$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft File: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft (raw, json) Hash identifier: OmXhT8k8UVWll0e508BJEoeLAsNZ5fpm9ivtS/UZQ7Q= Subject key identifier: E0:BD:C5:D7:ED:25:4D:CD:33:06:11:FB:32:9C:61:E5:7B:EC:9C:67 Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 Certificate issuer: /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Certificate serial: 5DEBAC32BCF7C8ED9CDBCB0061DFCF4269C205F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft Manifest number: F6 Signing time: Fri 20 Jun 2025 18:46:58 +0000 Manifest this update: Fri 20 Jun 2025 18:41:58 +0000 Manifest next update: Thu 26 Jun 2025 11:12:58 +0000 Files and hashes: 1: 34352e3136342e32322e302f32342d3234203d3e203233343730.roa (hash: 575QiKowVCRz4op0BzHVRduNC7OYEq4japp+XRIL7j0=) 2: DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl (hash: W6EreSPxmlfdpYPBHgWUpZNp0ZCKJjfd6qtbpW+exO0=) 3: 34352e3136342e32312e302f32342d3234203d3e203238343233.roa (hash: N4blcjVjqMg5+0KZqMMvh7CB3XoZbmxPRVjQGrPRzqM=) 4: 34352e3136342e32332e302f32342d3234203d3e203238343233.roa (hash: YyWmCsp0UJbZ4TVXBcJMApdIvA7n4vdYZzo0YPmZLuw=) 5: 34352e3136342e32302e302f32342d3234203d3e203238343233.roa (hash: qPitwTMabyQm2IX2pEKcUKt5GzX2CY3Xy9SizAAgx1Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 23:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:eb:ac:32:bc:f7:c8:ed:9c:db:cb:00:61:df:cf:42:69:c2:05:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29 Validity Not Before: Jun 20 18:41:58 2025 GMT Not After : Jun 26 11:12:58 2025 GMT Subject: CN=E0BDC5D7ED254DCD330611FB329C61E57BEC9C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:b4:69:ca:14:26:46:fb:dd:5e:c2:d6:a6: ec:12:4c:ec:21:71:b2:67:68:c8:a1:be:5e:25:fe: 5b:0e:3c:1d:6e:a8:0b:c5:ac:67:9c:ea:b8:77:f3: 8b:1f:97:a6:b3:29:b0:c0:a8:16:4f:03:84:3a:a3: 05:2f:0b:ab:a8:9f:97:af:98:9a:72:6c:f5:88:33: 23:77:49:6b:37:81:41:81:28:14:b3:c0:ae:77:79: d3:65:ac:0b:28:87:76:f5:f4:d8:9c:71:58:d7:be: c9:39:da:75:48:8d:c3:2b:3f:65:0b:1c:a9:ca:3a: 31:53:4b:02:9e:ee:1d:7d:a9:13:c1:9c:64:8b:96: b9:c4:be:6d:cc:40:64:ab:6a:60:b0:5d:62:12:fa: 44:9a:fb:7d:dc:e4:59:2b:c8:3a:cc:cb:a2:fa:1c: 5e:b3:6a:73:6a:9d:b3:22:bf:04:12:6a:44:1c:34: 0f:dc:2a:6a:db:71:14:cb:84:e1:3d:56:94:e3:fa: 34:7d:65:97:38:70:1b:9d:3d:b9:62:ad:d1:22:50: f5:42:1b:1d:bc:54:a3:14:a8:01:73:a9:41:25:6e: 0f:47:0f:fd:07:e0:49:c0:98:0d:6f:40:86:8c:0e: 54:75:a6:ee:8a:81:67:08:19:ac:ce:e1:48:13:98: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BD:C5:D7:ED:25:4D:CD:33:06:11:FB:32:9C:61:E5:7B:EC:9C:67 X509v3 Authority Key Identifier: keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9c:a1:bc:4d:81:0d:de:3f:64:ff:e7:c2:f9:de:39:79:77: ad:ed:04:5c:7e:15:b8:f2:9d:1f:db:8b:70:12:5d:b6:d8:70: f5:e1:39:9b:40:e0:e9:28:d3:32:d6:bb:43:e6:80:e2:e2:55: ec:6d:e5:ba:13:3c:1f:a9:ff:8e:04:6e:52:66:09:38:2f:10: ce:7b:80:8b:64:3c:96:4a:ab:1a:16:f0:0f:40:9f:ab:0a:39: ed:51:eb:f6:6a:62:80:1e:cd:4d:dd:dd:15:fc:7c:6b:d2:1a: 13:9a:70:b4:88:37:42:20:eb:5c:c3:6a:4e:1b:50:7b:b5:30: 1d:e6:d9:f8:77:d9:08:a1:ef:13:3c:76:06:3c:da:e4:bc:92: 35:be:e0:9b:05:59:bd:f9:e2:1d:7f:2a:a5:25:c6:32:05:7e: f9:6c:4c:e4:7b:d7:bc:2f:bf:77:db:c0:63:7f:66:bd:9e:7a: 56:4d:84:05:c6:6f:91:e9:d6:c5:0e:35:ee:18:6d:9a:71:0a: 91:fe:49:0f:52:86:2c:24:20:f0:27:13:a8:d6:1c:c1:88:34: 45:b9:d6:bb:7c:ee:e6:93:cb:da:ca:18:69:5c:9b:46:25:cb: 0e:55:b6:e5:14:82:d5:45:f9:57:e7:92:d0:f3:3c:74:38:89: 12:97:02:7a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXeusMrz3yO2c28sAYd/PQmnCBfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERGQjk1RTAzQTI5NEZEQ0ZDOUYzQjcwQTI2QkNGNzRD M0E0Q0QyOTAeFw0yNTA2MjAxODQxNThaFw0yNTA2MjYxMTEyNThaMDMxMTAvBgNV BAMTKEUwQkRDNUQ3RUQyNTREQ0QzMzA2MTFGQjMyOUM2MUU1N0JFQzlDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbb7RpyhQmRvvdXsLWpuwSTOwh cbJnaMihvl4l/lsOPB1uqAvFrGec6rh384sfl6azKbDAqBZPA4Q6owUvC6uon5ev mJpybPWIMyN3SWs3gUGBKBSzwK53edNlrAsoh3b19NiccVjXvsk52nVIjcMrP2UL HKnKOjFTSwKe7h19qRPBnGSLlrnEvm3MQGSramCwXWIS+kSa+33c5FkryDrMy6L6 HF6zanNqnbMivwQSakQcNA/cKmrbcRTLhOE9VpTj+jR9ZZc4cBudPblirdEiUPVC Gx28VKMUqAFzqUElbg9HD/0H4EnAmA1vQIaMDlR1pu6KgWcIGazO4UgTmK4xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU4L3F1+0lTc0zBhH7Mpxh5XvsnGcwHwYDVR0j BBgwFoAU3fuV4DopT9z8nztwomvPdMOkzSkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQTMyM0VBQ0Q4RUU2NTg1M0VBNjQ5MDFDMDcwOEM3RTBB NkM0QjQ5RTgzMkM5RUZFMEM3MjZBQzA3NjU1ODAwLzAvRERGQjk1RTAzQTI5NEZE Q0ZDOUYzQjcwQTI2QkNGNzRDM0E0Q0QyOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EREZCOTVFMDNBMjk0RkRDRkM5 RjNCNzBBMjZCQ0Y3NEMzQTRDRDI5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUEzMjNFQUNEOEVFNjU4NTNFQTY0OTAxQzA3MDhDN0UwQTZDNEI0OUU4 MzJDOUVGRTBDNzI2QUMwNzY1NTgwMC8wL0RERkI5NUUwM0EyOTRGRENGQzlGM0I3 MEEyNkJDRjc0QzNBNENEMjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOnKG8TYEN3j9k/+fC+d45eXet 7QRcfhW48p0f24twEl222HD14TmbQODpKNMy1rtD5oDi4lXsbeW6Ezwfqf+OBG5S Zgk4LxDOe4CLZDyWSqsaFvAPQJ+rCjntUev2amKAHs1N3d0V/Hxr0hoTmnC0iDdC IOtcw2pOG1B7tTAd5tn4d9kIoe8TPHYGPNrkvJI1vuCbBVm9+eIdfyqlJcYyBX75 bEzke9e8L79328Bjf2a9nnpWTYQFxm+R6dbFDjXuGG2acQqR/kkPUoYsJCDwJxOo 1hzBiDRFuda7fO7mk8vayhhpXJtGJcsOVbblFILVRflX55LQ8zx0OIkSlwJ6 -----END CERTIFICATE-----Generated at Sun Jun 22 14:42:11 2025 by rpki-client