$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.mft File: CCE406EE2B439003A67299728DE4BDF0F7D7CD39.mft (raw, json) Hash identifier: WeH8WZRR02tDbm1Li3Ru1L+qZN2TLdU7haa5M42eisI= Subject key identifier: D3:F4:BD:3B:71:06:EF:8B:6B:08:11:66:13:45:C4:41:F7:D6:1C:92 Authority key identifier: CC:E4:06:EE:2B:43:90:03:A6:72:99:72:8D:E4:BD:F0:F7:D7:CD:39 Certificate issuer: /CN=CCE406EE2B439003A67299728DE4BDF0F7D7CD39 Certificate serial: 4D9461FF38A035C5C45B5030CA409B348CFD3FEB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.mft Manifest number: 71 Signing time: Sun 22 Jun 2025 01:05:06 +0000 Manifest this update: Sun 22 Jun 2025 01:00:06 +0000 Manifest next update: Thu 26 Jun 2025 05:16:06 +0000 Files and hashes: 1: 323830333a3835303a3a2f33322d3332203d3e20323733313035.roa (hash: j5/Ie2wcGgwOT2a8VnfLDNGhZLF+RndsPmnk4/+M6wM=) 2: CCE406EE2B439003A67299728DE4BDF0F7D7CD39.crl (hash: GyCNzxp+V3hIxWM+11DP7MvloNlyLuM1Rf5jeUs55Ak=) 3: 323830333a3835303a3a2f33322d3333203d3e20323733313035.roa (hash: 5HUZUBMGbI8rkrdR9SNyuGpZuGPGXo9to3UbCBXyMCY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.crl rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:94:61:ff:38:a0:35:c5:c4:5b:50:30:ca:40:9b:34:8c:fd:3f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCE406EE2B439003A67299728DE4BDF0F7D7CD39 Validity Not Before: Jun 22 01:00:06 2025 GMT Not After : Jun 26 05:16:06 2025 GMT Subject: CN=D3F4BD3B7106EF8B6B0811661345C441F7D61C92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:81:75:ca:94:bc:d4:dd:3d:73:db:e2:70: 34:d3:59:8a:12:f9:d8:ec:b4:df:74:fd:63:24:6c: 80:d1:51:44:b4:34:3d:31:36:a7:d3:cb:d1:8b:21: 5f:35:4d:1a:bc:17:f4:01:2a:f5:4b:43:66:a7:76: 3d:08:39:4c:c8:b3:b8:99:84:e0:01:b1:ee:f0:de: 46:e7:f4:eb:25:c5:69:42:70:a4:5f:6e:c4:99:47: 51:60:24:46:8c:3c:b0:e7:38:e0:49:5a:ae:c8:f2: 6c:d8:91:51:e7:47:bf:cc:9f:fb:1b:c6:f2:ee:ce: bc:85:8d:09:32:47:60:75:28:56:1a:97:f8:b9:b3: 17:b1:07:20:e6:e2:55:1c:a0:05:6f:ea:1a:0d:30: 33:e0:3e:1a:5a:2a:a2:12:5e:5f:23:62:3c:5e:cf: f4:33:dd:e8:04:dd:17:be:a5:e8:87:ca:d3:67:e2: bd:f4:a4:dd:8f:5b:2e:7f:4a:0a:b2:c7:41:08:16: e7:03:92:65:79:4b:5e:3d:e5:81:e8:9c:76:3a:f7: 5c:87:58:83:4d:8a:5f:22:96:a6:b1:85:fc:db:87: 99:f7:f9:5e:1b:44:80:24:f2:74:69:ed:9f:cc:6d: f3:49:b3:20:30:d6:d9:30:5d:e8:78:12:30:03:02: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F4:BD:3B:71:06:EF:8B:6B:08:11:66:13:45:C4:41:F7:D6:1C:92 X509v3 Authority Key Identifier: keyid:CC:E4:06:EE:2B:43:90:03:A6:72:99:72:8D:E4:BD:F0:F7:D7:CD:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DF2EF059BD10A7CFFBE04A87E04ACBDA188948CA45C57B1BBC1D660E241E433/0/CCE406EE2B439003A67299728DE4BDF0F7D7CD39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:12:94:5f:42:44:76:cb:e5:25:6f:b2:c4:b4:b5:05:26:66: 05:40:e2:27:eb:77:c2:13:72:14:f1:93:3f:ef:f5:15:c6:17: b6:84:e4:34:01:06:d2:32:2a:06:2d:7b:08:29:c9:f9:3a:15: d9:90:33:e8:4a:05:4e:92:dd:a6:f6:54:64:a1:c5:4f:3f:3a: f4:f6:09:61:c5:05:46:c4:77:62:93:38:fb:6c:c9:5d:75:e3: a7:d4:08:36:7b:b3:4b:8f:0b:9e:22:ec:b8:8b:ba:03:68:c2: 17:a5:7c:c4:1e:fa:7b:81:17:ae:fa:3a:58:5c:f9:d2:4e:73: 23:6a:71:42:fd:81:5b:8d:0f:82:9a:80:75:9e:38:3c:57:1e: 71:23:e6:9a:51:6e:30:8b:ed:46:a8:2e:1d:0c:2c:15:f9:a1: 6c:4d:f5:35:2e:09:16:e2:af:56:8b:cd:54:bf:f7:15:79:53: d5:ee:1d:dc:44:7a:4a:2c:6c:08:01:01:fe:f1:47:86:b0:df: 1f:dc:b5:43:45:1f:6a:04:2c:7f:d0:d3:fc:c2:d2:d3:aa:00: 22:80:16:d9:9a:11:80:9a:70:76:82:14:56:e5:12:c4:e7:4a: 01:2f:e2:44:a2:fd:89:c2:5d:a0:6b:2e:a9:13:48:7f:e0:9e: 0a:50:7c:41 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTZRh/zigNcXEW1AwykCbNIz9P+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NFNDA2RUUyQjQzOTAwM0E2NzI5OTcyOERFNEJERjBG N0Q3Q0QzOTAeFw0yNTA2MjIwMTAwMDZaFw0yNTA2MjYwNTE2MDZaMDMxMTAvBgNV BAMTKEQzRjRCRDNCNzEwNkVGOEI2QjA4MTE2NjEzNDVDNDQxRjdENjFDOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh1oF1ypS81N09c9vicDTTWYoS +djstN90/WMkbIDRUUS0ND0xNqfTy9GLIV81TRq8F/QBKvVLQ2andj0IOUzIs7iZ hOABse7w3kbn9OslxWlCcKRfbsSZR1FgJEaMPLDnOOBJWq7I8mzYkVHnR7/Mn/sb xvLuzryFjQkyR2B1KFYal/i5sxexByDm4lUcoAVv6hoNMDPgPhpaKqISXl8jYjxe z/Qz3egE3Re+peiHytNn4r30pN2PWy5/Sgqyx0EIFucDkmV5S1495YHonHY691yH WINNil8ilqaxhfzbh5n3+V4bRIAk8nRp7Z/MbfNJsyAw1tkwXeh4EjADAiXrAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0/S9O3EG74trCBFmE0XEQffWHJIwHwYDVR0j BBgwFoAUzOQG7itDkAOmcplyjeS98PfXzTkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84REYyRUYwNTlCRDEwQTdDRkZCRTA0QTg3RTA0QUNCREEx ODg5NDhDQTQ1QzU3QjFCQkMxRDY2MEUyNDFFNDMzLzAvQ0NFNDA2RUUyQjQzOTAw M0E2NzI5OTcyOERFNEJERjBGN0Q3Q0QzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQ0U0MDZFRTJCNDM5MDAzQTY3 Mjk5NzI4REU0QkRGMEY3RDdDRDM5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOERGMkVGMDU5QkQxMEE3Q0ZGQkUwNEE4N0UwNEFDQkRBMTg4OTQ4Q0E0 NUM1N0IxQkJDMUQ2NjBFMjQxRTQzMy8wL0NDRTQwNkVFMkI0MzkwMDNBNjcyOTk3 MjhERTRCREYwRjdEN0NEMzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOEpRfQkR2y+Ulb7LEtLUFJmYF QOIn63fCE3IU8ZM/7/UVxhe2hOQ0AQbSMioGLXsIKcn5OhXZkDPoSgVOkt2m9lRk ocVPPzr09glhxQVGxHdikzj7bMlddeOn1Ag2e7NLjwueIuy4i7oDaMIXpXzEHvp7 gReu+jpYXPnSTnMjanFC/YFbjQ+CmoB1njg8Vx5xI+aaUW4wi+1GqC4dDCwV+aFs TfU1LgkW4q9Wi81Uv/cVeVPV7h3cRHpKLGwIAQH+8UeGsN8f3LVDRR9qBCx/0NP8 wtLTqgAigBbZmhGAmnB2ghRW5RLE50oBL+JEov2Jwl2gay6pE0h/4J4KUHxB -----END CERTIFICATE-----Generated at Sun Jun 22 12:11:31 2025 by rpki-client