$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft File: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft (raw, json) Hash identifier: yp30DfbcyESSIDQOe48joxIbH3wiYCXgwGIjnitO8q4= Subject key identifier: 4A:51:A9:D9:07:C5:88:A5:C1:B4:E0:D6:06:34:F5:F2:D0:03:DA:54 Authority key identifier: 0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 Certificate issuer: /CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Certificate serial: 3DC0E6B9171625CCC2500B3C6EEBE56ADC87FF2F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft Manifest number: F7 Signing time: Wed 02 Jul 2025 11:27:08 +0000 Manifest this update: Wed 02 Jul 2025 11:22:08 +0000 Manifest next update: Tue 08 Jul 2025 03:31:08 +0000 Files and hashes: 1: 3139302e3131342e3233322e302f32312d3234203d3e203237393936.roa (hash: ALd1zdR/wdEwWr8XpENniianx6ebOr87tR/bFvCA3As=) 2: 3230302e37312e38382e302f32312d3234203d3e203237393936.roa (hash: r/EnoAJ/QDLRyKJ2eUMGsfZEAwWctbmLg0N+5EAKcZA=) 3: 0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl (hash: +ApaV9FRhQsT7X4Q3dWZfCCPH8DdLpUpK8s8v+r/uMA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c0:e6:b9:17:16:25:cc:c2:50:0b:3c:6e:eb:e5:6a:dc:87:ff:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CB0C776687001A6BEFA9EDD20F9BA6C888EE854 Validity Not Before: Jul 2 11:22:08 2025 GMT Not After : Jul 8 03:31:08 2025 GMT Subject: CN=4A51A9D907C588A5C1B4E0D60634F5F2D003DA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:51:85:41:36:8e:49:dd:bc:6f:18:94:72: aa:fa:af:c5:92:08:f7:83:90:f0:da:17:fe:7b:93: d3:5d:3b:2e:bb:be:37:f6:ec:32:f6:64:f1:e7:ae: a9:7c:49:f9:3b:0d:67:0e:57:13:eb:60:d2:96:0f: 63:a6:a3:48:9e:42:c6:2e:53:bd:72:3d:0b:1d:76: 5f:b9:da:de:82:c9:32:e1:8b:34:5d:70:f3:27:af: f5:bd:61:a6:ab:a5:27:6c:20:ef:70:95:f2:95:00: cc:10:e1:7f:bd:ec:00:c1:4a:21:ac:71:83:e7:ba: b1:cd:69:47:3e:77:8e:61:23:f7:d0:00:1a:6c:98: 2c:f9:0e:71:73:ae:79:f7:ea:7b:a2:98:9c:78:19: 75:e3:0e:8c:a8:e0:6b:e1:27:75:8d:3a:d1:45:5c: fe:7d:ea:c2:34:c7:56:c8:e9:e8:1b:9e:f6:52:1c: 23:99:6e:48:16:e7:2f:40:ae:ca:4f:72:e9:22:1e: 43:d5:35:7f:83:44:61:58:fe:37:23:31:1a:51:28: 17:5c:20:d6:d1:dd:1e:2e:25:8c:69:dd:b2:0f:7a: 4d:0c:64:a2:4a:cb:22:cf:62:d4:b4:49:33:34:54: b6:19:32:26:95:eb:d4:8e:2c:8b:3a:51:a0:b5:86: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:51:A9:D9:07:C5:88:A5:C1:B4:E0:D6:06:34:F5:F2:D0:03:DA:54 X509v3 Authority Key Identifier: keyid:0C:B0:C7:76:68:70:01:A6:BE:FA:9E:DD:20:F9:BA:6C:88:8E:E8:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FF4F3E1A2BF9FA155F338FCBDA5F60422BDB810D749FD1167ECAD8EDB4DB8D1/0/0CB0C776687001A6BEFA9EDD20F9BA6C888EE854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:84:77:4f:3a:ca:9b:7f:fb:32:c5:89:ab:5a:42:81:a0:7a: 7e:83:38:49:33:39:dd:ec:b5:c1:c5:90:0d:51:0c:cc:43:92: d9:5b:c8:19:7f:10:43:7e:a1:d5:cc:37:67:76:9a:f1:f9:e0: d8:e2:a4:eb:60:b2:6c:6c:92:e4:17:a9:0c:47:a1:cb:d6:df: 88:f1:13:5e:2d:f0:7d:77:f4:c7:5d:d1:cc:84:39:66:27:1f: f6:82:ec:0d:a7:c9:51:72:a9:1e:e3:46:f0:bf:05:a3:11:81: fb:f1:f4:50:43:9f:4a:20:e0:52:a4:94:ee:6d:85:c1:b6:39: f9:86:b0:4f:90:f2:ba:c2:50:87:59:4a:63:ed:df:88:1c:1a: 68:8c:1d:fa:49:fe:72:6b:32:49:6d:eb:b0:98:ce:97:e5:66: e6:ce:45:58:1a:01:e0:f9:00:b0:56:09:a1:bc:bd:ef:30:bf: cf:7e:92:69:b2:9f:64:41:f6:61:ff:8a:9c:5f:6c:60:16:f1: 36:3f:20:40:04:05:07:fa:24:ff:bf:cc:10:0c:9e:04:af:8e: 2a:7b:05:25:cc:71:c5:06:70:9c:89:96:21:3a:9e:1c:63:c6: 82:2a:5d:da:5f:0f:1b:d1:56:61:43:8d:f1:dd:4a:39:94:90: 1f:fb:05:13 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPcDmuRcWJczCUAs8buvlatyH/y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENCMEM3NzY2ODcwMDFBNkJFRkE5RUREMjBGOUJBNkM4 ODhFRTg1NDAeFw0yNTA3MDIxMTIyMDhaFw0yNTA3MDgwMzMxMDhaMDMxMTAvBgNV BAMTKDRBNTFBOUQ5MDdDNTg4QTVDMUI0RTBENjA2MzRGNUYyRDAwM0RBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl21GFQTaOSd28bxiUcqr6r8WS CPeDkPDaF/57k9NdOy67vjf27DL2ZPHnrql8Sfk7DWcOVxPrYNKWD2Omo0ieQsYu U71yPQsddl+52t6CyTLhizRdcPMnr/W9YaarpSdsIO9wlfKVAMwQ4X+97ADBSiGs cYPnurHNaUc+d45hI/fQABpsmCz5DnFzrnn36nuimJx4GXXjDoyo4GvhJ3WNOtFF XP596sI0x1bI6egbnvZSHCOZbkgW5y9ArspPcukiHkPVNX+DRGFY/jcjMRpRKBdc INbR3R4uJYxp3bIPek0MZKJKyyLPYtS0STM0VLYZMiaV69SOLIs6UaC1hs8zAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUSlGp2QfFiKXBtODWBjT18tAD2lQwHwYDVR0j BBgwFoAUDLDHdmhwAaa++p7dIPm6bIiO6FQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RkY0RjNFMUEyQkY5RkExNTVGMzM4RkNCREE1RjYwNDIy QkRCODEwRDc0OUZEMTE2N0VDQUQ4RURCNERCOEQxLzAvMENCMEM3NzY2ODcwMDFB NkJFRkE5RUREMjBGOUJBNkM4ODhFRTg1NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQ0IwQzc3NjY4NzAwMUE2QkVG QTlFREQyMEY5QkE2Qzg4OEVFODU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEZGNEYzRTFBMkJGOUZBMTU1RjMzOEZDQkRBNUY2MDQyMkJEQjgxMEQ3 NDlGRDExNjdFQ0FEOEVEQjREQjhEMS8wLzBDQjBDNzc2Njg3MDAxQTZCRUZBOUVE RDIwRjlCQTZDODg4RUU4NTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUhHdPOsqbf/syxYmrWkKBoHp+ gzhJMznd7LXBxZANUQzMQ5LZW8gZfxBDfqHVzDdndprx+eDY4qTrYLJsbJLkF6kM R6HL1t+I8RNeLfB9d/THXdHMhDlmJx/2guwNp8lRcqke40bwvwWjEYH78fRQQ59K IOBSpJTubYXBtjn5hrBPkPK6wlCHWUpj7d+IHBpojB36Sf5yazJJbeuwmM6X5Wbm zkVYGgHg+QCwVgmhvL3vML/PfpJpsp9kQfZh/4qcX2xgFvE2PyBABAUH+iT/v8wQ DJ4Er44qewUlzHHFBnCciZYhOp4cY8aCKl3aXw8b0VZhQ43x3Uo5lJAf+wUT -----END CERTIFICATE-----Generated at Fri Jul 4 11:54:33 2025 by rpki-client