$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft File: CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft (raw, json) Hash identifier: gXEmJmkQCb70iZZuduK5em5c9O3Nz9Mmd0CY15z8k7Y= Subject key identifier: EE:16:86:C1:C0:92:3E:74:4D:02:09:68:38:27:63:97:AF:B3:09:C9 Authority key identifier: CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5 Certificate issuer: /CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5 Certificate serial: 39577671116E8591EBA0B9112E2813240B8A5607 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft Manifest number: EC Signing time: Tue 03 Jun 2025 00:03:28 +0000 Manifest this update: Mon 02 Jun 2025 23:58:28 +0000 Manifest next update: Sat 07 Jun 2025 11:29:28 +0000 Files and hashes: 1: 323830333a3161303a3a2f33322d3438203d3e20323637363839.roa (hash: DRHCzcpv5c6QsE11Z1eGXr6S+kUvnqyW1+55Onqm738=) 2: CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl (hash: CQWsSBnHiSn7qqp+BS1wINDVNx51aPm9cYIlgpu2gZ0=) 3: 34352e3136332e32302e302f32322d3234203d3e20323637363839.roa (hash: UVmTjFLy2cWO3HRxLeqe2gRQzzd3npLxFwmizWy8voQ=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 11:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:57:76:71:11:6e:85:91:eb:a0:b9:11:2e:28:13:24:0b:8a:56:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5 Validity Not Before: Jun 2 23:58:28 2025 GMT Not After : Jun 7 11:29:28 2025 GMT Subject: CN=EE1686C1C0923E744D02096838276397AFB309C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:28:f7:f7:5f:c3:4d:1b:f6:28:7d:a2:c3: b5:a1:d0:9f:d3:ca:8e:8f:c0:c1:c2:1a:a0:bf:dd: cf:b2:f4:a4:73:15:56:1f:0a:b8:ea:b1:0c:d3:5f: ca:8b:d8:3b:e8:5d:be:f3:5b:19:77:b9:ba:dc:6f: 71:65:cc:56:71:e6:76:0a:f1:42:a8:ad:6d:13:a1: a9:90:07:09:b4:50:4e:4d:d0:19:65:8b:71:ca:ea: 14:9b:ea:21:2e:e0:d4:bf:57:16:da:6d:30:54:8d: 01:4a:5b:ba:e6:06:db:95:fe:c3:ed:ba:3f:b9:db: 3f:3a:60:41:6e:15:8f:69:4f:14:4b:78:8d:fb:e4: af:bd:76:0c:a4:31:ed:d1:e5:67:fd:c9:df:dd:98: e7:a6:4d:b2:d0:44:79:71:82:d6:9a:5e:31:85:8f: e9:cf:a5:d3:bf:81:ca:cc:60:69:a5:1e:ca:45:95: b9:28:e1:0c:44:93:b7:92:f6:7b:f4:ff:dc:41:99: d8:00:38:f1:61:a4:6f:eb:e6:a0:27:30:5c:fc:ee: 0e:3a:45:9d:f1:5d:d5:8f:aa:11:4d:08:9f:c5:e5: 83:c0:b8:94:1c:c1:78:b8:5e:df:bc:03:0e:e2:52: 7b:06:c1:1a:b0:14:45:86:2a:94:e3:87:20:1b:41: 9b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:16:86:C1:C0:92:3E:74:4D:02:09:68:38:27:63:97:AF:B3:09:C9 X509v3 Authority Key Identifier: keyid:CA:AB:BE:9E:DC:44:F4:B5:B4:11:2B:E0:09:7E:3B:5A:92:0C:68:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933A9AB77183D1ABB0ED6EEC06D453C3177D9774B3F9C872FA60A94529AB84FF/0/CAABBE9EDC44F4B5B4112BE0097E3B5A920C68B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f8:27:5a:11:79:eb:04:54:2e:2a:ea:08:55:10:d5:a1:79: 7b:40:b4:bc:e5:ee:c1:80:23:2c:45:00:34:37:59:e4:93:73: 90:86:28:ff:9d:27:b3:ad:db:04:a2:10:c6:02:bc:40:f5:56: 7c:b1:e8:fe:f2:56:95:e0:0d:3b:ab:37:a1:b9:af:16:c6:db: ff:d0:de:b2:2e:d9:10:8a:46:8e:0c:11:5f:ad:e3:d9:0a:c7: 04:ef:8d:ca:c2:f1:a0:ac:40:b8:5b:96:e4:35:ec:02:fd:35: 90:e6:f9:03:aa:b2:37:70:af:73:87:d5:27:65:c4:b2:b9:f1: 27:11:4d:02:09:51:83:62:f3:94:e3:f0:ce:b8:3a:a1:6c:a8: 46:d9:09:ae:e2:e2:e0:98:88:ac:60:e0:2a:fd:de:50:9e:58: 42:83:51:f5:35:e8:6c:49:34:d1:48:16:14:c7:85:41:df:f0: 25:06:d7:4a:c1:aa:5e:9e:36:8f:21:b7:12:17:f1:ee:ee:d5: 27:59:9d:84:f1:c3:f2:c0:ea:c3:ca:8d:09:8c:6a:8b:df:29: c7:a4:b2:99:96:64:e6:3c:49:f1:b9:42:d6:ac:3e:3b:4c:51: 3c:14:f7:49:e3:69:7c:75:cf:fa:20:49:72:04:2b:3c:bc:28: 63:a1:1f:30 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOVd2cRFuhZHroLkRLigTJAuKVgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBQkJFOUVEQzQ0RjRCNUI0MTEyQkUwMDk3RTNCNUE5 MjBDNjhCNTAeFw0yNTA2MDIyMzU4MjhaFw0yNTA2MDcxMTI5MjhaMDMxMTAvBgNV BAMTKEVFMTY4NkMxQzA5MjNFNzQ0RDAyMDk2ODM4Mjc2Mzk3QUZCMzA5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbCj391/DTRv2KH2iw7Wh0J/T yo6PwMHCGqC/3c+y9KRzFVYfCrjqsQzTX8qL2DvoXb7zWxl3ubrcb3FlzFZx5nYK 8UKorW0ToamQBwm0UE5N0Blli3HK6hSb6iEu4NS/VxbabTBUjQFKW7rmBtuV/sPt uj+52z86YEFuFY9pTxRLeI375K+9dgykMe3R5Wf9yd/dmOemTbLQRHlxgtaaXjGF j+nPpdO/gcrMYGmlHspFlbko4QxEk7eS9nv0/9xBmdgAOPFhpG/r5qAnMFz87g46 RZ3xXdWPqhFNCJ/F5YPAuJQcwXi4Xt+8Aw7iUnsGwRqwFEWGKpTjhyAbQZuzAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU7haGwcCSPnRNAgloOCdjl6+zCckwHwYDVR0j BBgwFoAUyqu+ntxE9LW0ESvgCX47WpIMaLUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85MzNBOUFCNzcxODNEMUFCQjBFRDZFRUMwNkQ0NTNDMzE3 N0Q5Nzc0QjNGOUM4NzJGQTYwQTk0NTI5QUI4NEZGLzAvQ0FBQkJFOUVEQzQ0RjRC NUI0MTEyQkUwMDk3RTNCNUE5MjBDNjhCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUFCQkU5RURDNDRGNEI1QjQx MTJCRTAwOTdFM0I1QTkyMEM2OEI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTMzQTlBQjc3MTgzRDFBQkIwRUQ2RUVDMDZENDUzQzMxNzdEOTc3NEIz RjlDODcyRkE2MEE5NDUyOUFCODRGRi8wL0NBQUJCRTlFREM0NEY0QjVCNDExMkJF MDA5N0UzQjVBOTIwQzY4QjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC+CdaEXnrBFQuKuoIVRDVoXl7 QLS85e7BgCMsRQA0N1nkk3OQhij/nSezrdsEohDGArxA9VZ8sej+8laV4A07qzeh ua8Wxtv/0N6yLtkQikaODBFfrePZCscE743KwvGgrEC4W5bkNewC/TWQ5vkDqrI3 cK9zh9UnZcSyufEnEU0CCVGDYvOU4/DOuDqhbKhG2Qmu4uLgmIisYOAq/d5QnlhC g1H1NehsSTTRSBYUx4VB3/AlBtdKwapenjaPIbcSF/Hu7tUnWZ2E8cPywOrDyo0J jGqL3ynHpLKZlmTmPEnxuULWrD47TFE8FPdJ42l8dc/6IElyBCs8vChjoR8w -----END CERTIFICATE-----Generated at Wed Jun 4 12:31:11 2025 by rpki-client