$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft File: 3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft (raw, json) Hash identifier: 3vtJgJonvHJi2m6z7F4qBaFwgW9mVxb+8mea/G9nqso= Subject key identifier: 62:73:9E:DE:4D:B9:2C:FE:19:86:73:AC:4D:4E:79:9E:B1:90:B0:74 Authority key identifier: 3C:E8:6C:C1:C9:4E:C0:C2:A8:D0:C6:68:C7:AA:44:FC:5E:3D:E9:4F Certificate issuer: /CN=3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F Certificate serial: 7EEB8BA0FB245E8609EFFB1F74364361D4234A5D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft Manifest number: DC Signing time: Thu 15 May 2025 17:49:22 +0000 Manifest this update: Thu 15 May 2025 17:44:22 +0000 Manifest next update: Wed 21 May 2025 00:57:22 +0000 Files and hashes: 1: 3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.crl (hash: qz+jxrPx3pSR6Si0Rf5HjPbzDslUN6zlT6yeHsAbnv0=) 2: 34352e3137382e31322e302f32322d3332203d3e20323637383930.roa (hash: MVPDSkHILrTnJmEksZBYFWSFrXnRTJwdlKl5Webdyvs=) 3: 323830333a646136303a3a2f33322d313238203d3e20323637383930.roa (hash: TEo9kbquH1Jt5bMHIxBo5KmkJw1TSiEIUZx3TuK5dh8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.crl rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 May 2025 00:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:eb:8b:a0:fb:24:5e:86:09:ef:fb:1f:74:36:43:61:d4:23:4a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F Validity Not Before: May 15 17:44:22 2025 GMT Not After : May 21 00:57:22 2025 GMT Subject: CN=62739EDE4DB92CFE198673AC4D4E799EB190B074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:5b:aa:9a:86:14:29:ea:b2:b2:e2:9f:80: ab:16:62:67:0a:c0:d7:8d:86:2a:3d:63:a9:cb:23: 9a:75:76:55:47:7a:df:5e:c8:a3:9f:88:73:6a:2a: 13:1c:59:55:1b:58:c6:c8:cf:b8:68:dc:e7:4f:d8: be:f1:2b:71:7e:f5:ee:84:af:60:60:11:c2:c8:29: b0:a3:b2:51:b2:ef:27:a2:a8:66:bc:b0:3f:cc:0f: 08:a0:59:2c:2b:76:b8:51:8c:d4:24:fd:83:5e:a3: cc:ab:c4:af:85:23:ac:5a:9a:7e:24:63:da:3b:4b: d0:6f:86:e7:df:d6:16:a0:44:01:b8:ad:ad:f9:b3: 74:d5:0f:06:b5:e3:e6:c3:80:41:21:ce:ab:9c:44: df:25:d5:91:58:a9:50:c3:b1:c6:d1:85:7f:13:e2: 96:0b:d1:4b:75:42:c6:21:73:33:fd:ef:2e:0e:06: 42:1c:40:8c:04:d0:ac:35:79:01:e4:47:96:e9:ac: fe:ed:6b:25:67:66:3e:9a:e5:2d:4b:6a:d4:d6:f2: 0c:49:8f:99:3d:99:e2:d0:fb:64:1d:e8:aa:d4:e9: d4:bd:89:5c:34:23:7f:d2:89:9a:22:c5:e6:6e:ae: aa:c7:03:ae:ff:72:23:d5:31:bf:b9:df:ba:98:5a: 53:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:73:9E:DE:4D:B9:2C:FE:19:86:73:AC:4D:4E:79:9E:B1:90:B0:74 X509v3 Authority Key Identifier: keyid:3C:E8:6C:C1:C9:4E:C0:C2:A8:D0:C6:68:C7:AA:44:FC:5E:3D:E9:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFE63625C9AB7AA044F5C373BFB8A18F01F83A578FC55AB432D50491242BAFA8/0/3CE86CC1C94EC0C2A8D0C668C7AA44FC5E3DE94F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3c:9b:bd:c2:0b:75:31:2d:a1:a1:b1:dc:1b:fa:4a:24:cc: 34:dc:75:09:16:50:bf:fd:e7:d5:1b:c7:2e:db:06:cb:3b:11: 13:06:67:c2:46:7f:01:23:b1:d2:a0:1f:ef:e0:58:90:ef:ac: 2b:1e:3e:9f:c9:84:13:cf:6f:1e:40:e0:a1:15:ab:01:09:1a: 10:f6:f7:31:e3:7a:7d:55:53:a6:b2:e1:02:8b:9d:7d:68:b8: 12:e8:a1:f5:3a:0a:b5:4a:35:5d:4b:51:99:63:2d:55:d0:0c: d2:fc:61:c4:c7:a9:93:d7:31:c2:2f:43:c2:ac:06:da:96:67: df:62:d7:0e:37:bc:7a:2c:2d:b3:b2:80:17:58:ad:f9:ed:93: 99:53:e5:e8:7f:9e:90:f1:44:ca:73:52:30:d8:3b:ef:cd:46: 32:bb:41:25:de:0d:2a:09:61:04:da:c1:21:3e:08:3b:16:95: 25:bd:af:7f:92:0b:14:ce:b9:93:61:6d:96:6a:13:df:a1:1c: 14:bc:c2:1e:68:9a:e5:2a:90:b8:b1:d4:69:41:b9:39:d5:9e: 33:38:b1:39:bd:43:25:72:37:e7:9f:4a:ec:46:56:51:45:a4: f1:22:7c:fc:e0:2c:f4:0a:f9:fd:b4:5c:0e:f5:8f:dc:1a:32: 5e:77:45:6f -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfuuLoPskXoYJ7/sfdDZDYdQjSl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFODZDQzFDOTRFQzBDMkE4RDBDNjY4QzdBQTQ0RkM1 RTNERTk0RjAeFw0yNTA1MTUxNzQ0MjJaFw0yNTA1MjEwMDU3MjJaMDMxMTAvBgNV BAMTKDYyNzM5RURFNERCOTJDRkUxOTg2NzNBQzRENEU3OTlFQjE5MEIwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+i1uqmoYUKeqysuKfgKsWYmcK wNeNhio9Y6nLI5p1dlVHet9eyKOfiHNqKhMcWVUbWMbIz7ho3OdP2L7xK3F+9e6E r2BgEcLIKbCjslGy7yeiqGa8sD/MDwigWSwrdrhRjNQk/YNeo8yrxK+FI6xamn4k Y9o7S9Bvhuff1hagRAG4ra35s3TVDwa14+bDgEEhzqucRN8l1ZFYqVDDscbRhX8T 4pYL0Ut1QsYhczP97y4OBkIcQIwE0Kw1eQHkR5bprP7tayVnZj6a5S1LatTW8gxJ j5k9meLQ+2Qd6KrU6dS9iVw0I3/SiZoixeZurqrHA67/ciPVMb+537qYWlPZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUYnOe3k25LP4ZhnOsTU55nrGQsHQwHwYDVR0j BBgwFoAUPOhswclOwMKo0MZox6pE/F496U8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9GRkU2MzYyNUM5QUI3QUEwNDRGNUMzNzNCRkI4QTE4RjAx RjgzQTU3OEZDNTVBQjQzMkQ1MDQ5MTI0MkJBRkE4LzAvM0NFODZDQzFDOTRFQzBD MkE4RDBDNjY4QzdBQTQ0RkM1RTNERTk0Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQ0U4NkNDMUM5NEVDMEMyQThE MEM2NjhDN0FBNDRGQzVFM0RFOTRGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRkZFNjM2MjVDOUFCN0FBMDQ0RjVDMzczQkZCOEExOEYwMUY4M0E1NzhG QzU1QUI0MzJENTA0OTEyNDJCQUZBOC8wLzNDRTg2Q0MxQzk0RUMwQzJBOEQwQzY2 OEM3QUE0NEZDNUUzREU5NEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvPJu9wgt1MS2hobHcG/pKJMw0 3HUJFlC//efVG8cu2wbLOxETBmfCRn8BI7HSoB/v4FiQ76wrHj6fyYQTz28eQOCh FasBCRoQ9vcx43p9VVOmsuECi519aLgS6KH1Ogq1SjVdS1GZYy1V0AzS/GHEx6mT 1zHCL0PCrAbalmffYtcON7x6LC2zsoAXWK357ZOZU+Xof56Q8UTKc1Iw2DvvzUYy u0El3g0qCWEE2sEhPgg7FpUlva9/kgsUzrmTYW2WahPfoRwUvMIeaJrlKpC4sdRp Qbk51Z4zOLE5vUMlcjfnn0rsRlZRRaTxInz84Cz0Cvn9tFwO9Y/cGjJed0Vv -----END CERTIFICATE-----Generated at Sat May 17 02:36:07 2025 by rpki-client