$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft File: 3FA213F071F512993E71744BA485B170F0449C83.mft (raw, json) Hash identifier: K/VHbzCJaP9i9xZHFtL4Tt4swhP4iVjjr2zrIFyfZM0= Subject key identifier: D9:2C:37:9E:A6:B0:C8:4A:0B:EB:80:2E:E6:3A:97:2F:8E:34:01:AE Authority key identifier: 3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83 Certificate issuer: /CN=3FA213F071F512993E71744BA485B170F0449C83 Certificate serial: 5FDEF40E7BFC926597641B51673502E84AFE5A93 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft Manifest number: E4 Signing time: Sat 17 May 2025 11:45:24 +0000 Manifest this update: Sat 17 May 2025 11:40:24 +0000 Manifest next update: Thu 22 May 2025 18:17:24 +0000 Files and hashes: 1: 3FA213F071F512993E71744BA485B170F0449C83.crl (hash: hSAeOKGNskrGtCUlR5JtUvNb8vy3+ggMcOFPKZh/Eoo=) 2: 323830313a31653a333030303a3a2f34382d3438203d3e20323637383933.roa (hash: ShfiXTqhIxdLPbviFRl+sr029d2cewB9rQ7+Lw9HY50=) 3: 34352e36352e3230302e302f32342d3234203d3e20323637383933.roa (hash: 8xhtEDjsw/uXiZVAcUQOCAiyH3Nt1EJHIOOAxF1+/0o=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:de:f4:0e:7b:fc:92:65:97:64:1b:51:67:35:02:e8:4a:fe:5a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FA213F071F512993E71744BA485B170F0449C83 Validity Not Before: May 17 11:40:24 2025 GMT Not After : May 22 18:17:24 2025 GMT Subject: CN=D92C379EA6B0C84A0BEB802EE63A972F8E3401AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:09:a7:96:c7:1e:a5:0c:f7:20:b0:a4:f8: 0f:3f:2f:f4:da:99:6b:69:69:80:f1:3a:b2:63:f4: 4e:e8:95:82:68:ad:c9:d9:86:d9:f4:d8:c5:1b:3f: 8d:a9:74:8d:51:ca:58:c8:76:86:82:f3:bb:cf:f4: 10:ba:30:5e:52:d7:97:15:15:c3:d1:22:82:84:bb: a7:bf:c5:7b:80:0b:87:10:8d:07:7a:04:e2:50:29: c4:ea:b3:a0:18:61:37:bd:3a:9e:67:12:7d:cf:f9: b5:0f:42:1b:16:19:de:cf:cb:cf:b7:b1:2e:c8:6e: cf:e6:fb:27:12:91:5f:bf:af:b8:9b:ae:ea:d4:4d: d6:04:5b:3d:e7:1e:ce:8e:b4:51:2c:5c:82:66:64: f9:65:9c:f3:76:17:2b:a4:35:34:ad:65:9d:e4:f1: d8:37:49:4d:1b:03:50:8b:ed:62:90:3e:2e:58:f2: d1:c2:43:da:80:81:27:15:45:5e:26:e1:e3:d5:22: c7:b8:05:b2:b2:0d:58:d6:01:19:a1:d2:0c:8f:0e: 25:a4:fd:46:e2:db:b9:2f:c9:01:e7:e7:39:df:c4: 0a:81:0f:13:4c:df:60:35:4b:32:58:ef:11:2a:11: 14:33:ec:65:b1:17:4d:3a:99:41:6b:b9:fd:6e:a2: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2C:37:9E:A6:B0:C8:4A:0B:EB:80:2E:E6:3A:97:2F:8E:34:01:AE X509v3 Authority Key Identifier: keyid:3F:A2:13:F0:71:F5:12:99:3E:71:74:4B:A4:85:B1:70:F0:44:9C:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FA213F071F512993E71744BA485B170F0449C83.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAFF476963BEEEFBA925E6094AD61F8FE108B5D47F243A7D2C6288E23FA4F667/0/3FA213F071F512993E71744BA485B170F0449C83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b8:72:bb:6f:d7:cd:4c:8a:58:f7:83:f9:39:0c:69:4e:af: 92:79:ae:86:be:3e:b5:b4:69:5e:2a:dc:90:6b:94:a5:79:97: 93:27:a0:0c:0e:bc:65:88:1a:b4:d6:ef:e1:d8:e7:98:aa:59: 3d:25:18:de:7d:3e:da:a9:71:b4:5e:d1:1d:50:7d:f4:50:bb: d6:56:82:fc:e3:32:a4:f2:a8:5e:d2:85:71:b0:04:c6:5c:31: 8b:8f:b7:bb:c5:a9:a3:3a:17:70:e3:cc:8a:ee:91:1b:ba:88: d2:c2:bc:a7:7d:ca:a8:c4:3e:9c:41:ad:bc:f4:7e:01:5a:7f: a6:ca:9c:5c:30:04:1d:28:16:7e:a5:bc:98:37:ff:2b:9e:fd: 83:1f:f3:4d:86:82:7e:65:35:7b:7e:5d:cb:6f:2c:49:0d:89: bc:81:db:7b:83:40:ce:07:a0:70:b2:ba:dd:ad:13:e2:83:6a: 94:ab:8f:b4:ef:76:32:b2:40:d0:2f:3a:2c:26:5a:84:11:94: ff:d7:b7:de:ef:9a:be:a6:c1:ad:dc:9d:64:71:12:1d:6c:95: d9:2b:62:59:a9:a1:4e:79:96:5b:1d:87:2b:4b:71:04:ef:c8: b0:50:ce:ef:df:8f:51:08:a2:50:2d:41:e9:43:d8:2a:60:01: e6:8f:9d:f1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUX970Dnv8kmWXZBtRZzUC6Er+WpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZBMjEzRjA3MUY1MTI5OTNFNzE3NDRCQTQ4NUIxNzBG MDQ0OUM4MzAeFw0yNTA1MTcxMTQwMjRaFw0yNTA1MjIxODE3MjRaMDMxMTAvBgNV BAMTKEQ5MkMzNzlFQTZCMEM4NEEwQkVCODAyRUU2M0E5NzJGOEUzNDAxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsIwmnlscepQz3ILCk+A8/L/Ta mWtpaYDxOrJj9E7olYJorcnZhtn02MUbP42pdI1RyljIdoaC87vP9BC6MF5S15cV FcPRIoKEu6e/xXuAC4cQjQd6BOJQKcTqs6AYYTe9Op5nEn3P+bUPQhsWGd7Py8+3 sS7Ibs/m+ycSkV+/r7ibrurUTdYEWz3nHs6OtFEsXIJmZPllnPN2FyukNTStZZ3k 8dg3SU0bA1CL7WKQPi5Y8tHCQ9qAgScVRV4m4ePVIse4BbKyDVjWARmh0gyPDiWk /Ubi27kvyQHn5znfxAqBDxNM32A1SzJY7xEqERQz7GWxF006mUFruf1uoui1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2Sw3nqawyEoL64Au5jqXL440Aa4wHwYDVR0j BBgwFoAUP6IT8HH1Epk+cXRLpIWxcPBEnIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQUZGNDc2OTYzQkVFRUZCQTkyNUU2MDk0QUQ2MUY4RkUx MDhCNUQ0N0YyNDNBN0QyQzYyODhFMjNGQTRGNjY3LzAvM0ZBMjEzRjA3MUY1MTI5 OTNFNzE3NDRCQTQ4NUIxNzBGMDQ0OUM4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRkEyMTNGMDcxRjUxMjk5M0U3 MTc0NEJBNDg1QjE3MEYwNDQ5QzgzLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkFGRjQ3Njk2M0JFRUVGQkE5MjVFNjA5NEFENjFGOEZFMTA4QjVENDdG MjQzQTdEMkM2Mjg4RTIzRkE0RjY2Ny8wLzNGQTIxM0YwNzFGNTEyOTkzRTcxNzQ0 QkE0ODVCMTcwRjA0NDlDODMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5uHK7b9fNTIpY94P5OQxpTq+S ea6Gvj61tGleKtyQa5SleZeTJ6AMDrxliBq01u/h2OeYqlk9JRjefT7aqXG0XtEd UH30ULvWVoL84zKk8qhe0oVxsATGXDGLj7e7xamjOhdw48yK7pEbuojSwrynfcqo xD6cQa289H4BWn+mypxcMAQdKBZ+pbyYN/8rnv2DH/NNhoJ+ZTV7fl3LbyxJDYm8 gdt7g0DOB6BwsrrdrRPig2qUq4+073YyskDQLzosJlqEEZT/17fe75q+psGt3J1k cRIdbJXZK2JZqaFOeZZbHYcrS3EE78iwUM7v349RCKJQLUHpQ9gqYAHmj53x -----END CERTIFICATE-----Generated at Sun May 18 03:07:25 2025 by rpki-client