$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft File: 649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft (raw, json) Hash identifier: wwf5VZfXVG3JQK2qBVtPItOe5xhgUMzq3dr11w2HtvM= Subject key identifier: F7:B3:61:FA:FB:41:6E:63:EB:4C:1B:2E:CC:5D:5E:6E:16:56:DE:A1 Authority key identifier: 64:9C:72:EB:AF:6A:2D:61:ED:79:4B:72:CD:64:67:0B:B9:A3:B7:C1 Certificate issuer: /CN=649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1 Certificate serial: 5EF338C74FFEE69429F523DCACDAC15805A16A0F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft Manifest number: 0A Signing time: Sat 17 May 2025 01:44:03 +0000 Manifest this update: Sat 17 May 2025 01:39:03 +0000 Manifest next update: Thu 22 May 2025 23:35:03 +0000 Files and hashes: 1: 649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.crl (hash: vAZnhtHPCWAZZoDG+ng4QufF5Ba4jKCiix+mcljU/mc=) 2: 34352e3138302e3131322e302f32342d3234203d3e20323632313836.roa (hash: Og5J+rpPp4Vp87XQG3NQD9vZQTPUEhPnlQ/hAPJJ438=) 3: 323830333a666536303a3a2f33322d3332203d3e20323632313836.roa (hash: G6lA26EesVdz3xusZzUuvRd7KjZBVyoxDf6DJnxUL6g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.crl rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f3:38:c7:4f:fe:e6:94:29:f5:23:dc:ac:da:c1:58:05:a1:6a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1 Validity Not Before: May 17 01:39:03 2025 GMT Not After : May 22 23:35:03 2025 GMT Subject: CN=F7B361FAFB416E63EB4C1B2ECC5D5E6E1656DEA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:e5:c6:74:ed:29:c7:72:c9:cc:54:ad:5e: 9e:de:44:48:fa:bf:c7:0a:fb:92:72:ed:fa:0c:1c: d2:c3:b8:36:08:9a:6c:c1:f4:66:b8:43:91:3c:83: 20:f5:e0:20:8d:81:77:cf:fc:fa:5a:81:7f:29:66: ce:c7:18:fe:54:6b:6e:8c:57:3f:73:69:f1:ae:f4: 07:81:6e:44:f6:cd:5b:66:23:d7:8c:3c:55:2a:61: 1b:fd:c2:0d:e6:90:3d:51:e0:49:0d:b1:d2:bb:f4: 63:55:e5:e1:19:01:de:47:66:3f:dc:18:4a:ea:cf: c0:31:7a:65:13:47:2e:3d:97:ce:35:17:d1:36:00: f0:69:b0:be:01:b5:03:de:07:2c:79:c5:aa:f9:58: 34:ed:21:51:a9:7b:06:de:08:39:b0:30:b4:b3:87: 69:da:b7:7e:56:9d:94:63:a6:9c:46:8d:a9:f8:4f: e1:1c:41:f5:9b:8a:8c:39:43:2a:d5:80:c6:8b:fd: 8e:a5:cb:d1:d9:b7:b6:dc:cf:35:d1:ba:a8:a6:47: 8c:f1:25:5d:81:ea:5b:1c:61:5f:44:9a:c8:8e:e6: 9f:61:99:74:21:78:02:7a:8c:09:88:50:58:1e:33: 9c:43:de:bb:fd:78:cd:e7:bf:54:ee:79:1b:c8:97: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B3:61:FA:FB:41:6E:63:EB:4C:1B:2E:CC:5D:5E:6E:16:56:DE:A1 X509v3 Authority Key Identifier: keyid:64:9C:72:EB:AF:6A:2D:61:ED:79:4B:72:CD:64:67:0B:B9:A3:B7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35D07F6E8A8EC54CD6A3D3270411029494019CB996AA7A789C3B7E2B5E530E46/0/649C72EBAF6A2D61ED794B72CD64670BB9A3B7C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a5:82:cc:bd:5f:d9:ac:e1:92:b2:d7:5c:c9:d7:2d:39:71: 91:42:87:8b:41:fc:e2:6e:c1:eb:dd:bd:6d:ec:cc:92:b5:8c: 06:f7:81:68:a2:d0:55:1e:31:91:8b:de:90:1b:82:0f:b4:2b: 56:54:d1:69:68:cd:60:6e:5b:a2:6d:c5:ae:7e:e1:82:63:9c: 8d:1b:69:e1:30:ed:60:93:9b:1a:4e:65:a5:b5:fd:88:01:c0: f8:48:39:de:d0:90:35:e1:9c:fb:bf:ba:94:b5:7d:3c:5f:41: 80:88:eb:d0:50:6b:b7:d4:93:d8:20:d4:23:31:97:30:67:ab: 39:d2:45:a9:ae:77:39:db:37:92:aa:3f:a8:22:c6:a3:36:9e: 33:5d:2b:c5:11:3e:35:fc:b3:c0:53:44:17:f6:6b:7e:f2:42: 5a:6c:b2:d4:d2:e4:2f:a4:35:d4:02:33:f2:54:db:0c:af:e9: 70:ac:c4:b1:7b:eb:fe:d4:4d:c8:a0:2e:33:52:c7:8e:b2:19: e8:34:e2:21:cc:dc:6c:3e:28:ec:b7:61:5e:f7:1e:f8:36:79: 38:e8:ac:65:87:4a:4e:49:9e:54:b5:6e:76:10:43:04:b2:33: f5:34:f5:cd:e0:78:38:13:88:3a:d2:a7:30:90:f3:d0:f5:1e: 32:89:36:26 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXvM4x0/+5pQp9SPcrNrBWAWhag8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ5QzcyRUJBRjZBMkQ2MUVENzk0QjcyQ0Q2NDY3MEJC OUEzQjdDMTAeFw0yNTA1MTcwMTM5MDNaFw0yNTA1MjIyMzM1MDNaMDMxMTAvBgNV BAMTKEY3QjM2MUZBRkI0MTZFNjNFQjRDMUIyRUNDNUQ1RTZFMTY1NkRFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCazOXGdO0px3LJzFStXp7eREj6 v8cK+5Jy7foMHNLDuDYImmzB9Ga4Q5E8gyD14CCNgXfP/PpagX8pZs7HGP5Ua26M Vz9zafGu9AeBbkT2zVtmI9eMPFUqYRv9wg3mkD1R4EkNsdK79GNV5eEZAd5HZj/c GErqz8AxemUTRy49l841F9E2APBpsL4BtQPeByx5xar5WDTtIVGpewbeCDmwMLSz h2nat35WnZRjppxGjan4T+EcQfWbiow5QyrVgMaL/Y6ly9HZt7bczzXRuqimR4zx JV2B6lscYV9EmsiO5p9hmXQheAJ6jAmIUFgeM5xD3rv9eM3nv1TueRvIl+T3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU97Nh+vtBbmPrTBsuzF1ebhZW3qEwHwYDVR0j BBgwFoAUZJxy669qLWHteUtyzWRnC7mjt8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNUQwN0Y2RThBOEVDNTRDRDZBM0QzMjcwNDExMDI5NDk0 MDE5Q0I5OTZBQTdBNzg5QzNCN0UyQjVFNTMwRTQ2LzAvNjQ5QzcyRUJBRjZBMkQ2 MUVENzk0QjcyQ0Q2NDY3MEJCOUEzQjdDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDlDNzJFQkFGNkEyRDYxRUQ3 OTRCNzJDRDY0NjcwQkI5QTNCN0MxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzVEMDdGNkU4QThFQzU0Q0Q2QTNEMzI3MDQxMTAyOTQ5NDAxOUNCOTk2 QUE3QTc4OUMzQjdFMkI1RTUzMEU0Ni8wLzY0OUM3MkVCQUY2QTJENjFFRDc5NEI3 MkNENjQ2NzBCQjlBM0I3QzEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAupYLMvV/ZrOGSstdcydctOXGR QoeLQfzibsHr3b1t7MyStYwG94FootBVHjGRi96QG4IPtCtWVNFpaM1gbluibcWu fuGCY5yNG2nhMO1gk5saTmWltf2IAcD4SDne0JA14Zz7v7qUtX08X0GAiOvQUGu3 1JPYINQjMZcwZ6s50kWprnc52zeSqj+oIsajNp4zXSvFET41/LPAU0QX9mt+8kJa bLLU0uQvpDXUAjPyVNsMr+lwrMSxe+v+1E3IoC4zUseOshnoNOIhzNxsPijst2Fe 9x74Nnk46Kxlh0pOSZ5UtW52EEMEsjP1NPXN4Hg4E4g60qcwkPPQ9R4yiTYm -----END CERTIFICATE-----Generated at Sat May 17 09:37:25 2025 by rpki-client