$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft File: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft (raw, json) Hash identifier: QLqO0g9i4wjRLCLLSEvhjA2SUvIJI6M3AeBLTbKx8vo= Subject key identifier: BA:17:CE:45:14:B9:AC:D9:49:A7:E5:3C:71:A1:70:E6:60:19:9C:2D Authority key identifier: 88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 Certificate issuer: /CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Certificate serial: 68596306C01021EDE12350F2058C32A33387E612 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft Manifest number: 2A Signing time: Thu 03 Jul 2025 05:17:57 +0000 Manifest this update: Thu 03 Jul 2025 05:12:57 +0000 Manifest next update: Mon 07 Jul 2025 18:31:57 +0000 Files and hashes: 1: 8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl (hash: VUQ3flsJXU2W0E7EFQjaDbxuqNQyzrcudmK4dvFurc8=) 2: 323830333a6164303a3a2f33322d3332203d3e20323734303634.roa (hash: xT9XwSauYoSUnu1hhUiyvbXy1q8NqQprbVYTgbnc4vM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:59:63:06:c0:10:21:ed:e1:23:50:f2:05:8c:32:a3:33:87:e6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72 Validity Not Before: Jul 3 05:12:57 2025 GMT Not After : Jul 7 18:31:57 2025 GMT Subject: CN=BA17CE4514B9ACD949A7E53C71A170E660199C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:ab:48:67:24:af:1a:93:53:19:a1:20:13: f2:cb:72:64:c8:ee:4e:22:ff:0e:92:f8:45:ac:9c: 8f:ea:95:12:4d:06:8b:a7:bf:ed:19:75:49:bd:42: ae:11:7d:74:23:26:5b:45:4b:58:6e:f4:40:85:2a: 2c:b2:73:34:3f:36:bc:57:42:b6:8f:0a:54:5a:e1: 80:fa:52:02:96:b5:67:f4:0a:17:9e:31:4d:ab:68: c4:50:9f:90:a8:5a:36:e2:b5:e2:5c:bd:a5:87:7d: 71:56:ef:6a:2b:e9:69:b9:e9:62:47:e3:da:65:f3: 74:9b:e9:c8:6b:db:81:d1:d4:33:df:2f:b6:43:57: 07:4c:b9:76:8e:4e:18:74:d9:b1:c5:ca:2c:13:d1: 06:f7:95:a0:f1:33:1f:47:6d:8e:72:ca:02:0e:4b: 6d:4f:b8:33:e3:01:b6:37:d2:d0:0e:02:b4:a9:37: 98:dd:28:0a:88:8d:3b:f4:48:b3:0a:ca:87:6e:26: d6:62:67:1c:51:9b:77:4b:6d:3b:48:1c:b4:14:d3: c6:cc:66:7e:f6:b7:74:dd:96:5d:52:2f:4f:ac:ba: 3f:b3:39:0d:df:47:2c:05:5e:67:4b:aa:5c:4e:e1: 69:ab:4d:64:20:42:50:23:39:c8:4c:11:0e:aa:d4: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:CE:45:14:B9:AC:D9:49:A7:E5:3C:71:A1:70:E6:60:19:9C:2D X509v3 Authority Key Identifier: keyid:88:42:BB:EE:FA:85:FE:37:1B:DE:BC:4D:BB:17:09:EB:67:1B:0A:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A66994B207990B1BD371CEF1144EF774AEE3407A8A2936C5FDE9492A6BEE5D32/0/8842BBEEFA85FE371BDEBC4DBB1709EB671B0A72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9d:93:b8:10:f3:0a:1d:a8:d8:e8:49:85:e9:2a:46:88:a4: 88:e3:e5:a6:f9:3f:03:db:6d:f9:6f:24:08:a2:b5:10:ec:7e: 69:99:01:e1:b0:58:9e:23:40:6d:d4:48:17:29:22:e6:65:53: 54:92:bc:05:56:75:33:39:70:11:7c:e0:66:1e:0c:61:2c:ab: d5:1e:57:4a:e1:2d:c5:de:79:ce:db:46:11:83:72:f2:ff:80: 15:89:1c:11:ac:ac:0c:1b:67:b8:ef:f7:14:4f:80:d5:70:6f: b6:37:e5:c6:4a:d4:9d:71:63:fe:14:f9:41:e9:ba:77:8a:a5: 56:ca:a6:fd:4c:62:40:e4:0b:b2:de:ce:3a:69:7d:29:ed:a6: 42:75:75:2c:0b:f3:b3:70:37:9e:60:23:48:4f:50:2d:32:72: 89:cb:d2:6f:54:80:38:f6:47:b1:60:3d:96:de:b9:e3:d1:5f: b5:e1:a9:2a:c2:45:90:96:5b:e4:5b:d4:20:3a:04:69:b0:2c: da:e1:41:75:56:d6:01:38:9f:a7:00:47:58:28:3c:c6:44:76: f4:39:bc:91:b5:ee:4f:5c:73:80:5a:70:d4:61:64:ee:4d:c2: e3:b7:18:05:ea:9c:b9:a5:3a:db:30:ec:2f:8e:7a:b3:a0:09: dd:0c:39:23 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaFljBsAQIe3hI1DyBYwyozOH5hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0MkJCRUVGQTg1RkUzNzFCREVCQzREQkIxNzA5RUI2 NzFCMEE3MjAeFw0yNTA3MDMwNTEyNTdaFw0yNTA3MDcxODMxNTdaMDMxMTAvBgNV BAMTKEJBMTdDRTQ1MTRCOUFDRDk0OUE3RTUzQzcxQTE3MEU2NjAxOTlDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5qtIZySvGpNTGaEgE/LLcmTI 7k4i/w6S+EWsnI/qlRJNBounv+0ZdUm9Qq4RfXQjJltFS1hu9ECFKiyyczQ/NrxX QraPClRa4YD6UgKWtWf0CheeMU2raMRQn5CoWjbiteJcvaWHfXFW72or6Wm56WJH 49pl83Sb6chr24HR1DPfL7ZDVwdMuXaOThh02bHFyiwT0Qb3laDxMx9HbY5yygIO S21PuDPjAbY30tAOArSpN5jdKAqIjTv0SLMKyoduJtZiZxxRm3dLbTtIHLQU08bM Zn72t3Tdll1SL0+suj+zOQ3fRywFXmdLqlxO4WmrTWQgQlAjOchMEQ6q1ECbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUuhfORRS5rNlJp+U8caFw5mAZnC0wHwYDVR0j BBgwFoAUiEK77vqF/jcb3rxNuxcJ62cbCnIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNjY5OTRCMjA3OTkwQjFCRDM3MUNFRjExNDRFRjc3NEFF RTM0MDdBOEEyOTM2QzVGREU5NDkyQTZCRUU1RDMyLzAvODg0MkJCRUVGQTg1RkUz NzFCREVCQzREQkIxNzA5RUI2NzFCMEE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84ODQyQkJFRUZBODVGRTM3MUJE RUJDNERCQjE3MDlFQjY3MUIwQTcyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTY2OTk0QjIwNzk5MEIxQkQzNzFDRUYxMTQ0RUY3NzRBRUUzNDA3QThB MjkzNkM1RkRFOTQ5MkE2QkVFNUQzMi8wLzg4NDJCQkVFRkE4NUZFMzcxQkRFQkM0 REJCMTcwOUVCNjcxQjBBNzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClnZO4EPMKHajY6EmF6SpGiKSI 4+Wm+T8D2235byQIorUQ7H5pmQHhsFieI0Bt1EgXKSLmZVNUkrwFVnUzOXARfOBm HgxhLKvVHldK4S3F3nnO20YRg3Ly/4AViRwRrKwMG2e47/cUT4DVcG+2N+XGStSd cWP+FPlB6bp3iqVWyqb9TGJA5Auy3s46aX0p7aZCdXUsC/OzcDeeYCNIT1AtMnKJ y9JvVIA49kexYD2W3rnj0V+14akqwkWQllvkW9QgOgRpsCza4UF1VtYBOJ+nAEdY KDzGRHb0ObyRte5PXHOAWnDUYWTuTcLjtxgF6py5pTrbMOwvjnqzoAndDDkj -----END CERTIFICATE-----Generated at Fri Jul 4 05:34:19 2025 by rpki-client