$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.mft File: 57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.mft (raw, json) Hash identifier: gnGeK/E+3Mb+r/2W47O/Eyned/EFgWtJ+lVpHhYorCg= Subject key identifier: 8F:1D:47:08:87:11:16:E3:8B:CD:45:57:B5:1C:DA:DB:B5:01:B8:CB Authority key identifier: 57:AB:3F:8A:7A:E5:FB:EC:0C:D9:61:F5:B4:6D:18:66:BC:7A:76:0E Certificate issuer: /CN=57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E Certificate serial: 6F082AE87B871414336F525FF8A97A7C6CC46CB7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.mft Manifest number: D0 Signing time: Mon 21 Apr 2025 22:53:31 +0000 Manifest this update: Mon 21 Apr 2025 22:48:31 +0000 Manifest next update: Sat 26 Apr 2025 10:16:31 +0000 Files and hashes: 1: 34352e3138362e33312e302f32342d3234203d3e20323633383039.roa (hash: 39EYChVdGqJHxgOyxYwkb9rpQ5K+Q1c2llikAwpdpkM=) 2: 34352e3138362e32392e302f32342d3234203d3e20323633383039.roa (hash: DS10W3bgY9qAFM3af3uXfQoPe3OSzrmzNw/srI15nio=) 3: 34352e3138362e33302e302f32342d3234203d3e20323633383039.roa (hash: SBIIuzTIQtjyptYCFzQkvR8rQJt4shmJ166QL1OEd3Y=) 4: 57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.crl (hash: HobTVqZya8EgZd3QoRcbICpzAPU6J8o8dy7gM7klFy8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.crl rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 10:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:08:2a:e8:7b:87:14:14:33:6f:52:5f:f8:a9:7a:7c:6c:c4:6c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E Validity Not Before: Apr 21 22:48:31 2025 GMT Not After : Apr 26 10:16:31 2025 GMT Subject: CN=8F1D4708871116E38BCD4557B51CDADBB501B8CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:d7:91:f0:81:a9:ef:03:76:7d:bb:c1:8f: 3f:b3:14:13:4e:df:28:61:4f:2a:39:1f:b7:57:aa: 06:0b:9c:01:04:ee:9e:6c:45:0a:8f:b0:14:69:53: b8:e8:50:b0:35:02:aa:6e:e5:bf:d6:01:db:f4:bd: 02:a6:d2:76:1f:6a:76:02:27:6d:17:86:47:8f:5b: 4e:1f:2f:e7:c2:ff:b7:4b:23:b4:0e:45:03:c0:4c: a6:6c:a1:f3:76:e0:ca:d8:44:a7:18:78:41:36:66: 1c:27:8d:01:5a:94:2a:ad:41:4f:01:db:6e:c4:0d: d4:a0:fd:a6:36:83:b0:4d:66:e3:71:a3:59:36:dd: 0a:38:aa:d7:cf:cc:d8:a0:9a:36:b0:0d:71:a5:7c: e0:fc:e7:d6:29:60:97:07:20:41:90:2b:fa:47:3d: 06:c0:6d:22:5b:b7:1e:90:24:0e:ae:0e:8a:a1:18: 08:ed:0f:3e:8f:37:45:93:79:ac:16:0c:11:3f:ff: 65:37:04:1f:60:8a:29:10:fc:ec:6b:dd:6e:a2:e8: ec:2e:63:ad:0a:79:a0:a0:80:69:18:3a:1f:4f:65: a4:e3:e6:64:95:75:c2:af:7a:c4:b4:59:7b:3f:7e: 45:a3:7a:16:33:5b:4a:33:a5:1f:d6:5b:85:ce:38: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:47:08:87:11:16:E3:8B:CD:45:57:B5:1C:DA:DB:B5:01:B8:CB X509v3 Authority Key Identifier: keyid:57:AB:3F:8A:7A:E5:FB:EC:0C:D9:61:F5:B4:6D:18:66:BC:7A:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:92:f2:03:47:92:de:1e:a3:2a:75:78:08:e5:46:52:8d:b8: 9a:8d:0e:a2:2b:fb:25:af:ec:87:20:6d:56:3f:c1:5a:cd:73: 53:f3:90:c6:21:d7:7b:b0:72:3a:89:08:2f:42:e5:e1:42:37: 12:a9:d4:dd:73:45:0d:84:1c:0f:e0:bf:b3:6d:41:82:fd:d2: e9:fe:73:df:43:c1:47:4c:51:76:e9:f7:b4:43:d7:ec:26:22: 37:6a:de:c5:98:cb:28:b8:c8:ff:32:5f:c5:5e:a6:43:01:5e: 53:a5:c5:5c:a7:c6:15:f4:57:da:d0:24:bd:84:06:a4:bd:20: d2:b5:18:59:72:3f:c6:6c:e7:4f:1a:f3:5d:c1:18:83:1b:93: 07:7f:7f:d8:ce:f8:99:38:7d:c2:76:1d:f5:03:20:f0:d8:df: 17:c4:8f:33:5e:39:1b:93:50:c1:8a:79:5e:d9:a0:e9:75:eb: ba:88:2d:67:d5:98:0b:3b:55:fa:c6:23:44:2b:93:23:b8:ba: f6:ec:61:8a:ca:2a:af:c5:06:92:02:06:d6:a4:b3:00:ce:e0: a5:6d:f8:25:9f:1c:a1:61:f6:42:52:3f:a9:d4:c8:12:34:17: 47:2e:1e:0e:b8:a5:61:4b:d3:42:97:74:78:7a:6b:f8:52:aa: 19:88:c2:19 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbwgq6HuHFBQzb1Jf+Kl6fGzEbLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBQjNGOEE3QUU1RkJFQzBDRDk2MUY1QjQ2RDE4NjZC QzdBNzYwRTAeFw0yNTA0MjEyMjQ4MzFaFw0yNTA0MjYxMDE2MzFaMDMxMTAvBgNV BAMTKDhGMUQ0NzA4ODcxMTE2RTM4QkNENDU1N0I1MUNEQURCQjUwMUI4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/9eR8IGp7wN2fbvBjz+zFBNO 3yhhTyo5H7dXqgYLnAEE7p5sRQqPsBRpU7joULA1Aqpu5b/WAdv0vQKm0nYfanYC J20XhkePW04fL+fC/7dLI7QORQPATKZsofN24MrYRKcYeEE2ZhwnjQFalCqtQU8B 227EDdSg/aY2g7BNZuNxo1k23Qo4qtfPzNigmjawDXGlfOD859YpYJcHIEGQK/pH PQbAbSJbtx6QJA6uDoqhGAjtDz6PN0WTeawWDBE//2U3BB9giikQ/Oxr3W6i6Owu Y60KeaCggGkYOh9PZaTj5mSVdcKvesS0WXs/fkWjehYzW0ozpR/WW4XOOCv/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUjx1HCIcRFuOLzUVXtRza27UBuMswHwYDVR0j BBgwFoAUV6s/inrl++wM2WH1tG0YZrx6dg4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81QzA1RTM2QkI0N0JFNEJEQ0E4RkVFMDcwNTBCQzBGQkU3 MkY5RURBNEFCQTUyRkJEN0M5RjYwMEUyRURFREFBLzAvNTdBQjNGOEE3QUU1RkJF QzBDRDk2MUY1QjQ2RDE4NjZCQzdBNzYwRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81N0FCM0Y4QTdBRTVGQkVDMENE OTYxRjVCNDZEMTg2NkJDN0E3NjBFLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUMwNUUzNkJCNDdCRTRCRENBOEZFRTA3MDUwQkMwRkJFNzJGOUVEQTRB QkE1MkZCRDdDOUY2MDBFMkVERURBQS8wLzU3QUIzRjhBN0FFNUZCRUMwQ0Q5NjFG NUI0NkQxODY2QkM3QTc2MEUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8kvIDR5LeHqMqdXgI5UZSjbia jQ6iK/slr+yHIG1WP8FazXNT85DGIdd7sHI6iQgvQuXhQjcSqdTdc0UNhBwP4L+z bUGC/dLp/nPfQ8FHTFF26fe0Q9fsJiI3at7FmMsouMj/Ml/FXqZDAV5TpcVcp8YV 9Ffa0CS9hAakvSDStRhZcj/GbOdPGvNdwRiDG5MHf3/YzviZOH3Cdh31AyDw2N8X xI8zXjkbk1DBinle2aDpdeu6iC1n1ZgLO1X6xiNEK5MjuLr27GGKyiqvxQaSAgbW pLMAzuClbfglnxyhYfZCUj+p1MgSNBdHLh4OuKVhS9NCl3R4emv4UqoZiMIZ -----END CERTIFICATE-----Generated at Wed Apr 23 06:27:09 2025 by rpki-client