$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft File: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft (raw, json) Hash identifier: uowhA+FKt6sIRuaiMEuzVFAOYDLbfLWVlJQP4xt7dX4= Subject key identifier: 48:DD:8D:FF:BC:AC:89:11:68:D0:6F:B8:6F:0F:93:1F:4B:61:83:5F Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 Certificate issuer: /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Certificate serial: 1AE956633EBEF52E417C2D0F6E3C4D5568CB7AF0 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft Manifest number: F5 Signing time: Fri 04 Jul 2025 08:44:00 +0000 Manifest this update: Fri 04 Jul 2025 08:39:00 +0000 Manifest next update: Tue 08 Jul 2025 19:55:00 +0000 Files and hashes: 1: 3139302e31342e3134342e302f32312d3234203d3e20323634383536.roa (hash: p81G8oXFk080ghN5GKWtKTcT6PUTiGK+bopJQcZbhrE=) 2: 3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (hash: 36MFiYsj/rbrvvVvLeus9cYnV2iKLxGfalFiHHn+w8M=) 3: 688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl (hash: mjR0r4KaO725B7jFlWwshT02AY9p5EiNXkNgolnptkM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Jul 2025 19:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e9:56:63:3e:be:f5:2e:41:7c:2d:0f:6e:3c:4d:55:68:cb:7a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6 Validity Not Before: Jul 4 08:39:00 2025 GMT Not After : Jul 8 19:55:00 2025 GMT Subject: CN=48DD8DFFBCAC891168D06FB86F0F931F4B61835F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:c0:ee:1e:67:84:d9:ca:27:3f:01:76:f5: 2e:04:9e:42:cd:e4:df:0c:7f:a9:dd:5d:c0:07:e9: 88:e8:30:ef:b1:ff:36:26:9e:8a:23:9f:27:a7:a1: d3:52:40:86:47:70:f4:5d:df:22:cc:39:61:53:78: ef:0d:d4:02:ea:31:68:cd:89:92:03:d9:86:c1:3a: 4a:ce:a3:9c:fb:6c:7d:98:7e:ed:a1:ca:ff:f1:0d: 76:50:1d:fb:e4:ec:2d:b5:ae:7f:f8:dd:b7:06:a2: 5e:36:20:4e:ac:e3:80:5e:ae:62:3d:b8:c9:41:6f: ba:36:ad:1f:31:ec:88:0e:ac:cc:80:ea:2a:01:5b: 2d:f5:fd:80:4c:f8:e3:61:82:9d:be:e6:d4:0e:bb: fe:ee:8e:59:3b:6a:79:9e:92:16:78:57:87:6a:e0: a3:6b:f2:9e:99:47:da:81:2d:88:c9:a5:b2:c5:27: 1e:42:62:f9:57:8a:24:5f:23:fe:e7:9a:e4:45:50: b4:ec:49:31:da:6a:6c:f1:11:31:1a:bd:e1:7d:9a: bb:8a:44:a8:af:1b:c7:a0:41:13:06:0c:4d:3c:59: 73:5e:51:ce:48:16:a9:67:f9:22:6c:fe:f4:2e:2f: a8:e1:e3:09:35:89:10:7f:a5:1d:1a:49:23:f2:70: 7f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DD:8D:FF:BC:AC:89:11:68:D0:6F:B8:6F:0F:93:1F:4B:61:83:5F X509v3 Authority Key Identifier: keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:40:31:85:f3:35:0b:15:15:f6:9d:0f:a0:11:32:63:69:28: fa:82:3a:7f:9e:09:bc:24:c6:4d:53:33:9c:36:2b:35:ad:cc: 0e:ff:c7:63:5b:47:c3:07:93:41:98:2a:04:63:32:be:92:4d: f0:20:6b:1e:e6:f2:87:ee:53:8e:54:ee:d1:7c:69:84:74:de: 5b:cc:a3:17:7f:c9:7a:8a:a4:c0:01:31:c2:9e:f0:70:c2:b0: 97:79:67:3d:af:a7:d9:57:3d:8f:af:81:22:92:78:a0:16:da: 39:b9:65:ea:20:9f:af:3f:2c:67:16:c7:c8:0b:a5:e9:57:10: 6c:c5:0a:9b:2a:45:ee:0c:64:91:6a:10:d8:63:60:cd:16:9c: f7:6b:ee:11:a9:57:5a:ff:a6:ac:78:5a:e4:66:ee:d1:13:5b: de:4d:a6:9e:79:df:ca:db:ff:39:b1:3f:63:b6:e8:f1:50:2c: ee:55:9c:6c:05:99:6f:91:6a:41:c2:08:c6:29:1b:e8:6a:4f: 80:c1:75:cb:01:18:75:1a:fc:05:c8:d1:d2:a8:db:ec:51:88: 0b:27:c7:3e:67:ff:5e:48:86:0b:6c:87:0e:68:05:9e:c4:c1: 64:d4:9a:db:44:bf:38:3b:02:fe:3a:a2:3a:fa:62:5f:84:37: 20:9f:c3:7e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGulWYz6+9S5BfC0PbjxNVWjLevAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4RjBCQjE2NkQxNEU3REQyNUZBNzhDNzg2QjkxN0Qy NjQyQThFNjAeFw0yNTA3MDQwODM5MDBaFw0yNTA3MDgxOTU1MDBaMDMxMTAvBgNV BAMTKDQ4REQ4REZGQkNBQzg5MTE2OEQwNkZCODZGMEY5MzFGNEI2MTgzNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoMDuHmeE2conPwF29S4EnkLN 5N8Mf6ndXcAH6YjoMO+x/zYmnoojnyenodNSQIZHcPRd3yLMOWFTeO8N1ALqMWjN iZID2YbBOkrOo5z7bH2Yfu2hyv/xDXZQHfvk7C21rn/43bcGol42IE6s44BermI9 uMlBb7o2rR8x7IgOrMyA6ioBWy31/YBM+ONhgp2+5tQOu/7ujlk7anmekhZ4V4dq 4KNr8p6ZR9qBLYjJpbLFJx5CYvlXiiRfI/7nmuRFULTsSTHaamzxETEaveF9mruK RKivG8egQRMGDE08WXNeUc5IFqln+SJs/vQuL6jh4wk1iRB/pR0aSSPycH9vAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSN2N/7ysiRFo0G+4bw+TH0thg18wHwYDVR0j BBgwFoAUaI8LsWbRTn3SX6eMeGuRfSZCqOYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zQTdFNjlGNzk2MTY5RTY5QzA2NDU4RDAyMzk4MjY1QUND NkEzMjRCMDNBMTkwQ0ZCRTJDN0NCNzJCRDAyNjA5LzAvNjg4RjBCQjE2NkQxNEU3 REQyNUZBNzhDNzg2QjkxN0QyNjQyQThFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82ODhGMEJCMTY2RDE0RTdERDI1 RkE3OEM3ODZCOTE3RDI2NDJBOEU2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvM0E3RTY5Rjc5NjE2OUU2OUMwNjQ1OEQwMjM5ODI2NUFDQzZBMzI0QjAz QTE5MENGQkUyQzdDQjcyQkQwMjYwOS8wLzY4OEYwQkIxNjZEMTRFN0REMjVGQTc4 Qzc4NkI5MTdEMjY0MkE4RTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzQDGF8zULFRX2nQ+gETJjaSj6 gjp/ngm8JMZNUzOcNis1rcwO/8djW0fDB5NBmCoEYzK+kk3wIGse5vKH7lOOVO7R fGmEdN5bzKMXf8l6iqTAATHCnvBwwrCXeWc9r6fZVz2Pr4EiknigFto5uWXqIJ+v PyxnFsfIC6XpVxBsxQqbKkXuDGSRahDYY2DNFpz3a+4RqVda/6aseFrkZu7RE1ve Taaeed/K2/85sT9jtujxUCzuVZxsBZlvkWpBwgjGKRvoak+AwXXLARh1GvwFyNHS qNvsUYgLJ8c+Z/9eSIYLbIcOaAWexMFk1JrbRL84OwL+OqI6+mJfhDcgn8N+ -----END CERTIFICATE-----Generated at Sat Jul 5 06:52:05 2025 by rpki-client