$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft File: FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft (raw, json) Hash identifier: aN38bk1Cw/UYR9/I+7nsGuFRi0A3LetRHYkkZ5v6YTY= Subject key identifier: 22:E9:9B:55:98:70:7F:8C:30:CA:D9:73:28:5C:B2:5E:A8:EE:C1:98 Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90 Certificate issuer: /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790 Certificate serial: 6915DC4973978116C193893F6971326538B9694A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft Manifest number: EC Signing time: Sat 21 Jun 2025 06:38:56 +0000 Manifest this update: Sat 21 Jun 2025 06:33:56 +0000 Manifest next update: Wed 25 Jun 2025 17:52:56 +0000 Files and hashes: 1: FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl (hash: eWOMhm4cuVeA7jmgno8yRyEPBR5Q1cY935nOpOtGObI=) 2: 34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa (hash: o1CtWFmm1iYAEHlmYU6qbJHOxBRSEcrAqO3Y+pjmBQI=) 3: 323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa (hash: ZfOff7SqfHXRn/eHzIpB9NJ8eiuSXWQf5FRRWZW+WMY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 17:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:15:dc:49:73:97:81:16:c1:93:89:3f:69:71:32:65:38:b9:69:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790 Validity Not Before: Jun 21 06:33:56 2025 GMT Not After : Jun 25 17:52:56 2025 GMT Subject: CN=22E99B5598707F8C30CAD973285CB25EA8EEC198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:d0:1c:f0:91:b3:34:61:9e:3e:ac:5e:8e: bd:a6:ff:39:1c:59:5f:01:dd:42:89:0d:1d:79:6f: 35:12:ca:33:33:da:fa:50:c4:e2:cd:08:e1:87:c3: 9c:38:e2:ac:f8:da:ed:fa:99:e6:9d:6e:9f:e5:54: 28:0e:ec:28:93:1b:11:da:69:43:2b:bd:f5:d1:12: fb:d7:81:b7:28:8d:d4:53:8b:25:22:0d:60:25:8d: 9b:4b:81:1d:76:b3:0d:fb:1e:89:f9:23:0e:4b:56: 19:2e:57:ef:5a:0c:95:98:92:5e:61:ed:e8:28:da: e0:0d:aa:d2:db:0e:8a:37:f2:2c:09:33:16:a4:df: 51:e3:b9:c3:78:ab:9c:4a:e8:8d:3e:f2:e4:00:f6: 21:49:81:c2:1e:cc:27:e6:a8:ff:f2:6b:12:22:f5: b7:9d:09:bb:43:f5:4a:90:09:9f:76:0d:2b:58:88: 1e:a3:24:5f:c3:be:39:d0:94:0d:fa:d6:57:64:77: 77:7a:d4:f1:b0:d1:94:e7:d1:b2:eb:b2:f9:16:71: c2:ca:ac:75:1b:06:7d:71:72:fe:df:1a:04:29:a2: 15:5d:25:ea:4c:68:11:d6:8f:54:f1:b4:5a:c6:8f: df:b4:b8:d7:db:13:99:ed:e2:a4:08:55:08:05:e4: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E9:9B:55:98:70:7F:8C:30:CA:D9:73:28:5C:B2:5E:A8:EE:C1:98 X509v3 Authority Key Identifier: keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0a:a7:bf:08:68:83:0a:2a:fc:8a:66:57:69:56:21:72:eb: 3a:d8:fb:f0:ed:4e:d8:81:28:ec:82:f5:cc:8c:75:cb:23:00: 5f:ea:0b:b5:90:7e:79:9d:1e:f9:b0:c3:c0:9d:f9:44:b1:69: 1d:6e:2d:67:59:d8:af:97:99:a9:fa:9b:76:da:77:b3:1f:97: 09:ce:8a:02:4c:b1:ae:bf:aa:0e:de:d3:67:d2:71:0b:c3:fb: 33:37:99:ec:d5:bb:2c:93:7c:f0:b2:c3:eb:8b:b8:27:85:d3: f2:89:34:a7:aa:10:f8:1c:55:8a:c0:4c:2e:8a:f7:85:c8:c9: 1a:74:ce:44:d0:0d:f6:76:b9:dd:ea:58:1d:b4:eb:99:49:ea: 35:c0:99:35:7d:8c:af:45:70:0c:0d:b0:56:42:e2:7e:8b:9a: 1a:ff:84:0d:ad:ac:11:11:5b:b4:de:51:d3:a9:75:05:ca:6e: cf:db:19:d5:da:a9:4a:0e:cc:80:8a:fe:41:0a:b4:31:98:f0: 0d:76:21:25:c9:01:36:bf:7c:4f:f7:fa:e5:c5:24:88:fb:71: e0:a4:17:e4:ba:a1:53:c2:6e:1e:22:8e:68:31:26:ab:5b:aa: 37:f8:a6:46:23:86:70:f2:8a:f5:dc:b0:4a:54:d6:74:06:09: 64:16:cf:47 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUaRXcSXOXgRbBk4k/aXEyZTi5aUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDFFMTRENUNGNDdBRTY1RkJGQzUzQjdGNTc3Q0VD NzFCQjc5MDAeFw0yNTA2MjEwNjMzNTZaFw0yNTA2MjUxNzUyNTZaMDMxMTAvBgNV BAMTKDIyRTk5QjU1OTg3MDdGOEMzMENBRDk3MzI4NUNCMjVFQThFRUMxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YdAc8JGzNGGePqxejr2m/zkc WV8B3UKJDR15bzUSyjMz2vpQxOLNCOGHw5w44qz42u36meadbp/lVCgO7CiTGxHa aUMrvfXREvvXgbcojdRTiyUiDWAljZtLgR12sw37Hon5Iw5LVhkuV+9aDJWYkl5h 7ego2uANqtLbDoo38iwJMxak31HjucN4q5xK6I0+8uQA9iFJgcIezCfmqP/yaxIi 9bedCbtD9UqQCZ92DStYiB6jJF/DvjnQlA361ldkd3d61PGw0ZTn0bLrsvkWccLK rHUbBn1xcv7fGgQpohVdJepMaBHWj1TxtFrGj9+0uNfbE5nt4qQIVQgF5GZvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUIumbVZhwf4wwytlzKFyyXqjuwZgwHwYDVR0j BBgwFoAU/5QeFNXPR65l+/xTt/V3zscbt5AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xODhBMUQ0OThDMzAxQUExNTZGODExQzdDRDhFMjI1OTBB QTU0NkQ1REZBM0VGMDdDRDY1MDUzMTQ5Nzg3ODdDLzAvRkY5NDFFMTRENUNGNDdB RTY1RkJGQzUzQjdGNTc3Q0VDNzFCQjc5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjk0MUUxNEQ1Q0Y0N0FFNjVG QkZDNTNCN0Y1NzdDRUM3MUJCNzkwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTg4QTFENDk4QzMwMUFBMTU2RjgxMUM3Q0Q4RTIyNTkwQUE1NDZENURG QTNFRjA3Q0Q2NTA1MzE0OTc4Nzg3Qy8wL0ZGOTQxRTE0RDVDRjQ3QUU2NUZCRkM1 M0I3RjU3N0NFQzcxQkI3OTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbCqe/CGiDCir8imZXaVYhcus6 2Pvw7U7YgSjsgvXMjHXLIwBf6gu1kH55nR75sMPAnflEsWkdbi1nWdivl5mp+pt2 2nezH5cJzooCTLGuv6oO3tNn0nELw/szN5ns1bssk3zwssPri7gnhdPyiTSnqhD4 HFWKwEwuiveFyMkadM5E0A32drnd6lgdtOuZSeo1wJk1fYyvRXAMDbBWQuJ+i5oa /4QNrawREVu03lHTqXUFym7P2xnV2qlKDsyAiv5BCrQxmPANdiElyQE2v3xP9/rl xSSI+3HgpBfkuqFTwm4eIo5oMSarW6o3+KZGI4Zw8or13LBKVNZ0BglkFs9H -----END CERTIFICATE-----Generated at Sun Jun 22 13:35:22 2025 by rpki-client