$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft File: B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft (raw, json) Hash identifier: jiv4Y50B1W1KlPFkosWXFuDmlgmvmXZcv5v1ut8cm8M= Subject key identifier: BB:67:1C:DC:2F:CD:E7:09:FD:4D:F1:9B:61:26:85:CC:30:47:62:F4 Authority key identifier: B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6 Certificate issuer: /CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6 Certificate serial: 3E4EEFD6A55B7152B900100F12AE43BA7B05DD3F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft Manifest number: F7 Signing time: Sat 21 Jun 2025 09:25:40 +0000 Manifest this update: Sat 21 Jun 2025 09:20:40 +0000 Manifest next update: Fri 27 Jun 2025 08:13:40 +0000 Files and hashes: 1: 323830313a31303a353030303a3a2f34382d3438203d3e20323634373437.roa (hash: GA7YN/JvrN/mOd9/Euc6T6r4iImRh6AHHOvP5bHYuJA=) 2: 3230302e33332e3131332e302f32342d3234203d3e20323634373437.roa (hash: iDyk+TiXFCbj+nnln621ZDV/UgNb8+rpg6axZqO/oLM=) 3: B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl (hash: XLyZoNE9C1RgNfOriHhbwgxxaRh/xURXtUPypriiRtQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Jun 2025 08:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4e:ef:d6:a5:5b:71:52:b9:00:10:0f:12:ae:43:ba:7b:05:dd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6 Validity Not Before: Jun 21 09:20:40 2025 GMT Not After : Jun 27 08:13:40 2025 GMT Subject: CN=BB671CDC2FCDE709FD4DF19B612685CC304762F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:9e:b5:51:74:5b:2e:54:b8:a5:1d:fa:9f: 9c:34:f9:5c:2e:11:7d:aa:73:63:c5:75:ba:87:38: f1:c9:e0:70:1c:4c:4b:df:6d:be:27:3d:a2:96:0a: 50:2e:83:eb:77:3a:ad:08:c4:e6:cb:48:1a:8d:24: ab:8d:97:66:00:79:9b:a3:d4:e9:13:6d:da:4d:51: a3:c4:66:f5:6c:6e:74:af:96:98:82:87:06:82:0c: e5:0a:12:ae:94:0f:a3:94:7c:75:9c:0e:31:1d:f1: cd:6a:53:82:c8:62:8d:e1:9b:fb:e0:0b:df:ee:b6: 35:1d:e3:54:ed:b5:8f:fa:f3:7d:11:e8:56:97:c2: ab:2a:da:58:c7:b2:7a:8e:49:98:34:1b:f4:ad:80: 9b:68:9d:17:9f:36:42:f2:89:00:12:d5:17:6f:2d: ca:20:60:cc:b2:f5:33:5b:3c:a2:df:d8:04:b8:e3: f7:02:fe:e0:21:61:46:ac:c1:9b:c3:ca:89:37:25: 22:50:78:66:7d:2f:60:c0:ba:7f:5a:37:d4:6d:78: 24:5d:8f:ac:30:6f:0c:63:9e:b4:25:ed:ff:ad:c5: 9d:0c:fe:05:74:08:6f:32:88:82:ae:f2:4a:2a:05: 61:b4:d5:eb:0c:ac:d1:70:6c:5e:b2:0c:2e:b3:4f: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:67:1C:DC:2F:CD:E7:09:FD:4D:F1:9B:61:26:85:CC:30:47:62:F4 X509v3 Authority Key Identifier: keyid:B9:C8:69:5C:8A:81:EF:89:CF:9F:A7:B4:2E:15:9E:98:A8:EC:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBF11D4426A352F0FBE1D67B244829E9D61ADFD306CF807FED92D5011E51E8C6/0/B9C8695C8A81EF89CF9FA7B42E159E98A8EC0BB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:53:7b:fe:c6:76:ae:bb:bd:6e:73:c4:0c:90:0d:3c:71:13: 05:8f:eb:98:34:c8:05:9b:c1:40:df:1b:cd:d6:fa:02:2a:67: 44:74:71:38:0d:ee:78:eb:cd:f4:67:3f:ac:a0:11:cc:ac:27: bc:20:c0:cf:db:b9:95:9f:f1:4d:ac:f4:22:a1:4d:1a:67:0d: af:77:47:f1:36:b8:2a:32:19:8b:4c:bc:37:f5:ca:14:e3:48: 34:84:6c:7d:40:13:08:fb:aa:35:37:f2:29:ea:bf:a4:6f:d8: 14:61:e0:26:56:ab:b7:19:6f:89:f7:88:e6:90:56:f3:77:ef: 67:6a:de:e9:f6:f5:99:70:6d:0a:1f:93:54:6b:c2:0f:5c:6b: 25:8c:7a:ae:71:b9:8a:20:f4:e8:6d:09:bf:f2:b6:93:03:2a: d4:cb:47:06:a5:07:73:84:44:31:ce:88:71:07:15:ed:be:e0: 6f:b2:68:33:a2:90:dd:f7:0d:87:f2:98:6e:d2:3e:d2:ed:52: 7a:d5:d3:3d:bc:2a:30:06:99:42:8a:97:c4:cb:17:c3:9d:4e: b1:e4:b3:60:1f:cb:0c:f0:bc:00:73:ef:a0:fe:47:8f:70:52: ca:f2:50:ab:7c:5d:94:44:d2:bd:fb:3d:93:f6:73:8d:fd:27: 97:d1:19:d1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUPk7v1qVbcVK5ABAPEq5DunsF3T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlDODY5NUM4QTgxRUY4OUNGOUZBN0I0MkUxNTlFOThB OEVDMEJCNjAeFw0yNTA2MjEwOTIwNDBaFw0yNTA2MjcwODEzNDBaMDMxMTAvBgNV BAMTKEJCNjcxQ0RDMkZDREU3MDlGRDRERjE5QjYxMjY4NUNDMzA0NzYyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDZ61UXRbLlS4pR36n5w0+Vwu EX2qc2PFdbqHOPHJ4HAcTEvfbb4nPaKWClAug+t3Oq0IxObLSBqNJKuNl2YAeZuj 1OkTbdpNUaPEZvVsbnSvlpiChwaCDOUKEq6UD6OUfHWcDjEd8c1qU4LIYo3hm/vg C9/utjUd41TttY/6830R6FaXwqsq2ljHsnqOSZg0G/StgJtonRefNkLyiQAS1Rdv LcogYMyy9TNbPKLf2AS44/cC/uAhYUaswZvDyok3JSJQeGZ9L2DAun9aN9RteCRd j6wwbwxjnrQl7f+txZ0M/gV0CG8yiIKu8koqBWG01esMrNFwbF6yDC6zT0F/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUu2cc3C/N5wn9TfGbYSaFzDBHYvQwHwYDVR0j BBgwFoAUuchpXIqB74nPn6e0LhWemKjsC7YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DQkYxMUQ0NDI2QTM1MkYwRkJFMUQ2N0IyNDQ4MjlFOUQ2 MUFERkQzMDZDRjgwN0ZFRDkyRDUwMTFFNTFFOEM2LzAvQjlDODY5NUM4QTgxRUY4 OUNGOUZBN0I0MkUxNTlFOThBOEVDMEJCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COUM4Njk1QzhBODFFRjg5Q0Y5 RkE3QjQyRTE1OUU5OEE4RUMwQkI2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0JGMTFENDQyNkEzNTJGMEZCRTFENjdCMjQ0ODI5RTlENjFBREZEMzA2 Q0Y4MDdGRUQ5MkQ1MDExRTUxRThDNi8wL0I5Qzg2OTVDOEE4MUVGODlDRjlGQTdC NDJFMTU5RTk4QThFQzBCQjYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcU3v+xnauu71uc8QMkA08cRMF j+uYNMgFm8FA3xvN1voCKmdEdHE4De546830Zz+soBHMrCe8IMDP27mVn/FNrPQi oU0aZw2vd0fxNrgqMhmLTLw39coU40g0hGx9QBMI+6o1N/Ip6r+kb9gUYeAmVqu3 GW+J94jmkFbzd+9nat7p9vWZcG0KH5NUa8IPXGsljHqucbmKIPTobQm/8raTAyrU y0cGpQdzhEQxzohxBxXtvuBvsmgzopDd9w2H8phu0j7S7VJ61dM9vCowBplCipfE yxfDnU6x5LNgH8sM8LwAc++g/kePcFLK8lCrfF2URNK9+z2T9nON/SeX0RnR -----END CERTIFICATE-----Generated at Mon Jun 23 12:53:09 2025 by rpki-client