$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft File: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft (raw, json) Hash identifier: ivzRL/5rkOEQEbekLX7gu1JxP65wGvWbppXTbsUUbz0= Subject key identifier: 38:52:CB:1A:D0:F1:46:2F:27:F1:1A:2E:BD:0E:EF:25:CE:96:77:FE Authority key identifier: 2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 Certificate issuer: /CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Certificate serial: 1F0A54F97177E00626AEC4EC421B70BE7D1D8448 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft Manifest number: EE Signing time: Sat 21 Jun 2025 00:50:31 +0000 Manifest this update: Sat 21 Jun 2025 00:45:31 +0000 Manifest next update: Thu 26 Jun 2025 00:03:31 +0000 Files and hashes: 1: 2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl (hash: lt5fuO170qiNZ5e0b8gW3c5YKfFICyTTFDW+zG6guu0=) 2: 3230302e3130382e3139302e302f32342d3234203d3e20323639393238.roa (hash: ojMvfXSAXgYg2HNtqEcUZn9oeO+XyPGGrQ5gFDlrsbM=) 3: 323830333a333265303a3a2f33322d3332203d3e20323639393238.roa (hash: nB76hXAwUoryEDuU2ZQcyx6V4UUAq3evR1ObFKMBf0k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0a:54:f9:71:77:e0:06:26:ae:c4:ec:42:1b:70:be:7d:1d:84:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686 Validity Not Before: Jun 21 00:45:31 2025 GMT Not After : Jun 26 00:03:31 2025 GMT Subject: CN=3852CB1AD0F1462F27F11A2EBD0EEF25CE9677FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b7:12:49:2d:f0:d7:5d:62:af:13:b6:40:5a: 58:13:50:27:68:54:75:ef:ef:8e:13:3b:3b:ac:64: 4d:81:08:25:d8:a3:c8:38:c8:f1:c2:f5:15:1b:ce: cc:a4:06:f1:c5:89:c2:df:8c:4f:81:76:e4:7f:ad: c0:a2:a2:ad:e2:af:56:a8:8d:7c:30:c8:a1:08:7e: b3:8c:a3:b7:ee:bd:9a:a3:cd:6e:1c:87:8f:5d:b9: 44:9f:91:00:2f:d8:55:67:a7:c9:9f:b3:5a:23:13: 0d:28:d3:fb:1f:04:bf:a2:a0:d6:53:d9:b3:5e:5c: 6f:e6:04:95:ea:57:7f:52:cb:71:60:2a:7c:b0:fd: b4:81:26:04:2e:1a:8c:a8:d4:21:da:fc:e4:f5:9f: 20:30:3e:79:4e:ad:e0:f1:30:75:20:bf:03:e4:9e: 68:2d:35:e8:25:32:a6:1c:90:34:04:ee:71:80:44: 77:d4:02:fa:7b:b8:6a:1e:04:09:f9:5d:62:8b:11: 73:c5:b4:62:24:bf:e3:35:43:39:04:db:f4:53:18: 83:c6:02:01:06:4e:dd:f6:61:4d:1f:9b:d5:0d:61: 9a:9f:84:c9:6c:fe:d1:63:36:0b:16:68:af:73:cb: b2:71:1d:c5:eb:22:ca:23:82:a4:90:fd:ed:d7:b3: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:52:CB:1A:D0:F1:46:2F:27:F1:1A:2E:BD:0E:EF:25:CE:96:77:FE X509v3 Authority Key Identifier: keyid:2B:2C:D4:D6:D4:5E:AC:25:EE:97:D5:E6:6B:E9:38:EF:31:A6:16:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B884F5A9FA4728E8608A3DDF8218084913B8C16C7D0FC9FB1E38574FDD15454/0/2B2CD4D6D45EAC25EE97D5E66BE938EF31A61686.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:35:a6:6a:1e:c2:78:71:b1:49:e7:99:ee:63:57:6f:e3:93: 90:4b:53:90:28:9f:be:bf:66:90:ac:51:3a:34:01:a2:04:d5: a0:36:02:de:9e:df:af:36:2d:51:9e:06:e9:74:cc:c6:c4:d4: 1c:89:5e:97:60:5c:b9:a5:0f:5d:90:c8:d8:c9:49:51:d2:a2: ec:66:d0:bd:c4:b2:23:2e:76:7e:d6:63:23:f5:51:63:47:b4: d3:a2:f0:2d:cf:1d:77:87:5a:96:51:a3:39:9e:19:9b:54:8e: 00:8c:bf:da:41:65:f1:4b:f2:6e:0c:89:cd:61:d3:ec:07:2f: ba:2d:07:ad:c6:75:eb:be:95:98:e4:2c:ff:e6:e9:99:fe:a0: b2:7b:9d:2f:d1:57:00:03:56:dc:f6:3e:7f:0d:e1:f8:95:62: 5d:b8:57:80:cc:f2:53:8f:78:7c:4a:dd:4b:65:03:c8:2b:ad: 35:d3:de:ac:91:f7:a4:39:f9:f7:87:52:7e:21:0c:72:45:e9: a8:83:06:09:b4:fe:9a:0d:c3:75:3e:46:40:f3:c8:e0:58:74: 0e:13:72:7f:df:70:05:ee:71:a4:4e:86:da:97:43:0a:a4:fe: c5:1f:66:69:2b:32:7b:c7:76:e4:e1:90:96:79:6c:d7:44:14: 50:32:79:75 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUHwpU+XF34AYmrsTsQhtwvn0dhEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIyQ0Q0RDZENDVFQUMyNUVFOTdENUU2NkJFOTM4RUYz MUE2MTY4NjAeFw0yNTA2MjEwMDQ1MzFaFw0yNTA2MjYwMDAzMzFaMDMxMTAvBgNV BAMTKDM4NTJDQjFBRDBGMTQ2MkYyN0YxMUEyRUJEMEVFRjI1Q0U5Njc3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwtxJJLfDXXWKvE7ZAWlgTUCdo VHXv744TOzusZE2BCCXYo8g4yPHC9RUbzsykBvHFicLfjE+BduR/rcCioq3ir1ao jXwwyKEIfrOMo7fuvZqjzW4ch49duUSfkQAv2FVnp8mfs1ojEw0o0/sfBL+ioNZT 2bNeXG/mBJXqV39Sy3FgKnyw/bSBJgQuGoyo1CHa/OT1nyAwPnlOreDxMHUgvwPk nmgtNeglMqYckDQE7nGARHfUAvp7uGoeBAn5XWKLEXPFtGIkv+M1QzkE2/RTGIPG AgEGTt32YU0fm9UNYZqfhMls/tFjNgsWaK9zy7JxHcXrIsojgqSQ/e3Xs2gbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUOFLLGtDxRi8n8RouvQ7vJc6Wd/4wHwYDVR0j BBgwFoAUKyzU1tRerCXul9Xma+k47zGmFoYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84Qjg4NEY1QTlGQTQ3MjhFODYwOEEzRERGODIxODA4NDkx M0I4QzE2QzdEMEZDOUZCMUUzODU3NEZERDE1NDU0LzAvMkIyQ0Q0RDZENDVFQUMy NUVFOTdENUU2NkJFOTM4RUYzMUE2MTY4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQjJDRDRENkQ0NUVBQzI1RUU5 N0Q1RTY2QkU5MzhFRjMxQTYxNjg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEI4ODRGNUE5RkE0NzI4RTg2MDhBM0RERjgyMTgwODQ5MTNCOEMxNkM3 RDBGQzlGQjFFMzg1NzRGREQxNTQ1NC8wLzJCMkNENEQ2RDQ1RUFDMjVFRTk3RDVF NjZCRTkzOEVGMzFBNjE2ODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcNaZqHsJ4cbFJ55nuY1dv45OQ S1OQKJ++v2aQrFE6NAGiBNWgNgLent+vNi1RngbpdMzGxNQciV6XYFy5pQ9dkMjY yUlR0qLsZtC9xLIjLnZ+1mMj9VFjR7TTovAtzx13h1qWUaM5nhmbVI4AjL/aQWXx S/JuDInNYdPsBy+6LQetxnXrvpWY5Cz/5umZ/qCye50v0VcAA1bc9j5/DeH4lWJd uFeAzPJTj3h8St1LZQPIK601096skfekOfn3h1J+IQxyRemogwYJtP6aDcN1PkZA 88jgWHQOE3J/33AF7nGkTobal0MKpP7FH2ZpKzJ7x3bk4ZCWeWzXRBRQMnl1 -----END CERTIFICATE-----Generated at Sun Jun 22 10:26:14 2025 by rpki-client