$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: 6zUGGwUBzQ17DL7Ayt5BwX30AbWAwD0OGLCDhXItOTM= Subject key identifier: A3:A3:9E:C2:8A:04:84:8C:1D:DD:68:87:D9:67:B3:52:18:4C:6E:AC Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 5BC914C50B6DD6413421DE40237482EB2A59F57B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: FD Signing time: Wed 02 Jul 2025 00:15:09 +0000 Manifest this update: Wed 02 Jul 2025 00:10:09 +0000 Manifest next update: Mon 07 Jul 2025 23:04:09 +0000 Files and hashes: 1: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) 2: 34352e3136342e32322e302f32342d3234203d3e203233343730.roa (hash: 575QiKowVCRz4op0BzHVRduNC7OYEq4japp+XRIL7j0=) 3: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: RbNjne0D13dPpot1kUVlnT5ib0g3quM8kxbKunE6pRo=) 4: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) 5: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c9:14:c5:0b:6d:d6:41:34:21:de:40:23:74:82:eb:2a:59:f5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Jul 2 00:10:09 2025 GMT Not After : Jul 7 23:04:09 2025 GMT Subject: CN=A3A39EC28A04848C1DDD6887D967B352184C6EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:d3:11:2e:8c:b8:ee:56:56:3c:38:19:cc: 87:ff:75:0d:cf:a9:3b:5b:6a:ae:11:ac:60:6f:2b: 12:50:c0:79:ce:d2:65:9a:c8:3f:20:a5:00:96:d6: 14:72:0c:da:15:47:a8:ee:8c:bc:6a:2d:73:05:c5: 68:6e:3d:c4:66:b9:99:05:34:26:be:f3:92:3d:e0: 53:5f:3e:b6:32:80:a6:8b:47:e1:1a:ad:d9:77:2d: 99:b4:89:44:0b:ea:39:ce:99:62:3d:e9:87:3d:e0: 69:b6:fc:69:9c:b6:be:58:64:5f:52:75:76:20:fe: 94:6c:b0:a8:ba:00:de:74:b0:57:8b:64:54:f4:9e: c7:57:de:11:d0:f0:71:0c:ba:81:bd:12:e7:b1:52: 1d:d2:e4:35:ce:64:3b:bc:4b:1e:7a:c4:69:b3:3d: cb:9b:18:e0:3f:71:b6:af:f3:9a:11:3e:5a:4d:cf: 3e:45:c6:e5:4a:02:ca:2f:7c:67:72:63:02:c6:32: ea:2c:af:3c:24:62:65:12:27:71:ee:08:d0:0b:f9: 03:a3:ab:92:87:8f:92:20:73:1b:04:c8:a5:0f:31: 65:9e:15:c2:7e:64:05:75:5e:d8:76:ce:ab:ff:53: e3:a5:10:59:6b:11:8b:4c:f7:8f:7c:7d:67:83:de: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A3:9E:C2:8A:04:84:8C:1D:DD:68:87:D9:67:B3:52:18:4C:6E:AC X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e2:97:17:46:e0:a4:6d:33:6e:e0:1a:2d:f0:35:89:b7:da: 13:91:49:90:5e:84:e8:0f:8a:c9:67:1a:81:1b:0c:ad:26:47: ef:29:70:43:c4:59:b6:30:da:b9:d7:07:b1:3c:4b:07:cd:6c: c6:c3:a9:2e:29:63:ba:89:cf:b3:84:a6:bc:33:4f:86:2b:a0: 2a:de:16:33:a9:b2:93:d8:05:53:f4:e0:47:f3:2e:01:86:08: eb:a4:1f:63:a9:af:75:43:b7:ec:31:5c:41:72:42:3f:64:ed: 99:4e:61:e3:68:3c:63:10:77:13:c0:26:e1:59:b6:cb:7b:1c: ed:6b:15:19:c6:59:13:d6:68:14:cd:49:cb:a7:83:b5:f2:67: e1:86:73:6d:b2:c8:3e:1e:b4:4c:6c:b0:17:c9:d2:9f:9d:00: 87:32:ca:41:7e:0c:05:d5:65:a9:ef:93:e5:8a:30:d2:43:85: 06:d6:6e:99:a5:86:03:e7:02:e3:70:92:69:63:7c:5f:46:09: d4:f4:f5:e8:8f:97:7f:61:44:e3:c6:df:e3:ea:85:da:ff:87: b8:d0:d3:c3:53:5e:7c:ed:f0:59:17:23:97:4d:af:21:59:cb: 18:33:26:6b:d6:1f:f9:d6:07:09:11:27:d2:f4:0e:72:af:fa: 1a:bd:0b:dd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUW8kUxQtt1kE0Id5AI3SC6ypZ9XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTA3MDIwMDEwMDlaFw0yNTA3MDcyMzA0MDlaMDMxMTAvBgNV BAMTKEEzQTM5RUMyOEEwNDg0OEMxRERENjg4N0Q5NjdCMzUyMTg0QzZFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cdMRLoy47lZWPDgZzIf/dQ3P qTtbaq4RrGBvKxJQwHnO0mWayD8gpQCW1hRyDNoVR6jujLxqLXMFxWhuPcRmuZkF NCa+85I94FNfPrYygKaLR+Eardl3LZm0iUQL6jnOmWI96Yc94Gm2/Gmctr5YZF9S dXYg/pRssKi6AN50sFeLZFT0nsdX3hHQ8HEMuoG9EuexUh3S5DXOZDu8Sx56xGmz PcubGOA/cbav85oRPlpNzz5FxuVKAsovfGdyYwLGMuosrzwkYmUSJ3HuCNAL+QOj q5KHj5IgcxsEyKUPMWWeFcJ+ZAV1Xth2zqv/U+OlEFlrEYtM9498fWeD3u59AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUo6OewooEhIwd3WiH2WezUhhMbqwwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBR4pcXRuCkbTNu4Bot8DWJt9oT kUmQXoToD4rJZxqBGwytJkfvKXBDxFm2MNq51wexPEsHzWzGw6kuKWO6ic+zhKa8 M0+GK6Aq3hYzqbKT2AVT9OBH8y4BhgjrpB9jqa91Q7fsMVxBckI/ZO2ZTmHjaDxj EHcTwCbhWbbLexztaxUZxlkT1mgUzUnLp4O18mfhhnNtssg+HrRMbLAXydKfnQCH MspBfgwF1WWp75PlijDSQ4UG1m6ZpYYD5wLjcJJpY3xfRgnU9PXoj5d/YUTjxt/j 6oXa/4e40NPDU1587fBZFyOXTa8hWcsYMyZr1h/51gcJESfS9A5yr/oavQvd -----END CERTIFICATE-----Generated at Fri Jul 4 08:53:57 2025 by rpki-client