$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft File: 5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft (raw, json) Hash identifier: 85+gkBuYY3tbTAcXxcuAjUlQjBGl145TXweCfC02D5A= Subject key identifier: A9:B7:87:19:AB:E2:F6:19:F1:64:37:61:2A:3F:50:63:41:B6:EA:D5 Authority key identifier: 54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4 Certificate issuer: /CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4 Certificate serial: 441294E213F51F2E19D938E583DBC5BA0E6E22D4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft Manifest number: A3 Signing time: Wed 20 Aug 2025 12:06:14 +0000 Manifest this update: Wed 20 Aug 2025 12:01:14 +0000 Manifest next update: Sun 24 Aug 2025 16:56:14 +0000 Files and hashes: 1: 323830363a3431333a3a2f33322d3438203d3e20323732333632.roa (hash: fkAsVd6g3f9Q5pw/knJlPmvtdzKHEmT1nJFTHjHxIY0=) 2: 5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl (hash: pYwotJZ6wbmXO/p3DCIIefkx7CV5pT+4c7V68Ie9tcE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 16:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:12:94:e2:13:f5:1f:2e:19:d9:38:e5:83:db:c5:ba:0e:6e:22:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5458CA1B10BC283A21E9C9D3569038E80F5676E4 Validity Not Before: Aug 20 12:01:14 2025 GMT Not After : Aug 24 16:56:14 2025 GMT Subject: CN=A9B78719ABE2F619F16437612A3F506341B6EAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:53:c5:0b:e3:f4:3f:b2:d0:b0:bc:fa:32: 6e:99:a8:c9:bf:9d:f8:75:0e:a8:01:42:ad:f6:76: b0:6b:dc:2f:28:d3:1c:29:40:c2:07:8f:24:e2:69: 48:f4:d7:eb:3d:30:da:54:bd:f6:e6:8c:de:08:6e: 21:4f:85:2d:3e:a6:38:d4:23:1e:10:14:a8:25:67: 34:8a:ef:d5:67:61:cc:a7:6b:9c:60:77:ec:f9:ba: e8:28:12:a9:c4:9b:fb:19:16:77:79:6c:00:c8:b8: a2:3d:30:6b:bb:e1:bb:ec:b0:b5:59:f7:87:b9:08: b1:45:58:0f:09:d3:a5:16:a3:32:d7:c0:b1:58:3d: 95:5d:16:e5:f3:a2:b6:e1:b8:af:14:cc:28:8f:50: 89:3d:5d:29:eb:a2:69:83:04:4c:23:21:89:db:a8: 29:52:41:5d:98:de:b4:3d:ac:ed:ec:21:99:1b:54: 1f:d5:69:b6:f4:56:e4:1c:92:4f:f4:c4:5a:7a:71: 56:8d:c6:bc:85:d6:f2:42:70:a2:bd:9f:2d:6f:96: dc:ab:9d:51:a8:d6:98:6e:10:0e:7b:13:4c:f0:6b: 75:01:cc:bc:cf:7a:01:a7:fe:2b:7d:e5:34:17:83: 46:0d:ea:5a:fa:45:51:c7:57:42:32:2e:b8:88:6c: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B7:87:19:AB:E2:F6:19:F1:64:37:61:2A:3F:50:63:41:B6:EA:D5 X509v3 Authority Key Identifier: keyid:54:58:CA:1B:10:BC:28:3A:21:E9:C9:D3:56:90:38:E8:0F:56:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2658639225601436C19BF15043488BBB49208DF2B02091EBCBEBD08A62FF2645/0/5458CA1B10BC283A21E9C9D3569038E80F5676E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4e:48:af:35:4f:e1:c8:bc:0b:42:2e:7d:78:da:f2:18:6b: 78:91:bb:5c:aa:22:70:6d:81:dd:77:c4:bf:bd:31:e8:96:18: 75:ab:95:54:10:55:48:f2:e4:ba:ec:25:86:d7:91:ba:cf:bd: d7:f3:e6:65:97:9b:39:db:ce:fc:09:7e:89:44:a4:06:e9:4c: 47:fe:10:5b:4e:81:17:ee:c4:3a:82:fe:bb:41:ac:84:f4:92: 3c:d6:6f:bb:fb:b9:37:4d:43:88:b2:df:90:26:aa:7e:b4:7f: ac:f1:9c:cf:af:25:05:2c:21:14:74:be:78:9f:5d:f7:c5:75: b0:5e:51:3c:9b:d8:44:1b:33:27:78:f8:dc:6d:09:80:92:f9: 5f:44:0d:c0:c1:dc:06:3a:27:14:83:31:70:1f:2b:dd:a9:61: bc:2f:b8:62:2f:2f:b0:97:50:ca:ea:8f:4e:d0:99:5a:79:c3: 21:1c:bd:67:19:45:95:28:9c:e0:20:cf:77:9b:d7:9c:5d:dc: c4:6a:e0:8a:99:56:b5:40:6d:a4:80:13:a4:46:43:4b:a1:1d: 88:58:90:68:0e:e9:5a:1e:e9:fd:5d:17:c9:bc:41:c0:8d:ed: 84:bc:03:cd:b6:08:bf:66:0e:18:25:82:bf:f1:89:86:1f:d1: a6:93:1e:4c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURBKU4hP1Hy4Z2Tjlg9vFug5uItQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ1OENBMUIxMEJDMjgzQTIxRTlDOUQzNTY5MDM4RTgw RjU2NzZFNDAeFw0yNTA4MjAxMjAxMTRaFw0yNTA4MjQxNjU2MTRaMDMxMTAvBgNV BAMTKEE5Qjc4NzE5QUJFMkY2MTlGMTY0Mzc2MTJBM0Y1MDYzNDFCNkVBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1glPFC+P0P7LQsLz6Mm6ZqMm/ nfh1DqgBQq32drBr3C8o0xwpQMIHjyTiaUj01+s9MNpUvfbmjN4IbiFPhS0+pjjU Ix4QFKglZzSK79VnYcyna5xgd+z5uugoEqnEm/sZFnd5bADIuKI9MGu74bvssLVZ 94e5CLFFWA8J06UWozLXwLFYPZVdFuXzorbhuK8UzCiPUIk9XSnrommDBEwjIYnb qClSQV2Y3rQ9rO3sIZkbVB/Vabb0VuQckk/0xFp6cVaNxryF1vJCcKK9ny1vltyr nVGo1phuEA57E0zwa3UBzLzPegGn/it95TQXg0YN6lr6RVHHV0IyLriIbLHNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUqbeHGavi9hnxZDdhKj9QY0G26tUwHwYDVR0j BBgwFoAUVFjKGxC8KDoh6cnTVpA46A9WduQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yNjU4NjM5MjI1NjAxNDM2QzE5QkYxNTA0MzQ4OEJCQjQ5 MjA4REYyQjAyMDkxRUJDQkVCRDA4QTYyRkYyNjQ1LzAvNTQ1OENBMUIxMEJDMjgz QTIxRTlDOUQzNTY5MDM4RTgwRjU2NzZFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NDU4Q0ExQjEwQkMyODNBMjFF OUM5RDM1NjkwMzhFODBGNTY3NkU0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjY1ODYzOTIyNTYwMTQzNkMxOUJGMTUwNDM0ODhCQkI0OTIwOERGMkIw MjA5MUVCQ0JFQkQwOEE2MkZGMjY0NS8wLzU0NThDQTFCMTBCQzI4M0EyMUU5QzlE MzU2OTAzOEU4MEY1Njc2RTQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMTkivNU/hyLwLQi59eNryGGt4 kbtcqiJwbYHdd8S/vTHolhh1q5VUEFVI8uS67CWG15G6z73X8+Zll5s52878CX6J RKQG6UxH/hBbToEX7sQ6gv67QayE9JI81m+7+7k3TUOIst+QJqp+tH+s8ZzPryUF LCEUdL54n133xXWwXlE8m9hEGzMnePjcbQmAkvlfRA3AwdwGOicUgzFwHyvdqWG8 L7hiLy+wl1DK6o9O0JlaecMhHL1nGUWVKJzgIM93m9ecXdzEauCKmVa1QG2kgBOk RkNLoR2IWJBoDulaHun9XRfJvEHAje2EvAPNtgi/Zg4YJYK/8YmGH9Gmkx5M -----END CERTIFICATE-----Generated at Wed Aug 20 19:43:02 2025 by rpki-client