$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft File: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft (raw, json) Hash identifier: qfEGlf5XoHBlr7j2+KZfvh3tuVjXRDExcv9WorOaxn4= Subject key identifier: 70:B5:BA:CD:D9:9B:2C:33:36:D0:6A:C3:E5:79:0E:4B:A0:3E:9E:83 Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 Certificate issuer: /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Certificate serial: 0821B25349241A4B488FA5E55233A79AB2104062 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft Manifest number: DF Signing time: Mon 02 Jun 2025 07:58:48 +0000 Manifest this update: Mon 02 Jun 2025 07:53:48 +0000 Manifest next update: Sat 07 Jun 2025 17:08:48 +0000 Files and hashes: 1: 34352e3232392e34342e302f32322d3234203d3e20323636363837.roa (hash: NXCrnc5k/R7cRXtnojYKX0tyR9Gzw9zx/b4X8zIv+Lk=) 2: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl (hash: 3wSeXA1dAU64ppyEx/5UsZsXPkCEBPNHrjBJlLjDzRE=) 3: 323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (hash: RFp/7paxrjEnmz7NX5siL1qxhM8AW6ttH3PE4IdU9z0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 17:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:21:b2:53:49:24:1a:4b:48:8f:a5:e5:52:33:a7:9a:b2:10:40:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Validity Not Before: Jun 2 07:53:48 2025 GMT Not After : Jun 7 17:08:48 2025 GMT Subject: CN=70B5BACDD99B2C3336D06AC3E5790E4BA03E9E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:ca:d5:ed:eb:8d:f5:50:02:05:73:b7:6b: 65:b9:e1:bc:7b:4c:01:fe:86:d6:91:f7:b8:50:2e: bd:73:22:33:f2:d6:af:df:66:22:68:e9:52:20:68: a4:58:aa:88:7b:c6:80:00:aa:19:9f:a5:42:6c:d6: 91:af:78:8a:cc:5b:27:a4:a1:27:95:2f:99:1d:f8: af:f5:1b:bc:32:f3:f3:ed:58:6f:39:f9:ab:cf:e1: c0:69:cd:35:87:70:59:a6:95:98:aa:2c:24:b4:25: f8:0d:3e:d0:bf:e4:f3:6b:9f:7b:c6:94:08:31:3b: 31:0f:b4:e7:0f:c8:ea:cb:be:a4:da:9e:2a:a0:2d: 44:f7:08:24:84:d7:91:93:c5:72:04:70:77:ed:6b: de:e5:27:6a:dc:10:5b:a3:18:72:90:9b:b5:98:e0: 21:6f:1f:88:12:dc:00:3c:a0:f3:d0:56:b9:48:a4: 39:77:0f:d6:0d:11:cc:10:e8:4d:27:e5:c9:a2:59: 4a:0f:12:8d:d4:9b:b7:dc:8d:f5:67:9b:b6:2e:7f: b9:5b:2b:07:ab:f2:11:2f:99:98:e4:75:46:1e:42: 5d:a5:9d:81:8b:fc:0d:8d:96:d4:c0:08:f7:8e:42: 05:7b:a3:0a:8b:76:3f:0c:d7:4f:c3:23:e4:0c:3f: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B5:BA:CD:D9:9B:2C:33:36:D0:6A:C3:E5:79:0E:4B:A0:3E:9E:83 X509v3 Authority Key Identifier: keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:15:20:fe:f2:0d:80:39:54:f3:34:c3:59:4f:01:8f:9b:0f: 48:0c:12:73:3f:7e:c9:01:7d:f6:57:1c:75:44:d4:19:4b:90: 57:01:20:bb:88:8c:f4:56:7e:d6:92:be:f7:78:b4:d3:59:e7: 7f:5c:8c:01:28:1f:8a:5a:24:59:9f:19:34:92:37:18:a5:53: c0:e5:ab:6b:df:cc:5b:ec:15:1c:37:9a:58:83:bd:cc:76:37: f0:e0:ed:89:e3:39:fd:d5:58:ea:0f:f2:a8:60:e4:db:96:97: 95:12:b6:57:ec:46:30:c9:36:04:4d:d8:b5:9e:a8:b5:93:43: bd:47:c9:5c:49:4b:bd:1b:00:f3:d9:90:af:35:16:c8:87:6a: 21:ee:83:36:23:e6:85:1d:74:d0:f6:bc:72:66:e6:6c:e0:49: 0a:2b:cf:e7:58:a9:9a:3e:d8:18:6a:d8:e4:78:51:63:9e:d0: 03:1a:b4:70:99:b9:87:c8:97:e0:55:29:0f:24:ce:28:b4:73: 8d:ed:7f:42:d4:14:58:92:ba:24:10:e1:af:fe:49:f9:05:25: b4:76:33:69:d4:10:40:90:87:3f:65:54:f1:0b:c4:eb:09:ea: ff:31:ec:a7:f5:64:56:64:a7:7e:b5:0a:75:71:d1:5e:38:ea: db:77:cc:6e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUCCGyU0kkGktIj6XlUjOnmrIQQGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUZFNDU4OUMxQ0U0NzJEMzlDOUZGMTBFRTFBNkU0 RDVDQkZDNTAeFw0yNTA2MDIwNzUzNDhaFw0yNTA2MDcxNzA4NDhaMDMxMTAvBgNV BAMTKDcwQjVCQUNERDk5QjJDMzMzNkQwNkFDM0U1NzkwRTRCQTAzRTlFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgB8rV7euN9VACBXO3a2W54bx7 TAH+htaR97hQLr1zIjPy1q/fZiJo6VIgaKRYqoh7xoAAqhmfpUJs1pGveIrMWyek oSeVL5kd+K/1G7wy8/PtWG85+avP4cBpzTWHcFmmlZiqLCS0JfgNPtC/5PNrn3vG lAgxOzEPtOcPyOrLvqTaniqgLUT3CCSE15GTxXIEcHfta97lJ2rcEFujGHKQm7WY 4CFvH4gS3AA8oPPQVrlIpDl3D9YNEcwQ6E0n5cmiWUoPEo3Um7fcjfVnm7Yuf7lb Kwer8hEvmZjkdUYeQl2lnYGL/A2NltTACPeOQgV7owqLdj8M10/DI+QMP2FLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcLW6zdmbLDM20GrD5XkOS6A+noMwHwYDVR0j BBgwFoAUIOX+RYnBzkctOcn/EO4abk1cv8UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0EwRUQzNjJFNjhGRjQyRTE4OEExMDU4Q0JERjc0N0E3 REQ5M0EzNThFQTE3M0I3QTVFQkEzMjdCMzY1QTUyLzAvMjBFNUZFNDU4OUMxQ0U0 NzJEMzlDOUZGMTBFRTFBNkU0RDVDQkZDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEU1RkU0NTg5QzFDRTQ3MkQz OUM5RkYxMEVFMUE2RTRENUNCRkM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdBMEVEMzYyRTY4RkY0MkUxODhBMTA1OENCREY3NDdBN0REOTNBMzU4 RUExNzNCN0E1RUJBMzI3QjM2NUE1Mi8wLzIwRTVGRTQ1ODlDMUNFNDcyRDM5QzlG RjEwRUUxQTZFNEQ1Q0JGQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqFSD+8g2AOVTzNMNZTwGPmw9I DBJzP37JAX32Vxx1RNQZS5BXASC7iIz0Vn7Wkr73eLTTWed/XIwBKB+KWiRZnxk0 kjcYpVPA5atr38xb7BUcN5pYg73Mdjfw4O2J4zn91VjqD/KoYOTblpeVErZX7EYw yTYETdi1nqi1k0O9R8lcSUu9GwDz2ZCvNRbIh2oh7oM2I+aFHXTQ9rxyZuZs4EkK K8/nWKmaPtgYatjkeFFjntADGrRwmbmHyJfgVSkPJM4otHON7X9C1BRYkrokEOGv /kn5BSW0djNp1BBAkIc/ZVTxC8TrCer/Meyn9WRWZKd+tQp1cdFeOOrbd8xu -----END CERTIFICATE-----Generated at Wed Jun 4 12:34:36 2025 by rpki-client