$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.mft File: 5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.mft (raw, json) Hash identifier: g7ls88fxVITBV0wlnSUG1LvkaPjom7Pvi+pWdIxFxYc= Subject key identifier: 1D:1F:47:68:BA:9D:E9:7E:9B:36:3C:96:A7:AB:09:D9:F3:64:13:E7 Authority key identifier: 5C:7C:6A:52:F2:0F:E7:8C:EA:EC:0A:41:78:09:AA:B6:D8:2B:77:89 Certificate issuer: /CN=5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789 Certificate serial: 4A85D5305C33A11A078DB3C907F58059E17F6310 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.mft Manifest number: B4 Signing time: Tue 03 Jun 2025 08:18:13 +0000 Manifest this update: Tue 03 Jun 2025 08:13:13 +0000 Manifest next update: Sat 07 Jun 2025 12:00:13 +0000 Files and hashes: 1: 3135382e3235312e302e302f31362d3234203d3e203136373432.roa (hash: cVYKl5O8f9z3NYpBa+p3xA35kL1kOYR1h6UugSk1zJ0=) 2: 323830303a3436303a3a2f33322d3438203d3e203136373432.roa (hash: 1Ubk54vimPaE2oBpl3pKz/+j/D/wVKc5LN0r1N6aQjs=) 3: 5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.crl (hash: lwX24nIQ2VnMRE3TDa2KYyWbC75G/1pTkF99IY+t3p8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.crl rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:85:d5:30:5c:33:a1:1a:07:8d:b3:c9:07:f5:80:59:e1:7f:63:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789 Validity Not Before: Jun 3 08:13:13 2025 GMT Not After : Jun 7 12:00:13 2025 GMT Subject: CN=1D1F4768BA9DE97E9B363C96A7AB09D9F36413E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:f6:a6:07:a6:99:49:0d:bd:44:4c:50:92: a5:83:e6:46:17:fe:63:b6:f8:a6:7e:9f:c3:b8:ac: 40:d2:72:22:de:96:db:75:4a:93:6f:17:58:5f:05: 6f:c5:48:51:60:e0:99:6e:4e:19:86:ec:86:cf:b4: e9:f9:64:95:ad:74:b9:37:c9:aa:c7:c1:96:3b:f5: 63:b2:fe:fd:ea:cf:c4:22:72:60:31:f6:58:46:84: 35:55:3f:06:65:d6:3d:4d:0f:84:2b:3d:6f:ca:8c: f9:e1:29:89:a7:1d:0d:39:e2:59:ff:b1:68:0c:cf: 2a:61:a3:1c:1b:bb:8f:2b:46:09:16:45:bc:9f:65: aa:da:e4:d2:d1:ce:ea:2b:0e:06:2b:bd:a6:1f:e1: b4:2d:02:1d:69:89:a5:43:17:72:d0:d6:b0:77:93: 96:27:af:fb:c6:6e:86:6b:ed:9d:b8:ec:b8:5b:4b: b0:4e:c9:55:27:0c:7e:1f:1a:84:a1:1a:47:ad:cd: d5:33:ee:48:1a:81:ab:b9:82:a2:c7:34:99:7d:fd: 4e:75:96:3a:9e:55:7a:37:70:49:b6:94:f8:b0:f2: 70:4d:7f:8b:07:10:46:ec:82:0b:ed:cb:47:cd:8e: 77:63:f6:93:5d:68:63:10:cd:20:2d:b9:4d:48:a0: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1F:47:68:BA:9D:E9:7E:9B:36:3C:96:A7:AB:09:D9:F3:64:13:E7 X509v3 Authority Key Identifier: keyid:5C:7C:6A:52:F2:0F:E7:8C:EA:EC:0A:41:78:09:AA:B6:D8:2B:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73FD58C8733F15D6FF8EFF28E5FF4B7B8F736433EE8BBB1CEFE0CC1761E70D9F/0/5C7C6A52F20FE78CEAEC0A417809AAB6D82B7789.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:37:67:dd:0c:a4:d1:d2:9d:19:b8:33:e1:6c:52:bc:ab:75: 13:34:98:d7:2c:32:f7:79:a5:cc:07:94:77:b0:75:2f:02:10: 6a:55:59:85:c8:d8:e9:13:10:0a:24:7d:55:87:9e:01:1e:11: cc:a1:49:1a:a8:52:60:9e:3a:9d:c1:de:95:15:a9:0d:ef:b7: ad:76:7e:25:63:e2:e7:4b:5f:12:0c:6e:c3:b8:59:b4:78:f6: fe:02:64:e0:9c:0d:92:96:24:01:e7:20:c0:3b:6e:7a:e4:42: 4e:46:f6:2d:22:63:46:f4:a7:45:9a:10:fb:0c:3a:2f:eb:4a: e1:e5:d3:8d:30:d6:6d:ea:67:ec:7e:ed:62:4d:e3:34:f3:b7: 96:50:34:92:1e:6d:84:54:e9:9e:a8:eb:18:25:e2:21:a5:27: 57:b3:b9:9a:d2:6c:60:af:39:34:85:4a:65:27:56:d4:c6:d6: 8e:be:45:0c:45:c4:32:57:24:0f:cc:93:a6:49:c7:97:f4:4e: 2b:fe:e7:6f:1c:c7:73:e9:38:c8:7c:68:72:43:89:df:53:0f: e4:f7:19:cd:01:57:ab:59:cc:ca:e0:e5:ff:3d:7c:f3:94:db: ff:e8:71:c9:ef:d4:65:91:43:ec:c3:b0:7b:ea:f3:10:e6:bc: bd:9c:d8:d0 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUSoXVMFwzoRoHjbPJB/WAWeF/YxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3QzZBNTJGMjBGRTc4Q0VBRUMwQTQxNzgwOUFBQjZE ODJCNzc4OTAeFw0yNTA2MDMwODEzMTNaFw0yNTA2MDcxMjAwMTNaMDMxMTAvBgNV BAMTKDFEMUY0NzY4QkE5REU5N0U5QjM2M0M5NkE3QUIwOUQ5RjM2NDEzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksfamB6aZSQ29RExQkqWD5kYX /mO2+KZ+n8O4rEDSciLeltt1SpNvF1hfBW/FSFFg4JluThmG7IbPtOn5ZJWtdLk3 yarHwZY79WOy/v3qz8QicmAx9lhGhDVVPwZl1j1ND4QrPW/KjPnhKYmnHQ054ln/ sWgMzyphoxwbu48rRgkWRbyfZara5NLRzuorDgYrvaYf4bQtAh1piaVDF3LQ1rB3 k5Ynr/vGboZr7Z247LhbS7BOyVUnDH4fGoShGketzdUz7kgagau5gqLHNJl9/U51 ljqeVXo3cEm2lPiw8nBNf4sHEEbsggvty0fNjndj9pNdaGMQzSAtuU1IoGuvAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUHR9HaLqd6X6bNjyWp6sJ2fNkE+cwHwYDVR0j BBgwFoAUXHxqUvIP54zq7ApBeAmqttgrd4kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83M0ZENThDODczM0YxNUQ2RkY4RUZGMjhFNUZGNEI3QjhG NzM2NDMzRUU4QkJCMUNFRkUwQ0MxNzYxRTcwRDlGLzAvNUM3QzZBNTJGMjBGRTc4 Q0VBRUMwQTQxNzgwOUFBQjZEODJCNzc4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzdDNkE1MkYyMEZFNzhDRUFF QzBBNDE3ODA5QUFCNkQ4MkI3Nzg5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzNGRDU4Qzg3MzNGMTVENkZGOEVGRjI4RTVGRjRCN0I4RjczNjQzM0VF OEJCQjFDRUZFMENDMTc2MUU3MEQ5Ri8wLzVDN0M2QTUyRjIwRkU3OENFQUVDMEE0 MTc4MDlBQUI2RDgyQjc3ODkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjN2fdDKTR0p0ZuDPhbFK8q3UT NJjXLDL3eaXMB5R3sHUvAhBqVVmFyNjpExAKJH1Vh54BHhHMoUkaqFJgnjqdwd6V FakN77etdn4lY+LnS18SDG7DuFm0ePb+AmTgnA2SliQB5yDAO2565EJORvYtImNG 9KdFmhD7DDov60rh5dONMNZt6mfsfu1iTeM087eWUDSSHm2EVOmeqOsYJeIhpSdX s7ma0mxgrzk0hUplJ1bUxtaOvkUMRcQyVyQPzJOmSceX9E4r/udvHMdz6TjIfGhy Q4nfUw/k9xnNAVerWczK4OX/PXzzlNv/6HHJ79RlkUPsw7B76vMQ5ry9nNjQ -----END CERTIFICATE-----Generated at Wed Jun 4 12:31:23 2025 by rpki-client