$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.mft File: 5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.mft (raw, json) Hash identifier: Ts2kG9Bg8DTqSJug6a6hqRZcjou/6MXS05lQIm7WXyA= Subject key identifier: BA:90:8B:A5:E6:39:FB:DF:38:4D:22:FE:5D:A0:C6:95:F4:B0:D2:24 Authority key identifier: 5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2 Certificate issuer: /CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2 Certificate serial: 0A14CBDCE623348AB6CF77C5DE5AF0401A0650C1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.mft Manifest number: F5 Signing time: Thu 03 Jul 2025 23:58:34 +0000 Manifest this update: Thu 03 Jul 2025 23:53:34 +0000 Manifest next update: Wed 09 Jul 2025 14:59:34 +0000 Files and hashes: 1: 323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa (hash: xDezcw8rHTHUy0Qftg1vozZn/1ja4CWwhUyf16HMpCU=) 2: 34352e3136382e3139362e302f32322d3234203d3e203134373534.roa (hash: E3ORjO0QNoVvFu94nHdA4IXQWdbCmESu4UZGezOOz3E=) 3: 323830313a31383a3830303a3a2f34382d3634203d3e20323637373430.roa (hash: QecDDjpkp7LJs9bIF5/Rf4E8rTQqkfOUj610JwkCtKI=) 4: 5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl (hash: q/tBzYRrtjAvQF/8IYDkttr9+La8+YRJJQBgfxDH/7I=) 5: 34352e3136382e3139362e302f32322d3234203d3e20323637373430.roa (hash: Bgys9F3cFWsAjGMYqC/mRICZAYDsi4+CtIXRda8v+4w=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Jul 2025 18:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:14:cb:dc:e6:23:34:8a:b6:cf:77:c5:de:5a:f0:40:1a:06:50:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2 Validity Not Before: Jul 3 23:53:34 2025 GMT Not After : Jul 9 14:59:34 2025 GMT Subject: CN=BA908BA5E639FBDF384D22FE5DA0C695F4B0D224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:fc:ff:6a:a8:19:0e:1f:93:1e:2f:90:e7: 2b:8e:42:fd:bc:7b:2a:01:10:1c:cc:7f:fc:45:9e: bf:dc:98:5f:ea:2d:ff:f1:b4:7b:7a:5a:8a:37:13: 5d:61:0f:71:7f:7f:8f:bb:84:9e:ee:83:d6:b3:bc: 1f:19:c2:65:ef:1d:46:a6:a6:28:1c:b8:45:0a:a2: d9:34:eb:75:a9:95:e6:9a:9b:34:43:74:5f:63:61: 2c:6a:f6:1d:9c:00:ef:9a:6a:ea:89:1d:3a:50:95: 11:13:b0:32:a0:73:2b:12:77:09:19:53:95:92:3b: 22:bc:f6:ca:0f:82:2a:5f:21:af:8c:fc:21:5a:95: 90:fa:66:63:d4:e9:05:ec:c4:2f:79:c3:5b:af:b2: d3:5e:00:87:b1:18:d8:eb:3f:26:b3:62:13:61:dc: fb:ea:96:fb:8a:a4:39:24:43:0a:41:15:1b:58:20: 52:f4:18:f2:65:f5:b7:a6:96:15:96:5b:82:7f:26: 46:c3:9d:f9:2b:28:79:0b:31:11:b8:35:29:3c:49: a3:a4:e5:15:3a:91:09:b5:03:f7:3f:6b:c8:80:3c: 8e:fe:07:b2:ee:88:58:41:9a:eb:a1:ce:19:34:fd: 5a:76:95:fb:d7:79:49:c6:30:5f:f5:31:64:7e:6e: d1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:90:8B:A5:E6:39:FB:DF:38:4D:22:FE:5D:A0:C6:95:F4:B0:D2:24 X509v3 Authority Key Identifier: keyid:5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:88:f7:eb:6e:a5:0d:29:d5:81:f5:57:8e:b3:4c:0a:ce:9d: 1c:cf:de:4f:d9:1f:d8:ce:f8:8e:48:a0:54:4b:da:b2:b0:b1: 95:65:55:a4:92:86:90:36:51:64:02:57:64:63:89:37:bb:3b: fa:ae:b5:6a:65:e2:9c:1e:a9:c6:e7:38:4d:0f:30:f2:9b:56: aa:cc:5f:2c:9d:5e:d3:2d:4b:0f:58:8a:4c:c7:2c:0a:bc:d0: 81:6b:6d:3b:f8:d7:00:44:f4:b3:bb:71:0c:fa:1d:45:d6:74: ca:60:34:7a:64:86:e4:f2:d4:a8:e3:60:08:85:39:21:75:4b: 49:b0:fe:53:fe:d0:3b:3c:e4:6c:9a:13:0f:99:1e:d5:67:3e: 4e:e5:16:5a:bc:61:55:e8:3f:9d:21:9c:d4:fd:f9:94:9d:f6: 85:c2:69:9f:36:d5:00:fb:44:8c:30:57:d8:26:14:d7:17:21: b7:af:db:73:a6:51:e3:6d:5c:a4:a9:37:37:ac:3a:97:b1:b3: 3c:29:f0:e9:80:83:04:17:06:63:59:71:14:18:86:0c:03:e7: b3:31:8f:ba:f9:f1:ac:88:ab:5f:6a:22:b6:8d:e4:19:ca:24: 60:e4:96:cd:c4:6b:85:bc:5f:ad:ee:da:fc:bd:c2:a1:6a:19: 9d:4a:2b:44 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUChTL3OYjNIq2z3fF3lrwQBoGUMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBNENEOEI2NUU0QjNFREZBODNCREY0MDhCQjUzMkVB MDdDNkRDMjAeFw0yNTA3MDMyMzUzMzRaFw0yNTA3MDkxNDU5MzRaMDMxMTAvBgNV BAMTKEJBOTA4QkE1RTYzOUZCREYzODREMjJGRTVEQTBDNjk1RjRCMEQyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwPz/aqgZDh+THi+Q5yuOQv28 eyoBEBzMf/xFnr/cmF/qLf/xtHt6Woo3E11hD3F/f4+7hJ7ug9azvB8ZwmXvHUam pigcuEUKotk063WpleaamzRDdF9jYSxq9h2cAO+aauqJHTpQlRETsDKgcysSdwkZ U5WSOyK89soPgipfIa+M/CFalZD6ZmPU6QXsxC95w1uvstNeAIexGNjrPyazYhNh 3PvqlvuKpDkkQwpBFRtYIFL0GPJl9bemlhWWW4J/JkbDnfkrKHkLMRG4NSk8SaOk 5RU6kQm1A/c/a8iAPI7+B7LuiFhBmuuhzhk0/Vp2lfvXeUnGMF/1MWR+btEZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUupCLpeY5+984TSL+XaDGlfSw0iQwHwYDVR0j BBgwFoAUW6TNi2Xks+36g730CLtTLqB8bcIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82OTMxODYyNUUyOTAwNEVGNjBDMTYwQkJEMjhCNjMzRjRG MEYwQUU3OEU5REFEOTVCRjg4RDY5RDkzNzBDQTM3LzAvNUJBNENEOEI2NUU0QjNF REZBODNCREY0MDhCQjUzMkVBMDdDNkRDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QkE0Q0Q4QjY1RTRCM0VERkE4 M0JERjQwOEJCNTMyRUEwN0M2REMyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjkzMTg2MjVFMjkwMDRFRjYwQzE2MEJCRDI4QjYzM0Y0RjBGMEFFNzhF OURBRDk1QkY4OEQ2OUQ5MzcwQ0EzNy8wLzVCQTRDRDhCNjVFNEIzRURGQTgzQkRG NDA4QkI1MzJFQTA3QzZEQzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjiPfrbqUNKdWB9VeOs0wKzp0c z95P2R/YzviOSKBUS9qysLGVZVWkkoaQNlFkAldkY4k3uzv6rrVqZeKcHqnG5zhN DzDym1aqzF8snV7TLUsPWIpMxywKvNCBa207+NcARPSzu3EM+h1F1nTKYDR6ZIbk 8tSo42AIhTkhdUtJsP5T/tA7PORsmhMPmR7VZz5O5RZavGFV6D+dIZzU/fmUnfaF wmmfNtUA+0SMMFfYJhTXFyG3r9tzplHjbVykqTc3rDqXsbM8KfDpgIMEFwZjWXEU GIYMA+ezMY+6+fGsiKtfaiK2jeQZyiRg5JbNxGuFvF+t7tr8vcKhahmdSitE -----END CERTIFICATE-----Generated at Fri Jul 4 09:27:21 2025 by rpki-client