$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft File: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft (raw, json) Hash identifier: BKBQ2OIFcXGMa3uYd+vrEQCsgjCIbWByX2jM5GZtDRs= Subject key identifier: EB:34:BD:5B:EC:5C:F7:C7:E5:CF:A6:A3:85:C1:74:FC:52:E2:EF:73 Authority key identifier: 42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 Certificate issuer: /CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Certificate serial: 21213C970DEE277842698E0886BD422A054B7184 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft Manifest number: EA Signing time: Tue 03 Jun 2025 14:21:49 +0000 Manifest this update: Tue 03 Jun 2025 14:16:49 +0000 Manifest next update: Sun 08 Jun 2025 14:17:49 +0000 Files and hashes: 1: 42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl (hash: YbOT1MIaXHjMPeF8vLVOQ6CtS9cvLQgKJwnVP9INjmI=) 2: 323830333a353531303a3a2f33322d3634203d3e20323732303330.roa (hash: aEjGzC9WyQcaAq/pDczNBjuThFt4XEwbTDLIcE0Y+Vs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:21:3c:97:0d:ee:27:78:42:69:8e:08:86:bd:42:2a:05:4b:71:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9 Validity Not Before: Jun 3 14:16:49 2025 GMT Not After : Jun 8 14:17:49 2025 GMT Subject: CN=EB34BD5BEC5CF7C7E5CFA6A385C174FC52E2EF73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:27:b0:f0:85:00:51:aa:0f:63:14:ec:0c: 16:d6:7d:ae:f3:b2:d3:88:e4:04:f0:28:70:a1:ae: 9b:5e:c8:8c:2a:28:9a:01:9a:f8:23:19:59:90:c3: 0f:f8:8a:97:54:52:cf:2d:3a:f0:e6:18:a2:85:43: 13:c9:08:27:2f:5c:da:77:86:fb:e7:11:08:2a:88: 02:c6:4c:d9:b9:8c:1f:2c:91:1f:47:ee:bb:46:be: c2:b9:11:6a:64:a6:b7:04:9e:79:14:97:99:14:9a: 83:19:6e:d7:d8:e8:d5:12:4e:84:ac:8b:55:9b:20: 10:5c:ef:c1:45:b5:ff:bf:75:b6:50:d8:fb:51:27: ba:1f:d9:b2:a0:25:17:6b:69:53:62:6a:b3:85:4b: 03:03:72:f8:5e:98:00:f6:a1:ab:a6:a5:f6:07:29: 7f:8b:58:c8:4d:5b:40:01:d6:54:1c:5d:ec:ec:ba: b1:11:f5:87:55:e3:36:f8:f4:27:24:2d:e7:b0:82: 69:23:9d:a5:32:7e:04:44:8b:d1:30:16:a7:39:82: 59:d1:58:10:7d:d0:e9:fa:26:14:2e:e4:ed:72:a5: c1:81:00:f7:6d:0c:bf:e2:ca:99:3d:92:3a:60:9f: d0:8a:c2:a0:9e:c3:bb:aa:47:14:37:2c:b6:44:d3: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:34:BD:5B:EC:5C:F7:C7:E5:CF:A6:A3:85:C1:74:FC:52:E2:EF:73 X509v3 Authority Key Identifier: keyid:42:CF:E7:E9:6F:76:73:9A:D2:C4:9C:EB:F7:BC:0E:6C:EA:9C:98:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D900356C699D032D504A8B27B1D9B9F6139433777A447405689540C94E6DD9F4/0/42CFE7E96F76739AD2C49CEBF7BC0E6CEA9C98A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ef:22:38:ca:43:6b:6a:3b:5c:ac:a8:85:9a:18:ca:9b:49: 64:ca:7f:f8:4b:71:b3:f7:3f:65:5b:e8:ca:a7:63:21:73:b4: 23:1e:7a:02:6e:48:5b:bd:ea:af:6d:57:84:d1:12:5b:38:c9: 5d:74:b2:23:1a:17:7d:5d:93:ed:7f:d1:35:01:ba:f7:95:36: 4b:b1:52:9e:0d:a3:c0:10:4f:a8:62:56:9a:11:4c:49:07:dd: 4c:e9:65:ff:b8:ff:84:da:bd:43:df:04:ce:7e:ac:ca:01:c9: ea:59:a5:9d:83:cc:8e:a1:f0:56:26:c6:0f:35:d4:04:60:71: b8:b4:03:aa:d7:5a:d8:b9:ab:83:63:40:56:da:71:91:2b:7b: c3:79:93:70:90:ab:a1:51:8b:fd:ca:cf:ab:a0:8d:5f:62:dc: d3:f4:a1:aa:48:7f:da:9e:c1:ad:bc:7d:c6:b4:48:9e:6a:33: 41:18:9e:90:7b:b3:3a:46:52:e6:33:9a:4b:6b:28:a0:37:94: 5f:c4:42:72:7a:26:8c:4b:dc:b0:04:b1:1c:83:75:48:f0:17: 5d:be:54:6e:fd:63:85:08:0c:de:5b:9c:d2:6c:c3:0e:d3:eb: a5:18:fb:87:01:fc:d6:1f:ca:5f:ad:75:31:67:4b:96:3d:5a: e8:e9:05:25 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUISE8lw3uJ3hCaY4Ihr1CKgVLcYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRkU3RTk2Rjc2NzM5QUQyQzQ5Q0VCRjdCQzBFNkNF QTlDOThBOTAeFw0yNTA2MDMxNDE2NDlaFw0yNTA2MDgxNDE3NDlaMDMxMTAvBgNV BAMTKEVCMzRCRDVCRUM1Q0Y3QzdFNUNGQTZBMzg1QzE3NEZDNTJFMkVGNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWYCew8IUAUaoPYxTsDBbWfa7z stOI5ATwKHChrpteyIwqKJoBmvgjGVmQww/4ipdUUs8tOvDmGKKFQxPJCCcvXNp3 hvvnEQgqiALGTNm5jB8skR9H7rtGvsK5EWpkprcEnnkUl5kUmoMZbtfY6NUSToSs i1WbIBBc78FFtf+/dbZQ2PtRJ7of2bKgJRdraVNiarOFSwMDcvhemAD2oaumpfYH KX+LWMhNW0AB1lQcXezsurER9YdV4zb49CckLeewgmkjnaUyfgREi9EwFqc5glnR WBB90On6JhQu5O1ypcGBAPdtDL/iypk9kjpgn9CKwqCew7uqRxQ3LLZE06O3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6zS9W+xc98flz6ajhcF0/FLi73MwHwYDVR0j BBgwFoAUQs/n6W92c5rSxJzr97wObOqcmKkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9EOTAwMzU2QzY5OUQwMzJENTA0QThCMjdCMUQ5QjlGNjEz OTQzMzc3N0E0NDc0MDU2ODk1NDBDOTRFNkREOUY0LzAvNDJDRkU3RTk2Rjc2NzM5 QUQyQzQ5Q0VCRjdCQzBFNkNFQTlDOThBOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MkNGRTdFOTZGNzY3MzlBRDJD NDlDRUJGN0JDMEU2Q0VBOUM5OEE5LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRDkwMDM1NkM2OTlEMDMyRDUwNEE4QjI3QjFEOUI5RjYxMzk0MzM3NzdB NDQ3NDA1Njg5NTQwQzk0RTZERDlGNC8wLzQyQ0ZFN0U5NkY3NjczOUFEMkM0OUNF QkY3QkMwRTZDRUE5Qzk4QTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBT7yI4ykNrajtcrKiFmhjKm0lk yn/4S3Gz9z9lW+jKp2Mhc7QjHnoCbkhbveqvbVeE0RJbOMlddLIjGhd9XZPtf9E1 Abr3lTZLsVKeDaPAEE+oYlaaEUxJB91M6WX/uP+E2r1D3wTOfqzKAcnqWaWdg8yO ofBWJsYPNdQEYHG4tAOq11rYuauDY0BW2nGRK3vDeZNwkKuhUYv9ys+roI1fYtzT 9KGqSH/ansGtvH3GtEieajNBGJ6Qe7M6RlLmM5pLayigN5RfxEJyeiaMS9ywBLEc g3VI8BddvlRu/WOFCAzeW5zSbMMO0+ulGPuHAfzWH8pfrXUxZ0uWPVro6QUl -----END CERTIFICATE-----Generated at Wed Jun 4 12:33:48 2025 by rpki-client