$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft File: B59FE64A7A5CEC130FFE578645806708FE6955A2.mft (raw, json) Hash identifier: F8mwQzdLYRhvwB85/72ewcn7eRVqEcuSSoCPaArz/NE= Subject key identifier: 28:90:E6:CF:53:A2:82:55:3D:3C:F8:73:6F:7B:F7:F9:77:25:F8:0C Authority key identifier: B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2 Certificate issuer: /CN=B59FE64A7A5CEC130FFE578645806708FE6955A2 Certificate serial: 5603F4F7F11F9D007A4D3885B33A418877A5BCC1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft Manifest number: CA Signing time: Sat 05 Apr 2025 02:18:06 +0000 Manifest this update: Sat 05 Apr 2025 02:13:06 +0000 Manifest next update: Thu 10 Apr 2025 02:32:06 +0000 Files and hashes: 1: 323830313a31303a363830303a3a2f34382d3438203d3e203631343638.roa (hash: mY0Zy1AlevZjofWzuweBdt9tjX7aEro1P/IuplDLVEQ=) 2: 3139322e3130302e3139382e302f32342d3234203d3e203631343638.roa (hash: IITUJlUk54b5Shyksw8Le3N38jLeorxJHrnosXbz8Go=) 3: 3139322e3130302e3139382e302f32342d3234203d3e20323731383231.roa (hash: MgoMIfqhLDh7SSOcnIhR0MO7l2xnNGQNLkOrbJZIxIo=) 4: B59FE64A7A5CEC130FFE578645806708FE6955A2.crl (hash: HC5Mvr9FJccGq84V80jfOJ7qM0aX07u4d3C7FRc1ZLA=) 5: 323830313a31303a363830303a3a2f34382d3438203d3e20323731383231.roa (hash: pfERmRW7pqKsXRH147dybdqeA8rQtA96IwMNwcwU4Sk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:03:f4:f7:f1:1f:9d:00:7a:4d:38:85:b3:3a:41:88:77:a5:bc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59FE64A7A5CEC130FFE578645806708FE6955A2 Validity Not Before: Apr 5 02:13:06 2025 GMT Not After : Apr 10 02:32:06 2025 GMT Subject: CN=2890E6CF53A282553D3CF8736F7BF7F97725F80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:ae:12:f4:e4:4d:1d:32:f4:fe:4c:c5:66: 51:00:7c:0e:b4:7f:1c:56:52:6d:16:00:a2:3d:97: 2c:0c:89:a3:c8:7c:89:4f:63:2d:18:d5:b0:85:de: d6:03:8d:94:03:11:f5:9b:49:a8:ae:27:80:c2:c3: 74:12:ad:14:1e:7e:c3:81:85:41:e8:d9:09:10:6a: 82:c4:49:5a:8d:17:a2:65:46:39:b8:d7:a4:d1:9b: 5f:84:d8:60:42:d5:e6:43:b5:01:c9:35:e9:92:b1: 9b:bf:41:fe:26:c1:72:2c:c7:25:41:42:35:ea:75: 2e:ca:ac:72:31:47:5a:59:62:c9:18:67:10:72:a7: 26:5d:f3:d6:59:c9:43:84:8a:7b:66:c4:70:8f:51: 84:32:44:bf:82:2e:c4:05:78:67:ee:98:58:ad:e2: 41:3c:f8:d4:c8:c3:2b:51:ff:81:17:f5:29:f2:21: bb:e8:0d:64:10:4c:65:5e:1e:b5:ea:23:ec:3f:bb: 72:22:4e:1c:87:97:e4:33:30:a7:79:54:55:75:bc: de:03:47:ec:19:ac:95:a7:99:43:ec:13:15:18:d5: e6:cb:48:37:8b:dc:93:a6:14:11:15:bb:b0:8a:c3: 1b:63:84:ee:0c:1c:98:3c:cf:b8:ca:98:fc:4e:d3: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:90:E6:CF:53:A2:82:55:3D:3C:F8:73:6F:7B:F7:F9:77:25:F8:0C X509v3 Authority Key Identifier: keyid:B5:9F:E6:4A:7A:5C:EC:13:0F:FE:57:86:45:80:67:08:FE:69:55:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/357A5225ADD25C2488DA098954E874F0FD5B282C6310858C3BF504A4FC6D219F/0/B59FE64A7A5CEC130FFE578645806708FE6955A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:98:50:15:bc:cd:ce:71:bc:0e:92:90:15:8f:cd:db:2e:7b: 6a:3e:8d:e5:4f:73:75:48:c0:42:4b:64:af:ec:a4:f8:5d:45: e8:e9:b0:32:97:70:f5:6f:93:b7:18:54:7a:0c:ba:ec:c3:24: d1:a4:68:62:80:0d:5f:24:b7:0d:50:c1:89:c4:d2:41:70:4a: 50:f8:3a:9d:b4:16:aa:62:9b:50:e1:34:ea:2e:b3:a3:04:41: 0c:fc:46:dc:a4:74:d6:48:b0:74:f6:0a:ca:46:12:f5:ce:35: df:9d:31:3b:f1:ae:8d:e5:6f:be:31:c1:d8:6f:87:d4:f7:34: ca:c5:8a:ed:35:f8:fd:c7:d9:40:52:83:e7:4c:8b:c4:57:22: eb:4b:16:49:8a:bb:74:88:52:e5:c6:0a:75:c7:fb:ef:44:b5: 7e:81:02:63:9d:68:3e:10:5f:2e:d6:1d:65:37:38:34:bc:ba: 9b:e9:5b:28:40:2f:e3:de:3d:49:c0:c6:d1:1e:97:0e:de:f0: ca:ec:cd:78:b5:7f:ef:5a:4d:b6:fc:28:5d:60:5d:1d:9f:17: fb:de:37:42:cd:0f:f1:df:53:ee:a7:fa:ab:36:73:b3:75:33: 89:0e:8d:d8:4c:7b:bd:e0:61:e4:dd:3b:f4:2d:be:49:32:2a: c6:77:c8:d9 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUVgP09/EfnQB6TTiFszpBiHelvMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5RkU2NEE3QTVDRUMxMzBGRkU1Nzg2NDU4MDY3MDhG RTY5NTVBMjAeFw0yNTA0MDUwMjEzMDZaFw0yNTA0MTAwMjMyMDZaMDMxMTAvBgNV BAMTKDI4OTBFNkNGNTNBMjgyNTUzRDNDRjg3MzZGN0JGN0Y5NzcyNUY4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sa4S9ORNHTL0/kzFZlEAfA60 fxxWUm0WAKI9lywMiaPIfIlPYy0Y1bCF3tYDjZQDEfWbSaiuJ4DCw3QSrRQefsOB hUHo2QkQaoLESVqNF6JlRjm416TRm1+E2GBC1eZDtQHJNemSsZu/Qf4mwXIsxyVB QjXqdS7KrHIxR1pZYskYZxBypyZd89ZZyUOEintmxHCPUYQyRL+CLsQFeGfumFit 4kE8+NTIwytR/4EX9SnyIbvoDWQQTGVeHrXqI+w/u3IiThyHl+QzMKd5VFV1vN4D R+wZrJWnmUPsExUY1ebLSDeL3JOmFBEVu7CKwxtjhO4MHJg8z7jKmPxO07RRAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUKJDmz1OiglU9PPhzb3v3+Xcl+AwwHwYDVR0j BBgwFoAUtZ/mSnpc7BMP/leGRYBnCP5pVaIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8zNTdBNTIyNUFERDI1QzI0ODhEQTA5ODk1NEU4NzRGMEZE NUIyODJDNjMxMDg1OEMzQkY1MDRBNEZDNkQyMTlGLzAvQjU5RkU2NEE3QTVDRUMx MzBGRkU1Nzg2NDU4MDY3MDhGRTY5NTVBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNTlGRTY0QTdBNUNFQzEzMEZG RTU3ODY0NTgwNjcwOEZFNjk1NUEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMzU3QTUyMjVBREQyNUMyNDg4REEwOTg5NTRFODc0RjBGRDVCMjgyQzYz MTA4NThDM0JGNTA0QTRGQzZEMjE5Ri8wL0I1OUZFNjRBN0E1Q0VDMTMwRkZFNTc4 NjQ1ODA2NzA4RkU2OTU1QTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3mFAVvM3OcbwOkpAVj83bLntq Po3lT3N1SMBCS2Sv7KT4XUXo6bAyl3D1b5O3GFR6DLrswyTRpGhigA1fJLcNUMGJ xNJBcEpQ+DqdtBaqYptQ4TTqLrOjBEEM/EbcpHTWSLB09grKRhL1zjXfnTE78a6N 5W++McHYb4fU9zTKxYrtNfj9x9lAUoPnTIvEVyLrSxZJirt0iFLlxgp1x/vvRLV+ gQJjnWg+EF8u1h1lNzg0vLqb6VsoQC/j3j1JwMbRHpcO3vDK7M14tX/vWk22/Chd YF0dnxf73jdCzQ/x31Pup/qrNnOzdTOJDo3YTHu94GHk3Tv0Lb5JMirGd8jZ -----END CERTIFICATE-----Generated at Sat Apr 5 17:32:44 2025 by rpki-client