$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.mft File: 5B867361525607203EC4E746C6F22CC6EB34BE67.mft (raw, json) Hash identifier: uYxLv3rMcxx23FjbVm7NHArswYkTLC8ygtff6t6V5uA= Subject key identifier: 70:8E:1A:7A:08:82:BB:7F:6E:14:02:43:D3:71:40:40:08:DD:2C:58 Authority key identifier: 5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67 Certificate issuer: /CN=5B867361525607203EC4E746C6F22CC6EB34BE67 Certificate serial: 51F081BF7424D172AB61710FBF65A0A8428EA67A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.mft Manifest number: C7 Signing time: Sat 05 Apr 2025 05:45:12 +0000 Manifest this update: Sat 05 Apr 2025 05:40:12 +0000 Manifest next update: Thu 10 Apr 2025 22:54:12 +0000 Files and hashes: 1: 5B867361525607203EC4E746C6F22CC6EB34BE67.crl (hash: WQrzcTUQNjCVMb1yUI2n8M2uWk1UtDn/GI9+/XROKLU=) 2: 3137392e36332e37322e302f32322d3234203d3e20323732383130.roa (hash: 5oMLy7NiqEE6p9MpFCOhqtlpccxPgVxbWA7WYZti2TU=) 3: 323830333a623839303a3a2f33322d3332203d3e20323732383130.roa (hash: fy86RDUySL49uIAMLD2WQ+Mb5Fdk1/LHKg1VZicirQ8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.crl rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f0:81:bf:74:24:d1:72:ab:61:71:0f:bf:65:a0:a8:42:8e:a6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B867361525607203EC4E746C6F22CC6EB34BE67 Validity Not Before: Apr 5 05:40:12 2025 GMT Not After : Apr 10 22:54:12 2025 GMT Subject: CN=708E1A7A0882BB7F6E140243D371404008DD2C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:b3:ad:39:b6:9b:78:85:45:44:08:45:22: f5:da:f6:d8:ca:c0:d5:4d:54:59:39:ab:ad:74:c7: 26:9d:7e:a8:28:7f:f9:90:1c:dc:62:1a:75:f0:8a: ee:92:6a:1c:f4:af:9b:7f:98:9e:07:11:81:e1:42: 23:e8:eb:01:5f:ac:6c:36:db:40:2e:6f:8a:b0:6e: 86:20:5b:ac:ce:b3:bd:1a:68:71:70:57:a6:3a:7e: d7:ea:3b:95:d9:1d:71:1f:ee:b8:fc:0d:bc:ac:34: 3f:6e:a0:d4:10:78:83:92:9f:a8:a5:f9:57:06:7e: d1:a1:b5:4d:df:bc:df:a8:b2:23:63:db:f6:5e:0b: aa:e4:44:84:67:db:ef:45:37:d0:e9:1b:cc:f7:b4: 04:87:a1:ec:72:bf:95:08:0d:40:05:b1:8b:f1:58: 3c:71:38:d0:46:b4:99:59:51:9a:3e:be:b2:55:37: 34:83:11:09:30:32:a3:90:db:11:81:28:32:93:f1: 3a:a5:b8:5f:aa:d4:05:32:21:48:4a:89:9b:df:7a: ca:46:52:ad:22:04:60:a2:11:11:be:cd:2a:35:9c: 4e:8a:24:bb:9e:10:89:fe:7e:b0:31:9d:61:1a:37: 7b:3b:be:ca:79:fe:fc:f0:08:b4:7a:c8:48:bc:4f: 92:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8E:1A:7A:08:82:BB:7F:6E:14:02:43:D3:71:40:40:08:DD:2C:58 X509v3 Authority Key Identifier: keyid:5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c3:13:7e:af:7b:b2:9f:e0:fa:50:b2:ce:1a:92:c0:e7:b7: c6:c4:62:7a:d6:74:88:65:cd:71:11:d8:d5:81:d8:b8:85:87: c4:e2:46:4b:06:9c:6c:7d:63:07:37:32:c7:4d:2b:5f:bf:80: cb:3f:96:93:0f:13:90:ea:32:0b:da:2c:73:55:90:cf:cc:f4: f0:55:80:46:4f:b8:eb:b9:89:c7:35:e6:55:b4:7f:17:9b:94: ff:28:63:b4:a7:5a:22:38:a5:dc:31:3b:01:ba:87:16:a6:32: 92:d7:e8:71:a1:7f:34:18:d2:92:a6:5d:7a:9d:07:f2:b5:d1: 0c:89:61:32:df:bc:a8:f6:c6:74:b7:ac:0e:1d:39:2c:88:b0: a4:49:1e:d3:77:8e:86:b1:2e:44:1f:b3:b2:fa:9c:ab:2c:02: 34:35:91:60:ac:69:e8:c3:07:2e:2a:ba:bb:c3:a9:80:71:22: 04:23:38:3f:06:84:45:3e:a1:ba:bd:00:d3:77:ea:00:be:0e: 1a:cf:ce:36:ff:22:27:a4:9d:30:95:1e:f6:97:1c:a7:1c:9c: 33:d3:16:34:60:c7:40:bc:d4:d4:21:1a:11:94:37:27:55:f8: 01:5b:31:f5:ce:be:51:90:a1:3b:ff:79:6f:a9:8b:48:d3:95: 1e:35:e7:61 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUfCBv3Qk0XKrYXEPv2WgqEKOpnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NjczNjE1MjU2MDcyMDNFQzRFNzQ2QzZGMjJDQzZF QjM0QkU2NzAeFw0yNTA0MDUwNTQwMTJaFw0yNTA0MTAyMjU0MTJaMDMxMTAvBgNV BAMTKDcwOEUxQTdBMDg4MkJCN0Y2RTE0MDI0M0QzNzE0MDQwMDhERDJDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf6LOtObabeIVFRAhFIvXa9tjK wNVNVFk5q610xyadfqgof/mQHNxiGnXwiu6Sahz0r5t/mJ4HEYHhQiPo6wFfrGw2 20Aub4qwboYgW6zOs70aaHFwV6Y6ftfqO5XZHXEf7rj8DbysND9uoNQQeIOSn6il +VcGftGhtU3fvN+osiNj2/ZeC6rkRIRn2+9FN9DpG8z3tASHoexyv5UIDUAFsYvx WDxxONBGtJlZUZo+vrJVNzSDEQkwMqOQ2xGBKDKT8TqluF+q1AUyIUhKiZvfespG Uq0iBGCiERG+zSo1nE6KJLueEIn+frAxnWEaN3s7vsp5/vzwCLR6yEi8T5LbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcI4aegiCu39uFAJD03FAQAjdLFgwHwYDVR0j BBgwFoAUW4ZzYVJWByA+xOdGxvIsxus0vmcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yRUVERTNGMEIwNzA5MzgxMjY5QTg5RjcxRTIyODJFMEJD NkQ2RkU2RkFBNjk2NkJCOTkyMUI5MEExRjg0REU3LzAvNUI4NjczNjE1MjU2MDcy MDNFQzRFNzQ2QzZGMjJDQzZFQjM0QkU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81Qjg2NzM2MTUyNTYwNzIwM0VD NEU3NDZDNkYyMkNDNkVCMzRCRTY3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMkVFREUzRjBCMDcwOTM4MTI2OUE4OUY3MUUyMjgyRTBCQzZENkZFNkZB QTY5NjZCQjk5MjFCOTBBMUY4NERFNy8wLzVCODY3MzYxNTI1NjA3MjAzRUM0RTc0 NkM2RjIyQ0M2RUIzNEJFNjcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgwxN+r3uyn+D6ULLOGpLA57fG xGJ61nSIZc1xEdjVgdi4hYfE4kZLBpxsfWMHNzLHTStfv4DLP5aTDxOQ6jIL2ixz VZDPzPTwVYBGT7jruYnHNeZVtH8Xm5T/KGO0p1oiOKXcMTsBuocWpjKS1+hxoX80 GNKSpl16nQfytdEMiWEy37yo9sZ0t6wOHTksiLCkSR7Td46GsS5EH7Oy+pyrLAI0 NZFgrGnowwcuKrq7w6mAcSIEIzg/BoRFPqG6vQDTd+oAvg4az842/yInpJ0wlR72 lxynHJwz0xY0YMdAvNTUIRoRlDcnVfgBWzH1zr5RkKE7/3lvqYtI05UeNedh -----END CERTIFICATE-----Generated at Sun Apr 6 08:11:01 2025 by rpki-client