$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft File: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft (raw, json) Hash identifier: 9MXWEGrLo3WbNDRdDX0pxVBAUEhWysFNn+BpHeAvKv4= Subject key identifier: 98:19:77:49:DF:9B:39:FD:FE:96:A6:72:56:42:B0:3E:31:A6:4B:FF Authority key identifier: 2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA Certificate issuer: /CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Certificate serial: 218130613896CB51D2BDC16A209257DCACBA195C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft Manifest number: 0107 Signing time: Sat 02 Aug 2025 00:56:44 +0000 Manifest this update: Sat 02 Aug 2025 00:51:44 +0000 Manifest next update: Thu 07 Aug 2025 09:52:44 +0000 Files and hashes: 1: 323830333a616331303a3a2f33322d3332203d3e20323731383736.roa (hash: QDGdpSjompnHuxfIn7sQ3auNFSevURCMD9/TvRt/Q38=) 2: 2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl (hash: zhdHXM4drvO0/p8874LKgMKc5va2zbNk9Il4U50qkQA=) 3: 3137392e302e39362e302f32322d3234203d3e20323731383736.roa (hash: Cw0vZv2Jgj2wqXBPQxsE5Dhkvc4LI4K/2JStcyGfQ/w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:81:30:61:38:96:cb:51:d2:bd:c1:6a:20:92:57:dc:ac:ba:19:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA Validity Not Before: Aug 2 00:51:44 2025 GMT Not After : Aug 7 09:52:44 2025 GMT Subject: CN=98197749DF9B39FDFE96A6725642B03E31A64BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:c2:9e:cb:70:13:2e:a6:7c:65:13:61:49: fe:8b:c5:a6:c8:e9:04:24:98:1f:96:b8:fb:40:cf: 03:57:2e:87:b1:a8:d5:54:77:83:5c:6f:e7:0f:fd: b5:43:02:d6:b0:ae:d3:a3:be:6d:fd:ac:c8:1c:af: 4d:82:e5:5a:0f:e3:93:34:fe:56:be:98:d2:51:3c: b6:59:cd:db:94:b0:25:0d:e0:de:2f:3a:33:2c:62: fd:73:eb:fa:dd:55:e6:e4:68:e9:89:9c:15:73:3c: 2c:72:b8:03:fd:bd:58:0e:bb:f3:f0:5f:14:0c:50: 7c:a9:b7:5f:1e:ac:44:54:9a:ab:3d:07:8f:b7:d6: 0e:4a:ac:60:89:14:b0:e6:f7:8b:68:1a:3d:5b:fb: b6:e9:4c:a2:66:72:0d:aa:1b:3d:fa:dc:9d:f7:6a: df:8c:6a:d8:de:42:33:5a:cd:aa:3c:29:07:53:8d: 3a:eb:e1:44:05:75:0b:5b:30:6c:3c:f2:0f:e0:df: 10:f0:46:d6:c0:91:69:80:0a:5b:b4:ef:d0:7f:a6: d4:30:ce:8e:e8:5f:98:a0:e2:c9:d5:48:c2:3b:ad: aa:ab:41:59:2e:96:c6:6c:1e:93:52:0e:51:27:cf: ae:81:24:5e:19:d7:f9:50:81:df:a8:45:e3:a6:73: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:19:77:49:DF:9B:39:FD:FE:96:A6:72:56:42:B0:3E:31:A6:4B:FF X509v3 Authority Key Identifier: keyid:2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3b:54:bc:22:51:9a:43:b4:0b:05:fd:ec:86:dc:14:fb:6c: 66:03:c0:c0:e8:45:06:9c:82:f3:c7:d2:57:53:c8:d3:cc:b6: cd:4f:94:ca:df:c8:71:70:08:de:e6:92:05:f2:94:8b:f1:1d: 74:0c:0f:26:36:72:fd:ed:5b:9b:fd:07:b8:50:64:af:d3:32: 60:ab:d4:3f:b0:24:c5:68:82:e7:7d:a9:51:50:72:1f:29:91: 5d:e4:a3:55:50:e6:fd:27:ea:6d:c5:cc:6f:0d:e2:2c:c5:83: e5:ae:5f:62:e0:8e:8d:5e:f5:f2:af:b1:3a:ba:2c:b0:3d:3d: 48:6f:92:03:8f:f0:af:13:00:da:81:a4:57:19:b8:f7:0e:19: 61:6c:8d:81:bb:e2:74:ab:a8:81:76:8a:53:f3:de:e6:ec:43: 15:9c:82:c1:ee:4a:b2:15:49:01:93:94:11:29:4b:f9:8e:22: 27:04:77:96:0d:95:dc:6c:8d:4f:61:26:f6:7a:e3:e1:8c:b3: 7d:62:ca:de:8b:84:05:1a:94:c4:d6:5c:4a:6c:b0:a7:6d:54: c3:01:90:cf:1c:8c:92:4e:20:3b:46:da:33:5b:e4:bf:a0:79: 33:4f:ec:66:10:59:e9:14:29:44:9b:cb:d2:a0:08:87:9c:86: 8f:9f:e0:ee -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIYEwYTiWy1HSvcFqIJJX3Ky6GVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI4NjIwQUNFQTg4NDI0OTU2ODU1MDJDMkRENjU5QTQ0 QkRBQUFGQTAeFw0yNTA4MDIwMDUxNDRaFw0yNTA4MDcwOTUyNDRaMDMxMTAvBgNV BAMTKDk4MTk3NzQ5REY5QjM5RkRGRTk2QTY3MjU2NDJCMDNFMzFBNjRCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtsKey3ATLqZ8ZRNhSf6LxabI 6QQkmB+WuPtAzwNXLoexqNVUd4Ncb+cP/bVDAtawrtOjvm39rMgcr02C5VoP45M0 /la+mNJRPLZZzduUsCUN4N4vOjMsYv1z6/rdVebkaOmJnBVzPCxyuAP9vVgOu/Pw XxQMUHypt18erERUmqs9B4+31g5KrGCJFLDm94toGj1b+7bpTKJmcg2qGz363J33 at+MatjeQjNazao8KQdTjTrr4UQFdQtbMGw88g/g3xDwRtbAkWmAClu079B/ptQw zo7oX5ig4snVSMI7raqrQVkulsZsHpNSDlEnz66BJF4Z1/lQgd+oReOmc9KPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUmBl3Sd+bOf3+lqZyVkKwPjGmS/8wHwYDVR0j BBgwFoAUK4YgrOqIQklWhVAsLdZZpEvaqvowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xRDExMjc2ODM1Mjk0RUFFNTMwQzc4QzQ3MTk2Q0ZGMzBD QTRCQjA0NTU3QzY4Rjg5RTQ0M0NGMzhGNUI2NjBDLzAvMkI4NjIwQUNFQTg4NDI0 OTU2ODU1MDJDMkRENjU5QTQ0QkRBQUFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjg2MjBBQ0VBODg0MjQ5NTY4 NTUwMkMyREQ2NTlBNDRCREFBQUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUQxMTI3NjgzNTI5NEVBRTUzMEM3OEM0NzE5NkNGRjMwQ0E0QkIwNDU1 N0M2OEY4OUU0NDNDRjM4RjVCNjYwQy8wLzJCODYyMEFDRUE4ODQyNDk1Njg1NTAy QzJERDY1OUE0NEJEQUFBRkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8O1S8IlGaQ7QLBf3shtwU+2xm A8DA6EUGnILzx9JXU8jTzLbNT5TK38hxcAje5pIF8pSL8R10DA8mNnL97Vub/Qe4 UGSv0zJgq9Q/sCTFaILnfalRUHIfKZFd5KNVUOb9J+ptxcxvDeIsxYPlrl9i4I6N XvXyr7E6uiywPT1Ib5IDj/CvEwDagaRXGbj3DhlhbI2Bu+J0q6iBdopT897m7EMV nILB7kqyFUkBk5QRKUv5jiInBHeWDZXcbI1PYSb2euPhjLN9Ysrei4QFGpTE1lxK bLCnbVTDAZDPHIySTiA7RtozW+S/oHkzT+xmEFnpFClEm8vSoAiHnIaPn+Du -----END CERTIFICATE-----Generated at Sun Aug 3 08:55:27 2025 by rpki-client