$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft File: BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft (raw, json) Hash identifier: PUwtPZwxwzldhCtyZ/OadcIfRfPHYk8nnhie3d0mvNw= Subject key identifier: F3:C2:3D:0B:8F:01:5A:4D:C2:08:83:FB:9B:D0:5C:AB:A4:32:C1:56 Authority key identifier: BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D Certificate issuer: /CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D Certificate serial: 47032E76C244DEB5331BA2409DBAFC7B2B5F6EEE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft Manifest number: E4 Signing time: Mon 02 Jun 2025 16:44:04 +0000 Manifest this update: Mon 02 Jun 2025 16:39:04 +0000 Manifest next update: Sat 07 Jun 2025 13:48:04 +0000 Files and hashes: 1: BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl (hash: FpzSWujMxbU3yo0OUSZfaCdAlpGI1pzvmQqLoiLfaw0=) 2: 323830333a346365303a3a2f33322d3332203d3e20323639393035.roa (hash: HM2mrjNSc/Z2rP6apYLlVPRmz2KyYu+CDDr53L9R/Kk=) 3: 3139302e3131322e3136382e302f32322d3234203d3e20323639393035.roa (hash: t25KWeNBVSbkRXXiFMLCuHvSu9b9PF+O0+K7WmyJfsE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:03:2e:76:c2:44:de:b5:33:1b:a2:40:9d:ba:fc:7b:2b:5f:6e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D Validity Not Before: Jun 2 16:39:04 2025 GMT Not After : Jun 7 13:48:04 2025 GMT Subject: CN=F3C23D0B8F015A4DC20883FB9BD05CABA432C156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:c3:64:a3:b3:e0:ce:56:3e:d6:71:8c:fc: 49:43:1e:a2:b8:6b:d4:93:36:f4:6f:89:bc:e0:87: 19:d2:fe:28:55:89:18:e6:09:35:fe:4f:a0:21:0e: 8d:d4:7a:35:54:9b:26:b9:1c:15:a5:9f:3a:b1:a8: 5c:5f:06:f5:d3:0b:ec:38:01:f4:83:84:68:43:3e: f1:96:c6:0b:af:80:9f:a6:ad:e0:2e:7b:12:81:e0: 74:94:c2:09:95:d7:68:5a:92:cd:b2:cc:c6:a1:6c: f9:ea:3e:e3:ec:24:6a:d3:31:a2:28:8f:81:04:4e: 7f:ee:77:8b:f9:f5:21:b7:3b:c6:1f:6b:2b:88:f9: 8a:c6:31:5f:18:71:c2:e2:89:9c:aa:81:7d:d6:3a: ee:fa:6c:49:01:dd:2b:2f:0a:c2:02:83:40:61:65: 2c:97:90:be:42:09:e9:72:b1:95:10:91:87:e9:9f: fa:d1:01:72:d2:c0:3f:da:65:9c:4f:b2:45:c9:0a: 72:2f:e6:42:e0:ea:cc:f4:6b:ee:cc:74:5e:0c:a0: de:63:74:39:9a:cc:da:c4:a2:3c:9e:ad:30:9f:c4: 7a:aa:ca:5a:fc:7f:4b:93:44:d4:a1:19:88:89:22: ba:28:41:0d:58:bb:d9:93:e9:28:cc:e4:6f:03:d9: 1e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C2:3D:0B:8F:01:5A:4D:C2:08:83:FB:9B:D0:5C:AB:A4:32:C1:56 X509v3 Authority Key Identifier: keyid:BA:DB:47:5A:9B:AB:10:7E:D0:FE:EB:BC:1D:3B:CC:03:F0:F1:1C:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0210BF44F4A3CA54B88D4C1574B62C263923503BBAB42A0030A204A69F253605/0/BADB475A9BAB107ED0FEEBBC1D3BCC03F0F11C4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e6:7e:1e:ea:eb:28:d6:90:26:85:56:e5:58:b2:6a:7c:96: f2:b2:ad:83:69:cb:be:2e:36:5f:35:11:c3:91:b8:63:9e:57: a7:f4:29:92:23:67:2b:4f:a9:3f:81:41:5c:29:61:bd:15:9e: 26:41:52:f5:3e:8e:e4:10:e5:6b:10:06:11:9a:54:ca:d5:ba: f7:48:d9:3d:81:6b:b5:f7:20:68:a3:e4:bd:db:38:5c:e0:5b: c6:e9:53:39:39:c2:ee:9f:a6:1a:58:69:5f:77:80:f4:24:bc: 5d:8b:3a:c2:89:cd:7b:e3:60:32:5e:64:24:22:72:6c:41:69: 57:68:47:84:2c:50:83:b3:7d:61:ce:ff:05:d5:1f:31:85:10: d0:f0:66:8c:f9:89:dd:69:3e:9f:b5:c6:ce:d3:03:27:87:d1: 70:89:3d:9e:f2:cc:5f:5f:5e:fc:4b:6b:b5:8c:06:43:64:20: 78:9d:53:dd:db:67:62:34:7f:d6:e6:ba:26:82:4a:e7:c4:c3: 5e:79:1a:b8:d0:5a:03:8c:c5:c1:7b:f6:e3:8e:01:e0:df:ca: c1:0e:19:61:97:2b:09:19:4a:08:25:6a:b2:dc:ee:ac:97:ef: 21:68:9d:1e:45:14:b8:8c:0d:3e:cc:01:3d:90:7d:7c:0c:2c: ff:8f:8e:72 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURwMudsJE3rUzG6JAnbr8eytfbu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEQjQ3NUE5QkFCMTA3RUQwRkVFQkJDMUQzQkNDMDNG MEYxMUM0RDAeFw0yNTA2MDIxNjM5MDRaFw0yNTA2MDcxMzQ4MDRaMDMxMTAvBgNV BAMTKEYzQzIzRDBCOEYwMTVBNERDMjA4ODNGQjlCRDA1Q0FCQTQzMkMxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQMNko7PgzlY+1nGM/ElDHqK4 a9STNvRvibzghxnS/ihViRjmCTX+T6AhDo3UejVUmya5HBWlnzqxqFxfBvXTC+w4 AfSDhGhDPvGWxguvgJ+mreAuexKB4HSUwgmV12haks2yzMahbPnqPuPsJGrTMaIo j4EETn/ud4v59SG3O8YfayuI+YrGMV8YccLiiZyqgX3WOu76bEkB3SsvCsICg0Bh ZSyXkL5CCelysZUQkYfpn/rRAXLSwD/aZZxPskXJCnIv5kLg6sz0a+7MdF4MoN5j dDmazNrEojyerTCfxHqqylr8f0uTRNShGYiJIrooQQ1Yu9mT6SjM5G8D2R6xAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU88I9C48BWk3CCIP7m9Bcq6QywVYwHwYDVR0j BBgwFoAUuttHWpurEH7Q/uu8HTvMA/DxHE0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMjEwQkY0NEY0QTNDQTU0Qjg4RDRDMTU3NEI2MkMyNjM5 MjM1MDNCQkFCNDJBMDAzMEEyMDRBNjlGMjUzNjA1LzAvQkFEQjQ3NUE5QkFCMTA3 RUQwRkVFQkJDMUQzQkNDMDNGMEYxMUM0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQURCNDc1QTlCQUIxMDdFRDBG RUVCQkMxRDNCQ0MwM0YwRjExQzRELmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDIxMEJGNDRGNEEzQ0E1NEI4OEQ0QzE1NzRCNjJDMjYzOTIzNTAzQkJB QjQyQTAwMzBBMjA0QTY5RjI1MzYwNS8wL0JBREI0NzVBOUJBQjEwN0VEMEZFRUJC QzFEM0JDQzAzRjBGMTFDNEQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAz5n4e6uso1pAmhVblWLJqfJby sq2Dacu+LjZfNRHDkbhjnlen9CmSI2crT6k/gUFcKWG9FZ4mQVL1Po7kEOVrEAYR mlTK1br3SNk9gWu19yBoo+S92zhc4FvG6VM5OcLun6YaWGlfd4D0JLxdizrCic17 42AyXmQkInJsQWlXaEeELFCDs31hzv8F1R8xhRDQ8GaM+YndaT6ftcbO0wMnh9Fw iT2e8sxfX178S2u1jAZDZCB4nVPd22diNH/W5romgkrnxMNeeRq40FoDjMXBe/bj jgHg38rBDhlhlysJGUoIJWqy3O6sl+8haJ0eRRS4jA0+zAE9kH18DCz/j45y -----END CERTIFICATE-----Generated at Wed Jun 4 12:31:04 2025 by rpki-client