$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft File: 34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft (raw, json) Hash identifier: qBcrE3G19nhnX0mZUiYtzM9vY3o0FPpEV7xykXK4qGM= Subject key identifier: 74:FB:B9:4E:8F:EC:13:E1:9F:16:92:80:6D:3E:89:E9:8A:13:F2:6A Authority key identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F Certificate issuer: /CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F Certificate serial: 21D9BCA41F5CF501D9234A8764974E05DF49C988 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft Manifest number: E7 Signing time: Mon 02 Jun 2025 08:29:03 +0000 Manifest this update: Mon 02 Jun 2025 08:24:03 +0000 Manifest next update: Sat 07 Jun 2025 15:39:03 +0000 Files and hashes: 1: 323830333a396461303a3a2f33322d3438203d3e20323637373431.roa (hash: 5hhz7mH4wZxsvbakAIux+mtst4Y1wFSDr73ZBg2ZFlM=) 2: 34352e3136392e35322e302f32332d3234203d3e20323637373431.roa (hash: qEXkM3i7WGxvYoj6lFwEff6rSjSJEJPyZNfPJNHC/Ps=) 3: 34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl (hash: 9EaP7sTx6B6UpKQxexBkY/8LW/djeI4EoFNvP17E3wg=) 4: 34352e3136382e38302e302f32342d3234203d3e20323637373431.roa (hash: UbAEkb66nwzNJ3z2NipGB35Z4vefZvUuF7o4gu2ViZc=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 15:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d9:bc:a4:1f:5c:f5:01:d9:23:4a:87:64:97:4e:05:df:49:c9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F Validity Not Before: Jun 2 08:24:03 2025 GMT Not After : Jun 7 15:39:03 2025 GMT Subject: CN=74FBB94E8FEC13E19F1692806D3E89E98A13F26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a0:98:a3:b3:29:8c:8a:6c:c7:10:69:ef:d4: 2d:e8:75:e5:e1:91:19:85:94:b7:75:d3:13:be:e9: cb:8f:30:77:cb:80:80:60:dc:5e:d6:6b:38:a6:4d: bd:46:85:51:31:61:50:bf:8c:3a:83:1b:cd:b3:e6: fd:97:e0:7f:f2:f7:08:75:fd:1e:ee:5c:29:c1:82: ff:7c:f9:da:56:c3:49:32:ca:55:28:8c:a4:d9:4d: 69:2f:be:76:17:ab:35:20:a3:9b:77:b7:79:75:4f: 72:f7:99:79:ca:d8:a4:cf:42:be:1e:cf:1a:75:fb: 9a:ad:26:08:66:a6:c4:cd:88:d6:93:66:a8:18:e1: f7:e9:c3:6e:6e:50:36:b3:ff:52:8b:04:c6:c1:eb: 8b:9b:c9:4e:fd:2b:d1:59:01:68:90:5a:6a:84:19: 4e:47:e1:21:13:33:03:d6:e1:86:13:a9:e0:b9:77: 34:cf:55:dd:31:e5:50:e7:dc:e8:c6:6e:03:b4:11: 0e:40:8d:41:29:50:69:18:4a:25:0c:45:df:74:8c: 6d:de:09:ac:e7:5a:d2:27:52:03:01:51:ed:61:34: 71:dd:ad:ac:c9:48:38:8a:93:55:28:4d:e4:d2:33: 9c:aa:84:9e:31:77:a3:f1:ad:e6:9a:f5:04:50:a2: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FB:B9:4E:8F:EC:13:E1:9F:16:92:80:6D:3E:89:E9:8A:13:F2:6A X509v3 Authority Key Identifier: keyid:34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9c:b7:e8:7e:7a:e8:95:88:eb:aa:2c:1e:e4:1f:8a:1b:20: e9:a4:7e:2a:b2:84:82:73:38:ad:1a:95:39:bc:be:42:92:39: c7:02:fe:2b:d1:04:56:ab:c6:97:38:8a:79:c1:67:be:a0:a1: 99:ce:62:ef:48:f6:aa:e5:ad:78:b7:19:df:d4:7b:bb:50:40: b2:c2:c5:e3:f2:18:5f:84:d5:84:1b:bf:79:9e:6c:2e:b4:24: 0c:3d:fc:27:61:0e:b2:b7:d7:21:a5:70:1d:6c:59:5b:89:16: 31:9d:3b:3e:2b:09:bd:97:b9:fd:9d:60:0e:c2:fe:39:5b:07: 9c:5f:92:bc:65:3a:85:9b:cc:64:0b:c1:d8:ab:ad:b5:3b:39: ab:ae:6c:65:71:eb:55:86:2c:04:c2:7c:8b:f1:ea:5a:93:9d: 13:c5:44:dd:06:99:40:b7:a9:de:00:e0:d4:3f:1f:db:c1:13: 7c:80:80:72:6b:e7:86:45:d5:73:2e:31:08:a7:d1:d4:9b:85: db:8c:8e:67:d8:5a:6f:5b:21:e8:6b:91:dc:aa:73:10:7a:52: c6:9d:85:61:c5:fe:0a:11:18:7a:c2:a9:c1:80:fa:3b:16:ca: fc:66:94:50:e7:83:78:cd:ed:1b:b7:9f:36:ee:87:14:5c:52: 66:8c:6c:86 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUIdm8pB9c9QHZI0qHZJdOBd9JyYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRBMzVFOEJCQkUxNzZGMzVFQTZGRDBEQkY1NDZFQUY2 RUI4QTM4RjAeFw0yNTA2MDIwODI0MDNaFw0yNTA2MDcxNTM5MDNaMDMxMTAvBgNV BAMTKDc0RkJCOTRFOEZFQzEzRTE5RjE2OTI4MDZEM0U4OUU5OEExM0YyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaoJijsymMimzHEGnv1C3odeXh kRmFlLd10xO+6cuPMHfLgIBg3F7WazimTb1GhVExYVC/jDqDG82z5v2X4H/y9wh1 /R7uXCnBgv98+dpWw0kyylUojKTZTWkvvnYXqzUgo5t3t3l1T3L3mXnK2KTPQr4e zxp1+5qtJghmpsTNiNaTZqgY4ffpw25uUDaz/1KLBMbB64ubyU79K9FZAWiQWmqE GU5H4SETMwPW4YYTqeC5dzTPVd0x5VDn3OjGbgO0EQ5AjUEpUGkYSiUMRd90jG3e CaznWtInUgMBUe1hNHHdrazJSDiKk1UoTeTSM5yqhJ4xd6Pxreaa9QRQouunAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUdPu5To/sE+GfFpKAbT6J6YoT8mowHwYDVR0j BBgwFoAUNKNei7vhdvNepv0Nv1Rur264o48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82ODRBMTYzMDYxQjhCMzdFMUU1MERDRTlBNzJCMkQ1NDQ3 NTJEOUI2MkU4NjM3NzcyRUJFQzk5MDQ1RTcxNDAzLzAvMzRBMzVFOEJCQkUxNzZG MzVFQTZGRDBEQkY1NDZFQUY2RUI4QTM4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNEEzNUU4QkJCRTE3NkYzNUVB NkZEMERCRjU0NkVBRjZFQjhBMzhGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjg0QTE2MzA2MUI4QjM3RTFFNTBEQ0U5QTcyQjJENTQ0NzUyRDlCNjJF ODYzNzc3MkVCRUM5OTA0NUU3MTQwMy8wLzM0QTM1RThCQkJFMTc2RjM1RUE2RkQw REJGNTQ2RUFGNkVCOEEzOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAInLfofnrolYjrqiwe5B+KGyDp pH4qsoSCczitGpU5vL5CkjnHAv4r0QRWq8aXOIp5wWe+oKGZzmLvSPaq5a14txnf 1Hu7UECywsXj8hhfhNWEG795nmwutCQMPfwnYQ6yt9chpXAdbFlbiRYxnTs+Kwm9 l7n9nWAOwv45WwecX5K8ZTqFm8xkC8HYq621OzmrrmxlcetVhiwEwnyL8epak50T xUTdBplAt6neAODUPx/bwRN8gIBya+eGRdVzLjEIp9HUm4XbjI5n2FpvWyHoa5Hc qnMQelLGnYVhxf4KERh6wqnBgPo7Fsr8ZpRQ54N4ze0bt5827ocUXFJmjGyG -----END CERTIFICATE-----Generated at Wed Jun 4 12:36:07 2025 by rpki-client