$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft File: D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft (raw, json) Hash identifier: La5H+A5UiaBo6wNGeOESvGulBRDBCumbMgHubVm1iAw= Subject key identifier: 67:A5:0D:13:7D:5D:09:BA:CE:F2:C7:1D:C2:AA:1E:82:27:AB:83:2D Authority key identifier: D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C Certificate issuer: /CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C Certificate serial: 7B63D648FFC7506EF727D5FD9B6A793517933BE3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft Manifest number: E8 Signing time: Wed 04 Jun 2025 07:42:12 +0000 Manifest this update: Wed 04 Jun 2025 07:37:12 +0000 Manifest next update: Mon 09 Jun 2025 13:32:12 +0000 Files and hashes: 1: 3136382e3137362e302e302f31362d3234203d3e2035373232.roa (hash: LHp5PheVY7de8Sp03QJGo0Ie1KETYoo2n7UDL1i7jCw=) 2: D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl (hash: sAQwukEFaIGLztdaiXO5Gek3DCkYJ/0TmEmuu9MjiYg=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:63:d6:48:ff:c7:50:6e:f7:27:d5:fd:9b:6a:79:35:17:93:3b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C Validity Not Before: Jun 4 07:37:12 2025 GMT Not After : Jun 9 13:32:12 2025 GMT Subject: CN=67A50D137D5D09BACEF2C71DC2AA1E8227AB832D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:3d:c4:e8:e8:8a:94:b4:6d:c7:25:d2:1b: ed:65:de:f8:eb:2b:05:89:2d:2e:dc:33:51:f7:bb: 6c:f6:17:ec:50:82:ba:46:4a:5f:85:92:a3:e2:a8: cf:9c:81:18:92:83:ca:1b:aa:9a:4b:9f:13:27:99: d9:0e:76:fa:60:71:d7:c6:32:5a:6c:f0:cb:c9:e0: 3a:bf:11:57:be:19:2f:f5:d8:9f:46:ef:45:23:98: 09:b1:0a:f8:bb:7e:9f:e1:de:98:a8:13:37:42:00: f0:4b:b3:4b:e7:df:7a:a8:7c:3e:0a:00:7a:e0:e5: 49:35:f1:ab:73:f5:3e:27:b5:fd:a0:e7:b5:c3:28: ee:92:20:49:56:0c:eb:ad:3b:ba:92:26:e7:e3:a5: b6:32:aa:36:2d:00:90:13:f9:2a:d7:4c:f4:0c:35: 73:e6:86:11:f9:7e:40:2f:58:58:ae:15:e9:e9:80: f0:10:51:07:e7:e6:d0:59:ef:75:e7:4c:40:95:b4: 20:b9:4d:91:64:39:0b:4e:c0:83:9b:9b:c9:09:6f: 43:a4:c0:11:17:c2:fe:ac:45:b5:94:86:b8:2b:3d: d4:66:63:1c:b0:0e:ae:7d:df:82:8d:a6:cf:d5:1d: d1:43:3f:fa:ba:82:85:4e:47:ee:fa:5f:5b:92:a2: 79:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A5:0D:13:7D:5D:09:BA:CE:F2:C7:1D:C2:AA:1E:82:27:AB:83:2D X509v3 Authority Key Identifier: keyid:D8:0F:DA:40:F8:BB:5C:A1:A7:B1:74:DA:0A:7B:37:6F:BD:FD:CB:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7FEB1D30DCC1F7D4263AF4B3C5C6594D5005D02DE5AA4AC352D5759F1FD3DF5/0/D80FDA40F8BB5CA1A7B174DA0A7B376FBDFDCB3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b2:62:36:00:57:ab:e1:5d:9c:4b:c3:ab:b8:a9:73:f1:55: d4:97:36:07:3b:5c:04:4d:e4:51:8e:d0:1b:9f:ad:88:b1:6c: 89:0e:6d:da:b9:8f:1a:b0:f4:ce:6a:ee:d4:59:db:9e:ee:75: c9:c8:70:7f:b6:ae:6d:14:a2:54:7e:09:58:1a:87:21:83:70: 25:aa:e5:63:40:ac:80:74:e2:2f:b4:1c:0b:fb:ae:b1:73:07: 91:52:f7:d4:b4:09:71:35:f7:51:03:b7:0b:99:d3:d8:c4:60: 92:2b:ce:65:3f:c5:cd:5e:a4:cb:29:d8:12:78:39:26:ac:f5: ce:b2:ff:29:fd:e4:53:4f:a9:06:f2:da:86:68:0c:52:6c:88: 1d:c1:5a:cc:b6:12:63:4b:15:43:a0:e3:f8:bd:5f:eb:bf:3e: c3:51:58:f0:d3:0d:93:08:fc:7c:c5:2e:f6:63:f9:e0:d0:9e: a1:c9:95:d2:42:cb:6d:8d:97:93:12:fd:7e:03:65:7d:74:8a: 3d:72:96:95:dc:8e:58:93:fd:5e:08:b9:89:1e:ab:4b:ab:d3: 93:28:44:03:6e:7e:0b:bf:e4:c1:91:58:37:71:9a:0a:05:87: 03:dc:e8:0d:98:2d:a4:c2:a9:b8:a2:d6:13:b5:2f:f4:6c:2b: 47:81:16:2a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUe2PWSP/HUG73J9X9m2p5NReTO+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwRkRBNDBGOEJCNUNBMUE3QjE3NERBMEE3QjM3NkZC REZEQ0IzQzAeFw0yNTA2MDQwNzM3MTJaFw0yNTA2MDkxMzMyMTJaMDMxMTAvBgNV BAMTKDY3QTUwRDEzN0Q1RDA5QkFDRUYyQzcxREMyQUExRTgyMjdBQjgzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Dj3E6OiKlLRtxyXSG+1l3vjr KwWJLS7cM1H3u2z2F+xQgrpGSl+FkqPiqM+cgRiSg8obqppLnxMnmdkOdvpgcdfG Mlps8MvJ4Dq/EVe+GS/12J9G70UjmAmxCvi7fp/h3pioEzdCAPBLs0vn33qofD4K AHrg5Uk18atz9T4ntf2g57XDKO6SIElWDOutO7qSJufjpbYyqjYtAJAT+SrXTPQM NXPmhhH5fkAvWFiuFenpgPAQUQfn5tBZ73XnTECVtCC5TZFkOQtOwIObm8kJb0Ok wBEXwv6sRbWUhrgrPdRmYxywDq5934KNps/VHdFDP/q6goVOR+76X1uSonmDAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZ6UNE31dCbrO8scdwqoegiergy0wHwYDVR0j BBgwFoAU2A/aQPi7XKGnsXTaCns3b739yzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BN0ZFQjFEMzBEQ0MxRjdENDI2M0FGNEIzQzVDNjU5NEQ1 MDA1RDAyREU1QUE0QUMzNTJENTc1OUYxRkQzREY1LzAvRDgwRkRBNDBGOEJCNUNB MUE3QjE3NERBMEE3QjM3NkZCREZEQ0IzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODBGREE0MEY4QkI1Q0ExQTdC MTc0REEwQTdCMzc2RkJERkRDQjNDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTdGRUIxRDMwRENDMUY3RDQyNjNBRjRCM0M1QzY1OTRENTAwNUQwMkRF NUFBNEFDMzUyRDU3NTlGMUZEM0RGNS8wL0Q4MEZEQTQwRjhCQjVDQTFBN0IxNzRE QTBBN0IzNzZGQkRGRENCM0MubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYsmI2AFer4V2cS8OruKlz8VXU lzYHO1wETeRRjtAbn62IsWyJDm3auY8asPTOau7UWdue7nXJyHB/tq5tFKJUfglY Gochg3AlquVjQKyAdOIvtBwL+66xcweRUvfUtAlxNfdRA7cLmdPYxGCSK85lP8XN XqTLKdgSeDkmrPXOsv8p/eRTT6kG8tqGaAxSbIgdwVrMthJjSxVDoOP4vV/rvz7D UVjw0w2TCPx8xS72Y/ng0J6hyZXSQsttjZeTEv1+A2V9dIo9cpaV3I5Yk/1eCLmJ HqtLq9OTKEQDbn4Lv+TBkVg3cZoKBYcD3OgNmC2kwqm4otYTtS/0bCtHgRYq -----END CERTIFICATE-----Generated at Wed Jun 4 12:19:52 2025 by rpki-client