$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft File: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft (raw, json) Hash identifier: 4Cic1GNHvSPvwx14oOQxKTghPrWMvTfsP4M3Wejtz+w= Subject key identifier: BF:2D:8A:C1:B5:A6:0B:46:08:DB:C8:96:D4:AF:11:9E:BC:16:18:DF Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Certificate serial: 28974F6D82010B63C54FB37DE201D6F8C90F4AF8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft Manifest number: DD Signing time: Sat 17 May 2025 15:47:53 +0000 Manifest this update: Sat 17 May 2025 15:42:53 +0000 Manifest next update: Thu 22 May 2025 14:37:53 +0000 Files and hashes: 1: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl (hash: Yww4imvsJZdhhjS59YMmLJgP3a23sgFxUf5aYquAmr4=) 2: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (hash: mLPmwLCgJH7/6VKEK4Pcz7wxnHkCNUH5wI8HmFmJB1E=) 3: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (hash: lHM7TXuZJiuk5ar5OftYzmGGnYQusx4CcGk57kh5X5g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:97:4f:6d:82:01:0b:63:c5:4f:b3:7d:e2:01:d6:f8:c9:0f:4a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Validity Not Before: May 17 15:42:53 2025 GMT Not After : May 22 14:37:53 2025 GMT Subject: CN=BF2D8AC1B5A60B4608DBC896D4AF119EBC1618DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:87:b7:d0:9a:4f:63:a3:e2:87:bf:a1:92:9c: 7b:ac:60:af:b8:79:ab:3d:40:89:08:b9:e1:13:d3: a5:00:a5:ce:f7:38:a3:44:ff:a9:f5:bb:8a:d8:8d: 4b:bc:eb:b8:e3:9d:ee:66:eb:d6:4d:f5:72:52:5a: 39:d9:99:4f:1b:10:fd:f6:25:53:ce:60:65:2c:74: 31:db:05:81:8a:bc:30:d9:af:68:49:01:8e:da:32: 37:cb:f6:9d:dc:50:25:40:ad:f5:8c:d1:12:2c:78: eb:43:04:02:62:4a:9f:92:7f:d0:ee:8f:6e:30:a8: 56:3b:4a:53:47:b9:3e:0a:b9:64:70:d1:e6:60:64: ca:f1:e4:17:50:e6:54:61:f1:ac:f3:5b:df:25:e4: c6:8a:ab:b9:55:59:0f:88:0e:c3:83:eb:0b:02:34: cb:9b:f6:5d:2d:73:d8:9c:bf:63:74:28:31:b7:f7: fe:1b:91:8c:14:36:f9:f1:a8:52:5a:6b:8d:c9:bc: c1:a3:04:53:c9:c4:c6:9f:02:29:7c:53:18:53:b5: c7:a8:56:12:08:70:8d:64:49:ab:ac:b9:9e:7b:4e: a6:d9:84:a9:28:2a:43:b1:c6:23:6d:2a:7e:be:0d: f8:ec:ea:13:bf:df:b8:45:57:06:eb:bd:e3:7b:b3: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2D:8A:C1:B5:A6:0B:46:08:DB:C8:96:D4:AF:11:9E:BC:16:18:DF X509v3 Authority Key Identifier: keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f4:ad:34:8d:f8:47:f4:7f:9b:61:fd:db:69:47:5c:95:e0: 88:bb:c9:4a:f1:46:43:bf:f0:3e:67:01:06:ad:f0:8c:f8:98: 8e:e3:a5:25:9b:57:27:e6:bd:aa:8b:1a:8e:07:cc:fa:71:e0: 2c:3a:51:d2:b0:01:e5:ba:92:81:bc:ab:a8:bf:91:41:62:84: ab:78:22:68:bc:79:58:c5:41:15:d4:81:0b:eb:c4:8b:8a:f9: 5f:2e:15:14:64:7b:d3:71:e7:85:f6:34:fe:95:db:7d:20:ce: 25:74:0f:76:d5:3a:78:df:cc:ff:fc:0f:f2:32:0b:f0:ba:dc: b5:89:01:f3:85:2e:a9:96:99:ca:22:62:6c:d7:51:17:64:86: 7d:1f:70:b5:6b:c2:a3:ab:a9:0a:33:ca:eb:f4:47:78:05:70: 27:83:0c:c2:c8:49:73:91:71:42:13:18:5b:b8:27:9a:6d:d4: ae:85:c6:f4:70:13:d7:c2:ec:33:91:fd:db:7f:84:9d:94:86: e1:29:b7:82:38:ae:74:1e:f6:d1:10:66:0a:85:bc:89:82:65: 67:21:cb:ec:c9:db:32:1e:43:a7:e2:20:d5:26:14:43:93:e0: 37:71:be:85:7c:ff:de:be:3a:d7:d3:6a:5d:74:c7:79:6d:a1: f1:ed:fe:74 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKJdPbYIBC2PFT7N94gHW+MkPSvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEQzMwNjhBOUFFNzgzODRFNUE0RjRGNTI0NEJBRTQw ODgwNTlFNTAeFw0yNTA1MTcxNTQyNTNaFw0yNTA1MjIxNDM3NTNaMDMxMTAvBgNV BAMTKEJGMkQ4QUMxQjVBNjBCNDYwOERCQzg5NkQ0QUYxMTlFQkMxNjE4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjh7fQmk9jo+KHv6GSnHusYK+4 eas9QIkIueET06UApc73OKNE/6n1u4rYjUu867jjne5m69ZN9XJSWjnZmU8bEP32 JVPOYGUsdDHbBYGKvDDZr2hJAY7aMjfL9p3cUCVArfWM0RIseOtDBAJiSp+Sf9Du j24wqFY7SlNHuT4KuWRw0eZgZMrx5BdQ5lRh8azzW98l5MaKq7lVWQ+IDsOD6wsC NMub9l0tc9icv2N0KDG39/4bkYwUNvnxqFJaa43JvMGjBFPJxMafAil8UxhTtceo VhIIcI1kSausuZ57TqbZhKkoKkOxxiNtKn6+Dfjs6hO/37hFVwbrveN7s3rTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvy2KwbWmC0YI28iW1K8RnrwWGN8wHwYDVR0j BBgwFoAUu9wwaKmueDhOWk9PUkS65AiAWeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDIzMzIwQzgwNUQ4QkVFRkM0MjQyQzU2NzFEODQ0NTY3 NjNBRERGQURFRTA0RTQyQTFBMUQ0NERDRkJEMkEzLzAvQkJEQzMwNjhBOUFFNzgz ODRFNUE0RjRGNTI0NEJBRTQwODgwNTlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkRDMzA2OEE5QUU3ODM4NEU1 QTRGNEY1MjQ0QkFFNDA4ODA1OUU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQyMzMyMEM4MDVEOEJFRUZDNDI0MkM1NjcxRDg0NDU2NzYzQURERkFE RUUwNEU0MkExQTFENDREQ0ZCRDJBMy8wL0JCREMzMDY4QTlBRTc4Mzg0RTVBNEY0 RjUyNDRCQUU0MDg4MDU5RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAm9K00jfhH9H+bYf3baUdcleCI u8lK8UZDv/A+ZwEGrfCM+JiO46Ulm1cn5r2qixqOB8z6ceAsOlHSsAHlupKBvKuo v5FBYoSreCJovHlYxUEV1IEL68SLivlfLhUUZHvTceeF9jT+ldt9IM4ldA921Tp4 38z//A/yMgvwuty1iQHzhS6plpnKImJs11EXZIZ9H3C1a8Kjq6kKM8rr9Ed4BXAn gwzCyElzkXFCExhbuCeabdSuhcb0cBPXwuwzkf3bf4SdlIbhKbeCOK50HvbREGYK hbyJgmVnIcvsydsyHkOn4iDVJhRDk+A3cb6FfP/evjrX02pddMd5baHx7f50 -----END CERTIFICATE-----Generated at Sun May 18 17:56:32 2025 by rpki-client