$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft File: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft (raw, json) Hash identifier: kGNsdG78OhG8csJAtw//+F9m5pzIikmh0Aw4pEx2AGg= Subject key identifier: 5F:E8:0F:1D:0F:31:54:1E:E2:65:96:A2:AC:51:29:43:62:A9:B1:2D Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Certificate serial: 7766EE5FD1269583BACD5F32B91A6D8A7537D702 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft Manifest number: CD Signing time: Tue 15 Apr 2025 12:11:44 +0000 Manifest this update: Tue 15 Apr 2025 12:06:44 +0000 Manifest next update: Sun 20 Apr 2025 21:24:44 +0000 Files and hashes: 1: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl (hash: qaWqJiyxZAjKb/PJglsMJzT1lSkNZho2XvfFvZbYU/U=) 2: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (hash: mLPmwLCgJH7/6VKEK4Pcz7wxnHkCNUH5wI8HmFmJB1E=) 3: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (hash: lHM7TXuZJiuk5ar5OftYzmGGnYQusx4CcGk57kh5X5g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 20 Apr 2025 21:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:66:ee:5f:d1:26:95:83:ba:cd:5f:32:b9:1a:6d:8a:75:37:d7:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Validity Not Before: Apr 15 12:06:44 2025 GMT Not After : Apr 20 21:24:44 2025 GMT Subject: CN=5FE80F1D0F31541EE26596A2AC51294362A9B12D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:7d:67:1d:89:18:f2:de:2d:45:e6:87:58: 13:d0:39:53:b8:f1:50:36:29:63:0b:3e:a8:c0:88: 2e:5e:ac:67:34:31:88:55:a0:05:e7:bc:01:69:10: db:ec:de:38:88:f0:1a:5c:8f:f0:46:a1:24:55:46: a9:9a:a4:c9:88:11:a0:52:fc:43:00:3a:79:51:dd: 11:09:31:f5:fd:79:9d:47:6c:11:24:d2:89:f6:92: cd:45:f8:52:46:96:ee:e0:0b:51:5f:72:df:c0:41: fd:3a:56:3e:bd:68:d9:76:e9:66:ac:3a:e9:12:25: 6a:8b:33:30:d6:b3:ec:4c:56:3a:a0:90:c8:9c:62: 6d:97:f9:5a:ba:76:9b:85:08:65:3d:65:57:b1:a2: 06:9d:cd:0b:4a:59:69:12:c7:b4:2d:6b:c7:35:8b: 23:b5:60:6d:74:f3:a0:41:a7:f6:b9:ad:c9:e9:e7: d3:54:8b:40:e8:48:58:0d:ed:75:e2:68:af:df:9e: f3:6e:f9:6d:b1:60:69:42:e4:38:bd:66:04:58:dd: dd:43:4b:64:15:27:d7:83:09:b9:09:19:2b:a5:68: 45:58:b1:41:ee:f6:ff:75:f0:c6:d8:d1:d8:42:36: 1f:12:bd:1c:86:39:4d:0a:93:b4:b6:2b:c7:ed:3f: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E8:0F:1D:0F:31:54:1E:E2:65:96:A2:AC:51:29:43:62:A9:B1:2D X509v3 Authority Key Identifier: keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f4:92:8a:6c:7f:6e:64:79:30:1d:d7:9a:6a:b9:73:80:52: f8:67:19:a7:d8:08:56:59:d3:d4:3e:3f:e0:5f:75:a9:15:32: 36:e8:14:5b:03:47:2a:00:26:19:c3:c1:39:a0:33:7c:8f:87: d7:18:52:ef:4a:45:6c:7c:c3:bd:d6:4a:ad:0d:60:3c:6b:2a: 68:03:5b:95:8b:7e:c8:ae:48:5d:6c:a1:ca:4c:b4:59:8d:9e: f2:5e:77:2c:07:6e:94:35:cb:ee:53:e9:15:5d:0b:a9:34:dd: 3b:bc:fe:f1:77:7d:43:61:27:fa:89:28:16:f8:bc:7c:84:a0: 33:9d:07:4b:bd:4d:ee:53:ef:53:0b:a9:49:03:08:ab:00:be: ed:12:0e:40:2d:37:ff:b6:23:38:1a:63:24:1b:ae:e3:d2:6b: 15:88:d5:31:fe:8a:66:84:16:92:b5:6b:91:ff:b2:d5:2f:07: db:6d:19:0e:e7:bd:8f:83:67:da:53:d8:47:aa:05:8e:48:1f: de:d8:2d:08:8a:37:75:bb:07:ad:71:19:f2:a9:bb:51:6b:da: 74:2d:8c:fe:89:f3:10:7b:2c:5d:c6:75:02:dc:59:5f:25:48: ae:46:32:8f:5a:05:0a:65:5f:c1:6f:9c:ac:2f:fc:5c:2d:bc: 46:3e:bf:91 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUd2buX9EmlYO6zV8yuRptinU31wIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEQzMwNjhBOUFFNzgzODRFNUE0RjRGNTI0NEJBRTQw ODgwNTlFNTAeFw0yNTA0MTUxMjA2NDRaFw0yNTA0MjAyMTI0NDRaMDMxMTAvBgNV BAMTKDVGRTgwRjFEMEYzMTU0MUVFMjY1OTZBMkFDNTEyOTQzNjJBOUIxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRn1nHYkY8t4tReaHWBPQOVO4 8VA2KWMLPqjAiC5erGc0MYhVoAXnvAFpENvs3jiI8Bpcj/BGoSRVRqmapMmIEaBS /EMAOnlR3REJMfX9eZ1HbBEk0on2ks1F+FJGlu7gC1Ffct/AQf06Vj69aNl26Was OukSJWqLMzDWs+xMVjqgkMicYm2X+Vq6dpuFCGU9ZVexogadzQtKWWkSx7Qta8c1 iyO1YG1086BBp/a5rcnp59NUi0DoSFgN7XXiaK/fnvNu+W2xYGlC5Di9ZgRY3d1D S2QVJ9eDCbkJGSulaEVYsUHu9v918MbY0dhCNh8SvRyGOU0Kk7S2K8ftP1olAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUX+gPHQ8xVB7iZZairFEpQ2KpsS0wHwYDVR0j BBgwFoAUu9wwaKmueDhOWk9PUkS65AiAWeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDIzMzIwQzgwNUQ4QkVFRkM0MjQyQzU2NzFEODQ0NTY3 NjNBRERGQURFRTA0RTQyQTFBMUQ0NERDRkJEMkEzLzAvQkJEQzMwNjhBOUFFNzgz ODRFNUE0RjRGNTI0NEJBRTQwODgwNTlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkRDMzA2OEE5QUU3ODM4NEU1 QTRGNEY1MjQ0QkFFNDA4ODA1OUU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQyMzMyMEM4MDVEOEJFRUZDNDI0MkM1NjcxRDg0NDU2NzYzQURERkFE RUUwNEU0MkExQTFENDREQ0ZCRDJBMy8wL0JCREMzMDY4QTlBRTc4Mzg0RTVBNEY0 RjUyNDRCQUU0MDg4MDU5RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBH9JKKbH9uZHkwHdeaarlzgFL4 Zxmn2AhWWdPUPj/gX3WpFTI26BRbA0cqACYZw8E5oDN8j4fXGFLvSkVsfMO91kqt DWA8aypoA1uVi37IrkhdbKHKTLRZjZ7yXncsB26UNcvuU+kVXQupNN07vP7xd31D YSf6iSgW+Lx8hKAznQdLvU3uU+9TC6lJAwirAL7tEg5ALTf/tiM4GmMkG67j0msV iNUx/opmhBaStWuR/7LVLwfbbRkO572Pg2faU9hHqgWOSB/e2C0Iijd1uwetcRny qbtRa9p0LYz+ifMQeyxdxnUC3FlfJUiuRjKPWgUKZV/Bb5ysL/xcLbxGPr+R -----END CERTIFICATE-----Generated at Thu Apr 17 03:56:00 2025 by rpki-client