$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft File: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json) Hash identifier: fB5/yqUYY+RcvOgp6pILNWZEHp+3uTJU5mv1vsImsfQ= Subject key identifier: D3:12:FD:84:A8:D0:9C:6E:5D:C7:29:6B:FF:C4:65:97:B7:CA:78:AC Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 Certificate issuer: /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Certificate serial: 0B8C62ED827C6F2680816428C76390F901CA0F35 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft Manifest number: F2 Signing time: Sat 21 Jun 2025 14:03:23 +0000 Manifest this update: Sat 21 Jun 2025 13:58:23 +0000 Manifest next update: Thu 26 Jun 2025 07:19:23 +0000 Files and hashes: 1: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: AsEHVSdxN/om5UYh7LmOx7ME5F/4rOyHrR6Vp7TmmYs=) 2: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: H7aEYtu6WVcmBJ/LYyjuVlTRTtiGzazA09PbwXTdxgA=) 3: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: fD/ljv3GAWyIKLmQF0GiJKni3x21B/SUZgAWPc7J2go=) 4: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: yu6Oe96ukjaDp8hbPn99XX1vIiICPSDbRovWaVfLzMY=) 5: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: ki3ZXbLXCKJHkqFilvfhr6bdVrQBibKeIAqRvGGaKaU=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 23:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8c:62:ed:82:7c:6f:26:80:81:64:28:c7:63:90:f9:01:ca:0f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Validity Not Before: Jun 21 13:58:23 2025 GMT Not After : Jun 26 07:19:23 2025 GMT Subject: CN=D312FD84A8D09C6E5DC7296BFFC46597B7CA78AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:82:2a:14:1e:59:5e:65:5a:14:c3:0c:2d: 26:e8:bb:10:73:3d:72:3a:32:0b:d2:57:c1:29:ec: ee:c1:28:61:71:d7:88:86:72:4e:77:3e:bc:01:86: 85:c3:7c:39:e2:a4:7a:ea:fc:7b:58:8c:21:02:1d: 62:5f:c8:48:c8:14:66:b2:de:38:29:3d:39:d2:1a: ee:53:86:7a:27:10:0a:cb:e9:64:e1:37:b1:3d:58: 2a:08:11:58:3f:6e:17:e4:a1:10:8f:45:e1:1e:21: 75:8d:36:51:1b:79:77:a5:2d:df:1d:67:c4:e1:63: ab:91:89:d3:fd:70:13:6a:1a:7d:4a:6e:16:77:1d: 6e:01:8b:62:1d:62:86:59:48:f3:7a:a3:f4:12:99: 76:d6:87:22:d8:1b:3f:1b:9a:02:d0:da:74:11:c1: fa:7d:b5:ea:00:3f:19:5f:14:c4:72:1e:62:62:31: 20:e9:fc:4c:06:4a:91:4a:ea:5b:74:23:e5:6a:47: 7c:c0:62:a5:da:91:96:78:74:17:9b:ee:30:13:65: 87:38:18:c3:25:4a:53:20:ce:3c:e6:83:da:a4:a7: 17:da:ed:d4:dc:42:a3:39:9a:d6:30:29:d1:39:86: 60:35:55:5a:a6:17:80:b7:0a:b1:a0:0d:1d:ed:5e: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:12:FD:84:A8:D0:9C:6E:5D:C7:29:6B:FF:C4:65:97:B7:CA:78:AC X509v3 Authority Key Identifier: keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ea:36:e7:4d:fc:88:5b:75:aa:3b:35:d8:47:9a:4b:c9:e8: 7e:e8:61:a5:fc:5c:8b:7e:f8:1d:50:b8:a4:b1:1f:59:c6:f5: cb:be:65:28:33:a0:6d:6d:12:f2:ad:71:c7:51:96:0d:61:41: 6a:39:36:5f:d1:f6:0d:7e:07:5f:c7:e7:12:6b:c3:db:32:f5: b2:e7:4b:af:0c:b8:9c:a5:ca:e4:1c:ee:09:91:af:e9:42:1d: 2e:b6:61:ef:b7:d2:ff:39:d1:d5:46:be:be:45:7c:43:1b:31: 5e:d9:79:80:4c:d8:27:3a:99:43:9a:3a:04:87:1f:35:b6:f7: 3a:a2:42:a0:ad:71:0b:db:7f:b0:a7:ce:9f:49:1c:c0:e3:7c: 39:26:6f:47:1a:f6:02:b5:94:eb:36:4a:1d:fa:f0:d2:7c:66: 99:30:44:90:7a:6b:4a:98:93:39:3b:4e:86:5c:a4:cd:5f:a6: 7d:a6:4f:d9:12:35:97:a7:c7:60:5c:96:33:0d:f6:07:92:c2: 24:9d:a7:93:92:c6:ae:fc:ad:1b:58:2c:bf:9a:b0:b2:18:3f: ef:3f:22:53:16:82:c1:90:2c:87:07:ff:a4:2b:b1:37:d4:22: f7:df:c9:3d:19:6c:95:57:a3:75:8b:8d:a3:46:53:d3:bd:ab: 39:18:b8:4a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC4xi7YJ8byaAgWQox2OQ+QHKDzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz OEE3MTFGNTAeFw0yNTA2MjExMzU4MjNaFw0yNTA2MjYwNzE5MjNaMDMxMTAvBgNV BAMTKEQzMTJGRDg0QThEMDlDNkU1REM3Mjk2QkZGQzQ2NTk3QjdDQTc4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TYIqFB5ZXmVaFMMMLSbouxBz PXI6MgvSV8Ep7O7BKGFx14iGck53PrwBhoXDfDnipHrq/HtYjCECHWJfyEjIFGay 3jgpPTnSGu5ThnonEArL6WThN7E9WCoIEVg/bhfkoRCPReEeIXWNNlEbeXelLd8d Z8ThY6uRidP9cBNqGn1KbhZ3HW4Bi2IdYoZZSPN6o/QSmXbWhyLYGz8bmgLQ2nQR wfp9teoAPxlfFMRyHmJiMSDp/EwGSpFK6lt0I+VqR3zAYqXakZZ4dBeb7jATZYc4 GMMlSlMgzjzmg9qkpxfa7dTcQqM5mtYwKdE5hmA1VVqmF4C3CrGgDR3tXqFdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0xL9hKjQnG5dxylr/8Rll7fKeKwwHwYDVR0j BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzk4OUFGRDNBOTEyNUREQzg4QURDRTJC NkRGQkM2MzdFMzhBNzExRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAG6jbnTfyIW3WqOzXYR5pLyeh+ 6GGl/FyLfvgdULiksR9ZxvXLvmUoM6BtbRLyrXHHUZYNYUFqOTZf0fYNfgdfx+cS a8PbMvWy50uvDLicpcrkHO4Jka/pQh0utmHvt9L/OdHVRr6+RXxDGzFe2XmATNgn OplDmjoEhx81tvc6okKgrXEL23+wp86fSRzA43w5Jm9HGvYCtZTrNkod+vDSfGaZ MESQemtKmJM5O06GXKTNX6Z9pk/ZEjWXp8dgXJYzDfYHksIknaeTksau/K0bWCy/ mrCyGD/vPyJTFoLBkCyHB/+kK7E31CL338k9GWyVV6N1i42jRlPTvas5GLhK -----END CERTIFICATE-----Generated at Sun Jun 22 19:39:36 2025 by rpki-client