$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft File: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft (raw, json) Hash identifier: d8Lkvs8VI3Hzfkw9shR+/75abGWvP72NQU2JZYEvIbI= Subject key identifier: 07:93:0A:3E:C2:05:65:50:C8:2A:DF:EA:19:9F:9C:CF:13:06:55:7C Authority key identifier: FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 Certificate issuer: /CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Certificate serial: 767857CB9668777F70C23F0E197737B2928E2411 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft Manifest number: E9 Signing time: Sat 21 Jun 2025 10:11:07 +0000 Manifest this update: Sat 21 Jun 2025 10:06:07 +0000 Manifest next update: Thu 26 Jun 2025 06:45:07 +0000 Files and hashes: 1: FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl (hash: DsHUs1VAZwq5oJUCJOM/PlUYJS0jEWaq1thG4Cm1a6U=) 2: 323830313a3132323a3a2f34302d3430203d3e2033383136.roa (hash: X9cMd3SG7qB808lvePxzwRtZPv+hb5qfR8JIfSFiJN0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 23:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:78:57:cb:96:68:77:7f:70:c2:3f:0e:19:77:37:b2:92:8e:24:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5 Validity Not Before: Jun 21 10:06:07 2025 GMT Not After : Jun 26 06:45:07 2025 GMT Subject: CN=07930A3EC2056550C82ADFEA199F9CCF1306557C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:01:77:23:cd:c5:3a:75:9a:a3:51:61:7c: a5:8e:41:c7:e5:07:92:a5:bf:70:e7:0f:11:80:63: 97:39:94:2e:ad:16:e1:8c:34:4b:24:65:78:43:fd: 25:26:c8:6d:b2:bb:f7:62:89:12:5e:03:cf:c7:6e: 44:1d:f1:3a:a5:04:fb:71:dc:a2:48:bc:79:f0:83: 66:bb:d1:5f:c3:2b:6f:95:36:a1:cb:7c:66:22:e3: b1:38:08:68:0b:33:25:2f:95:d7:55:a3:0e:b4:6c: 02:34:f5:4d:54:46:a2:cb:b6:63:0a:04:41:93:d6: c4:1c:b6:4d:25:02:63:71:9b:68:3a:2c:64:ab:2e: 0a:84:70:f3:be:d3:1e:a0:d1:9e:f1:0d:ec:fe:0e: a9:d7:0a:e3:78:16:9f:a5:ef:ef:29:3a:9a:56:62: 72:bc:87:f8:c7:f5:9a:25:50:6b:ee:6e:01:94:21: a9:20:91:13:0d:39:69:68:fb:ff:0d:e6:e1:a3:ba: 42:78:9c:76:f9:4a:40:81:39:ef:0c:8f:e0:36:9f: 0d:99:9b:57:f6:60:6f:7f:8d:6b:6c:98:d5:5f:a6: 41:6e:ec:a7:21:38:08:c7:ee:a7:85:9a:b4:38:82: 82:09:3f:92:1d:bc:37:ad:ca:08:5c:5f:66:77:f7: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:0A:3E:C2:05:65:50:C8:2A:DF:EA:19:9F:9C:CF:13:06:55:7C X509v3 Authority Key Identifier: keyid:FF:B4:BF:3D:60:B4:FF:2F:AA:8A:36:44:65:2C:2E:2A:BF:83:6A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D76BF8797EE18298E19657984AFF4D130219D436741754559A6007A0EE71E926/0/FFB4BF3D60B4FF2FAA8A3644652C2E2ABF836AC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b2:ac:4a:8b:d7:33:76:5b:e3:60:d1:6d:7f:23:22:d7:1e: 58:21:d0:20:9a:54:b0:13:31:b3:58:e4:b1:67:95:94:72:b8: 39:fb:5d:c1:54:97:74:1a:53:ce:97:25:22:61:dd:9b:a9:4a: 91:5a:17:59:a3:ea:73:b7:20:ec:a8:9d:8d:2a:59:20:c3:b7: a8:21:43:9c:c1:d5:8f:02:b5:a5:49:9b:5a:02:fa:9e:3f:0f: 3f:f7:a1:12:2d:83:91:f4:2c:d7:3c:80:fb:b0:7b:d7:97:ed: af:87:3c:22:7b:88:a0:5c:4b:d4:99:14:5f:5f:7e:eb:52:af: d0:2f:cd:85:7b:84:a5:e5:fb:e7:41:a1:30:e7:85:a1:98:79: 3e:78:7e:85:d5:1a:a3:71:de:39:4c:5e:47:65:84:ad:7c:37: 42:62:51:63:3a:38:17:f5:3a:be:cc:a4:f9:b4:c0:fa:c8:95: 83:17:ea:fc:ed:c3:cc:20:de:9c:81:55:e3:dc:58:d1:8f:21: 5f:a7:26:41:0e:02:0c:70:52:8a:3f:cf:a6:62:00:ab:d7:b2: bf:36:27:fa:a2:cf:d9:aa:d0:1f:31:fe:3f:22:ba:9c:29:b5: ca:e3:5e:e4:40:1c:98:6c:7e:65:93:8a:32:c8:3d:c0:ef:6e: 8d:ee:8b:82 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUdnhXy5Zod39wwj8OGXc3spKOJBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZCNEJGM0Q2MEI0RkYyRkFBOEEzNjQ0NjUyQzJFMkFC RjgzNkFDNTAeFw0yNTA2MjExMDA2MDdaFw0yNTA2MjYwNjQ1MDdaMDMxMTAvBgNV BAMTKDA3OTMwQTNFQzIwNTY1NTBDODJBREZFQTE5OUY5Q0NGMTMwNjU1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBgF3I83FOnWao1FhfKWOQcfl B5Klv3DnDxGAY5c5lC6tFuGMNEskZXhD/SUmyG2yu/diiRJeA8/HbkQd8TqlBPtx 3KJIvHnwg2a70V/DK2+VNqHLfGYi47E4CGgLMyUvlddVow60bAI09U1URqLLtmMK BEGT1sQctk0lAmNxm2g6LGSrLgqEcPO+0x6g0Z7xDez+DqnXCuN4Fp+l7+8pOppW YnK8h/jH9ZolUGvubgGUIakgkRMNOWlo+/8N5uGjukJ4nHb5SkCBOe8Mj+A2nw2Z m1f2YG9/jWtsmNVfpkFu7KchOAjH7qeFmrQ4goIJP5IdvDetyghcX2Z391N1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUB5MKPsIFZVDIKt/qGZ+czxMGVXwwHwYDVR0j BBgwFoAU/7S/PWC0/y+qijZEZSwuKr+DasUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ENzZCRjg3OTdFRTE4Mjk4RTE5NjU3OTg0QUZGNEQxMzAy MTlENDM2NzQxNzU0NTU5QTYwMDdBMEVFNzFFOTI2LzAvRkZCNEJGM0Q2MEI0RkYy RkFBOEEzNjQ0NjUyQzJFMkFCRjgzNkFDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRkI0QkYzRDYwQjRGRjJGQUE4 QTM2NDQ2NTJDMkUyQUJGODM2QUM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDc2QkY4Nzk3RUUxODI5OEUxOTY1Nzk4NEFGRjREMTMwMjE5RDQzNjc0 MTc1NDU1OUE2MDA3QTBFRTcxRTkyNi8wL0ZGQjRCRjNENjBCNEZGMkZBQThBMzY0 NDY1MkMyRTJBQkY4MzZBQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYsqxKi9czdlvjYNFtfyMi1x5Y IdAgmlSwEzGzWOSxZ5WUcrg5+13BVJd0GlPOlyUiYd2bqUqRWhdZo+pztyDsqJ2N Klkgw7eoIUOcwdWPArWlSZtaAvqePw8/96ESLYOR9CzXPID7sHvXl+2vhzwie4ig XEvUmRRfX37rUq/QL82Fe4Sl5fvnQaEw54WhmHk+eH6F1Rqjcd45TF5HZYStfDdC YlFjOjgX9Tq+zKT5tMD6yJWDF+r87cPMIN6cgVXj3FjRjyFfpyZBDgIMcFKKP8+m YgCr17K/Nif6os/ZqtAfMf4/IrqcKbXK417kQByYbH5lk4oyyD3A726N7ouC -----END CERTIFICATE-----Generated at Sun Jun 22 22:23:53 2025 by rpki-client