raw, json) Hash identifier: ZGop6wUk58IUFawICROimuw38McLqQkFEUWcCjsREDo= Subject key identifier: BB:BA:2F:76:FE:3B:EE:B3:3E:87:A2:57:9C:49:93:92:24:98:D6:7D Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 Certificate issuer: /CN=2AA949233251849B5F79085FA81406E588FF36E5 Certificate serial: 20D1477BCB19776E5105834748745229A3F6BE91 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft Manifest number: F5 Signing time: Sat 05 Jul 2025 06:02:20 +0000 Manifest this update: Sat 05 Jul 2025 05:57:20 +0000 Manifest next update: Wed 09 Jul 2025 09:20:20 +0000 Files and hashes: 1: 2AA949233251849B5F79085FA81406E588FF36E5.crl (hash: i0WZuJdJO5gZSS28UyntkL7xPk3OT4rLgG2mONMpCLM=) 2: 34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (hash: 0wG8UAY7ipzPPU6H/Qn8ayAErVsbpJ3ILXn1Xxmg05c=) 3: 323830333a333736303a3a2f33322d3332203d3e20323639383238.roa (hash: YCM1oXKAOqvvmUFyPpzwfn80NaYV4PR/y9/a34CTUWE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Jul 2025 09:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d1:47:7b:cb:19:77:6e:51:05:83:47:48:74:52:29:a3:f6:be:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5 Validity Not Before: Jul 5 05:57:20 2025 GMT Not After : Jul 9 09:20:20 2025 GMT Subject: CN=BBBA2F76FE3BEEB33E87A2579C4993922498D67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:55:68:25:b6:77:68:83:24:eb:e0:6f:3c: 21:74:87:99:3f:d4:16:9d:00:79:dd:ea:23:25:ae: 05:f7:1f:f9:16:cf:12:88:bd:e5:b9:db:7d:7b:cf: 0d:0d:c8:b1:4c:eb:0f:2f:6a:b6:c3:a8:ad:84:53: 0f:3a:87:fc:be:f0:50:79:a7:b0:17:a9:ef:da:aa: cc:e2:e1:e0:2f:eb:e6:45:ea:6a:66:2c:6c:e0:e8: 9e:5a:72:d9:7f:3a:2c:1c:e9:1c:77:6c:ae:44:96: d6:f9:b2:25:f0:94:81:e5:94:79:ae:4b:5f:02:28: 1e:1c:41:70:ef:d0:bf:43:48:b5:ee:84:19:b4:6c: be:57:7c:66:2e:cc:75:d9:60:b1:bf:47:b5:47:b1: ad:7d:31:3c:24:5a:ff:ef:3d:c8:5e:34:41:72:57: a1:b5:b6:eb:f6:e5:45:2e:e0:8b:4e:c0:cf:4a:a8: bd:bb:ff:8f:b2:a8:d7:f7:90:3e:47:fe:3a:28:69: 66:f8:bc:88:48:c5:3d:54:fc:16:5a:30:a0:fa:26: a1:9e:39:d3:25:06:cb:bb:3a:7b:89:91:16:5c:72: 0e:c7:5d:e4:12:50:c2:00:8d:09:e4:97:60:be:1c: c0:f2:c4:94:03:51:90:9f:41:a7:a7:21:e8:b6:58: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BA:2F:76:FE:3B:EE:B3:3E:87:A2:57:9C:49:93:92:24:98:D6:7D X509v3 Authority Key Identifier: keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5d:0c:2b:c3:61:99:16:ab:3e:38:17:6b:85:2c:5c:54:83: 21:d1:e3:68:ca:9b:ba:9e:bf:7e:5c:cf:93:ee:0a:04:7d:4d: 88:30:b1:90:ca:f9:3c:c6:ca:75:a4:23:71:bb:2e:ba:13:77: 62:55:cf:4a:db:5e:3f:ef:5b:98:4e:95:a7:77:da:d6:05:22: 5a:ca:f7:47:79:bf:15:33:4d:0f:dc:b2:ec:19:96:80:9a:6c: 74:74:23:bf:ca:92:05:8c:53:db:eb:2c:08:6c:19:fb:fc:85: f7:37:f2:8e:7c:a4:b1:0c:05:77:7c:bb:56:14:da:95:45:51: 6a:da:3a:4a:52:72:d7:aa:c6:64:a9:45:2a:39:0e:e6:69:76: 4d:be:f6:3e:3d:14:83:0e:36:8b:7e:8a:7b:b8:0d:a3:b4:68: 55:27:16:1f:a1:38:32:4a:93:34:3e:dd:10:ab:8c:ed:57:4b: f4:6c:58:34:14:33:79:e8:5c:84:4a:14:00:cb:03:72:aa:e1: 4c:44:11:0c:e5:54:ee:e6:79:ef:4e:8b:f1:de:2f:95:df:d0: 71:d4:4e:88:ce:0f:09:f5:01:22:2d:c1:e3:02:e5:13:0b:37: d5:67:fe:26:4e:ff:57:c6:0d:35:3c:b7:1f:af:0b:fb:e5:9a: f9:9b:02:38 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUINFHe8sZd25RBYNHSHRSKaP2vpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOTQ5MjMzMjUxODQ5QjVGNzkwODVGQTgxNDA2RTU4 OEZGMzZFNTAeFw0yNTA3MDUwNTU3MjBaFw0yNTA3MDkwOTIwMjBaMDMxMTAvBgNV BAMTKEJCQkEyRjc2RkUzQkVFQjMzRTg3QTI1NzlDNDk5MzkyMjQ5OEQ2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiFVoJbZ3aIMk6+BvPCF0h5k/ 1BadAHnd6iMlrgX3H/kWzxKIveW52317zw0NyLFM6w8varbDqK2EUw86h/y+8FB5 p7AXqe/aqszi4eAv6+ZF6mpmLGzg6J5actl/Oiwc6Rx3bK5Eltb5siXwlIHllHmu S18CKB4cQXDv0L9DSLXuhBm0bL5XfGYuzHXZYLG/R7VHsa19MTwkWv/vPcheNEFy V6G1tuv25UUu4ItOwM9KqL27/4+yqNf3kD5H/jooaWb4vIhIxT1U/BZaMKD6JqGe OdMlBsu7OnuJkRZccg7HXeQSUMIAjQnkl2C+HMDyxJQDUZCfQaenIei2WDiHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUu7ovdv477rM+h6JXnEmTkiSY1n0wHwYDVR0j BBgwFoAUKqlJIzJRhJtfeQhfqBQG5Yj/NuUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zOTFGNEMxRkNCREZDOTE4Q0ZCQzgxQTU4Q0JFNDQ2QTBE OTJEM0Q2M0UxMEM4NUREQkIzQ0Y2RUY1RjQ4RkJDLzAvMkFBOTQ5MjMzMjUxODQ5 QjVGNzkwODVGQTgxNDA2RTU4OEZGMzZFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUE5NDkyMzMyNTE4NDlCNUY3 OTA4NUZBODE0MDZFNTg4RkYzNkU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzkxRjRDMUZDQkRGQzkxOENGQkM4MUE1OENCRTQ0NkEwRDkyRDNENjNF MTBDODVEREJCM0NGNkVGNUY0OEZCQy8wLzJBQTk0OTIzMzI1MTg0OUI1Rjc5MDg1 RkE4MTQwNkU1ODhGRjM2RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCXQwrw2GZFqs+OBdrhSxcVIMh 0eNoypu6nr9+XM+T7goEfU2IMLGQyvk8xsp1pCNxuy66E3diVc9K214/71uYTpWn d9rWBSJayvdHeb8VM00P3LLsGZaAmmx0dCO/ypIFjFPb6ywIbBn7/IX3N/KOfKSx DAV3fLtWFNqVRVFq2jpKUnLXqsZkqUUqOQ7maXZNvvY+PRSDDjaLfop7uA2jtGhV JxYfoTgySpM0Pt0Qq4ztV0v0bFg0FDN56FyEShQAywNyquFMRBEM5VTu5nnvTovx 3i+V39Bx1E6Izg8J9QEiLcHjAuUTCzfVZ/4mTv9Xxg01PLcfrwv75Zr5mwI4 -----END CERTIFICATE-----Generated at Sat Jul 5 12:31:13 2025 by rpki-client