$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft File: 5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft (raw, json) Hash identifier: APaerzQm4Uk1mFhvQPOt6PwU5qJ5wRtzFts5QUWGSgk= Subject key identifier: 42:89:21:CB:6E:B3:C4:CA:4C:74:A0:21:4E:27:30:28:8D:DE:08:3F Authority key identifier: 5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF Certificate issuer: /CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF Certificate serial: 194FD8AA07BFD5B292660942AD8454ED46A48975 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft Manifest number: CC Signing time: Sun 06 Apr 2025 01:21:32 +0000 Manifest this update: Sun 06 Apr 2025 01:16:32 +0000 Manifest next update: Fri 11 Apr 2025 04:32:32 +0000 Files and hashes: 1: 3139322e3138382e34392e302f32342d3234203d3e203237393437.roa (hash: Zqi6zEqpEdSq2B3EwxKnQt67ks2UmCDFBoGkVNDsbTE=) 2: 3139322e3138382e34392e302f32342d3234203d3e203631343638.roa (hash: niuIDn0qR86Q9WtZQ3G/AQpQH9OJHDfcHlT71yc6grE=) 3: 5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl (hash: iwQ7PMg1YHfOQUtNX7M3VAI+rXHWVEJbIETP1pZXg/Y=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4f:d8:aa:07:bf:d5:b2:92:66:09:42:ad:84:54:ed:46:a4:89:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF Validity Not Before: Apr 6 01:16:32 2025 GMT Not After : Apr 11 04:32:32 2025 GMT Subject: CN=428921CB6EB3C4CA4C74A0214E2730288DDE083F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:42:e1:8e:1a:6f:9d:47:12:1f:55:cf:29: 32:6c:8e:f3:47:f5:37:2a:28:9b:7d:f9:40:0c:af: e7:65:ce:84:d4:4d:25:74:97:a5:4c:64:e7:ca:61: a0:9a:34:37:b1:ae:ad:d0:32:68:8a:7d:99:ed:0a: 14:a3:98:3a:00:eb:0e:60:3c:5b:d9:70:40:26:ba: 6a:73:d4:1f:fe:ef:6d:12:63:27:c7:a5:fa:e4:b2: 8f:8a:c6:91:db:8b:1f:ce:73:67:00:78:80:8f:69: 3c:94:4e:05:4c:84:90:07:fc:9d:6e:c9:11:f2:e9: 8f:70:8a:54:6c:c0:ee:8e:fa:c4:11:35:41:f3:30: 9d:06:09:26:9d:07:67:f3:e4:97:3a:be:e0:71:8f: 18:62:38:1d:ee:1f:64:14:83:d5:22:8b:77:ba:05: b2:6d:47:16:5d:30:92:77:4a:fd:45:86:9c:35:c0: 69:f4:8b:c8:d4:79:86:7d:14:29:8f:02:2a:83:6b: d7:b8:93:a0:8f:14:c3:47:a9:f5:14:30:59:a0:d5: 00:ce:41:df:6b:0b:5f:c6:c7:b0:28:d8:dd:53:ef: 12:9e:79:4f:6a:0e:4e:f8:d6:04:79:ec:3a:c2:00: 0a:57:38:eb:3d:58:71:82:a4:1d:87:35:a9:72:e6: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:89:21:CB:6E:B3:C4:CA:4C:74:A0:21:4E:27:30:28:8D:DE:08:3F X509v3 Authority Key Identifier: keyid:5B:3C:B3:BB:EC:DD:54:7F:5A:5D:D5:4A:4F:A6:4B:8F:D4:AC:F7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDBD0FD77E3890C8932089115C66F0F1A808CE7C77B2ECEEA0F396D71244F787/0/5B3CB3BBECDD547F5A5DD54A4FA64B8FD4ACF7EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:99:58:7c:ad:62:7e:ed:dc:57:d8:35:72:15:ec:b0:bb:16: b9:07:74:14:d3:52:cf:4e:f9:29:83:9b:0f:7d:3a:64:e6:7e: 2e:e1:05:02:58:2b:9c:ed:c0:76:94:98:f0:c5:8e:fc:44:2f: b6:2b:03:c3:76:ce:31:dc:98:d8:b2:37:ce:db:48:d6:99:7c: 05:c2:01:c7:51:b5:67:1f:a9:95:7e:93:6a:0b:24:26:38:67: 3c:f0:91:3b:21:7c:f7:7a:30:15:a0:ff:cd:8f:29:b8:bd:a7: 70:0d:82:fb:ee:ff:15:e6:40:97:b6:d9:0f:10:af:0b:60:c6: 6e:92:dc:cb:5d:ad:d5:be:18:8e:3e:60:a3:a0:16:0a:ac:6b: bb:35:de:88:55:82:7f:46:40:3e:ba:e0:c1:d6:9d:c2:ca:92: 06:33:76:c4:fd:54:48:55:81:52:6f:bf:30:3d:95:5b:3d:b6: 9a:2d:0b:b8:6d:c5:9b:03:61:14:53:2d:cc:84:da:ec:ee:87: f5:78:4b:3b:65:10:58:6a:ca:a8:ab:08:1e:0b:57:15:3a:2a: 35:a5:ac:fb:a5:cc:c1:81:56:63:6d:72:01:b9:c8:89:80:ee: 62:18:f6:69:19:1c:3b:c5:39:fa:ac:ff:5e:10:2d:ba:fa:0e: a7:b2:68:61 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGU/Yqge/1bKSZglCrYRU7UakiXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIzQ0IzQkJFQ0RENTQ3RjVBNURENTRBNEZBNjRCOEZE NEFDRjdFRjAeFw0yNTA0MDYwMTE2MzJaFw0yNTA0MTEwNDMyMzJaMDMxMTAvBgNV BAMTKDQyODkyMUNCNkVCM0M0Q0E0Qzc0QTAyMTRFMjczMDI4OERERTA4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg90LhjhpvnUcSH1XPKTJsjvNH 9TcqKJt9+UAMr+dlzoTUTSV0l6VMZOfKYaCaNDexrq3QMmiKfZntChSjmDoA6w5g PFvZcEAmumpz1B/+720SYyfHpfrkso+KxpHbix/Oc2cAeICPaTyUTgVMhJAH/J1u yRHy6Y9wilRswO6O+sQRNUHzMJ0GCSadB2fz5Jc6vuBxjxhiOB3uH2QUg9Uii3e6 BbJtRxZdMJJ3Sv1Fhpw1wGn0i8jUeYZ9FCmPAiqDa9e4k6CPFMNHqfUUMFmg1QDO Qd9rC1/Gx7Ao2N1T7xKeeU9qDk741gR57DrCAApXOOs9WHGCpB2HNaly5ibnAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUQokhy26zxMpMdKAhTicwKI3eCD8wHwYDVR0j BBgwFoAUWzyzu+zdVH9aXdVKT6ZLj9Ss9+8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9FREJEMEZENzdFMzg5MEM4OTMyMDg5MTE1QzY2RjBGMUE4 MDhDRTdDNzdCMkVDRUVBMEYzOTZENzEyNDRGNzg3LzAvNUIzQ0IzQkJFQ0RENTQ3 RjVBNURENTRBNEZBNjRCOEZENEFDRjdFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjNDQjNCQkVDREQ1NDdGNUE1 REQ1NEE0RkE2NEI4RkQ0QUNGN0VGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvRURCRDBGRDc3RTM4OTBDODkzMjA4OTExNUM2NkYwRjFBODA4Q0U3Qzc3 QjJFQ0VFQTBGMzk2RDcxMjQ0Rjc4Ny8wLzVCM0NCM0JCRUNERDU0N0Y1QTVERDU0 QTRGQTY0QjhGRDRBQ0Y3RUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHmVh8rWJ+7dxX2DVyFeywuxa5 B3QU01LPTvkpg5sPfTpk5n4u4QUCWCuc7cB2lJjwxY78RC+2KwPDds4x3JjYsjfO 20jWmXwFwgHHUbVnH6mVfpNqCyQmOGc88JE7IXz3ejAVoP/Njym4vadwDYL77v8V 5kCXttkPEK8LYMZuktzLXa3VvhiOPmCjoBYKrGu7Nd6IVYJ/RkA+uuDB1p3CypIG M3bE/VRIVYFSb78wPZVbPbaaLQu4bcWbA2EUUy3MhNrs7of1eEs7ZRBYasqoqwge C1cVOio1paz7pczBgVZjbXIBuciJgO5iGPZpGRw7xTn6rP9eEC26+g6nsmhh -----END CERTIFICATE-----Generated at Sun Apr 6 08:05:08 2025 by rpki-client