$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft File: 57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft (raw, json) Hash identifier: x/FtvzE/bHZHGpDGCdm5wcYCC19g5zMy78odAzoxAQI= Subject key identifier: 53:BE:4A:3B:3D:D5:E8:6E:C5:32:68:4A:1A:3D:76:41:A2:85:1D:33 Authority key identifier: 57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41 Certificate issuer: /CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41 Certificate serial: 11EFD74D286C79D6DE9117570114FF9C9B9A51E6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft Manifest number: E5 Signing time: Mon 02 Jun 2025 11:51:06 +0000 Manifest this update: Mon 02 Jun 2025 11:46:06 +0000 Manifest next update: Sun 08 Jun 2025 08:53:06 +0000 Files and hashes: 1: 323830363a3332633a3a2f33322d3332203d3e20323635353334.roa (hash: IUgTQ1jt+m23YE3hZFpP8mesUFWH4CullPoLv94DQI4=) 2: 34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa (hash: y82JpCiQWiwHdhkL+cYveCa/G6ofUko8YcVgxzajMP4=) 3: 57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl (hash: yhUwH71i6jN8ncBh4GtHb9vmlNWofF2ia1XkuWAR2XY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ef:d7:4d:28:6c:79:d6:de:91:17:57:01:14:ff:9c:9b:9a:51:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41 Validity Not Before: Jun 2 11:46:06 2025 GMT Not After : Jun 8 08:53:06 2025 GMT Subject: CN=53BE4A3B3DD5E86EC532684A1A3D7641A2851D33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:7f:bc:d5:2d:b9:42:e0:11:d4:77:b6:f2: a4:98:bf:90:a6:51:8f:6a:c7:5d:7c:60:81:47:9d: 2c:56:0b:1c:b6:0a:6b:35:26:b9:9d:79:cc:75:0b: b9:6c:bc:57:eb:09:0b:a9:d9:19:1a:32:67:b3:15: e9:63:ee:dd:c8:64:2b:7f:3f:a2:7b:2c:79:1c:1a: 6e:76:57:5d:17:59:13:51:8a:70:36:57:b9:d9:bf: 9a:98:80:81:b7:5d:72:3b:e1:50:ef:3c:e0:c8:89: f1:96:74:42:08:e0:27:0a:5b:62:d4:20:a3:fd:d6: 4a:af:88:44:7f:29:68:15:2a:e7:70:5d:05:10:bc: 9b:41:51:b3:75:da:0f:5d:4d:c3:4c:1b:c8:ee:59: bb:65:b6:4f:73:02:0b:eb:0a:56:ef:c8:51:5f:f9: 3c:db:9d:89:8b:84:f4:4d:5c:e9:9b:a6:f5:d1:5b: 87:ca:50:f5:50:08:59:c1:3a:14:4f:97:9c:32:67: b0:ac:d1:a3:82:55:a4:48:32:e8:f5:1d:d3:55:70: 8d:1a:68:fa:95:79:25:89:3e:b1:62:88:e3:e9:c6: 4f:ce:27:ee:76:ac:36:56:69:fa:fd:10:e8:09:9e: 81:e3:b5:2f:14:47:16:05:14:1a:b3:93:1e:4f:a2: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BE:4A:3B:3D:D5:E8:6E:C5:32:68:4A:1A:3D:76:41:A2:85:1D:33 X509v3 Authority Key Identifier: keyid:57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b6:c3:1e:de:d5:8c:30:18:6e:5b:8f:43:00:12:02:16:e0: 7b:42:b5:77:f8:5a:23:85:6c:a8:97:31:80:4b:b8:36:a8:46: 44:c8:1e:02:eb:55:e4:f4:07:1c:2e:e6:41:cb:bd:1b:98:aa: ee:d4:6e:87:18:da:fe:7a:e8:f4:5e:94:35:a0:8b:b6:75:30: a0:cc:98:17:1f:5d:d3:96:46:77:08:91:ec:1e:53:3a:b5:2d: 4b:8c:2b:d5:89:25:14:94:a5:95:81:83:59:86:6e:22:25:b7: 7b:e5:4d:89:36:d8:f6:b5:13:56:92:39:77:44:9d:ee:7d:6c: 0a:33:60:b0:58:ee:04:0b:07:b6:22:5c:e9:79:cb:1e:79:25: 3f:8d:c8:fd:19:88:65:46:34:fa:3b:9b:f9:26:f4:85:da:a6: 43:ce:e1:5d:00:94:de:21:22:04:03:73:5c:20:01:d5:b5:2e: 5f:ea:09:66:10:33:96:77:e3:71:40:14:bb:62:3a:70:66:81: 3d:32:52:fe:fc:bd:22:91:47:0f:1b:e7:d9:f0:13:b2:9a:a2: bd:b6:44:12:83:5f:fa:8c:eb:cf:40:d6:8a:c3:b1:82:42:9e: 3b:37:f3:9f:6e:43:db:8e:ee:91:84:48:46:44:c3:e0:8f:35: cb:ce:d4:58 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEe/XTShsedbekRdXART/nJuaUeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCMjBEM0VDMjE5NjFBNjUwNURDQTBBRDBCMzNEQzMz QzVDQ0Q0MTAeFw0yNTA2MDIxMTQ2MDZaFw0yNTA2MDgwODUzMDZaMDMxMTAvBgNV BAMTKDUzQkU0QTNCM0RENUU4NkVDNTMyNjg0QTFBM0Q3NjQxQTI4NTFEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFln+81S25QuAR1He28qSYv5Cm UY9qx118YIFHnSxWCxy2Cms1Jrmdecx1C7lsvFfrCQup2RkaMmezFelj7t3IZCt/ P6J7LHkcGm52V10XWRNRinA2V7nZv5qYgIG3XXI74VDvPODIifGWdEII4CcKW2LU IKP91kqviER/KWgVKudwXQUQvJtBUbN12g9dTcNMG8juWbtltk9zAgvrClbvyFFf +TzbnYmLhPRNXOmbpvXRW4fKUPVQCFnBOhRPl5wyZ7Cs0aOCVaRIMuj1HdNVcI0a aPqVeSWJPrFiiOPpxk/OJ+52rDZWafr9EOgJnoHjtS8URxYFFBqzkx5Pop6tAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUU75KOz3V6G7FMmhKGj12QaKFHTMwHwYDVR0j BBgwFoAUV7INPsIZYaZQXcoK0LM9wzxczUEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EMzgyNUE3QUVCQkQ3OEUxMzQ4QzNDMDdCQkJBM0QxREJF MDQwQjE1NDlCMkI3MTEzOUU2QjgxMDhCOUYyMzgyLzAvNTdCMjBEM0VDMjE5NjFB NjUwNURDQTBBRDBCMzNEQzMzQzVDQ0Q0MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81N0IyMEQzRUMyMTk2MUE2NTA1 RENBMEFEMEIzM0RDMzNDNUNDRDQxLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDM4MjVBN0FFQkJENzhFMTM0OEMzQzA3QkJCQTNEMURCRTA0MEIxNTQ5 QjJCNzExMzlFNkI4MTA4QjlGMjM4Mi8wLzU3QjIwRDNFQzIxOTYxQTY1MDVEQ0Ew QUQwQjMzREMzM0M1Q0NENDEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRtsMe3tWMMBhuW49DABICFuB7 QrV3+FojhWyolzGAS7g2qEZEyB4C61Xk9AccLuZBy70bmKru1G6HGNr+euj0XpQ1 oIu2dTCgzJgXH13TlkZ3CJHsHlM6tS1LjCvViSUUlKWVgYNZhm4iJbd75U2JNtj2 tRNWkjl3RJ3ufWwKM2CwWO4ECwe2IlzpecseeSU/jcj9GYhlRjT6O5v5JvSF2qZD zuFdAJTeISIEA3NcIAHVtS5f6glmEDOWd+NxQBS7YjpwZoE9MlL+/L0ikUcPG+fZ 8BOymqK9tkQSg1/6jOvPQNaKw7GCQp47N/OfbkPbju6RhEhGRMPgjzXLztRY -----END CERTIFICATE-----Generated at Wed Jun 4 12:31:11 2025 by rpki-client