$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft File: CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft (raw, json) Hash identifier: xbPxewxoy3eZ0MG+vk6zRkjiFYzsauvsjka2k4+u36k= Subject key identifier: 67:26:BD:3B:31:C4:B7:5B:A8:28:73:FD:6A:F6:CF:EB:22:99:33:F2 Authority key identifier: CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61 Certificate issuer: /CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61 Certificate serial: 4A9F21E2798A2BE0D4CE3E6276D57B85FC718BDE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft Manifest number: E1 Signing time: Tue 03 Jun 2025 04:16:05 +0000 Manifest this update: Tue 03 Jun 2025 04:11:05 +0000 Manifest next update: Sat 07 Jun 2025 17:44:05 +0000 Files and hashes: 1: 323830333a333363303a3a2f33322d3438203d3e20323635373231.roa (hash: 28sYketazM6vH2UAZi3oACqjsw2rnkaG+eluVXsRIXQ=) 2: 3132382e3230312e3131322e302f32322d3234203d3e20323635373231.roa (hash: CMkBruGYKL80Ok5wn8mmC59u6wsCZ/dDxiwJ+THiyQ0=) 3: CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl (hash: JxLtJOMZfEjNN0L2jLEitZCYAGzC3r9WbRKKJj5QtrQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 17:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9f:21:e2:79:8a:2b:e0:d4:ce:3e:62:76:d5:7b:85:fc:71:8b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA8D5AEE2FFD5169B863E840F863AC026919A61 Validity Not Before: Jun 3 04:11:05 2025 GMT Not After : Jun 7 17:44:05 2025 GMT Subject: CN=6726BD3B31C4B75BA82873FD6AF6CFEB229933F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:51:0c:e1:64:0a:f3:1c:03:34:40:26:3c:c4: 49:a7:0d:fb:7f:e1:2a:7f:52:a9:4a:75:a4:45:54: c6:a1:96:2f:0f:06:aa:ab:e9:d5:8f:e3:d6:19:c8: 5c:d9:33:4d:4b:81:8e:8c:90:8d:af:6b:f1:c0:24: 4f:66:76:36:cf:27:89:75:3b:a3:98:e4:fb:47:f3: a8:a1:30:d0:ad:8f:1c:bc:be:db:f5:39:81:4a:c3: 10:2f:cc:1f:f3:52:a2:c2:ab:72:c8:76:ad:ea:8c: 9f:f7:c8:3f:9f:46:4d:fc:79:31:82:7c:74:7c:b5: 55:08:ea:3c:77:61:75:72:d1:04:27:f8:55:76:8a: f7:fa:dc:a2:eb:e1:5c:75:f4:e0:cf:6c:b3:45:18: 2c:3e:2f:d4:b7:d7:a3:45:cc:a0:bb:cd:72:e5:f0: 43:c3:9b:b7:2b:cb:87:d5:29:2b:c4:29:7c:19:f9: d3:01:48:04:e8:df:2f:16:2d:47:69:cc:eb:4a:df: a8:5d:7a:40:56:c1:47:5b:22:4a:d9:04:5c:12:af: 09:dc:ad:e7:ba:3d:c5:68:1e:14:09:e7:c9:d6:30: 87:9e:19:1f:2e:64:51:ff:2d:da:cf:c8:c6:35:8a: 6d:a4:dd:23:28:9f:dd:b8:35:0d:ac:fa:be:c8:9b: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:26:BD:3B:31:C4:B7:5B:A8:28:73:FD:6A:F6:CF:EB:22:99:33:F2 X509v3 Authority Key Identifier: keyid:CF:A8:D5:AE:E2:FF:D5:16:9B:86:3E:84:0F:86:3A:C0:26:91:9A:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/300892915B4F76495207C54B9B23B1629F6FBAD8A5659EE4F5B09E982BA54E63/0/CFA8D5AEE2FFD5169B863E840F863AC026919A61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:13:65:1d:82:9f:aa:c8:51:fa:8e:ef:1a:0d:9b:01:f6:79: 63:23:5a:05:c0:db:b4:a1:57:ee:44:3d:75:91:24:d6:cb:30: 8b:f9:1d:de:b1:38:82:b0:4c:ed:24:d4:b3:aa:49:fb:0c:98: 7a:1b:43:21:25:78:47:d0:43:a6:86:98:a5:23:8a:2e:bf:5c: cb:d3:69:f0:9d:b1:e1:46:5d:3a:3d:e7:6e:93:ed:2f:ec:f4: ca:bb:6a:11:b3:a5:77:d6:0b:31:52:a5:c0:10:af:15:46:e9: fc:1e:60:42:6a:a7:38:09:7e:69:0e:f2:ca:cd:a6:4f:9c:94: e4:8b:46:f9:b0:64:17:8a:f3:8e:bb:76:d3:2e:de:b0:86:e2: c6:4e:29:04:26:c5:63:cf:ef:56:86:a7:e1:52:4f:e4:ad:83: 50:76:b8:b5:88:62:33:45:42:bb:f9:7e:f3:27:3b:c1:e5:2a: af:b0:a6:f1:dc:86:d8:e7:c3:3e:db:39:5f:0f:dc:09:05:1f: df:34:1e:a6:24:f7:98:70:2e:f4:9f:c7:eb:a4:ab:00:1f:d8: 0d:4f:ea:4d:5e:da:7f:de:f2:5e:7a:02:a1:77:48:80:f5:70: 04:16:61:c5:fd:d7:46:43:77:b9:45:3f:84:40:17:47:2f:45: c3:b0:45:87 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSp8h4nmKK+DUzj5idtV7hfxxi94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBOEQ1QUVFMkZGRDUxNjlCODYzRTg0MEY4NjNBQzAy NjkxOUE2MTAeFw0yNTA2MDMwNDExMDVaFw0yNTA2MDcxNzQ0MDVaMDMxMTAvBgNV BAMTKDY3MjZCRDNCMzFDNEI3NUJBODI4NzNGRDZBRjZDRkVCMjI5OTMzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRUQzhZArzHAM0QCY8xEmnDft/ 4Sp/UqlKdaRFVMahli8PBqqr6dWP49YZyFzZM01LgY6MkI2va/HAJE9mdjbPJ4l1 O6OY5PtH86ihMNCtjxy8vtv1OYFKwxAvzB/zUqLCq3LIdq3qjJ/3yD+fRk38eTGC fHR8tVUI6jx3YXVy0QQn+FV2ivf63KLr4Vx19ODPbLNFGCw+L9S316NFzKC7zXLl 8EPDm7cry4fVKSvEKXwZ+dMBSATo3y8WLUdpzOtK36hdekBWwUdbIkrZBFwSrwnc ree6PcVoHhQJ58nWMIeeGR8uZFH/LdrPyMY1im2k3SMon924NQ2s+r7Im5aNAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZya9OzHEt1uoKHP9avbP6yKZM/IwHwYDVR0j BBgwFoAUz6jVruL/1Rabhj6ED4Y6wCaRmmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zMDA4OTI5MTVCNEY3NjQ5NTIwN0M1NEI5QjIzQjE2MjlG NkZCQUQ4QTU2NTlFRTRGNUIwOUU5ODJCQTU0RTYzLzAvQ0ZBOEQ1QUVFMkZGRDUx NjlCODYzRTg0MEY4NjNBQzAyNjkxOUE2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRkE4RDVBRUUyRkZENTE2OUI4 NjNFODQwRjg2M0FDMDI2OTE5QTYxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzAwODkyOTE1QjRGNzY0OTUyMDdDNTRCOUIyM0IxNjI5RjZGQkFEOEE1 NjU5RUU0RjVCMDlFOTgyQkE1NEU2My8wL0NGQThENUFFRTJGRkQ1MTY5Qjg2M0U4 NDBGODYzQUMwMjY5MTlBNjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2E2Udgp+qyFH6ju8aDZsB9nlj I1oFwNu0oVfuRD11kSTWyzCL+R3esTiCsEztJNSzqkn7DJh6G0MhJXhH0EOmhpil I4ouv1zL02nwnbHhRl06Peduk+0v7PTKu2oRs6V31gsxUqXAEK8VRun8HmBCaqc4 CX5pDvLKzaZPnJTki0b5sGQXivOOu3bTLt6whuLGTikEJsVjz+9WhqfhUk/krYNQ dri1iGIzRUK7+X7zJzvB5SqvsKbx3IbY58M+2zlfD9wJBR/fNB6mJPeYcC70n8fr pKsAH9gNT+pNXtp/3vJeegKhd0iA9XAEFmHF/ddGQ3e5RT+EQBdHL0XDsEWH -----END CERTIFICATE-----Generated at Tue Jun 3 14:37:12 2025 by rpki-client