$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft File: 5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft (raw, json) Hash identifier: T1LKXcx8eZf9iweFpdPaetSpXfgowzYtKfiTpL1xHn8= Subject key identifier: FC:E3:28:7D:45:FD:6C:91:C2:24:E5:69:56:C5:07:33:7E:FA:24:EA Authority key identifier: 5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9 Certificate issuer: /CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9 Certificate serial: 42454B0B03E3E17F2D3746FC5FFEE6B9F816DB5C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft Manifest number: E7 Signing time: Mon 02 Jun 2025 22:47:41 +0000 Manifest this update: Mon 02 Jun 2025 22:42:41 +0000 Manifest next update: Sun 08 Jun 2025 06:42:41 +0000 Files and hashes: 1: 5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl (hash: ePdvB+OWvsVc1k+qIUu+LJNTCK5kADp9eELCj9ZtLB0=) 2: 3230302e36312e3235342e302f32332d3233203d3e20323632313734.roa (hash: mHfYDbznc/EFsXW/UtniBvS/fH8hhV6/aagspziX5jM=) 3: 3137392e302e302e302f32332d3233203d3e20323632313734.roa (hash: zHovRi7fsRFroAQXay/7QJ21RESAXDxP6jrxdKR6gsk=) 4: 3230372e3234382e37362e302f32332d3233203d3e20323632313734.roa (hash: +um6f4Itnz3r5EkzXKSQDWEpEVIeh+S1Rp4feZfOJ10=) 5: 323830313a303a3136303a3a2f34382d3438203d3e20323632313734.roa (hash: PVXHlvzrKlTHJpb0oHj+V/SZs2ZG0/lc9dYefzIv3po=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:45:4b:0b:03:e3:e1:7f:2d:37:46:fc:5f:fe:e6:b9:f8:16:db:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9 Validity Not Before: Jun 2 22:42:41 2025 GMT Not After : Jun 8 06:42:41 2025 GMT Subject: CN=FCE3287D45FD6C91C224E56956C507337EFA24EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:e2:bd:cd:37:23:a7:7e:8b:01:bc:1b:47: 13:0a:70:6e:9a:de:8b:b9:4a:7e:68:24:19:a6:ae: 57:2e:74:61:02:6f:92:0e:fa:22:d2:05:e8:02:f2: 92:3f:83:d6:e9:bc:cf:1a:fc:a6:2b:14:8f:50:47: 4e:73:31:97:3d:a4:e7:7c:a6:cf:6a:9f:61:7c:7b: 8a:67:6b:b9:df:2c:62:83:fb:99:d6:d5:cc:3d:8e: 54:f3:c2:c0:10:b5:65:6c:2d:2c:54:d4:d9:49:1b: 14:4e:ba:c8:b3:ac:9f:57:33:cd:94:b3:9f:94:80: 3d:29:2f:6a:38:2c:68:09:c9:3a:1c:41:4b:60:ae: c4:bf:52:81:9a:06:6b:13:a2:f1:15:a8:2f:c3:c1: 0b:ac:96:43:3b:24:68:24:04:12:90:5b:cd:3c:a8: 27:2c:47:21:93:2d:a4:a7:02:55:99:1e:5f:88:bb: 64:4c:15:48:1f:7e:12:c6:77:a6:ba:70:18:e9:1f: 42:43:ef:e5:0d:ef:1d:85:61:46:dc:bd:fd:a8:b8: 65:a3:2c:86:09:08:21:f9:72:07:ad:bf:a0:28:c5: bc:8b:85:d6:a6:bb:2c:c1:81:66:2d:72:ac:19:cf: 60:82:46:17:a8:36:89:ad:68:fa:cd:4f:99:92:c3: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E3:28:7D:45:FD:6C:91:C2:24:E5:69:56:C5:07:33:7E:FA:24:EA X509v3 Authority Key Identifier: keyid:5F:5D:4B:AE:F0:DE:76:E2:CB:4D:41:B4:5A:0B:4B:53:02:BF:E1:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017789017301438A64EFDE7C0C603B52B7AE0EBDB3BDEBDC5F71B5DCE5A1CA96/0/5F5D4BAEF0DE76E2CB4D41B45A0B4B5302BFE1E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1f:44:8b:b0:56:e8:db:de:bf:cd:cd:db:45:14:f8:e2:bd: 25:0f:62:d8:bf:81:b0:2f:0a:cf:f7:75:21:0b:8e:9e:80:27: 63:c2:e0:f7:1d:2b:ca:ed:ee:0b:96:4e:e2:a4:6e:80:1b:3a: 47:7d:e9:25:94:b3:30:32:ed:fa:0d:da:80:a1:cd:e6:ec:7e: a7:d1:85:ae:ab:11:f7:fd:e4:a8:d6:dd:d2:a8:34:a2:af:92: 04:83:bc:0e:bd:f1:77:9c:8c:32:cd:bc:a2:17:ee:94:9b:e7: 5d:1f:01:34:7d:76:69:f7:03:42:4a:a5:d2:36:7e:72:0b:b5: 6a:4e:cc:6b:3b:a6:9b:79:1c:3e:ce:6a:49:a2:9b:b0:73:58: c1:fa:cd:30:68:93:19:6f:63:2a:4b:f1:20:b3:47:7b:4e:cd: 43:1f:64:f1:94:ee:71:a7:65:27:1c:69:80:86:b1:3f:af:04: 23:ed:ad:fc:36:74:49:84:3d:20:51:50:ef:0e:8d:e4:90:d5: be:81:a3:e7:88:66:6f:28:27:43:5a:2c:d1:f4:ee:54:0f:89: 56:2d:05:e9:c6:7f:c8:f7:18:f4:45:51:93:da:5b:dc:d4:59: d9:97:25:35:81:d6:b0:00:8a:12:ad:75:75:13:d0:d6:8d:4f: a5:0f:48:5e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQkVLCwPj4X8tN0b8X/7mufgW21wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY1RDRCQUVGMERFNzZFMkNCNEQ0MUI0NUEwQjRCNTMw MkJGRTFFOTAeFw0yNTA2MDIyMjQyNDFaFw0yNTA2MDgwNjQyNDFaMDMxMTAvBgNV BAMTKEZDRTMyODdENDVGRDZDOTFDMjI0RTU2OTU2QzUwNzMzN0VGQTI0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFK+K9zTcjp36LAbwbRxMKcG6a 3ou5Sn5oJBmmrlcudGECb5IO+iLSBegC8pI/g9bpvM8a/KYrFI9QR05zMZc9pOd8 ps9qn2F8e4pna7nfLGKD+5nW1cw9jlTzwsAQtWVsLSxU1NlJGxROusizrJ9XM82U s5+UgD0pL2o4LGgJyTocQUtgrsS/UoGaBmsTovEVqC/DwQuslkM7JGgkBBKQW808 qCcsRyGTLaSnAlWZHl+Iu2RMFUgffhLGd6a6cBjpH0JD7+UN7x2FYUbcvf2ouGWj LIYJCCH5cgetv6AoxbyLhdamuyzBgWYtcqwZz2CCRheoNomtaPrNT5mSw44NAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU/OMofUX9bJHCJOVpVsUHM376JOowHwYDVR0j BBgwFoAUX11LrvDeduLLTUG0WgtLUwK/4ekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMTc3ODkwMTczMDE0MzhBNjRFRkRFN0MwQzYwM0I1MkI3 QUUwRUJEQjNCREVCREM1RjcxQjVEQ0U1QTFDQTk2LzAvNUY1RDRCQUVGMERFNzZF MkNCNEQ0MUI0NUEwQjRCNTMwMkJGRTFFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjVENEJBRUYwREU3NkUyQ0I0 RDQxQjQ1QTBCNEI1MzAyQkZFMUU5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDE3Nzg5MDE3MzAxNDM4QTY0RUZERTdDMEM2MDNCNTJCN0FFMEVCREIz QkRFQkRDNUY3MUI1RENFNUExQ0E5Ni8wLzVGNUQ0QkFFRjBERTc2RTJDQjRENDFC NDVBMEI0QjUzMDJCRkUxRTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQH0SLsFbo296/zc3bRRT44r0l D2LYv4GwLwrP93UhC46egCdjwuD3HSvK7e4Llk7ipG6AGzpHfekllLMwMu36DdqA oc3m7H6n0YWuqxH3/eSo1t3SqDSir5IEg7wOvfF3nIwyzbyiF+6Um+ddHwE0fXZp 9wNCSqXSNn5yC7VqTsxrO6abeRw+zmpJopuwc1jB+s0waJMZb2MqS/Egs0d7Ts1D H2TxlO5xp2UnHGmAhrE/rwQj7a38NnRJhD0gUVDvDo3kkNW+gaPniGZvKCdDWizR 9O5UD4lWLQXpxn/I9xj0RVGT2lvc1FnZlyU1gdawAIoSrXV1E9DWjU+lD0he -----END CERTIFICATE-----Generated at Wed Jun 4 12:26:48 2025 by rpki-client