$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft File: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft (raw, json) Hash identifier: e/d0BsNaIxOuqqgJaJC42XoFzcnm8/rPZEAtLgUSqU8= Subject key identifier: F0:F7:4A:43:43:80:FB:61:FF:A7:AB:18:B4:8C:0F:59:96:AC:57:CE Authority key identifier: 9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A Certificate issuer: /CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Certificate serial: 398DF3B2A6076714DE7EDAA2C8ACCA20B0A33D61 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft Manifest number: DD Signing time: Sat 17 May 2025 03:14:55 +0000 Manifest this update: Sat 17 May 2025 03:09:55 +0000 Manifest next update: Thu 22 May 2025 16:57:55 +0000 Files and hashes: 1: 9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl (hash: VcwQH1HvRE8e6Py650EiB1/FaPsyv+V3I09ndNJxUnc=) 2: 3139302e3132332e37362e302f32322d3234203d3e20323731383038.roa (hash: awSHfYu5olO3Sr1hdIR9ko/TcZ0IMSchh5DLzNlGd+k=) 3: 323830333a333031303a3a2f33322d3332203d3e20323731383038.roa (hash: Tpu5mtmY/E6RnTTm3zG1QJJywy3a24/BBCfGwU0oGCo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 23:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8d:f3:b2:a6:07:67:14:de:7e:da:a2:c8:ac:ca:20:b0:a3:3d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A Validity Not Before: May 17 03:09:55 2025 GMT Not After : May 22 16:57:55 2025 GMT Subject: CN=F0F74A434380FB61FFA7AB18B48C0F5996AC57CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:d7:f2:51:1d:ee:2e:10:f5:91:05:6d:1c: 62:00:cb:84:bf:10:9b:1e:e4:de:a3:b1:22:92:e1: 25:2f:9a:a6:a5:cd:f4:ff:5f:dc:18:58:e8:d3:79: 57:9f:ad:97:c0:2a:22:d6:b7:7d:4f:8c:df:51:07: 64:c8:21:1e:b5:b8:f4:b4:51:4d:45:fe:2f:dd:29: be:ce:e4:47:27:98:4e:33:5c:13:28:2a:a2:75:6a: c3:7f:f0:61:5f:78:85:f1:a5:de:a4:5a:cb:97:17: fd:0f:98:d5:07:fb:7f:ff:d5:54:6c:b6:91:76:7c: df:4d:66:4e:96:57:c5:16:75:c4:d8:18:2a:75:04: 21:fd:c7:4c:6a:05:2d:35:bb:0e:47:e8:cd:2c:e0: 20:5e:81:77:38:b4:8b:eb:7a:2f:4a:d5:d9:4c:20: c8:ef:d1:6d:16:bb:ef:d3:27:7b:4c:10:27:65:d8: 82:77:27:0e:dc:a3:74:77:e4:db:9f:28:a9:7f:7f: c8:c8:85:88:7b:0a:a7:4c:4c:ae:45:f6:80:28:42: 2b:27:38:7d:f7:94:84:fd:7b:7b:e2:ef:5d:03:4c: 16:cd:f0:c6:8e:9d:3f:b9:85:c1:bc:c8:0b:15:56: d0:bb:ba:8e:4e:7b:dc:54:13:cc:0a:c5:18:db:85: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F7:4A:43:43:80:FB:61:FF:A7:AB:18:B4:8C:0F:59:96:AC:57:CE X509v3 Authority Key Identifier: keyid:9D:5A:FB:B9:DD:5E:F6:FB:79:59:AF:78:4C:A3:62:F1:FA:08:D2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA5C8E4D53CE2654EFC172251F9492FB647913B634F8332697B67ACAE3E471C3/0/9D5AFBB9DD5EF6FB7959AF784CA362F1FA08D20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f0:19:ca:c0:2d:f5:a1:cc:e3:fd:f1:aa:3c:3e:ab:03:71: ab:76:9b:04:1f:af:ba:86:73:fa:87:a2:c4:fb:7d:79:3d:d9: 06:f8:43:ea:11:90:08:38:81:43:fd:01:62:f0:d0:e9:d9:a6: 0b:8b:02:5b:86:1a:c3:09:6c:cd:23:06:0b:68:4e:de:bb:bb: 25:e4:81:a6:da:e2:f8:91:0e:7d:b4:3d:dc:f1:d6:15:63:59: 82:3a:94:4d:c6:40:cd:5a:aa:2b:d7:7b:aa:4a:d6:a5:99:80: 5d:24:28:a0:fb:69:c8:ea:70:41:20:51:c8:c7:fd:04:7f:0c: 12:ea:96:5b:ff:17:1a:08:5c:65:32:8e:b5:24:6f:82:42:09: f2:c7:e0:0a:11:2c:91:35:d3:b0:3b:bf:25:46:e6:c3:d7:86: b1:93:43:48:1f:cf:e2:ef:70:95:91:47:c5:52:e7:72:12:21: 7f:b0:e3:0a:04:e3:16:fc:59:f0:d3:27:b4:e8:ae:d0:b9:ed: b8:85:c9:3f:b1:42:80:45:12:04:5e:8c:25:57:5c:6f:f4:05: 4b:90:a8:6d:3c:49:95:23:ab:6d:92:0e:d1:d6:db:00:68:24: 82:ac:7f:b4:64:2e:52:d9:ae:68:1e:42:f7:90:ef:0d:7c:84: 0e:4e:0b:b8 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOY3zsqYHZxTeftqiyKzKILCjPWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ1QUZCQjlERDVFRjZGQjc5NTlBRjc4NENBMzYyRjFG QTA4RDIwQTAeFw0yNTA1MTcwMzA5NTVaFw0yNTA1MjIxNjU3NTVaMDMxMTAvBgNV BAMTKEYwRjc0QTQzNDM4MEZCNjFGRkE3QUIxOEI0OEMwRjU5OTZBQzU3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70tfyUR3uLhD1kQVtHGIAy4S/ EJse5N6jsSKS4SUvmqalzfT/X9wYWOjTeVefrZfAKiLWt31PjN9RB2TIIR61uPS0 UU1F/i/dKb7O5EcnmE4zXBMoKqJ1asN/8GFfeIXxpd6kWsuXF/0PmNUH+3//1VRs tpF2fN9NZk6WV8UWdcTYGCp1BCH9x0xqBS01uw5H6M0s4CBegXc4tIvrei9K1dlM IMjv0W0Wu+/TJ3tMECdl2IJ3Jw7co3R35NufKKl/f8jIhYh7CqdMTK5F9oAoQisn OH33lIT9e3vi710DTBbN8MaOnT+5hcG8yAsVVtC7uo5Oe9xUE8wKxRjbhd/xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8PdKQ0OA+2H/p6sYtIwPWZasV84wHwYDVR0j BBgwFoAUnVr7ud1e9vt5Wa94TKNi8foI0gowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FQTVDOEU0RDUzQ0UyNjU0RUZDMTcyMjUxRjk0OTJGQjY0 NzkxM0I2MzRGODMzMjY5N0I2N0FDQUUzRTQ3MUMzLzAvOUQ1QUZCQjlERDVFRjZG Qjc5NTlBRjc4NENBMzYyRjFGQTA4RDIwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDVBRkJCOURENUVGNkZCNzk1 OUFGNzg0Q0EzNjJGMUZBMDhEMjBBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRUE1QzhFNEQ1M0NFMjY1NEVGQzE3MjI1MUY5NDkyRkI2NDc5MTNCNjM0 RjgzMzI2OTdCNjdBQ0FFM0U0NzFDMy8wLzlENUFGQkI5REQ1RUY2RkI3OTU5QUY3 ODRDQTM2MkYxRkEwOEQyMEEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCM8BnKwC31oczj/fGqPD6rA3Gr dpsEH6+6hnP6h6LE+315PdkG+EPqEZAIOIFD/QFi8NDp2aYLiwJbhhrDCWzNIwYL aE7eu7sl5IGm2uL4kQ59tD3c8dYVY1mCOpRNxkDNWqor13uqStalmYBdJCig+2nI 6nBBIFHIx/0EfwwS6pZb/xcaCFxlMo61JG+CQgnyx+AKESyRNdOwO78lRubD14ax k0NIH8/i73CVkUfFUudyEiF/sOMKBOMW/Fnw0ye06K7Que24hck/sUKARRIEXowl V1xv9AVLkKhtPEmVI6ttkg7R1tsAaCSCrH+0ZC5S2a5oHkL3kO8NfIQOTgu4 -----END CERTIFICATE-----Generated at Sun May 18 06:15:27 2025 by rpki-client