$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft File: BF32AEE1B63DB0DF1296575D56FA963E24476012.mft (raw, json) Hash identifier: BHhoYVwKlG0UO9d+nVrq5IJAAmDAtjmroyLAz7KGr0U= Subject key identifier: DB:E0:1E:C9:97:B9:B5:BF:7A:7D:7E:17:6E:C6:AC:0B:CC:27:C6:B9 Authority key identifier: BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12 Certificate issuer: /CN=BF32AEE1B63DB0DF1296575D56FA963E24476012 Certificate serial: 38948ED5660C500AAE9FA941C04FEF453C464A31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft Manifest number: 39 Signing time: Fri 20 Jun 2025 12:07:51 +0000 Manifest this update: Fri 20 Jun 2025 12:02:51 +0000 Manifest next update: Thu 26 Jun 2025 08:55:51 +0000 Files and hashes: 1: 323830333a323264303a3a2f33322d3334203d3e20323734303438.roa (hash: 4aH4uYkWGE+cc9ahkSEXCeY+Hh6RB/BBL4FOK1r2QC0=) 2: BF32AEE1B63DB0DF1296575D56FA963E24476012.crl (hash: Fkqjo6v5RWGVvGrM9oa4iBKt83T2cJ1697igLgT3XBw=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Jun 2025 08:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:94:8e:d5:66:0c:50:0a:ae:9f:a9:41:c0:4f:ef:45:3c:46:4a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF32AEE1B63DB0DF1296575D56FA963E24476012 Validity Not Before: Jun 20 12:02:51 2025 GMT Not After : Jun 26 08:55:51 2025 GMT Subject: CN=DBE01EC997B9B5BF7A7D7E176EC6AC0BCC27C6B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:fb:f8:01:1c:c5:3c:cc:30:29:0e:0b:05: 42:13:69:42:6e:2d:5e:fe:ab:f7:c9:db:0e:b7:0b: c8:93:e8:2a:c4:b5:66:2d:fb:99:4b:24:d2:e3:11: ee:50:2d:9b:e7:65:71:58:03:cc:3c:b8:3c:6d:5e: 70:42:d5:74:52:05:c2:5f:d1:8c:97:da:29:e4:d3: eb:2f:b7:7d:c5:40:77:10:f6:85:28:6a:f6:e9:24: 04:bb:c7:93:d1:34:7f:a9:18:73:0d:22:c6:1c:db: 29:15:2b:4e:4b:3e:49:95:f4:50:e7:ce:89:1c:10: b7:1f:99:60:d1:aa:cd:73:60:e4:fb:4f:b4:58:a1: 0f:4c:16:89:05:c4:29:9d:95:9c:ef:47:90:47:cb: aa:3c:69:a0:f5:ca:cb:d0:04:c1:65:a3:b3:c5:e6: bf:23:fb:44:8c:5a:50:c1:52:73:d3:e4:ad:b4:46: aa:89:7d:8f:70:63:eb:3e:47:d8:3a:c5:9d:1b:1f: 9b:c9:77:95:af:75:6e:e7:79:04:fa:3a:c3:6a:4b: 36:fb:ef:c3:c0:09:fc:05:68:de:c4:d5:89:3c:54: 52:47:3d:f7:0f:9d:6f:9b:61:40:e2:6d:ce:c0:41: 09:d6:c5:e3:b9:a6:9b:33:3d:66:55:03:d5:c4:a2: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E0:1E:C9:97:B9:B5:BF:7A:7D:7E:17:6E:C6:AC:0B:CC:27:C6:B9 X509v3 Authority Key Identifier: keyid:BF:32:AE:E1:B6:3D:B0:DF:12:96:57:5D:56:FA:96:3E:24:47:60:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE9EF3D0A7970CAEFE5DCA75A7C6B149AA2C4FDF5A1722F4698BC7F722A22FDB/0/BF32AEE1B63DB0DF1296575D56FA963E24476012.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:67:2a:89:29:e2:fa:7c:51:00:16:3e:b0:a0:07:e9:af:3a: 78:96:88:d3:19:ad:21:61:64:c6:6a:3a:a9:22:35:92:7d:86: 46:09:de:22:03:9d:04:dc:e5:6b:18:c2:70:0b:98:16:59:a7: c9:59:f6:5f:1f:d9:6d:e3:fb:7d:95:96:81:74:30:64:9a:36: 68:66:48:a2:65:6e:3c:88:ff:c9:83:89:f1:0a:65:ce:4f:2c: 2f:fa:db:43:32:a4:4d:be:dd:4a:83:d5:f4:57:7b:83:5f:6c: 6d:23:6c:87:77:09:72:3e:f4:a0:e0:d8:e5:59:7a:c9:d4:56: 89:9a:7e:cb:72:b1:18:be:58:ff:2c:a4:00:c1:a7:bb:4d:34: 33:32:4d:f4:fd:ba:07:2d:d2:d7:3e:60:98:cd:4c:5e:57:32: f3:09:64:d5:a0:e3:b4:e0:fc:72:1f:d8:e7:2f:e0:67:b2:96: b7:00:f0:b8:ee:b9:04:8b:f2:88:4b:28:89:af:6c:fb:b2:0b: 59:67:51:da:a0:27:c4:d9:3e:dd:b0:61:8b:c0:0b:54:5d:e9: 99:e4:16:1e:7d:aa:80:85:4a:d1:5c:6a:0f:26:bd:a0:c1:bb: 95:a0:45:0a:76:c1:47:f2:f5:60:e8:d9:fb:7c:75:49:b5:cb: b9:95:ed:bd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOJSO1WYMUAqun6lBwE/vRTxGSjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzMkFFRTFCNjNEQjBERjEyOTY1NzVENTZGQTk2M0Uy NDQ3NjAxMjAeFw0yNTA2MjAxMjAyNTFaFw0yNTA2MjYwODU1NTFaMDMxMTAvBgNV BAMTKERCRTAxRUM5OTdCOUI1QkY3QTdEN0UxNzZFQzZBQzBCQ0MyN0M2QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZvv4ARzFPMwwKQ4LBUITaUJu LV7+q/fJ2w63C8iT6CrEtWYt+5lLJNLjEe5QLZvnZXFYA8w8uDxtXnBC1XRSBcJf 0YyX2ink0+svt33FQHcQ9oUoavbpJAS7x5PRNH+pGHMNIsYc2ykVK05LPkmV9FDn zokcELcfmWDRqs1zYOT7T7RYoQ9MFokFxCmdlZzvR5BHy6o8aaD1ysvQBMFlo7PF 5r8j+0SMWlDBUnPT5K20RqqJfY9wY+s+R9g6xZ0bH5vJd5WvdW7neQT6OsNqSzb7 78PACfwFaN7E1Yk8VFJHPfcPnW+bYUDibc7AQQnWxeO5ppszPWZVA9XEomPPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2+AeyZe5tb96fX4XbsasC8wnxrkwHwYDVR0j BBgwFoAUvzKu4bY9sN8SllddVvqWPiRHYBIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9ERTlFRjNEMEE3OTcwQ0FFRkU1RENBNzVBN0M2QjE0OUFB MkM0RkRGNUExNzIyRjQ2OThCQzdGNzIyQTIyRkRCLzAvQkYzMkFFRTFCNjNEQjBE RjEyOTY1NzVENTZGQTk2M0UyNDQ3NjAxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjMyQUVFMUI2M0RCMERGMTI5 NjU3NUQ1NkZBOTYzRTI0NDc2MDEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvREU5RUYzRDBBNzk3MENBRUZFNURDQTc1QTdDNkIxNDlBQTJDNEZERjVB MTcyMkY0Njk4QkM3RjcyMkEyMkZEQi8wL0JGMzJBRUUxQjYzREIwREYxMjk2NTc1 RDU2RkE5NjNFMjQ0NzYwMTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+ZyqJKeL6fFEAFj6woAfprzp4 lojTGa0hYWTGajqpIjWSfYZGCd4iA50E3OVrGMJwC5gWWafJWfZfH9lt4/t9lZaB dDBkmjZoZkiiZW48iP/Jg4nxCmXOTywv+ttDMqRNvt1Kg9X0V3uDX2xtI2yHdwly PvSg4NjlWXrJ1FaJmn7LcrEYvlj/LKQAwae7TTQzMk30/boHLdLXPmCYzUxeVzLz CWTVoOO04PxyH9jnL+Bnspa3APC47rkEi/KISyiJr2z7sgtZZ1HaoCfE2T7dsGGL wAtUXemZ5BYefaqAhUrRXGoPJr2gwbuVoEUKdsFH8vVg6Nn7fHVJtcu5le29 -----END CERTIFICATE-----Generated at Mon Jun 23 07:59:35 2025 by rpki-client