$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.mft File: 4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.mft (raw, json) Hash identifier: MN7GPooFUWr13Fjbgi92hjSYOjUbOiWZ/FhmXnYUK4Q= Subject key identifier: BC:C9:EA:29:9E:18:16:ED:EB:62:EF:0A:05:3F:09:E0:10:99:10:0C Authority key identifier: 4C:37:F0:9F:A8:BF:8F:7F:D2:6F:DB:DD:D9:AB:EF:89:31:F1:5B:0C Certificate issuer: /CN=4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C Certificate serial: 39608B0065AA98BD0C170624C2B1D4D8EC0D2D72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.mft Manifest number: E7 Signing time: Mon 02 Jun 2025 05:22:07 +0000 Manifest this update: Mon 02 Jun 2025 05:17:07 +0000 Manifest next update: Sun 08 Jun 2025 01:42:07 +0000 Files and hashes: 1: 4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.crl (hash: GT/7cAR6Fm+RYdAS8WHXOCW6WHjvnknWBg8Kx2IeD60=) 2: 3230302e302e32342e302f32322d3232203d3e203237373235.roa (hash: mCEfIfONyLgDBohYZL13GTY9ikzGSiFuGro/y503V/4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.crl rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 01:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:60:8b:00:65:aa:98:bd:0c:17:06:24:c2:b1:d4:d8:ec:0d:2d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C Validity Not Before: Jun 2 05:17:07 2025 GMT Not After : Jun 8 01:42:07 2025 GMT Subject: CN=BCC9EA299E1816EDEB62EF0A053F09E01099100C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2a:44:75:56:b4:4d:e0:dd:2e:f4:ba:c8:54: 10:c7:af:17:a0:e2:9f:b7:2c:ee:ac:ee:e1:9b:31: aa:73:92:09:a6:7e:9e:53:5e:67:40:50:86:7a:e8: d4:e1:4e:a9:8e:c3:22:df:90:3b:33:b8:bc:06:0c: 39:39:fe:7f:ad:08:bf:f5:09:42:21:fe:f1:09:8a: d2:a0:85:af:93:cf:ae:e2:8f:c6:04:74:14:81:4c: 91:51:2e:8f:98:d3:31:8a:2a:f1:9a:eb:5b:2b:0a: 52:91:4f:c8:33:b7:3e:53:7d:3e:32:df:a5:05:91: b9:c1:27:fe:1f:41:59:26:c6:e0:b7:6f:4f:35:1e: 57:5b:23:91:fe:86:6d:fa:f8:db:2c:73:a8:c0:a9: cd:81:3e:7b:27:23:73:31:fc:ff:d4:20:26:b8:49: e6:21:e6:9b:fc:79:a7:5d:15:97:84:b4:20:0f:0b: da:b1:06:0f:f3:c3:b2:29:1b:41:da:c3:ad:4d:0d: 44:fe:b0:c0:74:76:c7:0b:d6:27:0e:10:e9:b2:86: e7:31:7a:c1:a9:f7:95:d4:57:3f:94:e5:bd:bb:02: fb:1a:dd:e1:51:77:27:2e:ed:52:35:c7:70:a4:8d: b2:39:8a:f4:5c:2b:4b:80:9f:37:59:26:17:bf:49: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C9:EA:29:9E:18:16:ED:EB:62:EF:0A:05:3F:09:E0:10:99:10:0C X509v3 Authority Key Identifier: keyid:4C:37:F0:9F:A8:BF:8F:7F:D2:6F:DB:DD:D9:AB:EF:89:31:F1:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/459165A8D5EE5A52C2A85AAFE14F1D8FF39A3C3A2A9B461B0C499224877EA89B/0/4C37F09FA8BF8F7FD26FDBDDD9ABEF8931F15B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:af:6c:65:13:cc:de:26:85:bc:f2:ed:23:59:be:61:27:2b: a3:60:ac:df:20:3f:da:9e:95:65:ca:5c:cc:4f:9a:01:8e:15: cd:55:8a:c9:e3:ae:63:b3:06:12:c9:36:6e:5c:5d:cc:fc:99: 48:27:94:70:9e:bc:32:b9:8d:46:a5:d6:35:94:57:e1:f7:5a: 40:76:05:21:b6:e9:20:b6:24:c8:36:61:2b:59:c4:a0:55:56: 2a:c2:5e:d2:72:ec:5f:90:2c:ae:a3:aa:03:66:45:5e:a2:bd: 5b:e0:7d:42:45:d9:39:10:fd:64:74:06:41:61:e8:9f:11:3b: bf:3a:5f:bc:0e:51:c8:fc:d8:54:b7:08:43:79:da:e5:9a:d0: c8:3b:ba:1b:70:00:5a:78:0f:01:e6:bf:63:c7:a9:9e:05:f8: 3d:7c:1d:71:e6:0c:88:3f:6c:9a:2a:23:2e:ff:3b:22:02:72: a6:88:3a:82:44:4f:87:cf:00:b8:a8:8b:f0:51:34:fe:ab:c3: 80:cb:bb:47:58:c0:91:5d:a4:90:3e:fd:c8:6f:78:d3:a9:d0: c6:7a:a5:05:89:b0:d9:b6:5a:da:82:ed:3f:6d:11:ce:e0:15: 60:7c:ff:6f:25:64:aa:c0:14:64:de:b1:c3:00:5e:ba:f2:2b: 77:55:55:68 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOWCLAGWqmL0MFwYkwrHU2OwNLXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzN0YwOUZBOEJGOEY3RkQyNkZEQkRERDlBQkVGODkz MUYxNUIwQzAeFw0yNTA2MDIwNTE3MDdaFw0yNTA2MDgwMTQyMDdaMDMxMTAvBgNV BAMTKEJDQzlFQTI5OUUxODE2RURFQjYyRUYwQTA1M0YwOUUwMTA5OTEwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIKkR1VrRN4N0u9LrIVBDHrxeg 4p+3LO6s7uGbMapzkgmmfp5TXmdAUIZ66NThTqmOwyLfkDszuLwGDDk5/n+tCL/1 CUIh/vEJitKgha+Tz67ij8YEdBSBTJFRLo+Y0zGKKvGa61srClKRT8gztz5TfT4y 36UFkbnBJ/4fQVkmxuC3b081HldbI5H+hm36+Nssc6jAqc2BPnsnI3Mx/P/UICa4 SeYh5pv8eaddFZeEtCAPC9qxBg/zw7IpG0Haw61NDUT+sMB0dscL1icOEOmyhucx esGp95XUVz+U5b27Avsa3eFRdycu7VI1x3CkjbI5ivRcK0uAnzdZJhe/STl5AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUvMnqKZ4YFu3rYu8KBT8J4BCZEAwwHwYDVR0j BBgwFoAUTDfwn6i/j3/Sb9vd2avviTHxWwwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NTkxNjVBOEQ1RUU1QTUyQzJBODVBQUZFMTRGMUQ4RkYz OUEzQzNBMkE5QjQ2MUIwQzQ5OTIyNDg3N0VBODlCLzAvNEMzN0YwOUZBOEJGOEY3 RkQyNkZEQkRERDlBQkVGODkzMUYxNUIwQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QzM3RjA5RkE4QkY4RjdGRDI2 RkRCREREOUFCRUY4OTMxRjE1QjBDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDU5MTY1QThENUVFNUE1MkMyQTg1QUFGRTE0RjFEOEZGMzlBM0MzQTJB OUI0NjFCMEM0OTkyMjQ4NzdFQTg5Qi8wLzRDMzdGMDlGQThCRjhGN0ZEMjZGREJE REQ5QUJFRjg5MzFGMTVCMEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAor2xlE8zeJoW88u0jWb5hJyuj YKzfID/anpVlylzMT5oBjhXNVYrJ465jswYSyTZuXF3M/JlIJ5RwnrwyuY1GpdY1 lFfh91pAdgUhtukgtiTINmErWcSgVVYqwl7ScuxfkCyuo6oDZkVeor1b4H1CRdk5 EP1kdAZBYeifETu/Ol+8DlHI/NhUtwhDedrlmtDIO7obcABaeA8B5r9jx6meBfg9 fB1x5gyIP2yaKiMu/zsiAnKmiDqCRE+HzwC4qIvwUTT+q8OAy7tHWMCRXaSQPv3I b3jTqdDGeqUFibDZtlragu0/bRHO4BVgfP9vJWSqwBRk3rHDAF668it3VVVo -----END CERTIFICATE-----Generated at Wed Jun 4 12:32:45 2025 by rpki-client