$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft File: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft (raw, json) Hash identifier: X6Yz0viAdZEM7Tkm2GSJhadfDiHHSO9XrS/N+GuHoq0= Subject key identifier: BB:4E:0B:15:B6:31:80:B2:BD:49:DC:C6:FC:4A:48:6F:B6:45:C9:F2 Authority key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 Certificate issuer: /CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Certificate serial: 447B3B955FAA584DEA3FDD97E0F387F89D86C598 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft Manifest number: D8 Signing time: Fri 16 May 2025 20:30:53 +0000 Manifest this update: Fri 16 May 2025 20:25:53 +0000 Manifest next update: Wed 21 May 2025 06:33:53 +0000 Files and hashes: 1: 3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl (hash: q7q+E2KpovhkI2aC3dnXi6Mnb5N0g84m9EcUIpqKOQ4=) 2: 34352e3137302e3132382e302f32322d3234203d3e203631353132.roa (hash: APOmoNKTFye/WKny8Moj2ePsiAP8sSxzy/Nk1SfzBZc=) 3: 323830333a386261303a3a2f33322d3430203d3e203631353132.roa (hash: KfhwmNkUX722XLKGo9HfzZHmGemaga5VvyUW9EoQpLk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 01:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:7b:3b:95:5f:aa:58:4d:ea:3f:dd:97:e0:f3:87:f8:9d:86:c5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7 Validity Not Before: May 16 20:25:53 2025 GMT Not After : May 21 06:33:53 2025 GMT Subject: CN=BB4E0B15B63180B2BD49DCC6FC4A486FB645C9F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:60:cd:1f:85:7d:00:ae:f3:47:fb:0e:ac: 41:1d:a5:36:09:8a:b8:cb:d4:71:c5:45:00:f3:b6: 6c:2f:02:53:2c:e0:45:34:5e:2c:71:fe:f4:61:77: 17:55:da:2c:73:d9:33:b7:c8:2f:78:b4:70:a8:e5: 54:6f:a1:e8:a7:0d:5a:79:84:0f:e8:2a:b7:b1:be: c5:cf:7a:40:69:22:11:6e:77:8d:1a:37:97:0f:63: 97:0b:3a:4a:a9:cc:ac:33:45:0a:5e:3c:7c:f5:e5: 1e:1c:0d:69:9a:3e:3a:68:dd:4d:e0:18:86:96:c5: 5b:ff:f3:30:b8:65:55:2b:5f:b5:35:76:60:21:cf: ad:37:04:a3:ea:13:53:fe:8b:e1:0e:4d:4a:0d:e3: b1:42:27:f4:ea:08:05:98:c1:21:31:da:0e:bf:15: b2:56:9d:e4:9a:2a:98:0b:98:b2:06:28:5d:68:90: 4b:98:64:22:58:d8:ac:90:0a:6b:84:09:cc:e7:b1: 2e:0a:e6:ca:4d:94:01:b3:01:ef:9c:25:15:b1:65: dc:09:8b:a2:f5:b5:8d:c8:d8:3e:14:27:45:b9:db: e7:bd:67:c8:2b:c4:d9:60:57:d2:1f:a2:6f:c1:1b: 5c:f9:32:37:43:0c:3b:2b:4f:5c:27:89:cc:63:48: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4E:0B:15:B6:31:80:B2:BD:49:DC:C6:FC:4A:48:6F:B6:45:C9:F2 X509v3 Authority Key Identifier: keyid:34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f0:b8:3a:03:63:fd:62:a4:8b:a3:0c:82:b8:3b:c4:db:af: 76:a7:b4:2d:58:35:f7:b5:78:89:06:78:80:d6:45:cb:aa:5f: a7:39:85:bf:5b:b5:24:84:01:13:42:a0:aa:8f:e3:9a:b7:db: 8f:fa:71:1f:1c:28:bd:83:37:b0:8f:f8:fe:d9:b0:bd:d9:99: 69:f1:fe:24:66:66:3f:c0:20:4a:91:28:e1:a3:1e:c7:97:7f: 62:ed:c8:80:a4:55:20:53:15:f8:fd:67:84:19:af:b1:4f:43: 98:58:03:10:13:8f:ac:95:ba:40:4c:2e:78:f7:f2:c9:6b:d1: a9:d1:67:0e:06:06:3e:a2:51:d3:db:d9:02:b2:d8:55:d4:6b: 3f:59:9c:ec:ad:ea:17:3f:27:29:6d:73:33:20:f9:99:bc:30: 0b:fe:09:6f:8a:d3:19:25:a6:09:ac:4c:d8:42:73:c8:6e:5e: 7b:5b:99:7e:ee:04:4b:5e:8f:3a:cc:f9:c6:cc:32:7c:40:5a: a4:35:28:45:f3:bf:0e:8f:75:65:2b:a8:bc:99:39:2d:6f:fe: 31:58:b2:49:28:a0:3d:42:80:55:3f:28:7c:dc:89:f4:36:0c: f3:7e:27:ff:74:2c:ae:6a:fb:47:eb:38:2e:81:a3:ca:ad:e5: 90:cc:f2:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURHs7lV+qWE3qP92X4POH+J2GxZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3MkUxRkYxODE4OTYyQUZCOURBRDQ0OERFQjZCNEYw MkJERkJDNzAeFw0yNTA1MTYyMDI1NTNaFw0yNTA1MjEwNjMzNTNaMDMxMTAvBgNV BAMTKEJCNEUwQjE1QjYzMTgwQjJCRDQ5RENDNkZDNEE0ODZGQjY0NUM5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUTGDNH4V9AK7zR/sOrEEdpTYJ irjL1HHFRQDztmwvAlMs4EU0Xixx/vRhdxdV2ixz2TO3yC94tHCo5VRvoeinDVp5 hA/oKrexvsXPekBpIhFud40aN5cPY5cLOkqpzKwzRQpePHz15R4cDWmaPjpo3U3g GIaWxVv/8zC4ZVUrX7U1dmAhz603BKPqE1P+i+EOTUoN47FCJ/TqCAWYwSEx2g6/ FbJWneSaKpgLmLIGKF1okEuYZCJY2KyQCmuECcznsS4K5spNlAGzAe+cJRWxZdwJ i6L1tY3I2D4UJ0W52+e9Z8grxNlgV9Ifom/BG1z5MjdDDDsrT1wnicxjSGqdAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUu04LFbYxgLK9SdzG/EpIb7ZFyfIwHwYDVR0j BBgwFoAUNHLh/xgYlir7na1EjetrTwK9+8cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84N0Q1OUNFMDAxNzIxNDZCMEMxMTZBODQ1MDBGNjNGRTc1 MTFBREE2NTBEQzE2RDU3RUJCRkJERjc5OTIwMEJCLzAvMzQ3MkUxRkYxODE4OTYy QUZCOURBRDQ0OERFQjZCNEYwMkJERkJDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDcyRTFGRjE4MTg5NjJBRkI5 REFENDQ4REVCNkI0RjAyQkRGQkM3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODdENTlDRTAwMTcyMTQ2QjBDMTE2QTg0NTAwRjYzRkU3NTExQURBNjUw REMxNkQ1N0VCQkZCREY3OTkyMDBCQi8wLzM0NzJFMUZGMTgxODk2MkFGQjlEQUQ0 NDhERUI2QjRGMDJCREZCQzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAG8Lg6A2P9YqSLowyCuDvE2692 p7QtWDX3tXiJBniA1kXLql+nOYW/W7UkhAETQqCqj+Oat9uP+nEfHCi9gzewj/j+ 2bC92Zlp8f4kZmY/wCBKkSjhox7Hl39i7ciApFUgUxX4/WeEGa+xT0OYWAMQE4+s lbpATC549/LJa9Gp0WcOBgY+olHT29kCsthV1Gs/WZzsreoXPycpbXMzIPmZvDAL /glvitMZJaYJrEzYQnPIbl57W5l+7gRLXo86zPnGzDJ8QFqkNShF878Oj3VlK6i8 mTktb/4xWLJJKKA9QoBVPyh83In0Ngzzfif/dCyuavtH6zgugaPKreWQzPIC -----END CERTIFICATE-----Generated at Sat May 17 17:09:03 2025 by rpki-client