$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft File: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft (raw, json) Hash identifier: 0d6cOxYfiJ3uT1ziaE9kIP1A670b38mWSnRNfDoOpNU= Subject key identifier: 9F:E6:46:0D:24:46:26:71:59:A1:44:C7:81:20:B9:B4:01:C2:07:D1 Authority key identifier: CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB Certificate issuer: /CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Certificate serial: 209224CEF47E22036E1C14426A1020C1FAE89474 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft Manifest number: E3 Signing time: Tue 03 Jun 2025 06:02:06 +0000 Manifest this update: Tue 03 Jun 2025 05:57:06 +0000 Manifest next update: Sat 07 Jun 2025 16:22:06 +0000 Files and hashes: 1: 323830313a31313a383830303a3a2f34382d3438203d3e203139343239.roa (hash: Mu1aiZbTuKob4P/uHzlI5H1bWCj0RfxIyLfLzn5wSP0=) 2: CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl (hash: me2EqvlJgpwgjvusdw9wu2Fg5FlqBq7PCCmWsgaGqEc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 16:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:92:24:ce:f4:7e:22:03:6e:1c:14:42:6a:10:20:c1:fa:e8:94:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB Validity Not Before: Jun 3 05:57:06 2025 GMT Not After : Jun 7 16:22:06 2025 GMT Subject: CN=9FE6460D2446267159A144C78120B9B401C207D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:2e:31:1e:1d:87:dd:c4:dc:2b:eb:63:03: 36:56:c0:d4:ec:4a:fc:57:05:aa:89:0e:3f:d0:85: 9b:92:65:fa:b2:e2:76:3f:e8:ec:c8:a1:4c:1b:0f: b2:be:fe:4f:dc:5a:9b:36:26:9b:71:a7:cc:ed:cd: d2:2c:c6:51:6c:75:a6:18:8b:a1:61:ee:57:3e:f5: cb:db:0c:a7:59:dd:b3:fb:b2:59:ef:4d:0f:76:b2: ca:59:96:0e:68:2c:03:72:91:08:32:36:a7:c6:88: df:77:85:68:a5:fe:66:2b:c9:67:72:e8:f4:04:b3: a8:99:09:ec:5b:a3:94:e4:0b:58:ad:49:31:59:a0: 56:75:ca:b3:b3:1a:3a:d2:38:bb:9a:76:79:05:5f: 44:3d:80:4f:ce:19:cf:2c:b5:bc:fe:28:92:5d:f5: 8f:95:8b:8e:1d:06:d2:17:59:35:44:a8:6b:6f:5b: f5:5f:72:0a:41:ac:5d:8f:f7:bf:5d:4a:d6:cc:62: 44:26:21:f7:1f:7d:ce:64:b6:a3:e2:57:34:e9:96: 02:ef:60:f7:6c:8e:bf:67:4e:e6:ec:89:ec:34:93: a8:f3:d6:67:50:00:05:fb:17:e6:b1:ce:d2:8c:7e: 7b:6a:c1:be:75:8f:7d:d7:ae:d3:59:42:09:28:89: 90:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:46:0D:24:46:26:71:59:A1:44:C7:81:20:B9:B4:01:C2:07:D1 X509v3 Authority Key Identifier: keyid:CB:56:8F:C0:EF:E9:5F:EF:1D:63:96:BA:25:02:36:7B:6B:93:E1:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03488AE1568F403C1762497280248EB8A68596C93A96E77A4C7053E4F7AC2DB3/0/CB568FC0EFE95FEF1D6396BA2502367B6B93E1EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:87:5a:0a:22:4b:88:5e:35:e6:2b:ef:58:5c:a3:cc:7b:9e: f3:49:f8:b0:b5:7f:71:55:2c:aa:b5:7b:1d:71:9a:71:48:6c: a9:0b:fd:a8:67:29:1b:59:4e:c2:d7:a9:cd:e0:13:41:14:bb: 1b:9c:d0:cd:f0:9f:cb:9b:8d:5c:8b:68:13:f2:3f:04:79:03: d1:bb:ce:77:f7:48:f2:58:ec:9c:de:53:3f:86:54:8d:09:cf: 88:67:f9:4c:28:ff:4a:ba:8a:e4:ba:d2:06:f3:1c:7c:b0:b8: 46:b2:55:db:0b:75:62:63:a8:60:a8:10:82:e7:d5:9c:0c:ab: 7c:91:6f:68:7e:fa:6a:c2:70:4a:00:1d:7e:d7:c2:c0:5b:e1: 01:cf:45:d2:64:19:83:ac:51:8d:08:a1:be:7d:6c:e9:27:6c: dd:aa:b7:93:03:43:f3:b4:a6:c9:a3:66:78:b1:c5:b3:a9:2e: cc:7c:27:6f:aa:16:44:9c:85:dc:1d:88:84:53:a3:87:95:16: 8f:2a:a5:0e:1b:74:f7:c8:e8:67:9f:4d:0c:08:59:18:67:55: 13:80:c6:c4:e3:0a:e9:f3:a2:b7:42:6b:d5:17:4f:a3:22:3b: d1:ee:e7:54:dd:eb:87:a1:a6:1f:53:50:e8:1c:3f:97:d4:03: 1e:98:7f:f6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIJIkzvR+IgNuHBRCahAgwfrolHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NjhGQzBFRkU5NUZFRjFENjM5NkJBMjUwMjM2N0I2 QjkzRTFFQjAeFw0yNTA2MDMwNTU3MDZaFw0yNTA2MDcxNjIyMDZaMDMxMTAvBgNV BAMTKDlGRTY0NjBEMjQ0NjI2NzE1OUExNDRDNzgxMjBCOUI0MDFDMjA3RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQi4xHh2H3cTcK+tjAzZWwNTs SvxXBaqJDj/QhZuSZfqy4nY/6OzIoUwbD7K+/k/cWps2Jptxp8ztzdIsxlFsdaYY i6Fh7lc+9cvbDKdZ3bP7slnvTQ92sspZlg5oLANykQgyNqfGiN93hWil/mYryWdy 6PQEs6iZCexbo5TkC1itSTFZoFZ1yrOzGjrSOLuadnkFX0Q9gE/OGc8stbz+KJJd 9Y+Vi44dBtIXWTVEqGtvW/VfcgpBrF2P979dStbMYkQmIfcffc5ktqPiVzTplgLv YPdsjr9nTubsiew0k6jz1mdQAAX7F+axztKMfntqwb51j33XrtNZQgkoiZBDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUn+ZGDSRGJnFZoUTHgSC5tAHCB9EwHwYDVR0j BBgwFoAUy1aPwO/pX+8dY5a6JQI2e2uT4eswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wMzQ4OEFFMTU2OEY0MDNDMTc2MjQ5NzI4MDI0OEVCOEE2 ODU5NkM5M0E5NkU3N0E0QzcwNTNFNEY3QUMyREIzLzAvQ0I1NjhGQzBFRkU5NUZF RjFENjM5NkJBMjUwMjM2N0I2QjkzRTFFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQjU2OEZDMEVGRTk1RkVGMUQ2 Mzk2QkEyNTAyMzY3QjZCOTNFMUVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDM0ODhBRTE1NjhGNDAzQzE3NjI0OTcyODAyNDhFQjhBNjg1OTZDOTNB OTZFNzdBNEM3MDUzRTRGN0FDMkRCMy8wL0NCNTY4RkMwRUZFOTVGRUYxRDYzOTZC QTI1MDIzNjdCNkI5M0UxRUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQh1oKIkuIXjXmK+9YXKPMe57z SfiwtX9xVSyqtXsdcZpxSGypC/2oZykbWU7C16nN4BNBFLsbnNDN8J/Lm41ci2gT 8j8EeQPRu85390jyWOyc3lM/hlSNCc+IZ/lMKP9KuorkutIG8xx8sLhGslXbC3Vi Y6hgqBCC59WcDKt8kW9ofvpqwnBKAB1+18LAW+EBz0XSZBmDrFGNCKG+fWzpJ2zd qreTA0PztKbJo2Z4scWzqS7MfCdvqhZEnIXcHYiEU6OHlRaPKqUOG3T3yOhnn00M CFkYZ1UTgMbE4wrp86K3QmvVF0+jIjvR7udU3euHoaYfU1DoHD+X1AMemH/2 -----END CERTIFICATE-----Generated at Wed Jun 4 12:33:35 2025 by rpki-client