$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft File: 32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft (raw, json) Hash identifier: MSeX5EinaFR+my6paTryVQ0u5+AUIDhiyj0oOg4MfQc= Subject key identifier: 8D:2B:37:46:F1:9C:88:7A:DC:16:C5:54:AA:FA:5A:23:1F:BA:B4:E0 Authority key identifier: 32:12:39:28:A9:60:2F:65:F7:BB:4E:2F:B1:1B:F6:F3:BB:3B:F4:B5 Certificate issuer: /CN=32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5 Certificate serial: 4E49A8928587AFBF031D0C771A0754F57F1DB438 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft Manifest number: DA Signing time: Sat 17 May 2025 12:15:45 +0000 Manifest this update: Sat 17 May 2025 12:10:45 +0000 Manifest next update: Fri 23 May 2025 11:24:45 +0000 Files and hashes: 1: 3139312e39382e3231362e302f32312d3234203d3e20323633323139.roa (hash: O3MQcFZPgYmpPZyK5l3h3G7OCuAOcNPwRChYojOBKK0=) 2: 32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.crl (hash: Zrp6aPsty23Rjwaoi5jxgzmaIObMAxMMFUmohkqnFS8=) 3: 323830333a386138303a3a2f33322d3438203d3e20323633323139.roa (hash: ZVUlOq0ieLuG3lvyYVnujrmf2gDXgdlGcn5rZvPkztg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.crl rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 23 May 2025 00:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:49:a8:92:85:87:af:bf:03:1d:0c:77:1a:07:54:f5:7f:1d:b4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5 Validity Not Before: May 17 12:10:45 2025 GMT Not After : May 23 11:24:45 2025 GMT Subject: CN=8D2B3746F19C887ADC16C554AAFA5A231FBAB4E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:ea:2e:99:48:00:6f:b0:72:9a:06:d9:bd: 3e:00:84:16:d2:f3:c0:57:33:20:da:1b:5b:dc:38: db:5a:d4:93:f1:f8:da:41:eb:fc:e7:94:dc:61:6f: f8:54:25:dd:01:db:85:e5:a8:d9:20:26:81:81:eb: 19:38:9c:d7:9e:27:eb:59:9f:ee:ea:f2:bf:96:14: 26:90:4e:43:68:dd:bd:6e:9a:ae:d8:ca:9f:65:b6: 21:c9:54:59:ec:e9:be:99:1b:96:8c:99:fa:bd:16: 75:70:d4:8b:ad:3e:9c:99:bd:af:e8:78:bf:85:d6: 04:67:92:f7:44:7e:8c:49:12:bb:18:92:67:31:8f: 86:82:6d:be:31:f0:60:56:bc:26:3c:1d:0e:0e:5b: 02:4c:76:0b:ba:1d:d0:ef:79:9a:e9:b3:bd:64:2f: ce:bc:79:ac:95:51:23:c0:3f:88:99:04:d4:45:16: c3:8f:b6:c9:70:3c:97:f6:f9:86:23:21:6a:13:71: ea:ed:33:37:17:3f:86:7c:f5:dc:6b:2e:b0:49:3f: 68:3c:5e:24:c1:5f:4c:fb:d3:af:b6:ba:9f:48:12: 56:67:b8:74:d5:29:3a:da:43:20:ce:01:fe:5a:38: 10:70:88:d6:43:5d:26:a9:e8:63:65:1e:6e:1e:89: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2B:37:46:F1:9C:88:7A:DC:16:C5:54:AA:FA:5A:23:1F:BA:B4:E0 X509v3 Authority Key Identifier: keyid:32:12:39:28:A9:60:2F:65:F7:BB:4E:2F:B1:1B:F6:F3:BB:3B:F4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F996E777B4B433D0D16BC342A2319C84F11A969CA79BED3EB5142E525AE47C5/0/32123928A9602F65F7BB4E2FB11BF6F3BB3BF4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:ce:2e:6d:ca:c2:c2:54:10:94:cb:bd:4d:27:e3:0b:d1: 3e:17:09:55:83:22:01:0c:02:ad:13:e1:67:4d:7d:f2:de:57: cb:88:64:0e:31:6e:ba:4d:43:8b:9e:a7:ea:e5:1f:01:51:b4: 81:9a:ef:04:9c:04:c0:aa:cd:72:b5:00:18:2f:f6:ee:15:89: c2:ee:04:94:b0:c9:5d:97:3e:fd:e0:9b:09:42:83:54:b2:9d: 5b:04:f7:3c:54:bc:6e:7b:d3:6c:94:e6:47:3f:5c:7e:f4:1f: 7b:b8:55:13:f4:cc:36:a3:ad:b1:cb:b2:df:2d:15:36:4e:4c: 13:2f:29:63:fa:82:3d:d4:6c:dc:a7:1e:68:85:d8:0d:26:44: ec:6f:aa:8b:76:fd:66:fd:d2:ee:65:12:16:3c:b5:c7:39:55: d3:ba:19:2f:86:18:bf:2a:ec:6d:20:fa:ce:b5:fe:cc:10:19: 0b:6a:33:ff:e7:0e:16:b0:bf:56:ba:26:6b:89:f8:ec:4a:77: a1:d8:70:df:b6:cf:5f:4a:a8:0e:3b:2e:8d:5d:79:a9:3f:66: 37:79:f5:68:c7:10:83:84:df:a4:8a:87:71:7b:b1:2c:e5:d8: fb:6f:12:47:d3:eb:69:77:e4:a6:b6:fb:ac:4a:4e:f7:f0:64: bd:61:0b:68 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTkmokoWHr78DHQx3GgdU9X8dtDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxMjM5MjhBOTYwMkY2NUY3QkI0RTJGQjExQkY2RjNC QjNCRjRCNTAeFw0yNTA1MTcxMjEwNDVaFw0yNTA1MjMxMTI0NDVaMDMxMTAvBgNV BAMTKDhEMkIzNzQ2RjE5Qzg4N0FEQzE2QzU1NEFBRkE1QTIzMUZCQUI0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwOoumUgAb7BymgbZvT4AhBbS 88BXMyDaG1vcONta1JPx+NpB6/znlNxhb/hUJd0B24XlqNkgJoGB6xk4nNeeJ+tZ n+7q8r+WFCaQTkNo3b1umq7Yyp9ltiHJVFns6b6ZG5aMmfq9FnVw1IutPpyZva/o eL+F1gRnkvdEfoxJErsYkmcxj4aCbb4x8GBWvCY8HQ4OWwJMdgu6HdDveZrps71k L868eayVUSPAP4iZBNRFFsOPtslwPJf2+YYjIWoTcertMzcXP4Z89dxrLrBJP2g8 XiTBX0z706+2up9IElZnuHTVKTraQyDOAf5aOBBwiNZDXSap6GNlHm4eiQhZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjSs3RvGciHrcFsVUqvpaIx+6tOAwHwYDVR0j BBgwFoAUMhI5KKlgL2X3u04vsRv287s79LUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80Rjk5NkU3NzdCNEI0MzNEMEQxNkJDMzQyQTIzMTlDODRG MTFBOTY5Q0E3OUJFRDNFQjUxNDJFNTI1QUU0N0M1LzAvMzIxMjM5MjhBOTYwMkY2 NUY3QkI0RTJGQjExQkY2RjNCQjNCRjRCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMjEyMzkyOEE5NjAyRjY1RjdC QjRFMkZCMTFCRjZGM0JCM0JGNEI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEY5OTZFNzc3QjRCNDMzRDBEMTZCQzM0MkEyMzE5Qzg0RjExQTk2OUNB NzlCRUQzRUI1MTQyRTUyNUFFNDdDNS8wLzMyMTIzOTI4QTk2MDJGNjVGN0JCNEUy RkIxMUJGNkYzQkIzQkY0QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBvs4ubcrCwlQQlMu9TSfjC9E+ FwlVgyIBDAKtE+FnTX3y3lfLiGQOMW66TUOLnqfq5R8BUbSBmu8EnATAqs1ytQAY L/buFYnC7gSUsMldlz794JsJQoNUsp1bBPc8VLxue9NslOZHP1x+9B97uFUT9Mw2 o62xy7LfLRU2TkwTLylj+oI91Gzcpx5ohdgNJkTsb6qLdv1m/dLuZRIWPLXHOVXT uhkvhhi/KuxtIPrOtf7MEBkLajP/5w4WsL9WuiZrifjsSneh2HDfts9fSqgOOy6N XXmpP2Y3efVoxxCDhN+kiodxe7Es5dj7bxJH0+tpd+SmtvusSk738GS9YQto -----END CERTIFICATE-----Generated at Mon May 19 08:31:49 2025 by rpki-client