$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft File: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft (raw, json) Hash identifier: MtEPHK+Xw4iKro+jk/eiwFIIs93Tt/ci1CaBQjVDQfk= Subject key identifier: 83:B1:79:EA:FA:5A:0C:84:0F:BF:BC:7E:A6:C2:8D:33:53:DF:07:0B Authority key identifier: 4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2 Certificate issuer: /CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2 Certificate serial: 169281B768D9E1EAC81AB140022858A45BC482FF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft Manifest number: E7 Signing time: Sun 01 Jun 2025 17:50:13 +0000 Manifest this update: Sun 01 Jun 2025 17:45:12 +0000 Manifest next update: Sat 07 Jun 2025 10:21:12 +0000 Files and hashes: 1: 4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl (hash: qMlaSdIjC7FhtDNTFVy4QrFDEQBO9EB0xuBiWUF28kI=) 2: 3134332e3230382e36342e302f32322d3232203d3e203332303334.roa (hash: mIKWkdMKyZAa2lLWVlxa3L5zNX5+6kV+s4L5AMIQSGo=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 10:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:92:81:b7:68:d9:e1:ea:c8:1a:b1:40:02:28:58:a4:5b:c4:82:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2 Validity Not Before: Jun 1 17:45:12 2025 GMT Not After : Jun 7 10:21:12 2025 GMT Subject: CN=83B179EAFA5A0C840FBFBC7EA6C28D3353DF070B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:1a:db:9f:44:6f:7f:9c:c7:f9:ea:58:d7: d5:8a:c6:bb:9a:dc:ed:73:bb:ca:a9:74:a8:0d:2c: bf:13:10:16:2d:c7:c5:87:1f:23:48:7a:ef:fa:9c: c0:93:de:a5:72:4a:77:d5:7b:0d:49:2c:84:60:1b: c7:01:d4:22:8c:ba:13:34:28:03:cc:2d:39:89:c3: e1:8e:e4:b3:4e:8c:52:bc:dc:31:47:7b:85:d6:03: 4f:e1:5d:e5:21:01:3c:6b:fb:b7:82:56:0d:d5:28: 94:08:ee:16:91:21:8e:ab:58:b3:58:26:8c:00:62: 6c:a9:ff:64:8f:85:64:26:b0:8b:d6:6c:7e:54:a8: d1:83:d2:9b:3c:6f:f5:34:af:6a:7b:ee:db:5f:00: 04:cd:9c:11:e8:ad:91:83:05:e1:44:80:fd:9f:ac: 6f:4a:30:8a:8a:c9:29:0d:74:c1:f1:ae:6c:0e:71: 71:74:8a:ab:88:1c:4f:e0:f2:34:7c:6f:c3:c8:10: 61:ee:3f:14:89:ab:81:89:cd:32:20:f1:a6:e2:b9: 22:19:70:1d:6d:73:14:78:98:7e:d0:64:6a:b4:fa: 6e:d7:c3:66:a4:01:37:f3:22:f0:77:53:b8:46:24: 3f:f5:29:21:d1:01:d9:f6:03:a4:e5:a1:67:78:2e: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B1:79:EA:FA:5A:0C:84:0F:BF:BC:7E:A6:C2:8D:33:53:DF:07:0B X509v3 Authority Key Identifier: keyid:4D:DC:EA:5D:BD:5D:CD:00:B0:3C:21:E4:F3:46:9B:F7:D1:F8:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29EC5F9B0A6D954864D2744D55CDDE1BE85D44710021DC6B1D3F42FAD8F4B87E/0/4DDCEA5DBD5DCD00B03C21E4F3469BF7D1F8BCE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:30:0b:92:da:db:92:82:58:b8:25:60:4d:34:f9:f0:b6:bb: dc:50:77:bc:a5:63:d2:cd:5c:47:7a:f0:7d:d1:c8:84:8c:a9: 41:1f:29:8f:50:fc:25:79:db:fe:44:fd:39:72:29:90:0e:56: c9:c5:fd:36:56:6e:77:a0:c8:f6:5c:11:84:3f:50:ef:68:06: f7:59:b9:81:1d:47:91:a6:91:00:d9:ef:be:0a:a0:a0:85:80: 4a:55:92:e9:87:f5:98:a2:25:50:25:22:cc:40:f4:26:17:cb: f1:00:0d:05:97:a9:31:0a:62:e9:2e:86:88:f2:1d:48:ca:b7: 5c:e6:19:22:2f:b2:55:7e:ab:4d:9d:0b:5b:70:1a:23:24:70: 7f:77:9e:be:4a:24:48:65:79:c3:22:ff:df:4b:48:b9:b6:7b: 16:df:74:be:fa:47:4d:7c:dc:a7:95:36:25:46:e5:bc:d1:59: dc:56:1e:e4:19:5f:dd:36:50:e9:cf:a7:bc:7b:c8:ca:e7:82: 73:48:d1:08:fb:a9:0b:42:c6:4f:d0:33:d0:61:c1:94:56:fd: 53:a6:61:41:ec:6d:2f:97:04:7d:77:a5:00:a3:91:5f:90:7f: 91:32:94:62:89:28:02:2b:36:68:f6:66:da:92:c9:69:4a:bd: fc:91:28:45 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUFpKBt2jZ4erIGrFAAihYpFvEgv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREQ0VBNURCRDVEQ0QwMEIwM0MyMUU0RjM0NjlCRjdE MUY4QkNFMjAeFw0yNTA2MDExNzQ1MTJaFw0yNTA2MDcxMDIxMTJaMDMxMTAvBgNV BAMTKDgzQjE3OUVBRkE1QTBDODQwRkJGQkM3RUE2QzI4RDMzNTNERjA3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlhrbn0Rvf5zH+epY19WKxrua 3O1zu8qpdKgNLL8TEBYtx8WHHyNIeu/6nMCT3qVySnfVew1JLIRgG8cB1CKMuhM0 KAPMLTmJw+GO5LNOjFK83DFHe4XWA0/hXeUhATxr+7eCVg3VKJQI7haRIY6rWLNY JowAYmyp/2SPhWQmsIvWbH5UqNGD0ps8b/U0r2p77ttfAATNnBHorZGDBeFEgP2f rG9KMIqKySkNdMHxrmwOcXF0iquIHE/g8jR8b8PIEGHuPxSJq4GJzTIg8abiuSIZ cB1tcxR4mH7QZGq0+m7Xw2akATfzIvB3U7hGJD/1KSHRAdn2A6TloWd4LjttAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUg7F56vpaDIQPv7x+psKNM1PfBwswHwYDVR0j BBgwFoAUTdzqXb1dzQCwPCHk80ab99H4vOIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yOUVDNUY5QjBBNkQ5NTQ4NjREMjc0NEQ1NUNEREUxQkU4 NUQ0NDcxMDAyMURDNkIxRDNGNDJGQUQ4RjRCODdFLzAvNEREQ0VBNURCRDVEQ0Qw MEIwM0MyMUU0RjM0NjlCRjdEMUY4QkNFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RERDRUE1REJENURDRDAwQjAz QzIxRTRGMzQ2OUJGN0QxRjhCQ0UyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjlFQzVGOUIwQTZEOTU0ODY0RDI3NDRENTVDRERFMUJFODVENDQ3MTAw MjFEQzZCMUQzRjQyRkFEOEY0Qjg3RS8wLzRERENFQTVEQkQ1RENEMDBCMDNDMjFF NEYzNDY5QkY3RDFGOEJDRTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGMAuS2tuSgli4JWBNNPnwtrvc UHe8pWPSzVxHevB90ciEjKlBHymPUPwledv+RP05cimQDlbJxf02Vm53oMj2XBGE P1DvaAb3WbmBHUeRppEA2e++CqCghYBKVZLph/WYoiVQJSLMQPQmF8vxAA0Fl6kx CmLpLoaI8h1Iyrdc5hkiL7JVfqtNnQtbcBojJHB/d56+SiRIZXnDIv/fS0i5tnsW 33S++kdNfNynlTYlRuW80VncVh7kGV/dNlDpz6e8e8jK54JzSNEI+6kLQsZP0DPQ YcGUVv1TpmFB7G0vlwR9d6UAo5FfkH+RMpRiiSgCKzZo9mbakslpSr38kShF -----END CERTIFICATE-----Generated at Tue Jun 3 10:08:46 2025 by rpki-client