$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft File: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft (raw, json) Hash identifier: oSUiI2ssyBYsYt0cNv5eiwzDDmhwAUbf2nxtcqxWTsQ= Subject key identifier: 5D:8D:3D:52:F0:17:22:61:C2:AC:B0:D2:B1:53:55:FF:A9:BE:F8:39 Authority key identifier: BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6 Certificate issuer: /CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6 Certificate serial: 387A4A3B7C7F3E77EEB1DD6EE7110B00CB9CD1E7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft Manifest number: 61 Signing time: Mon 21 Apr 2025 13:53:06 +0000 Manifest this update: Mon 21 Apr 2025 13:48:06 +0000 Manifest next update: Sat 26 Apr 2025 11:11:06 +0000 Files and hashes: 1: BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl (hash: ZqdyeAjSjPmVRHrKnjrEM3/xCeva7MhFlJmRFTC3jPc=) 2: 323830333a633335303a3a2f33322d3332203d3e20323733383834.roa (hash: Tc3tFTIEJ89kYE9BA23ocufs+zVOZptI7CF4mn5WvUM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 11:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7a:4a:3b:7c:7f:3e:77:ee:b1:dd:6e:e7:11:0b:00:cb:9c:d1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6 Validity Not Before: Apr 21 13:48:06 2025 GMT Not After : Apr 26 11:11:06 2025 GMT Subject: CN=5D8D3D52F0172261C2ACB0D2B15355FFA9BEF839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:47:70:0b:14:26:61:0e:b5:3c:71:13:2e: 50:b5:90:52:1f:73:8e:f7:60:a3:fa:e6:8a:7e:1c: 39:03:0c:30:c7:7e:5e:ab:c7:6b:da:c3:52:d1:01: a8:d4:f3:bf:8f:63:fd:ff:56:4d:52:1b:17:01:3a: e9:f1:30:04:57:24:0e:31:91:1f:07:9b:be:3f:26: c8:83:e4:51:73:c1:b9:71:fb:f5:c2:39:2b:ee:b0: 44:59:62:f9:0c:7e:22:18:33:d5:58:ae:9c:9c:97: 04:2a:4b:76:6f:fc:c5:97:7f:d5:02:a6:0b:b8:ca: 99:a0:5e:d4:3a:cb:51:46:52:bd:6d:f9:5f:a0:3a: 79:7c:fb:76:d2:02:b1:10:5a:50:5b:7a:e0:78:5d: 4e:ba:c4:9f:be:01:9b:c3:08:1e:46:c4:56:69:6a: 19:5f:3a:34:41:59:d5:4f:90:51:d3:d0:f4:51:ac: c0:16:b7:81:4f:b8:d2:83:04:76:21:6e:b0:04:5a: 39:a0:ea:b8:70:0e:e6:14:14:d6:c6:88:b1:2e:9f: 5e:ac:e2:fe:13:b3:4c:81:d9:04:6a:2c:ba:1a:a8: a2:b0:67:8c:5e:32:4a:eb:1c:33:74:2d:cb:3c:5d: 2f:b9:7a:42:74:f7:8e:17:ad:a0:53:7d:4c:dd:24: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8D:3D:52:F0:17:22:61:C2:AC:B0:D2:B1:53:55:FF:A9:BE:F8:39 X509v3 Authority Key Identifier: keyid:BF:E4:AF:1E:92:EC:9A:EA:9B:39:50:21:1D:CE:84:01:C4:83:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFD4CD0516D07A77E663A127DA05F80D139AD76F0A1A536A26E31C38370A8742/0/BFE4AF1E92EC9AEA9B3950211DCE8401C48333A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:46:b5:04:db:fc:8f:d2:3b:81:b5:23:31:1f:06:13:d8:a8: e3:ed:36:65:0a:d9:dd:1e:0c:a3:8c:56:62:55:46:d7:0b:c8: d7:46:4a:89:24:c8:33:2d:b4:db:4a:e2:02:6f:83:01:b3:89: 90:6d:77:25:36:88:48:52:29:e6:e4:50:1c:40:41:61:ed:74: ec:02:83:49:43:2c:5b:15:d3:34:d8:36:2b:99:db:7c:15:d4: 53:c1:1f:62:52:52:ad:60:7e:5d:f4:77:97:1c:d8:f9:df:9a: 8c:c8:98:91:bb:77:d9:b3:1f:5c:1a:73:c2:c8:82:fe:50:55: 70:3d:0e:ac:db:03:35:e0:40:cf:52:7e:af:e7:e7:59:be:67: 8a:f7:4e:04:c7:97:46:b8:60:be:f0:ff:76:40:57:4d:0c:d7: 38:c6:b9:60:77:2a:8b:7b:b9:c6:25:b7:fb:08:ea:d3:42:48: 8f:b0:46:2a:5c:f0:90:0f:a0:67:b2:93:90:01:68:c2:ff:77: be:da:ef:12:4d:8b:20:c9:8e:a1:a4:45:48:51:89:9a:91:37: b2:7a:9b:c5:98:ac:3d:d7:97:0b:86:8e:bd:b3:90:dd:3c:28: 8c:55:3b:fa:fa:31:65:9c:0d:7e:ca:a0:a5:6f:95:12:d6:20: 79:89:fe:02 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOHpKO3x/Pnfusd1u5xELAMuc0ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFNEFGMUU5MkVDOUFFQTlCMzk1MDIxMURDRTg0MDFD NDgzMzNBNjAeFw0yNTA0MjExMzQ4MDZaFw0yNTA0MjYxMTExMDZaMDMxMTAvBgNV BAMTKDVEOEQzRDUyRjAxNzIyNjFDMkFDQjBEMkIxNTM1NUZGQTlCRUY4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BEdwCxQmYQ61PHETLlC1kFIf c473YKP65op+HDkDDDDHfl6rx2vaw1LRAajU87+PY/3/Vk1SGxcBOunxMARXJA4x kR8Hm74/JsiD5FFzwblx+/XCOSvusERZYvkMfiIYM9VYrpyclwQqS3Zv/MWXf9UC pgu4ypmgXtQ6y1FGUr1t+V+gOnl8+3bSArEQWlBbeuB4XU66xJ++AZvDCB5GxFZp ahlfOjRBWdVPkFHT0PRRrMAWt4FPuNKDBHYhbrAEWjmg6rhwDuYUFNbGiLEun16s 4v4Ts0yB2QRqLLoaqKKwZ4xeMkrrHDN0Lcs8XS+5ekJ0944XraBTfUzdJGOJAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXY09UvAXImHCrLDSsVNV/6m++DkwHwYDVR0j BBgwFoAUv+SvHpLsmuqbOVAhHc6EAcSDM6YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CRkQ0Q0QwNTE2RDA3QTc3RTY2M0ExMjdEQTA1RjgwRDEz OUFENzZGMEExQTUzNkEyNkUzMUMzODM3MEE4NzQyLzAvQkZFNEFGMUU5MkVDOUFF QTlCMzk1MDIxMURDRTg0MDFDNDgzMzNBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkU0QUYxRTkyRUM5QUVBOUIz OTUwMjExRENFODQwMUM0ODMzM0E2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkZENENEMDUxNkQwN0E3N0U2NjNBMTI3REEwNUY4MEQxMzlBRDc2RjBB MUE1MzZBMjZFMzFDMzgzNzBBODc0Mi8wL0JGRTRBRjFFOTJFQzlBRUE5QjM5NTAy MTFEQ0U4NDAxQzQ4MzMzQTYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCURrUE2/yP0juBtSMxHwYT2Kjj 7TZlCtndHgyjjFZiVUbXC8jXRkqJJMgzLbTbSuICb4MBs4mQbXclNohIUinm5FAc QEFh7XTsAoNJQyxbFdM02DYrmdt8FdRTwR9iUlKtYH5d9HeXHNj535qMyJiRu3fZ sx9cGnPCyIL+UFVwPQ6s2wM14EDPUn6v5+dZvmeK904Ex5dGuGC+8P92QFdNDNc4 xrlgdyqLe7nGJbf7COrTQkiPsEYqXPCQD6BnspOQAWjC/3e+2u8STYsgyY6hpEVI UYmakTeyepvFmKw915cLho69s5DdPCiMVTv6+jFlnA1+yqClb5US1iB5if4C -----END CERTIFICATE-----Generated at Tue Apr 22 23:58:50 2025 by rpki-client