$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft File: 72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft (raw, json) Hash identifier: 31MgpCdSz8/CUfARygB7D+YANzqPSEc+noC1YBn7y/g= Subject key identifier: B2:81:EB:4D:24:56:23:EA:5F:54:FC:43:C9:12:97:FD:2A:09:92:40 Authority key identifier: 72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85 Certificate issuer: /CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585 Certificate serial: 0568E19273EA1081311E76A2198DE79E59C9B8EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft Manifest number: 1A Signing time: Mon 03 Feb 2025 13:57:32 +0000 Manifest this update: Mon 03 Feb 2025 13:52:32 +0000 Manifest next update: Sat 08 Feb 2025 19:39:32 +0000 Files and hashes: 1: 72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl (hash: dd6x6XNQ0Ujo6mf8vxJi3BtAvZe9gVFpJ8AxuUF4p2k=) 2: 323830333a343739303a3a2f33322d3438203d3e20323733303537.roa (hash: Kprp8xVzqV358lImenXYYz4rcfhAIKTSVRrHkzLfvXQ=) 3: 323830333a343739303a3a2f33322d3438203d3e2030.roa (hash: KxEWXH5e8t01PcGJfQtp85tCpLHkSv4NpXahXflpcr0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 08 Feb 2025 19:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:68:e1:92:73:ea:10:81:31:1e:76:a2:19:8d:e7:9e:59:c9:b8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585 Validity Not Before: Feb 3 13:52:32 2025 GMT Not After : Feb 8 19:39:32 2025 GMT Subject: CN=B281EB4D245623EA5F54FC43C91297FD2A099240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:cc:8a:6e:fb:0c:7c:98:ba:a3:cb:d1:36: 92:2c:3e:62:3c:9d:a2:21:82:3a:22:4f:20:55:d0: 61:72:16:92:5b:4e:ce:ae:ab:c2:e3:21:4d:65:ea: b1:3c:05:76:b8:5b:49:44:41:72:cd:69:4b:56:20: aa:e6:92:21:14:72:40:1b:bc:fe:7c:91:09:67:df: 54:74:d5:cd:b6:dd:46:13:29:a8:b6:5b:ab:86:fa: 25:e8:e7:46:6a:ea:37:79:47:27:2c:fe:46:bc:2d: 69:02:06:db:e1:a0:b6:a1:76:e9:4d:42:39:25:67: a8:df:d6:b3:b0:bd:7b:90:12:af:53:3b:fd:fb:c3: 33:bb:07:5d:48:06:e0:22:4f:74:f0:ba:77:98:6d: 40:2d:4a:9a:cc:4c:39:d9:7e:a0:5b:38:11:6e:19: e7:96:1d:fb:1d:e8:86:19:20:f6:f0:68:09:0a:66: fd:63:a1:4f:60:df:79:b7:18:13:eb:61:43:f3:3b: 55:5d:d7:65:8c:85:d7:5f:35:c1:c8:db:66:4c:09: 5a:96:20:ff:a5:3d:d2:fb:38:e7:8a:53:32:ff:a4: a0:e7:b5:ef:85:fe:d2:27:65:de:9b:2d:0d:be:ab: 9e:39:f2:45:b6:17:8f:ea:0c:c9:11:a4:7f:bc:39: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:81:EB:4D:24:56:23:EA:5F:54:FC:43:C9:12:97:FD:2A:09:92:40 X509v3 Authority Key Identifier: keyid:72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e2:b0:a5:1c:3a:97:44:61:fa:43:3c:b0:fa:0a:8b:5a:c9: fd:20:db:a1:d0:e7:00:4a:5e:a3:b5:6d:f3:d2:e2:f6:e5:58: 78:17:7e:a3:4f:80:a5:f3:a7:34:18:76:48:b9:49:06:68:9b: 21:f3:a1:1c:5c:5e:f3:ee:9d:58:35:bd:53:f6:cf:00:8a:51: c5:74:45:88:2f:1e:7e:f8:fa:b0:40:85:14:d3:8f:20:0a:6d: c1:91:9e:e7:1f:a3:b8:4b:80:f8:fe:50:2f:f8:f9:0b:cd:d8: c8:e7:d3:da:b2:2c:12:c2:f8:28:a3:9e:18:ed:7a:18:c7:f5: e5:2e:bf:35:46:a8:ff:11:e4:65:79:57:67:c2:33:a3:53:a3: 18:1b:7d:1d:cc:f5:12:ce:12:18:a7:52:67:2f:dd:f4:2e:df: 6e:f0:91:36:ac:92:df:b9:ff:34:d4:3f:8f:4a:fc:2a:62:d5: b4:e4:5b:d8:e6:86:e3:7d:0e:ff:ee:bf:dc:9d:75:8d:a7:00: 98:1d:68:34:d8:28:21:7a:31:aa:c8:6e:59:76:a2:5d:70:0b: 4b:30:f9:13:b0:ec:6d:8a:78:cf:b1:8a:fc:fe:4d:6c:9f:cb: b3:7b:22:01:54:f5:c3:ee:61:d1:0d:0d:03:66:a8:c6:c5:20: 44:32:3f:ac -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUBWjhknPqEIExHnaiGY3nnlnJuO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNTNCQTZFMEJFRjgwMDc2RDlBMTZGNjZEQTkyNzk2 NUJDNTU4NTAeFw0yNTAyMDMxMzUyMzJaFw0yNTAyMDgxOTM5MzJaMDMxMTAvBgNV BAMTKEIyODFFQjREMjQ1NjIzRUE1RjU0RkM0M0M5MTI5N0ZEMkEwOTkyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdocyKbvsMfJi6o8vRNpIsPmI8 naIhgjoiTyBV0GFyFpJbTs6uq8LjIU1l6rE8BXa4W0lEQXLNaUtWIKrmkiEUckAb vP58kQln31R01c223UYTKai2W6uG+iXo50Zq6jd5Rycs/ka8LWkCBtvhoLahdulN QjklZ6jf1rOwvXuQEq9TO/37wzO7B11IBuAiT3TwuneYbUAtSprMTDnZfqBbOBFu GeeWHfsd6IYZIPbwaAkKZv1joU9g33m3GBPrYUPzO1Vd12WMhddfNcHI22ZMCVqW IP+lPdL7OOeKUzL/pKDnte+F/tInZd6bLQ2+q5458kW2F4/qDMkRpH+8OYqxAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUsoHrTSRWI+pfVPxDyRKX/SoJkkAwHwYDVR0j BBgwFoAUcrU7puC++AB22aFvZtqSeWW8VYUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81MjA4RUE0RThGMDE5QjhBNTVFN0I1RDNCNTY3NUZCNUMw QjA3MDQ0MERFRDJDNUU5Rjc0Q0I0OUY5NzlENDhGLzAvNzJCNTNCQTZFMEJFRjgw MDc2RDlBMTZGNjZEQTkyNzk2NUJDNTU4NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MkI1M0JBNkUwQkVGODAwNzZE OUExNkY2NkRBOTI3OTY1QkM1NTg1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTIwOEVBNEU4RjAxOUI4QTU1RTdCNUQzQjU2NzVGQjVDMEIwNzA0NDBE RUQyQzVFOUY3NENCNDlGOTc5RDQ4Ri8wLzcyQjUzQkE2RTBCRUY4MDA3NkQ5QTE2 RjY2REE5Mjc5NjVCQzU1ODUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK4rClHDqXRGH6Qzyw+gqLWsn9 INuh0OcASl6jtW3z0uL25Vh4F36jT4Cl86c0GHZIuUkGaJsh86EcXF7z7p1YNb1T 9s8AilHFdEWILx5++PqwQIUU048gCm3BkZ7nH6O4S4D4/lAv+PkLzdjI59PasiwS wvgoo54Y7XoYx/XlLr81Rqj/EeRleVdnwjOjU6MYG30dzPUSzhIYp1JnL930Lt9u 8JE2rJLfuf801D+PSvwqYtW05FvY5objfQ7/7r/cnXWNpwCYHWg02CghejGqyG5Z dqJdcAtLMPkTsOxtinjPsYr8/k1sn8uzeyIBVPXD7mHRDQ0DZqjGxSBEMj+s -----END CERTIFICATE-----Generated at Wed Feb 5 08:42:09 2025 by rpki-client