$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft File: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft (raw, json) Hash identifier: 44LrQcTY50LQoQAxWsPiYAvTLxf2qlYmrqqCEiZs8k0= Subject key identifier: 8B:B8:A6:A8:50:E1:39:CD:6B:50:F2:94:80:C9:31:83:1D:02:6F:B1 Authority key identifier: 2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E Certificate issuer: /CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Certificate serial: 21FFCE1A79D6AC2776CD84C68D8B13EFCF44602E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft Manifest number: EB Signing time: Sat 21 Jun 2025 23:49:18 +0000 Manifest this update: Sat 21 Jun 2025 23:44:18 +0000 Manifest next update: Fri 27 Jun 2025 14:19:18 +0000 Files and hashes: 1: 34352e3233302e33362e302f32332d3234203d3e20323636373133.roa (hash: kvXq/7xFBcYihjCboY6sXmggXJS5RFgBzNm9B4FD6Yk=) 2: 2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl (hash: Xg/hQRGuigEj0uauF7g0XC7SIgLnBxUqZLaSNgELEio=) 3: 323830333a383332303a3a2f33322d3332203d3e20323636373133.roa (hash: g6DNKjZekU2uDpQLAA16qySYRWAhC+pOHrCuJlds2qw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Jun 2025 14:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ff:ce:1a:79:d6:ac:27:76:cd:84:c6:8d:8b:13:ef:cf:44:60:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E Validity Not Before: Jun 21 23:44:18 2025 GMT Not After : Jun 27 14:19:18 2025 GMT Subject: CN=8BB8A6A850E139CD6B50F29480C931831D026FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a4:d5:86:45:9c:d2:2a:4e:75:c5:16:91:1c: 04:cb:31:1a:64:06:77:5a:7f:84:6d:e2:b0:05:da: 2b:e8:bc:64:d7:c9:ff:64:5c:5e:80:a2:eb:da:35: cf:88:6f:15:8d:a0:c4:90:c5:3a:eb:7a:51:38:0b: 60:16:c6:91:81:48:e9:c3:ef:6d:5d:c9:27:60:2a: 21:d3:f4:2e:25:99:d2:3e:c8:ca:6c:66:4f:1b:17: f0:d9:06:68:2e:d0:ec:30:32:f0:60:d9:a8:08:d3: 2a:34:6b:3d:a9:e7:61:d1:f6:bd:e4:c5:ed:da:52: 67:aa:f3:22:74:a0:19:c4:97:53:af:60:90:74:66: d0:56:6c:11:f4:b9:31:34:4d:44:cb:06:86:fc:da: af:25:81:72:78:7f:ec:57:78:43:ab:92:5d:8f:b7: 5b:b7:99:58:10:1d:2b:dd:d1:1c:aa:2b:6e:c4:89: aa:9d:32:33:80:86:2d:56:73:3d:8f:e9:80:bd:d9: 35:1b:83:ef:e8:36:ea:1a:97:4f:0e:71:81:65:90: a4:13:4c:de:0b:ee:4f:34:e9:dd:53:56:4e:e7:f1: 37:5b:df:d0:52:31:24:b4:3e:d0:d4:0a:b2:bf:45: 11:5e:5e:c6:71:4c:b2:8c:4d:90:36:10:40:ae:84: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B8:A6:A8:50:E1:39:CD:6B:50:F2:94:80:C9:31:83:1D:02:6F:B1 X509v3 Authority Key Identifier: keyid:2D:F8:BA:98:EB:21:4B:EA:AB:30:C1:BF:DE:D1:85:EE:2A:0F:86:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5009A1F4D1BC0FFE06B8723CCF13FD2C791404B29F46C2D766D42350059DEBD8/0/2DF8BA98EB214BEAAB30C1BFDED185EE2A0F869E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c6:d2:ea:6c:81:1d:87:82:e2:5d:90:51:67:94:3c:43:0e: 43:dd:9f:10:19:9b:d6:1f:a0:44:53:a3:67:49:2b:f0:b0:64: 81:f4:49:cb:10:04:cc:04:76:04:78:2d:5c:89:e8:af:c5:b0: 4e:a2:81:5f:f1:0f:4e:d1:63:8a:1f:1a:55:e2:8f:8a:1b:5c: d9:19:d2:6f:71:fc:83:f8:4b:2e:d6:e2:18:ca:2c:1a:a0:7c: 78:e1:7b:39:f8:dc:a6:03:02:30:bc:fc:a0:e1:92:0f:52:2b: d9:3c:5f:c4:2a:88:0c:dd:bf:2d:8e:de:bd:c3:8f:79:dc:84: 36:9c:5a:a6:54:a1:d2:b0:18:69:1f:19:b4:46:82:e6:82:54: c2:27:58:be:21:71:10:15:88:5f:a6:77:40:76:05:c2:3a:2a: 16:83:fb:0b:26:88:ef:35:26:8d:87:8d:ee:4a:71:1c:c0:5c: ab:c7:8c:e6:52:50:54:68:b4:24:8f:70:44:cc:6b:04:a9:9e: 32:d2:a3:95:5b:84:32:cd:3e:46:8e:0c:78:f9:10:51:1f:22: b2:33:b4:e8:7d:f4:b2:f5:64:ee:8b:d7:69:31:00:42:12:ac: 9c:3c:f2:40:94:f9:d1:b7:2d:48:f8:ac:44:3a:ae:9b:9e:be: 98:b1:f3:62 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIf/OGnnWrCd2zYTGjYsT789EYC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGOEJBOThFQjIxNEJFQUFCMzBDMUJGREVEMTg1RUUy QTBGODY5RTAeFw0yNTA2MjEyMzQ0MThaFw0yNTA2MjcxNDE5MThaMDMxMTAvBgNV BAMTKDhCQjhBNkE4NTBFMTM5Q0Q2QjUwRjI5NDgwQzkzMTgzMUQwMjZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbpNWGRZzSKk51xRaRHATLMRpk Bndaf4Rt4rAF2ivovGTXyf9kXF6AouvaNc+IbxWNoMSQxTrrelE4C2AWxpGBSOnD 721dySdgKiHT9C4lmdI+yMpsZk8bF/DZBmgu0OwwMvBg2agI0yo0az2p52HR9r3k xe3aUmeq8yJ0oBnEl1OvYJB0ZtBWbBH0uTE0TUTLBob82q8lgXJ4f+xXeEOrkl2P t1u3mVgQHSvd0RyqK27EiaqdMjOAhi1Wcz2P6YC92TUbg+/oNuoal08OcYFlkKQT TN4L7k806d1TVk7n8Tdb39BSMSS0PtDUCrK/RRFeXsZxTLKMTZA2EECuhDVnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUi7imqFDhOc1rUPKUgMkxgx0Cb7EwHwYDVR0j BBgwFoAULfi6mOshS+qrMMG/3tGF7ioPhp4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MDA5QTFGNEQxQkMwRkZFMDZCODcyM0NDRjEzRkQyQzc5 MTQwNEIyOUY0NkMyRDc2NkQ0MjM1MDA1OURFQkQ4LzAvMkRGOEJBOThFQjIxNEJF QUFCMzBDMUJGREVEMTg1RUUyQTBGODY5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREY4QkE5OEVCMjE0QkVBQUIz MEMxQkZERUQxODVFRTJBMEY4NjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTAwOUExRjREMUJDMEZGRTA2Qjg3MjNDQ0YxM0ZEMkM3OTE0MDRCMjlG NDZDMkQ3NjZENDIzNTAwNTlERUJEOC8wLzJERjhCQTk4RUIyMTRCRUFBQjMwQzFC RkRFRDE4NUVFMkEwRjg2OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByxtLqbIEdh4LiXZBRZ5Q8Qw5D 3Z8QGZvWH6BEU6NnSSvwsGSB9EnLEATMBHYEeC1cieivxbBOooFf8Q9O0WOKHxpV 4o+KG1zZGdJvcfyD+Esu1uIYyiwaoHx44Xs5+NymAwIwvPyg4ZIPUivZPF/EKogM 3b8tjt69w4953IQ2nFqmVKHSsBhpHxm0RoLmglTCJ1i+IXEQFYhfpndAdgXCOioW g/sLJojvNSaNh43uSnEcwFyrx4zmUlBUaLQkj3BEzGsEqZ4y0qOVW4QyzT5Gjgx4 +RBRHyKyM7ToffSy9WTui9dpMQBCEqycPPJAlPnRty1I+KxEOq6bnr6YsfNi -----END CERTIFICATE-----Generated at Mon Jun 23 09:11:09 2025 by rpki-client