$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.mft File: CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.mft (raw, json) Hash identifier: BorPVbvAxiAZ5VBC4hdUlfIOCyTUBUtaxef8yiaDIIQ= Subject key identifier: 72:BF:00:5E:42:A2:58:EB:05:59:D3:24:B5:6B:D8:C6:E6:CA:FD:A3 Authority key identifier: CA:5F:2F:F2:2D:8B:FD:C1:6B:EB:B4:D2:85:79:F0:30:74:25:F5:D6 Certificate issuer: /CN=CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6 Certificate serial: 6F195ABAC28B9940A4C6F256DC0C395CCDDFBD31 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.mft Manifest number: E8 Signing time: Tue 03 Jun 2025 16:28:11 +0000 Manifest this update: Tue 03 Jun 2025 16:23:11 +0000 Manifest next update: Mon 09 Jun 2025 08:51:11 +0000 Files and hashes: 1: 3139302e3130342e38382e302f32312d3231203d3e203631343736.roa (hash: jc/sgsQGsBLmZqSV1rx6FPH5BM1wIFC0JA8r875533Q=) 2: CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.crl (hash: Z3GfwQ+5mTe+PHX3MyC8al222x78eTvm45yY5qc1zP4=) 3: 323830313a31383a383030303a3a2f34382d3438203d3e203631343736.roa (hash: zteXEW8iKB+TKiGgITTsTNwV9dAN9IHbYGyUgCc6HHk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.crl rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:19:5a:ba:c2:8b:99:40:a4:c6:f2:56:dc:0c:39:5c:cd:df:bd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6 Validity Not Before: Jun 3 16:23:11 2025 GMT Not After : Jun 9 08:51:11 2025 GMT Subject: CN=72BF005E42A258EB0559D324B56BD8C6E6CAFDA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:58:9a:84:57:2a:f8:29:c3:cc:a4:2e:6a: 56:29:e9:6d:ac:6c:f6:ce:95:bd:19:11:44:c3:ac: ba:04:c1:b3:7e:e9:ca:ca:9d:49:a8:23:80:53:3a: 78:6a:12:53:1b:59:83:71:88:45:56:e4:4c:61:79: 06:4c:fd:48:f3:99:55:26:b0:f6:e1:dc:bd:d2:6e: 1c:2c:d0:d1:2b:eb:b9:de:45:94:b4:0a:e6:b6:72: a0:a9:8d:aa:db:92:88:b5:15:8b:f8:38:52:8b:09: cf:64:80:42:4d:5f:00:80:5a:3a:c1:a4:08:77:eb: 67:5c:0a:af:51:b9:d4:1e:71:a6:d5:ea:54:0d:e8: af:1d:c5:3a:78:e4:85:0f:e2:a0:31:01:28:e6:9c: f4:43:e8:6c:98:ea:c6:d6:ba:b5:60:13:85:66:37: 76:0f:9d:12:fe:bb:c2:58:cb:90:5f:c9:9d:cd:47: b1:25:75:16:9a:25:34:ae:4c:df:e4:f3:42:05:9c: 1d:0e:74:d6:53:2d:eb:b1:4c:93:60:40:95:06:f4: 9e:07:89:cb:ee:b3:70:a4:75:9c:0f:13:7d:19:62: 46:87:b3:90:e7:66:ca:87:83:33:aa:40:51:6b:3f: 7a:c4:c4:ee:08:1d:a1:25:39:66:94:a1:fd:8d:e8: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BF:00:5E:42:A2:58:EB:05:59:D3:24:B5:6B:D8:C6:E6:CA:FD:A3 X509v3 Authority Key Identifier: keyid:CA:5F:2F:F2:2D:8B:FD:C1:6B:EB:B4:D2:85:79:F0:30:74:25:F5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AEDAB1125203E176692D166CBE60C7B78EA03736AC18B41848997A40EB9CBD9/0/CA5F2FF22D8BFDC16BEBB4D28579F0307425F5D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:db:da:37:df:f3:b9:56:57:a3:a4:7a:f3:c4:16:f9:c6:32: a0:f2:ab:19:db:a0:79:2a:b1:34:4f:09:9f:b3:0a:de:fb:7e: 5f:73:79:4f:50:f8:b4:17:1e:b2:7e:1c:d3:07:1c:72:a2:16: 85:3b:53:ea:9c:8f:85:6a:ba:25:94:47:62:a8:f9:23:17:a6: 37:71:93:07:47:9f:10:c6:1c:c8:a7:8a:6e:b2:fa:11:73:7a: d4:f1:53:b5:95:e8:0d:d8:35:01:94:85:f8:da:93:90:3f:52: 05:34:6d:c2:1d:55:37:47:81:0d:ca:a2:74:fd:ab:9a:ce:ad: 4b:e4:bc:d5:08:7f:0c:46:65:9b:5c:88:a5:d1:15:e9:15:a9: e7:45:83:32:86:76:0d:8e:b9:87:f4:1d:a7:f8:ad:b9:4b:a5: 01:98:3f:85:0c:cc:62:3c:ec:43:24:5d:c7:69:8e:07:13:4b: a4:ac:37:10:9e:06:a6:ac:ea:86:5e:02:37:da:66:4e:0c:2e: ee:53:a7:f9:f2:65:c5:36:19:0e:73:d2:80:37:2f:c8:b7:79: 69:47:0e:12:07:70:c7:65:ce:da:5e:de:e0:11:d4:8c:dc:d5: 5a:ff:a0:9f:c4:66:d6:b1:a4:ca:54:eb:f6:d0:54:61:05:a0: d5:54:58:d2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUbxlausKLmUCkxvJW3Aw5XM3fvTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1RjJGRjIyRDhCRkRDMTZCRUJCNEQyODU3OUYwMzA3 NDI1RjVENjAeFw0yNTA2MDMxNjIzMTFaFw0yNTA2MDkwODUxMTFaMDMxMTAvBgNV BAMTKDcyQkYwMDVFNDJBMjU4RUIwNTU5RDMyNEI1NkJEOEM2RTZDQUZEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymViahFcq+CnDzKQualYp6W2s bPbOlb0ZEUTDrLoEwbN+6crKnUmoI4BTOnhqElMbWYNxiEVW5ExheQZM/UjzmVUm sPbh3L3Sbhws0NEr67neRZS0Cua2cqCpjarbkoi1FYv4OFKLCc9kgEJNXwCAWjrB pAh362dcCq9RudQecabV6lQN6K8dxTp45IUP4qAxASjmnPRD6GyY6sbWurVgE4Vm N3YPnRL+u8JYy5BfyZ3NR7EldRaaJTSuTN/k80IFnB0OdNZTLeuxTJNgQJUG9J4H icvus3CkdZwPE30ZYkaHs5DnZsqHgzOqQFFrP3rExO4IHaElOWaUof2N6PLlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUcr8AXkKiWOsFWdMktWvYxubK/aMwHwYDVR0j BBgwFoAUyl8v8i2L/cFr67TShXnwMHQl9dYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85QUVEQUIxMTI1MjAzRTE3NjY5MkQxNjZDQkU2MEM3Qjc4 RUEwMzczNkFDMThCNDE4NDg5OTdBNDBFQjlDQkQ5LzAvQ0E1RjJGRjIyRDhCRkRD MTZCRUJCNEQyODU3OUYwMzA3NDI1RjVENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQTVGMkZGMjJEOEJGREMxNkJF QkI0RDI4NTc5RjAzMDc0MjVGNUQ2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOUFFREFCMTEyNTIwM0UxNzY2OTJEMTY2Q0JFNjBDN0I3OEVBMDM3MzZB QzE4QjQxODQ4OTk3QTQwRUI5Q0JEOS8wL0NBNUYyRkYyMkQ4QkZEQzE2QkVCQjRE Mjg1NzlGMDMwNzQyNUY1RDYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAf29o33/O5VlejpHrzxBb5xjKg 8qsZ26B5KrE0Twmfswre+35fc3lPUPi0Fx6yfhzTBxxyohaFO1PqnI+FarollEdi qPkjF6Y3cZMHR58QxhzIp4pusvoRc3rU8VO1legN2DUBlIX42pOQP1IFNG3CHVU3 R4ENyqJ0/auazq1L5LzVCH8MRmWbXIil0RXpFannRYMyhnYNjrmH9B2n+K25S6UB mD+FDMxiPOxDJF3HaY4HE0ukrDcQngamrOqGXgI32mZODC7uU6f58mXFNhkOc9KA Ny/It3lpRw4SB3DHZc7aXt7gEdSM3NVa/6CfxGbWsaTKVOv20FRhBaDVVFjS -----END CERTIFICATE-----Generated at Wed Jun 4 12:32:22 2025 by rpki-client