$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft File: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft (raw, json) Hash identifier: f7Kg7VY3Y3ZvZL24gefz96ZnNGQAxUE8oW5spoGo0Dk= Subject key identifier: 70:B3:BA:44:EC:3B:33:6C:EE:44:81:89:57:8A:B8:E6:83:7C:6D:44 Authority key identifier: 65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2 Certificate issuer: /CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2 Certificate serial: 49986BE635DD6A42F40D58CA539701FED101F253 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft Manifest number: 9A Signing time: Fri 16 May 2025 14:52:36 +0000 Manifest this update: Fri 16 May 2025 14:47:36 +0000 Manifest next update: Tue 20 May 2025 19:11:36 +0000 Files and hashes: 1: 323830333a373936303a3a2f33322d3438203d3e20323639373438.roa (hash: e21QvDl990ypUCrdvf/AQjM4eQbi1L/COrznev4gDg4=) 2: 34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa (hash: /q9LQAh8yR6HjcVfiJNg/40NirI8lBf8EDIEIPMs288=) 3: 65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl (hash: 18voznBoRR9mOR5dEN9xJXJamyKBeF78ayb6Y5CFrF8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 20 May 2025 19:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:98:6b:e6:35:dd:6a:42:f4:0d:58:ca:53:97:01:fe:d1:01:f2:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2 Validity Not Before: May 16 14:47:36 2025 GMT Not After : May 20 19:11:36 2025 GMT Subject: CN=70B3BA44EC3B336CEE448189578AB8E6837C6D44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1d:fa:7b:52:e4:f6:6c:97:fc:8c:d4:64:38: 2f:99:ff:df:b8:05:ac:d7:9c:d7:c4:eb:31:6b:4b: 8b:7e:bb:df:da:3d:af:8c:67:d0:a4:71:34:d8:18: 12:44:e1:bf:b7:50:6b:db:41:58:a2:f9:5b:4d:0f: b4:46:ca:3c:99:d7:49:35:c2:4d:5f:04:cc:58:88: 24:8b:4d:54:d7:d2:45:c0:94:60:9a:ee:c0:c6:4d: d3:9e:1b:fb:20:30:cf:e6:99:92:63:28:c8:8a:b0: 77:c7:45:31:e7:23:33:8b:e2:50:3a:db:cc:67:da: cd:88:a0:ed:a4:ee:12:35:34:da:2e:f4:dd:8e:25: 81:1a:94:3f:89:31:3f:c0:2d:3e:ad:0b:ff:f5:19: f5:e0:b4:dc:87:a7:5b:4b:65:be:c4:a4:ce:e1:04: cc:0c:92:2f:8b:ff:19:20:f0:65:19:4c:e8:49:fa: e7:5c:22:20:8c:f4:a6:73:a8:53:47:4f:e5:ea:bf: 2c:6a:38:58:c2:c8:9f:b7:e7:40:b1:bb:50:31:2f: 8e:b0:6d:f5:dd:30:03:93:89:a3:40:85:08:25:8f: 43:98:af:40:b5:2e:f2:5e:06:fe:7a:87:02:90:25: 0e:ed:c5:51:bd:32:64:06:88:ad:c4:5a:e7:d4:ae: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B3:BA:44:EC:3B:33:6C:EE:44:81:89:57:8A:B8:E6:83:7C:6D:44 X509v3 Authority Key Identifier: keyid:65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1d:09:a4:82:e5:4d:ab:99:6e:eb:18:71:c6:3c:67:8e:fb: 03:8d:83:11:6b:9c:bc:86:f9:93:f5:d2:6e:e1:8d:86:4c:c8: 3f:0b:6a:f4:20:51:1e:4b:c8:62:47:eb:00:0c:b9:d4:ed:b9: b3:46:0e:a6:a4:e7:96:20:34:b3:09:6b:8d:58:2e:2d:c0:44: ac:ac:57:07:ce:43:07:56:8d:a4:9d:3d:40:d3:01:6d:1f:4f: 9c:6a:6c:08:dc:9e:0c:6a:5c:79:03:58:2a:f1:e7:af:3a:73: b4:e4:c1:df:f7:d1:bb:15:97:9e:e1:88:f6:8a:52:62:2d:10: 70:df:5c:19:14:cc:ae:87:81:c2:84:84:83:8a:3e:c2:1b:07: 1f:e8:b6:9b:be:30:3e:d8:07:98:7e:80:81:be:1d:cd:ce:6d: bb:09:bd:00:af:f7:e0:9f:94:ca:75:57:77:da:9c:d3:52:6d: bf:39:09:56:c0:60:50:1e:f0:6a:80:f4:d5:22:7f:e3:e7:66: 53:86:7b:c1:df:f1:3c:bf:a3:9c:41:c0:b5:b4:f3:4e:e4:31: b8:ee:f0:5b:2d:23:eb:40:19:36:55:90:83:fa:50:4b:51:46: 21:04:fb:d0:25:be:5b:fe:22:f6:ef:56:ac:08:41:bb:6f:f6: 85:bf:cf:93 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSZhr5jXdakL0DVjKU5cB/tEB8lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVENTQzNjg4QzgyQ0M4MEVENjhERjJBOTM0NDFDMjk1 QzlGQTNFMjAeFw0yNTA1MTYxNDQ3MzZaFw0yNTA1MjAxOTExMzZaMDMxMTAvBgNV BAMTKDcwQjNCQTQ0RUMzQjMzNkNFRTQ0ODE4OTU3OEFCOEU2ODM3QzZENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSHfp7UuT2bJf8jNRkOC+Z/9+4 BazXnNfE6zFrS4t+u9/aPa+MZ9CkcTTYGBJE4b+3UGvbQVii+VtND7RGyjyZ10k1 wk1fBMxYiCSLTVTX0kXAlGCa7sDGTdOeG/sgMM/mmZJjKMiKsHfHRTHnIzOL4lA6 28xn2s2IoO2k7hI1NNou9N2OJYEalD+JMT/ALT6tC//1GfXgtNyHp1tLZb7EpM7h BMwMki+L/xkg8GUZTOhJ+udcIiCM9KZzqFNHT+XqvyxqOFjCyJ+350Cxu1AxL46w bfXdMAOTiaNAhQglj0OYr0C1LvJeBv56hwKQJQ7txVG9MmQGiK3EWufUrnnBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcLO6ROw7M2zuRIGJV4q45oN8bUQwHwYDVR0j BBgwFoAUZdVDaIyCzIDtaN8qk0QcKVyfo+IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDNCQzA2NjdDRDY2RTcwODQ4MDdEN0NFNTgyNzIzMkYz RkQxQzlFMkFFMDRENjlEMTlBMjI3OEZGRDIzMjZCLzAvNjVENTQzNjg4QzgyQ0M4 MEVENjhERjJBOTM0NDFDMjk1QzlGQTNFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NUQ1NDM2ODhDODJDQzgwRUQ2 OERGMkE5MzQ0MUMyOTVDOUZBM0UyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQzQkMwNjY3Q0Q2NkU3MDg0ODA3RDdDRTU4MjcyMzJGM0ZEMUM5RTJB RTA0RDY5RDE5QTIyNzhGRkQyMzI2Qi8wLzY1RDU0MzY4OEM4MkNDODBFRDY4REYy QTkzNDQxQzI5NUM5RkEzRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9HQmkguVNq5lu6xhxxjxnjvsD jYMRa5y8hvmT9dJu4Y2GTMg/C2r0IFEeS8hiR+sADLnU7bmzRg6mpOeWIDSzCWuN WC4twESsrFcHzkMHVo2knT1A0wFtH0+camwI3J4Malx5A1gq8eevOnO05MHf99G7 FZee4Yj2ilJiLRBw31wZFMyuh4HChISDij7CGwcf6LabvjA+2AeYfoCBvh3Nzm27 Cb0Ar/fgn5TKdVd32pzTUm2/OQlWwGBQHvBqgPTVIn/j52ZThnvB3/E8v6OcQcC1 tPNO5DG47vBbLSPrQBk2VZCD+lBLUUYhBPvQJb5b/iL271asCEG7b/aFv8+T -----END CERTIFICATE-----Generated at Sat May 17 05:51:53 2025 by rpki-client