$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft File: 37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft (raw, json) Hash identifier: H7BA9ahVqOzZFMWvVBviZts1yEyRMZLU/E/UN382uFA= Subject key identifier: 8F:6A:42:11:0B:F8:55:23:CF:6A:CF:F8:F0:CF:E7:0A:8E:CE:C0:8D Authority key identifier: 37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E Certificate issuer: /CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E Certificate serial: 58219BD8669C1731343D2B04A687DC8B59FAA5C4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft Manifest number: E8 Signing time: Thu 19 Jun 2025 07:19:57 +0000 Manifest this update: Thu 19 Jun 2025 07:14:57 +0000 Manifest next update: Tue 24 Jun 2025 21:56:57 +0000 Files and hashes: 1: 3230302e3131352e33322e302f32302d3234203d3e203139353832.roa (hash: xsAQRSBKUlYN4m2Glv4+4wdfbKQuExeBWibSJx81qXQ=) 2: 323830333a383330303a3a2f33322d3438203d3e203139353832.roa (hash: G46ge1inQ+2DaFD3fWsegIrJ6pID2mRIgNq/nP14+D0=) 3: 3230302e3131352e34322e302f32332d3234203d3e203237373834.roa (hash: pxyWasIKdszGadocvsBttqBLBVHoxeSWVtaJq1+oE90=) 4: 3230302e3131352e34312e302f32342d3234203d3e203532333435.roa (hash: hSVdINcDcPVuQRdItapxty5I0JYdEQQi1+Pa5ucavJU=) 5: 37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl (hash: W+xG1A0MDoIdICU3bYNNUhqoDyi6qiavIQNRiNxZFm0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Jun 2025 21:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:21:9b:d8:66:9c:17:31:34:3d:2b:04:a6:87:dc:8b:59:fa:a5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E Validity Not Before: Jun 19 07:14:57 2025 GMT Not After : Jun 24 21:56:57 2025 GMT Subject: CN=8F6A42110BF85523CF6ACFF8F0CFE70A8ECEC08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:03:12:04:41:77:e3:bf:85:17:3d:08:c1: 73:1b:75:8c:a3:55:80:a4:2e:28:cd:dc:79:42:9c: bf:65:fb:8c:9e:63:d3:72:ec:6a:15:32:38:37:d3: 0b:aa:c0:1d:eb:3e:e8:df:a8:33:a0:05:bc:f7:3d: b3:77:8a:39:2e:b8:34:64:a7:b5:b1:80:59:df:fd: 38:f2:33:df:3a:45:10:f5:a5:64:7a:8a:d3:cd:62: e2:cf:92:e3:72:a6:b2:a5:66:e1:0f:ef:15:0d:18: 87:f0:93:86:59:ef:14:df:5a:03:f8:25:3c:64:39: 5a:ff:91:14:25:20:0b:02:ff:b8:f7:95:91:b4:f1: 2b:07:87:b1:b0:54:49:18:6a:40:c1:d0:bc:a1:0e: ea:af:b9:03:e6:6c:90:e3:c0:1c:3f:8a:63:83:2c: 9a:ca:85:80:dd:68:4a:a3:43:8a:53:e0:62:af:8e: bc:35:ed:f2:4f:a7:cf:2c:f8:b9:c5:a2:86:59:b9: 2b:af:f9:73:35:87:1f:78:64:62:e8:66:1f:60:9b: f2:9b:fb:7c:de:3c:68:99:80:d5:1a:f9:c6:6d:4e: 98:82:0e:36:ce:c0:e3:4e:ff:b2:17:00:d0:01:47: c6:80:fd:3e:f7:bc:f8:43:e5:20:e7:de:0b:07:c3: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6A:42:11:0B:F8:55:23:CF:6A:CF:F8:F0:CF:E7:0A:8E:CE:C0:8D X509v3 Authority Key Identifier: keyid:37:D2:C6:C6:B6:FD:FA:40:03:FD:3E:FD:D2:AE:F4:0B:FA:93:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBE3E0AD30E658C291B2B4AFEAC3EAC3A222F1BF9DCA8641457CB8D81A34B669/0/37D2C6C6B6FDFA4003FD3EFDD2AEF40BFA93CB9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:86:f9:4a:bf:35:dc:51:09:e6:1d:e3:02:5a:67:b8:1b:26: 2b:63:a3:7d:7b:99:ed:ce:8d:46:b3:86:e0:6f:5d:cc:31:59: 88:bc:67:6e:0d:0f:ee:60:6d:06:21:bf:9d:54:ce:5a:dd:7b: b3:e7:2c:ed:6e:87:55:8e:e6:b1:e1:65:dc:62:e4:5f:07:53: c5:4b:11:cf:14:9b:05:9b:61:a9:a3:a6:81:d9:32:90:d7:94: 18:98:2e:d8:29:7a:83:c2:80:df:5a:8b:d1:5f:d6:0a:45:31: b7:96:5c:cd:15:ca:87:1a:20:42:1a:b8:b2:a5:c1:a3:5e:28: 8e:0d:85:10:24:4d:79:c2:b7:8a:8b:a0:eb:e9:30:dc:85:d2: 2e:66:12:97:67:8a:58:14:73:b9:20:f3:6c:40:17:7c:22:f4: 4b:bc:9d:5d:82:00:da:b0:bd:b8:0d:c6:fd:61:8a:46:e8:8e: 8f:17:a1:b3:91:f3:89:c2:ce:c4:4e:d3:70:ff:22:29:d2:52: f5:95:1f:db:02:89:70:1f:40:86:ec:6e:ec:51:56:75:79:df: c9:bb:d7:89:6b:bf:df:87:1c:3d:62:16:84:1c:e9:a3:d6:15: 7d:57:d7:d9:e1:43:c7:71:42:57:f7:32:65:89:cd:43:64:70: a5:9a:ad:e3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUWCGb2GacFzE0PSsEpofci1n6pcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdEMkM2QzZCNkZERkE0MDAzRkQzRUZERDJBRUY0MEJG QTkzQ0I5RTAeFw0yNTA2MTkwNzE0NTdaFw0yNTA2MjQyMTU2NTdaMDMxMTAvBgNV BAMTKDhGNkE0MjExMEJGODU1MjNDRjZBQ0ZGOEYwQ0ZFNzBBOEVDRUMwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cQMSBEF347+FFz0IwXMbdYyj VYCkLijN3HlCnL9l+4yeY9Ny7GoVMjg30wuqwB3rPujfqDOgBbz3PbN3ijkuuDRk p7WxgFnf/TjyM986RRD1pWR6itPNYuLPkuNyprKlZuEP7xUNGIfwk4ZZ7xTfWgP4 JTxkOVr/kRQlIAsC/7j3lZG08SsHh7GwVEkYakDB0LyhDuqvuQPmbJDjwBw/imOD LJrKhYDdaEqjQ4pT4GKvjrw17fJPp88s+LnFooZZuSuv+XM1hx94ZGLoZh9gm/Kb +3zePGiZgNUa+cZtTpiCDjbOwONO/7IXANABR8aA/T73vPhD5SDn3gsHwxPdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUj2pCEQv4VSPPas/48M/nCo7OwI0wHwYDVR0j BBgwFoAUN9LGxrb9+kAD/T790q70C/qTy54wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQkUzRTBBRDMwRTY1OEMyOTFCMkI0QUZFQUMzRUFDM0Ey MjJGMUJGOURDQTg2NDE0NTdDQjhEODFBMzRCNjY5LzAvMzdEMkM2QzZCNkZERkE0 MDAzRkQzRUZERDJBRUY0MEJGQTkzQ0I5RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zN0QyQzZDNkI2RkRGQTQwMDNG RDNFRkREMkFFRjQwQkZBOTNDQjlFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0JFM0UwQUQzMEU2NThDMjkxQjJCNEFGRUFDM0VBQzNBMjIyRjFCRjlE Q0E4NjQxNDU3Q0I4RDgxQTM0QjY2OS8wLzM3RDJDNkM2QjZGREZBNDAwM0ZEM0VG REQyQUVGNDBCRkE5M0NCOUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChhvlKvzXcUQnmHeMCWme4GyYr Y6N9e5ntzo1Gs4bgb13MMVmIvGduDQ/uYG0GIb+dVM5a3Xuz5yztbodVjuax4WXc YuRfB1PFSxHPFJsFm2Gpo6aB2TKQ15QYmC7YKXqDwoDfWovRX9YKRTG3llzNFcqH GiBCGriypcGjXiiODYUQJE15wreKi6Dr6TDchdIuZhKXZ4pYFHO5IPNsQBd8IvRL vJ1dggDasL24Dcb9YYpG6I6PF6GzkfOJws7ETtNw/yIp0lL1lR/bAolwH0CG7G7s UVZ1ed/Ju9eJa7/fhxw9YhaEHOmj1hV9V9fZ4UPHcUJX9zJlic1DZHClmq3j -----END CERTIFICATE-----Generated at Sat Jun 21 23:52:48 2025 by rpki-client