$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.mft File: BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.mft (raw, json) Hash identifier: 4gEbAXNWJ1IhJ2IufajjCEprpm/tWBQTzbwYkKaU5qo= Subject key identifier: CB:77:24:81:B1:D2:86:99:2A:9F:84:07:E3:54:77:B1:F8:47:CD:3A Authority key identifier: BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5 Certificate issuer: /CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5 Certificate serial: 70BAFC12A684B84ED57AAEFF6F62B05E33D4BF98 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.mft Manifest number: E4 Signing time: Tue 03 Jun 2025 05:36:54 +0000 Manifest this update: Tue 03 Jun 2025 05:31:54 +0000 Manifest next update: Sun 08 Jun 2025 13:31:54 +0000 Files and hashes: 1: BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl (hash: hd5VJyur5VhjhpuH2Y7aYOIGVs+Thq72ZfBXPyX8Dtk=) 2: 323830333a326163303a3a2f33322d3336203d3e203532333030.roa (hash: HbejuA35IM0XodulA9nDsGn2mrgebR0jOP3EF5j6QuQ=) 3: 3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa (hash: EVM+dmGnIO3ZDnfd1yZnm5NPWLuUzCwVAKnmrW0UIMk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ba:fc:12:a6:84:b8:4e:d5:7a:ae:ff:6f:62:b0:5e:33:d4:bf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5 Validity Not Before: Jun 3 05:31:54 2025 GMT Not After : Jun 8 13:31:54 2025 GMT Subject: CN=CB772481B1D286992A9F8407E35477B1F847CD3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:84:b9:9d:ab:b9:84:61:9a:40:d7:96:a9: 9b:4a:9e:be:61:0d:ff:31:69:0c:30:d2:4f:dc:3d: d9:09:b0:a6:70:25:24:f7:69:1e:9a:cb:22:89:bc: 10:91:c7:e2:76:b8:c1:e1:90:69:29:4f:e5:7a:de: c0:65:de:28:89:62:74:1a:c6:a8:7f:06:34:f8:10: 1b:30:1c:7c:04:27:24:60:7d:73:3a:72:6f:cb:f1: 9b:45:b7:39:48:e6:71:c5:f7:75:e5:d0:9e:b2:e0: d0:ce:d5:fc:1b:a7:59:7a:85:84:b6:4f:a5:d8:e7: 69:f1:52:c6:a6:34:94:33:c6:81:2a:a2:c3:03:73: d1:45:26:2b:f9:6e:a6:d7:59:5c:4d:e9:ea:9d:64: 96:70:43:22:28:78:33:01:3a:e4:91:9e:ea:f9:e4: 4d:98:7c:7b:de:17:2c:70:64:78:81:e7:dc:6c:99: 34:8a:c4:8c:02:97:5f:60:68:46:c5:85:df:b5:d9: 1c:3a:72:5d:c5:46:70:04:c5:59:8e:e9:58:5d:58: 43:f8:e3:23:80:b3:58:0c:60:1f:3a:6b:28:82:a3: 90:7f:af:23:17:e6:d5:69:a2:bf:05:d6:e0:9d:c7: 49:b6:61:43:b4:9f:2b:28:da:a5:1c:4e:50:0d:c1: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:77:24:81:B1:D2:86:99:2A:9F:84:07:E3:54:77:B1:F8:47:CD:3A X509v3 Authority Key Identifier: keyid:BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:df:41:4e:3e:c4:4b:e7:ad:54:f8:b1:f1:2d:bc:9d:56:33: 12:7d:46:eb:e0:c2:3d:91:61:9d:70:9b:32:83:e5:06:1d:fd: 16:ca:d2:66:a0:1b:55:f9:75:02:f4:0d:fb:2a:61:02:a0:20: b6:a6:e1:93:8b:a9:48:83:2b:70:76:9a:1b:c1:f7:f1:ed:8b: 77:14:57:7f:ef:ae:55:8f:ac:5a:1a:f9:8a:95:79:4f:4e:79: 92:21:1f:89:65:f3:a8:5a:9a:8e:e5:56:c8:5e:a3:87:de:9b: 32:f6:64:2f:34:23:f8:25:f9:9b:fa:e2:ed:27:c1:c5:ca:e1: 7e:c6:56:16:fb:b0:9f:53:04:56:39:bd:9c:e8:61:d6:ca:7d: 12:fa:57:fe:88:d7:e7:91:6a:db:e4:bf:8e:af:37:53:29:31: 97:1a:57:ce:68:d9:15:5f:2a:3b:43:d6:a2:0f:41:07:23:76: e6:06:a5:89:c0:fa:46:29:73:78:e1:1d:bf:cc:89:cc:79:c3: 4f:67:41:a0:0c:98:41:a4:da:ea:49:80:e6:d3:4c:2e:11:33: 25:5c:f8:d8:65:07:6a:09:a7:9c:4e:f2:9c:c0:1a:4c:87:23: 54:85:c3:55:b2:37:42:12:b7:23:a1:f5:bd:71:cb:84:67:df: 27:14:5f:fd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUcLr8EqaEuE7Veq7/b2KwXjPUv5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUzOEUzNEE5RUY2MDIyNDVCNDc1N0I4RjNCNkJCNDY3 NUU2QjlFNTAeFw0yNTA2MDMwNTMxNTRaFw0yNTA2MDgxMzMxNTRaMDMxMTAvBgNV BAMTKENCNzcyNDgxQjFEMjg2OTkyQTlGODQwN0UzNTQ3N0IxRjg0N0NEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcIS5nau5hGGaQNeWqZtKnr5h Df8xaQww0k/cPdkJsKZwJST3aR6ayyKJvBCRx+J2uMHhkGkpT+V63sBl3iiJYnQa xqh/BjT4EBswHHwEJyRgfXM6cm/L8ZtFtzlI5nHF93Xl0J6y4NDO1fwbp1l6hYS2 T6XY52nxUsamNJQzxoEqosMDc9FFJiv5bqbXWVxN6eqdZJZwQyIoeDMBOuSRnur5 5E2YfHveFyxwZHiB59xsmTSKxIwCl19gaEbFhd+12Rw6cl3FRnAExVmO6VhdWEP4 4yOAs1gMYB86ayiCo5B/ryMX5tVpor8F1uCdx0m2YUO0nyso2qUcTlANwR1VAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUy3ckgbHShpkqn4QH41R3sfhHzTowHwYDVR0j BBgwFoAUvjjjSp72AiRbR1e487a7RnXmueUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xQzExM0E5NDE2MDhEQUEzRjBDNDAwRTA3QUI1RjJCQTY5 MTJGMDgyRTM1NkVFOTg0RjQyNzc0RDZEQTE5NjBGLzAvQkUzOEUzNEE5RUY2MDIy NDVCNDc1N0I4RjNCNkJCNDY3NUU2QjlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRTM4RTM0QTlFRjYwMjI0NUI0 NzU3QjhGM0I2QkI0Njc1RTZCOUU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMUMxMTNBOTQxNjA4REFBM0YwQzQwMEUwN0FCNUYyQkE2OTEyRjA4MkUz NTZFRTk4NEY0Mjc3NEQ2REExOTYwRi8wL0JFMzhFMzRBOUVGNjAyMjQ1QjQ3NTdC OEYzQjZCQjQ2NzVFNkI5RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAo30FOPsRL561U+LHxLbydVjMS fUbr4MI9kWGdcJsyg+UGHf0WytJmoBtV+XUC9A37KmECoCC2puGTi6lIgytwdpob wffx7Yt3FFd/765Vj6xaGvmKlXlPTnmSIR+JZfOoWpqO5VbIXqOH3psy9mQvNCP4 Jfmb+uLtJ8HFyuF+xlYW+7CfUwRWOb2c6GHWyn0S+lf+iNfnkWrb5L+OrzdTKTGX GlfOaNkVXyo7Q9aiD0EHI3bmBqWJwPpGKXN44R2/zInMecNPZ0GgDJhBpNrqSYDm 00wuETMlXPjYZQdqCaecTvKcwBpMhyNUhcNVsjdCErcjofW9ccuEZ98nFF/9 -----END CERTIFICATE-----Generated at Wed Jun 4 12:34:59 2025 by rpki-client