$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft File: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft (raw, json) Hash identifier: JKnTeIyA+Sy+sXV+/tb2KMk3GF1xf/rhHTPAv7Z9Bws= Subject key identifier: BA:2D:63:73:B4:19:0D:D7:E0:EF:87:EB:5B:D7:33:58:67:0B:A1:B4 Authority key identifier: 68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37 Certificate issuer: /CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937 Certificate serial: 6F589571AA3BEE46EC3BAA77074D5FC70B3F3989 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft Manifest number: E8 Signing time: Sat 21 Jun 2025 15:34:15 +0000 Manifest this update: Sat 21 Jun 2025 15:29:15 +0000 Manifest next update: Wed 25 Jun 2025 20:01:15 +0000 Files and hashes: 1: 323830333a373339303a3a2f34382d3438203d3e203237373633.roa (hash: 0o8RGWqfKN0fRTpRONUkAQHkwVbnvvTz+HWYd70HeSc=) 2: 68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl (hash: tCK0l0bVsOuIFNKPTPXdejSyS8WRhFkPWfiCujmWua4=) 3: 3230302e32352e3232342e302f31392d3234203d3e203237373633.roa (hash: uJjNy8XbLIhMUXWrEaXKzaGqSNEJyYbVqDtNw9Ok8V8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:58:95:71:aa:3b:ee:46:ec:3b:aa:77:07:4d:5f:c7:0b:3f:39:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937 Validity Not Before: Jun 21 15:29:15 2025 GMT Not After : Jun 25 20:01:15 2025 GMT Subject: CN=BA2D6373B4190DD7E0EF87EB5BD73358670BA1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:a6:4d:1a:70:19:8c:54:5a:4a:91:f0:15: 85:d3:9a:85:70:25:5f:b6:4f:dc:60:60:4e:e6:9a: 6a:02:5f:04:c7:c5:75:1a:a5:02:e6:de:83:24:5e: c3:6d:d7:82:44:f6:d0:d1:6d:c7:78:0c:36:df:64: 9f:6b:52:8f:0d:69:f4:5f:8d:d0:d5:8d:7b:03:11: 9c:0b:2e:94:b4:74:fb:12:7c:eb:ea:5f:e1:7c:a6: 8e:a0:d1:20:c6:24:83:0d:f5:87:e2:6a:ce:6e:ac: f9:9b:bb:53:e9:c3:51:08:aa:8f:12:17:5d:94:de: 33:45:99:32:ba:11:ef:0d:85:79:aa:6d:ad:8b:6f: 62:06:84:d0:d0:58:18:6c:b0:85:8e:40:75:66:d3: 07:87:41:86:ba:44:a8:35:53:ca:fa:fc:51:ec:36: 06:10:32:30:3f:5b:5e:a7:8c:78:ab:c2:f5:5f:24: 2d:24:cf:43:67:7d:1e:a2:39:e5:ee:3e:f7:67:ce: 12:6f:b2:83:3c:24:c4:e9:ff:7a:47:1a:43:b4:6a: 9e:17:2c:14:43:96:97:b2:34:e3:e4:51:9a:73:64: 7c:70:11:78:53:12:9f:db:b5:4d:8f:cc:1f:1e:e5: a3:09:23:ec:bb:a5:fb:1b:0b:1a:f1:d0:b4:64:82: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2D:63:73:B4:19:0D:D7:E0:EF:87:EB:5B:D7:33:58:67:0B:A1:B4 X509v3 Authority Key Identifier: keyid:68:EA:53:CC:6A:42:D9:D3:FB:3D:1D:F2:61:84:69:C1:F3:2D:69:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67D057FB11D3CD98343BF30FF505BE80ECAE3F0FD50826853957BB4D4A82F9DA/0/68EA53CC6A42D9D3FB3D1DF2618469C1F32D6937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e6:3d:79:af:1e:f6:bc:89:13:a1:1c:66:ba:a4:60:ae:5a: 19:b0:1d:4e:4b:27:e1:cd:2a:96:dd:cb:dc:dd:62:24:40:a9: 96:bc:17:c8:68:c5:41:11:4a:8a:0b:a4:70:d0:0d:74:f3:5d: 1a:82:bc:b5:99:47:61:a5:3b:d7:0f:24:76:68:e1:49:c5:09: 74:ce:e8:01:a5:dd:72:47:db:59:12:81:75:96:0c:22:37:1c: 65:9d:1a:b4:a1:c8:65:26:5b:13:70:10:47:d4:b0:7f:b7:b5: b4:e3:a4:d4:2c:bb:52:cb:f4:79:01:f5:58:77:06:69:5d:06: 93:be:3c:fb:32:da:d9:92:38:ef:64:1a:d3:4a:cb:ba:3d:f0: 71:8f:3d:c0:73:2f:e2:8c:09:8b:70:3c:93:d7:a1:9d:01:ac: ae:ea:d0:43:63:27:02:94:68:12:7a:08:d1:7e:4a:9f:2b:7d: d0:7e:29:5d:f7:95:63:dc:13:00:b0:96:bd:07:dd:ef:3a:86: aa:bb:c9:a7:a8:fa:22:37:c0:af:65:d9:45:d6:27:cd:62:55: 02:88:92:3c:a8:f0:e6:04:5b:b2:97:a0:03:4d:0e:00:60:c0: 7d:00:01:a7:55:ee:79:ee:7a:41:51:55:75:5d:bb:7f:02:5f: 82:57:4a:8f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUb1iVcao77kbsO6p3B01fxws/OYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQTUzQ0M2QTQyRDlEM0ZCM0QxREYyNjE4NDY5QzFG MzJENjkzNzAeFw0yNTA2MjExNTI5MTVaFw0yNTA2MjUyMDAxMTVaMDMxMTAvBgNV BAMTKEJBMkQ2MzczQjQxOTBERDdFMEVGODdFQjVCRDczMzU4NjcwQkExQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSKZNGnAZjFRaSpHwFYXTmoVw JV+2T9xgYE7mmmoCXwTHxXUapQLm3oMkXsNt14JE9tDRbcd4DDbfZJ9rUo8NafRf jdDVjXsDEZwLLpS0dPsSfOvqX+F8po6g0SDGJIMN9Yfias5urPmbu1Ppw1EIqo8S F12U3jNFmTK6Ee8NhXmqba2Lb2IGhNDQWBhssIWOQHVm0weHQYa6RKg1U8r6/FHs NgYQMjA/W16njHirwvVfJC0kz0NnfR6iOeXuPvdnzhJvsoM8JMTp/3pHGkO0ap4X LBRDlpeyNOPkUZpzZHxwEXhTEp/btU2PzB8e5aMJI+y7pfsbCxrx0LRkgk3fAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUui1jc7QZDdfg74frW9czWGcLobQwHwYDVR0j BBgwFoAUaOpTzGpC2dP7PR3yYYRpwfMtaTcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0QwNTdGQjExRDNDRDk4MzQzQkYzMEZGNTA1QkU4MEVD QUUzRjBGRDUwODI2ODUzOTU3QkI0RDRBODJGOURBLzAvNjhFQTUzQ0M2QTQyRDlE M0ZCM0QxREYyNjE4NDY5QzFGMzJENjkzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OEVBNTNDQzZBNDJEOUQzRkIz RDFERjI2MTg0NjlDMUYzMkQ2OTM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdEMDU3RkIxMUQzQ0Q5ODM0M0JGMzBGRjUwNUJFODBFQ0FFM0YwRkQ1 MDgyNjg1Mzk1N0JCNEQ0QTgyRjlEQS8wLzY4RUE1M0NDNkE0MkQ5RDNGQjNEMURG MjYxODQ2OUMxRjMyRDY5MzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAt5j15rx72vIkToRxmuqRgrloZ sB1OSyfhzSqW3cvc3WIkQKmWvBfIaMVBEUqKC6Rw0A10810agry1mUdhpTvXDyR2 aOFJxQl0zugBpd1yR9tZEoF1lgwiNxxlnRq0ochlJlsTcBBH1LB/t7W046TULLtS y/R5AfVYdwZpXQaTvjz7MtrZkjjvZBrTSsu6PfBxjz3Acy/ijAmLcDyT16GdAayu 6tBDYycClGgSegjRfkqfK33Qfild95Vj3BMAsJa9B93vOoaqu8mnqPoiN8CvZdlF 1ifNYlUCiJI8qPDmBFuyl6ADTQ4AYMB9AAGnVe557npBUVV1Xbt/Al+CV0qP -----END CERTIFICATE-----Generated at Sun Jun 22 17:20:40 2025 by rpki-client