$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.mft File: A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.mft (raw, json) Hash identifier: CmsuKqpqevyEL9sp4Q677z59zBDjKRupAyitUmjOPHQ= Subject key identifier: 9F:33:3E:6A:AC:B2:0E:EA:5B:3D:D7:FF:A9:00:A5:4D:1F:F3:4D:42 Authority key identifier: A9:7E:9F:94:EB:F4:79:C6:8B:3A:57:81:73:FF:C7:C4:36:AD:1F:1B Certificate issuer: /CN=A97E9F94EBF479C68B3A578173FFC7C436AD1F1B Certificate serial: 2A5770C6D2DBF7D6F83C892AE802B6B54834FD44 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.mft Manifest number: 34 Signing time: Tue 03 Jun 2025 22:01:21 +0000 Manifest this update: Tue 03 Jun 2025 21:56:21 +0000 Manifest next update: Sun 08 Jun 2025 06:49:21 +0000 Files and hashes: 1: 323830333a383335303a3a2f33322d3332203d3e2033333536.roa (hash: 9/o1lRS2AZrlsfiZ5e0f4SzOnQf1ryMXSQJCXq549G0=) 2: 323830333a383335303a3a2f33322d3332203d3e20323733383832.roa (hash: UYA6HLA9wSt3HRpTpBxuI/fhQRJjiPmCQVQ+akaHeMI=) 3: A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl (hash: 4ll1hMa+V/QRY43H7YXvAcmTuLkGvEXhCxLcE81fNn0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:57:70:c6:d2:db:f7:d6:f8:3c:89:2a:e8:02:b6:b5:48:34:fd:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A97E9F94EBF479C68B3A578173FFC7C436AD1F1B Validity Not Before: Jun 3 21:56:21 2025 GMT Not After : Jun 8 06:49:21 2025 GMT Subject: CN=9F333E6AACB20EEA5B3DD7FFA900A54D1FF34D42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:47:6c:65:c1:39:6e:3f:8d:f4:24:55:5d:35: f6:59:be:39:7d:66:4a:35:2a:48:d1:97:e5:4f:27: fb:2c:09:34:68:0f:50:37:26:3d:6e:32:d0:0c:5c: 0e:85:d7:e8:74:f4:18:40:d4:72:49:89:6c:30:b1: 2d:74:43:06:bc:cb:38:d4:24:05:9d:be:3a:e5:3f: 7e:dd:18:bd:34:4e:6b:bf:f4:18:c4:db:81:10:60: 67:ca:4f:a8:3b:38:20:13:3a:37:d4:cc:71:d4:b5: 21:61:f9:05:3c:a6:f8:5f:a3:22:cf:4d:5a:c7:b4: 8e:c1:47:1e:d0:52:ef:e6:00:8b:29:0f:f2:79:57: da:17:6b:da:46:57:3c:4c:73:5e:11:74:93:0a:22: 97:dd:66:42:bd:63:43:2a:61:6c:4d:26:92:21:f0: 17:8a:02:c0:ed:56:85:16:fb:87:c9:57:f7:7a:09: 5e:66:00:33:37:e6:aa:e8:76:ae:73:1d:5f:94:74: ee:09:ab:83:26:6e:d7:04:ff:63:df:9f:14:2c:19: 04:35:94:44:94:05:a8:e7:f2:9d:f8:cb:3a:c0:b9: 6f:52:e2:5a:bb:8d:f0:3b:81:f9:2c:32:93:d7:21: 89:3e:f9:18:53:71:7d:5c:42:89:cb:68:8e:9c:2a: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:33:3E:6A:AC:B2:0E:EA:5B:3D:D7:FF:A9:00:A5:4D:1F:F3:4D:42 X509v3 Authority Key Identifier: keyid:A9:7E:9F:94:EB:F4:79:C6:8B:3A:57:81:73:FF:C7:C4:36:AD:1F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53B9153FFCAEB4CF2A7968E8D6F7FB7CA0B3038EDB131F741D6686B5E2A35DA8/0/A97E9F94EBF479C68B3A578173FFC7C436AD1F1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d3:7b:b8:1b:ea:09:99:83:10:da:3a:3a:98:28:08:a8:66: 19:86:1f:55:87:54:4a:d3:cd:11:26:57:6f:01:9d:7a:2a:74: a2:50:3e:cc:9a:38:67:e5:d0:74:18:73:85:08:b5:85:af:21: 65:9c:3d:19:d2:ff:87:78:20:0f:54:77:8e:c2:59:58:77:cb: cf:56:59:c6:2b:24:49:9a:93:08:24:2f:fa:03:62:ee:48:d3: 27:6d:e8:36:5a:0a:c3:ed:9a:40:b8:98:12:ff:74:c3:f7:d1: f8:3a:aa:0b:5d:04:74:40:ed:21:45:c0:3c:28:43:88:d3:74: 0b:08:b6:45:6d:cd:50:03:85:df:45:39:97:3e:47:ce:79:e3: 46:c6:e6:a7:f1:33:7e:36:b7:fe:36:d8:f5:67:d5:09:eb:d5: e4:c8:5b:68:e0:bb:77:fe:5f:64:c9:1c:28:94:37:46:63:20: b6:5d:b4:42:63:37:6e:14:07:c7:b3:83:c4:02:8e:f1:d8:2d: 76:97:5f:e9:2d:38:3a:8c:7d:b9:15:d1:97:74:dc:db:dc:89: 3a:fd:42:30:a9:92:13:7d:ad:97:ff:ce:47:d3:44:10:fc:40: ca:66:79:de:cc:85:d5:31:15:94:c5:6d:bd:22:fe:c8:2d:b2: f7:32:51:5c -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUKldwxtLb99b4PIkq6AK2tUg0/UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk3RTlGOTRFQkY0NzlDNjhCM0E1NzgxNzNGRkM3QzQz NkFEMUYxQjAeFw0yNTA2MDMyMTU2MjFaFw0yNTA2MDgwNjQ5MjFaMDMxMTAvBgNV BAMTKDlGMzMzRTZBQUNCMjBFRUE1QjNERDdGRkE5MDBBNTREMUZGMzRENDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLR2xlwTluP430JFVdNfZZvjl9 Zko1KkjRl+VPJ/ssCTRoD1A3Jj1uMtAMXA6F1+h09BhA1HJJiWwwsS10Qwa8yzjU JAWdvjrlP37dGL00Tmu/9BjE24EQYGfKT6g7OCATOjfUzHHUtSFh+QU8pvhfoyLP TVrHtI7BRx7QUu/mAIspD/J5V9oXa9pGVzxMc14RdJMKIpfdZkK9Y0MqYWxNJpIh 8BeKAsDtVoUW+4fJV/d6CV5mADM35qrodq5zHV+UdO4Jq4MmbtcE/2PfnxQsGQQ1 lESUBajn8p34yzrAuW9S4lq7jfA7gfksMpPXIYk++RhTcX1cQonLaI6cKtPXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUnzM+aqyyDupbPdf/qQClTR/zTUIwHwYDVR0j BBgwFoAUqX6flOv0ecaLOleBc//HxDatHxswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81M0I5MTUzRkZDQUVCNENGMkE3OTY4RThENkY3RkI3Q0Ew QjMwMzhFREIxMzFGNzQxRDY2ODZCNUUyQTM1REE4LzAvQTk3RTlGOTRFQkY0NzlD NjhCM0E1NzgxNzNGRkM3QzQzNkFEMUYxQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOTdFOUY5NEVCRjQ3OUM2OEIz QTU3ODE3M0ZGQzdDNDM2QUQxRjFCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNTNCOTE1M0ZGQ0FFQjRDRjJBNzk2OEU4RDZGN0ZCN0NBMEIzMDM4RURC MTMxRjc0MUQ2Njg2QjVFMkEzNURBOC8wL0E5N0U5Rjk0RUJGNDc5QzY4QjNBNTc4 MTczRkZDN0M0MzZBRDFGMUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl03u4G+oJmYMQ2jo6mCgIqGYZ hh9Vh1RK080RJldvAZ16KnSiUD7Mmjhn5dB0GHOFCLWFryFlnD0Z0v+HeCAPVHeO wllYd8vPVlnGKyRJmpMIJC/6A2LuSNMnbeg2WgrD7ZpAuJgS/3TD99H4OqoLXQR0 QO0hRcA8KEOI03QLCLZFbc1QA4XfRTmXPkfOeeNGxuan8TN+Nrf+Ntj1Z9UJ69Xk yFto4Lt3/l9kyRwolDdGYyC2XbRCYzduFAfHs4PEAo7x2C12l1/pLTg6jH25FdGX dNzb3Ik6/UIwqZITfa2X/85H00QQ/EDKZnnezIXVMRWUxW29Iv7ILbL3MlFc -----END CERTIFICATE-----Generated at Wed Jun 4 12:33:46 2025 by rpki-client