$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft File: BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft (raw, json) Hash identifier: jJe4JjZlew13Gp7wemywZ8NNfmfP0hLe9e9WYMaBsaI= Subject key identifier: BC:AB:95:AA:11:93:8C:91:F7:10:2D:46:85:C3:24:12:F8:E5:69:74 Authority key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3 Certificate issuer: /CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3 Certificate serial: 5D6CB8264F9C116F1EFE3FBD45D6C90A68F3A527 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft Manifest number: DE Signing time: Thu 15 May 2025 16:28:34 +0000 Manifest this update: Thu 15 May 2025 16:23:34 +0000 Manifest next update: Tue 20 May 2025 17:17:34 +0000 Files and hashes: 1: 3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa (hash: e7+CXpay+EWuoUgmXjhSxAKj4Dqkj4EKhInAk5DTdHg=) 2: BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl (hash: bDPc4smgxqGo1uGT2rF0inlf9DU24qv4A/6cKu2GjBU=) 3: 3133382e3138352e33312e302f32342d3234203d3e20323633383137.roa (hash: SmkpiIg0zZyBAsQ+if+UTKOc0IkT7mpHDaNOQdLljRM=) 4: 3133382e3138352e33302e302f32342d3234203d3e20323633383137.roa (hash: VmZKYpVcWB4Fvp1ftaTOVK8V7OgOeViush1FUlGxR5k=) 5: 323830333a6134303a3a2f34372d3438203d3e20323633383137.roa (hash: XWNi85D6pU10hEJTHjZn+WiGf73bs2QkJLnS19kOcn0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 20 May 2025 17:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6c:b8:26:4f:9c:11:6f:1e:fe:3f:bd:45:d6:c9:0a:68:f3:a5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3 Validity Not Before: May 15 16:23:34 2025 GMT Not After : May 20 17:17:34 2025 GMT Subject: CN=BCAB95AA11938C91F7102D4685C32412F8E56974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:d3:6b:ad:58:b0:12:00:3d:76:7e:4a:e3: c1:a6:02:78:2d:82:91:19:fe:f4:d2:80:bd:63:4c: 2a:93:35:e5:73:94:1e:ac:d3:d7:e9:a3:18:ba:f8: 64:f5:be:0c:f0:58:67:6f:10:80:44:1f:8b:cd:8e: 34:21:86:80:be:f6:83:0e:ac:3b:04:14:35:5c:6a: 50:0e:ff:03:b1:db:6b:08:bf:5b:77:1d:af:be:af: 32:2c:3c:aa:a8:e2:a1:78:4c:73:19:36:3f:b8:d7: af:c4:29:9e:20:52:ba:52:2e:03:19:3d:7a:1c:fc: b5:e4:1c:ac:dc:39:de:50:e8:5f:9c:e5:90:74:81: 60:f0:1d:9d:25:4f:78:7b:7e:f8:46:21:3c:14:39: 28:c6:e5:1d:88:82:07:b8:7e:a6:3a:7e:ab:ec:a2: d2:a0:b5:ba:93:16:49:45:07:5c:14:c3:db:81:37: d5:b4:9d:5c:07:26:4f:d1:ac:c6:ad:bb:15:6a:14: 26:5b:4a:a7:65:1a:b5:c1:30:eb:38:84:98:8d:82: 7b:67:09:c9:af:f9:11:43:61:73:17:f1:52:d9:4a: 71:8c:53:fa:5b:32:b5:0a:08:96:57:11:ed:1b:ed: 44:13:04:79:73:98:e4:9d:ae:f7:b5:52:94:b2:50: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AB:95:AA:11:93:8C:91:F7:10:2D:46:85:C3:24:12:F8:E5:69:74 X509v3 Authority Key Identifier: keyid:BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1a:43:ca:ff:f1:b4:1e:00:34:b2:14:8d:08:a7:b9:63:0d: 10:b2:21:44:e2:74:fb:1b:81:94:98:95:c2:4e:c0:0a:aa:38: f0:53:af:b2:da:d2:8d:2f:69:97:eb:33:37:3b:ef:73:09:a0: 85:d1:ea:03:93:a5:b5:63:98:6c:1e:e7:3a:cf:1e:cf:d2:58: 8f:7e:4c:55:d5:db:d3:2f:82:20:aa:5b:b6:7d:77:1f:b0:1a: 45:41:e2:a9:8f:20:3b:8f:97:da:81:14:3f:e2:1c:0d:e7:7f: 09:1c:8d:99:dd:82:f3:ce:11:a4:6c:f5:ef:55:89:a5:66:01: 64:55:f7:63:03:47:dc:fe:42:de:44:fe:a5:16:dc:9c:46:a4: d4:63:0c:d0:ca:81:6d:30:a7:62:98:7a:fa:cd:d7:a1:47:08: 3a:9f:8b:55:cb:e8:3b:86:eb:f6:98:d0:8b:ff:57:99:5c:fe: 43:f4:05:d0:d8:0f:ed:f1:8d:1a:7f:2c:bc:c5:2f:8e:90:80: 8f:d3:82:02:b6:cc:bb:66:e3:cd:8a:29:5b:37:53:a4:1f:4d: b2:70:92:a0:6e:3d:11:72:24:b3:5c:8d:ba:ff:9e:27:ae:e5: bc:e8:ca:cf:bf:b3:8b:1e:04:a4:f6:f1:1f:c0:a7:6b:cd:2f: 55:c4:7d:d0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXWy4Jk+cEW8e/j+9RdbJCmjzpScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3NjgzQTA5OTU4ODBGQjUxRjNCRjk4MjkzRURFQ0Qy ODZBRjZBMzAeFw0yNTA1MTUxNjIzMzRaFw0yNTA1MjAxNzE3MzRaMDMxMTAvBgNV BAMTKEJDQUI5NUFBMTE5MzhDOTFGNzEwMkQ0Njg1QzMyNDEyRjhFNTY5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJ9NrrViwEgA9dn5K48GmAngt gpEZ/vTSgL1jTCqTNeVzlB6s09fpoxi6+GT1vgzwWGdvEIBEH4vNjjQhhoC+9oMO rDsEFDVcalAO/wOx22sIv1t3Ha++rzIsPKqo4qF4THMZNj+416/EKZ4gUrpSLgMZ PXoc/LXkHKzcOd5Q6F+c5ZB0gWDwHZ0lT3h7fvhGITwUOSjG5R2Igge4fqY6fqvs otKgtbqTFklFB1wUw9uBN9W0nVwHJk/RrMatuxVqFCZbSqdlGrXBMOs4hJiNgntn Ccmv+RFDYXMX8VLZSnGMU/pbMrUKCJZXEe0b7UQTBHlzmOSdrve1UpSyUNPlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvKuVqhGTjJH3EC1GhcMkEvjlaXQwHwYDVR0j BBgwFoAUvnaDoJlYgPtR87+YKT7ezShq9qMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yODgwMjRERTg3MzYwMzMxNTQxNTEyNTM1MjU1OThDRUM4 OUI5QTBERTA3NTExN0IxM0E2MEM4QjcxMjhFMkQwLzAvQkU3NjgzQTA5OTU4ODBG QjUxRjNCRjk4MjkzRURFQ0QyODZBRjZBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRTc2ODNBMDk5NTg4MEZCNTFG M0JGOTgyOTNFREVDRDI4NkFGNkEzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjg4MDI0REU4NzM2MDMzMTU0MTUxMjUzNTI1NTk4Q0VDODlCOUEwREUw NzUxMTdCMTNBNjBDOEI3MTI4RTJEMC8wL0JFNzY4M0EwOTk1ODgwRkI1MUYzQkY5 ODI5M0VERUNEMjg2QUY2QTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArGkPK//G0HgA0shSNCKe5Yw0Q siFE4nT7G4GUmJXCTsAKqjjwU6+y2tKNL2mX6zM3O+9zCaCF0eoDk6W1Y5hsHuc6 zx7P0liPfkxV1dvTL4Igqlu2fXcfsBpFQeKpjyA7j5fagRQ/4hwN538JHI2Z3YLz zhGkbPXvVYmlZgFkVfdjA0fc/kLeRP6lFtycRqTUYwzQyoFtMKdimHr6zdehRwg6 n4tVy+g7huv2mNCL/1eZXP5D9AXQ2A/t8Y0afyy8xS+OkICP04ICtsy7ZuPNiilb N1OkH02ycJKgbj0RciSzXI26/54nruW86MrPv7OLHgSk9vEfwKdrzS9VxH3Q -----END CERTIFICATE-----Generated at Sat May 17 17:56:16 2025 by rpki-client