$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft File: F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft (raw, json) Hash identifier: qDNvop0N8yR1khoU0cXZJTt/4juaOA9n47ChjcluN9M= Subject key identifier: CB:8C:F1:AF:D3:3F:99:EA:29:B2:09:5E:9A:70:5D:09:51:4B:8A:F6 Authority key identifier: F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC Certificate issuer: /CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC Certificate serial: 5C815A1D52D4FE2589855DBBAC98FA43164EF5F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft Manifest number: C4 Signing time: Fri 04 Apr 2025 15:13:58 +0000 Manifest this update: Fri 04 Apr 2025 15:08:58 +0000 Manifest next update: Thu 10 Apr 2025 00:51:58 +0000 Files and hashes: 1: F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl (hash: bsZOhWEpqe0lqxXpfdgIR6a/gHPRLv8mXbIAMnXo4gI=) 2: 323830333a623835303a3a2f33322d313238203d3e20323733313230.roa (hash: nln2BmrsK03PDYf4F4KNYxb7dKIv8BZcL7rvvSyqu3Q=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:81:5a:1d:52:d4:fe:25:89:85:5d:bb:ac:98:fa:43:16:4e:f5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC Validity Not Before: Apr 4 15:08:58 2025 GMT Not After : Apr 10 00:51:58 2025 GMT Subject: CN=CB8CF1AFD33F99EA29B2095E9A705D09514B8AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f5:fe:3e:e8:8f:dc:a9:64:70:73:34:00:cf: a4:5c:bf:eb:b8:7b:f4:69:f9:e1:19:d5:58:1b:6e: 1a:2e:cb:53:4c:7f:40:7d:18:11:f1:c8:30:b4:d3: b0:78:da:02:4a:75:ba:44:75:b7:b8:9e:8f:0a:1e: ee:b9:4e:f9:86:15:44:f9:45:e4:72:a6:c0:e0:03: f2:f0:3f:02:29:01:4a:ef:35:98:14:33:f1:63:4d: ee:52:bd:46:22:d2:04:b5:8d:9c:6b:68:9a:00:32: 0b:bf:64:ac:f3:a0:15:68:63:77:18:97:11:d8:6c: 2d:5a:30:ca:b8:d5:35:03:c0:3f:90:0c:5a:1e:54: c2:cd:55:98:9d:b8:94:19:c7:96:a5:87:58:9e:34: ae:6c:a4:cc:e4:98:f6:33:a6:70:08:8d:41:bf:41: 94:0e:ff:22:34:90:22:fe:4e:0e:3c:ce:05:41:5c: 70:95:a4:c0:2f:7a:e3:b6:8f:a3:79:33:71:e1:d6: 56:39:a6:70:3d:c2:db:52:db:ac:7d:67:9d:2c:c6: 61:56:d9:64:23:0d:2e:70:0b:78:85:8c:dd:ef:9e: 39:e3:ab:94:cc:75:01:98:f7:f3:cc:c5:7b:a9:57: 3c:f3:c0:48:82:da:a6:85:9b:7a:84:88:8e:48:fe: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8C:F1:AF:D3:3F:99:EA:29:B2:09:5E:9A:70:5D:09:51:4B:8A:F6 X509v3 Authority Key Identifier: keyid:F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9e:e4:0c:4a:18:4e:f3:a7:1d:14:e0:d0:40:ca:af:97:56: 70:ca:c3:48:0e:01:d0:19:82:69:3a:57:99:ed:1e:06:d9:9d: da:c8:7f:ef:f9:da:57:3e:79:0d:23:e3:4d:dd:66:f9:32:b2: e8:97:30:e3:98:89:92:a3:26:e2:dd:d6:64:cf:db:22:40:a3: e0:3d:5d:34:f1:5d:fc:ac:61:4a:47:0f:84:49:18:32:17:86: ef:d8:5f:9f:9c:41:e1:a1:f7:b0:d3:5c:a1:a8:d7:f4:40:5c: 6d:ad:da:70:15:dd:fa:f9:7e:e6:b2:a8:d9:59:ec:e0:86:09: 6a:fb:1e:9b:b0:31:de:c3:cd:5d:c2:47:f3:3a:92:a3:0a:9a: fa:e2:77:88:59:58:52:f1:fd:2b:69:c7:62:a7:34:da:3e:63: 69:bb:70:07:9d:29:a7:80:82:22:e1:65:82:de:fc:2e:a8:20: dc:be:b2:9d:e0:75:3b:f1:72:7c:7e:aa:c8:d7:8c:e3:8e:a8: a2:87:d9:f9:0a:a9:83:f1:29:db:a5:64:cb:78:28:91:98:a4: d5:18:80:cf:4b:08:47:10:f1:97:14:e5:54:64:be:1a:40:82: fd:34:0e:25:53:3e:a6:4f:92:25:c0:79:65:02:ee:2e:cd:66: ce:99:32:b2 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXIFaHVLU/iWJhV27rJj6QxZO9fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdFNUQzNUMyODA0MDEwOUFBQzYwREYwNDEwRjJGRjUw Q0JGMzdFQzAeFw0yNTA0MDQxNTA4NThaFw0yNTA0MTAwMDUxNThaMDMxMTAvBgNV BAMTKENCOENGMUFGRDMzRjk5RUEyOUIyMDk1RTlBNzA1RDA5NTE0QjhBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh9f4+6I/cqWRwczQAz6Rcv+u4 e/Rp+eEZ1Vgbbhouy1NMf0B9GBHxyDC007B42gJKdbpEdbe4no8KHu65TvmGFUT5 ReRypsDgA/LwPwIpAUrvNZgUM/FjTe5SvUYi0gS1jZxraJoAMgu/ZKzzoBVoY3cY lxHYbC1aMMq41TUDwD+QDFoeVMLNVZiduJQZx5alh1ieNK5spMzkmPYzpnAIjUG/ QZQO/yI0kCL+Tg48zgVBXHCVpMAveuO2j6N5M3Hh1lY5pnA9wttS26x9Z50sxmFW 2WQjDS5wC3iFjN3vnjnjq5TMdQGY9/PMxXupVzzzwEiC2qaFm3qEiI5I/jh3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUy4zxr9M/meopsglemnBdCVFLivYwHwYDVR0j BBgwFoAU9+XTXCgEAQmqxg3wQQ8v9Qy/N+wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRkM4NDlCNTMwOEM3NzgyOTFENEY2MjI4NTcwRDgzMTY1 RTQ0RkJDQ0M5MUM1ODk3QUREODExOTdDQ0Y3QjJELzAvRjdFNUQzNUMyODA0MDEw OUFBQzYwREYwNDEwRjJGRjUwQ0JGMzdFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GN0U1RDM1QzI4MDQwMTA5QUFD NjBERjA0MTBGMkZGNTBDQkYzN0VDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkZDODQ5QjUzMDhDNzc4MjkxRDRGNjIyODU3MEQ4MzE2NUU0NEZCQ0ND OTFDNTg5N0FERDgxMTk3Q0NGN0IyRC8wL0Y3RTVEMzVDMjgwNDAxMDlBQUM2MERG MDQxMEYyRkY1MENCRjM3RUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNnuQMShhO86cdFODQQMqvl1Zw ysNIDgHQGYJpOleZ7R4G2Z3ayH/v+dpXPnkNI+NN3Wb5MrLolzDjmImSoybi3dZk z9siQKPgPV008V38rGFKRw+ESRgyF4bv2F+fnEHhofew01yhqNf0QFxtrdpwFd36 +X7msqjZWezghglq+x6bsDHew81dwkfzOpKjCpr64neIWVhS8f0racdipzTaPmNp u3AHnSmngIIi4WWC3vwuqCDcvrKd4HU78XJ8fqrI14zjjqiih9n5CqmD8SnbpWTL eCiRmKTVGIDPSwhHEPGXFOVUZL4aQIL9NA4lUz6mT5IlwHllAu4uzWbOmTKy -----END CERTIFICATE-----Generated at Sat Apr 5 14:22:00 2025 by rpki-client