$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft File: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft (raw, json) Hash identifier: 8O0G3pavTydvqJ5CIMyLobc+WwFZKIC+aqDn8pF0NtE= Subject key identifier: 0E:7B:A1:48:B3:F9:DF:86:81:85:0D:75:05:F4:14:F1:02:62:0C:3E Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 Certificate issuer: /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Certificate serial: 2F1DBF34A486953BAA8F195CC8E2023BBE546B89 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft Manifest number: D8 Signing time: Wed 07 May 2025 10:06:38 +0000 Manifest this update: Wed 07 May 2025 10:01:38 +0000 Manifest next update: Mon 12 May 2025 01:42:38 +0000 Files and hashes: 1: 34352e3233302e382e302f32322d3234203d3e20323636373130.roa (hash: mLPmwLCgJH7/6VKEK4Pcz7wxnHkCNUH5wI8HmFmJB1E=) 2: 323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (hash: lHM7TXuZJiuk5ar5OftYzmGGnYQusx4CcGk57kh5X5g=) 3: BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl (hash: EPvXoYSgDcFGXTKJLtRxmTeNmCS7sHVpKTVRJ3SQI4g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 01:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1d:bf:34:a4:86:95:3b:aa:8f:19:5c:c8:e2:02:3b:be:54:6b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5 Validity Not Before: May 7 10:01:38 2025 GMT Not After : May 12 01:42:38 2025 GMT Subject: CN=0E7BA148B3F9DF8681850D7505F414F102620C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:2b:30:1e:d2:ec:98:f4:b3:18:e6:36:e5: 0e:a1:61:bc:78:fb:4c:18:35:14:5b:ce:d9:48:c7: 3d:99:a5:54:47:7b:14:9c:24:f3:1e:30:c2:44:90: 89:83:70:f7:2a:22:c4:b7:a6:1c:8f:bc:00:7b:db: 28:62:be:d8:bf:ee:f5:1b:90:29:67:91:ee:b7:37: c4:64:a4:87:e9:e5:88:fd:d8:40:12:e5:97:9b:3d: 48:3c:25:43:0f:76:e2:af:80:d4:97:65:b8:de:af: b8:45:67:37:94:92:1f:94:a2:4d:1f:79:e1:17:10: 12:f0:f0:2b:eb:0d:aa:01:ba:f9:71:d4:ca:86:88: f9:67:c1:95:a4:61:2a:59:1e:88:33:a8:6f:79:a3: 92:74:79:04:7b:6f:39:24:c9:c3:e6:70:2c:4e:f4: dd:71:aa:1c:f6:80:a8:8c:1d:6f:7c:30:be:7e:ec: 95:a0:e0:03:92:a0:dd:c5:12:d8:46:8e:f1:a3:35: 8d:ca:3f:87:42:4f:af:93:db:59:43:f8:e3:e0:09: 67:0f:28:79:98:1c:90:7d:31:eb:fd:98:ec:21:a4: aa:ba:56:4b:19:81:0c:73:1e:7d:fc:b0:be:46:ab: aa:bf:78:7d:aa:8f:98:e7:8a:73:34:d4:eb:43:91: 45:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7B:A1:48:B3:F9:DF:86:81:85:0D:75:05:F4:14:F1:02:62:0C:3E X509v3 Authority Key Identifier: keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1e:81:22:31:5a:0d:e9:ac:65:0c:a2:26:b6:76:80:44:93: df:62:c0:38:35:64:e4:c9:8a:89:3a:5a:87:b6:08:56:ed:cf: f4:21:9e:f5:fe:1a:20:9b:0c:79:33:04:57:b6:bc:5f:4c:51: 3a:88:29:2e:f2:b4:a1:45:d7:4f:99:91:a5:0d:55:9d:bf:6b: c6:d0:f4:01:f5:cd:5c:d2:f9:68:db:1c:7a:a7:45:f7:8b:df: 28:f7:92:ee:04:f3:3c:85:75:cb:c8:c0:fc:75:83:0f:b6:e0: f6:19:10:13:c1:50:b2:90:7d:7f:4c:0a:cd:4f:a3:b2:57:b1: bb:57:7d:46:a7:86:2a:a4:1f:be:31:c8:17:c5:99:44:cd:7a: b0:a0:5b:c7:93:75:76:70:35:08:c6:40:82:fd:64:0b:03:de: c5:ba:38:55:52:79:6b:f0:36:14:3f:83:8c:69:b8:57:fc:9a: 49:b6:ef:b1:22:2c:3a:a6:37:04:ec:4c:f9:9e:5b:7a:9f:50: c7:a2:e9:83:f6:ab:e2:03:87:05:08:59:fc:42:9e:b0:5c:51: 99:f2:47:12:7a:af:70:89:6a:9d:98:9f:d3:e3:9f:de:cb:f1: 2e:6d:1c:62:b2:ed:14:cf:ba:c1:0b:0f:5b:5e:df:26:23:f5: d5:cb:2a:d7 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULx2/NKSGlTuqjxlcyOICO75Ua4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEQzMwNjhBOUFFNzgzODRFNUE0RjRGNTI0NEJBRTQw ODgwNTlFNTAeFw0yNTA1MDcxMDAxMzhaFw0yNTA1MTIwMTQyMzhaMDMxMTAvBgNV BAMTKDBFN0JBMTQ4QjNGOURGODY4MTg1MEQ3NTA1RjQxNEYxMDI2MjBDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQSswHtLsmPSzGOY25Q6hYbx4 +0wYNRRbztlIxz2ZpVRHexScJPMeMMJEkImDcPcqIsS3phyPvAB72yhivti/7vUb kClnke63N8RkpIfp5Yj92EAS5ZebPUg8JUMPduKvgNSXZbjer7hFZzeUkh+Uok0f eeEXEBLw8CvrDaoBuvlx1MqGiPlnwZWkYSpZHogzqG95o5J0eQR7bzkkycPmcCxO 9N1xqhz2gKiMHW98ML5+7JWg4AOSoN3FEthGjvGjNY3KP4dCT6+T21lD+OPgCWcP KHmYHJB9Mev9mOwhpKq6VksZgQxzHn38sL5Gq6q/eH2qj5jninM01OtDkUXZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUDnuhSLP534aBhQ11BfQU8QJiDD4wHwYDVR0j BBgwFoAUu9wwaKmueDhOWk9PUkS65AiAWeUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80NDIzMzIwQzgwNUQ4QkVFRkM0MjQyQzU2NzFEODQ0NTY3 NjNBRERGQURFRTA0RTQyQTFBMUQ0NERDRkJEMkEzLzAvQkJEQzMwNjhBOUFFNzgz ODRFNUE0RjRGNTI0NEJBRTQwODgwNTlFNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQkRDMzA2OEE5QUU3ODM4NEU1 QTRGNEY1MjQ0QkFFNDA4ODA1OUU1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNDQyMzMyMEM4MDVEOEJFRUZDNDI0MkM1NjcxRDg0NDU2NzYzQURERkFE RUUwNEU0MkExQTFENDREQ0ZCRDJBMy8wL0JCREMzMDY4QTlBRTc4Mzg0RTVBNEY0 RjUyNDRCQUU0MDg4MDU5RTUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPHoEiMVoN6axlDKImtnaARJPf YsA4NWTkyYqJOlqHtghW7c/0IZ71/hogmwx5MwRXtrxfTFE6iCku8rShRddPmZGl DVWdv2vG0PQB9c1c0vlo2xx6p0X3i98o95LuBPM8hXXLyMD8dYMPtuD2GRATwVCy kH1/TArNT6OyV7G7V31Gp4YqpB++McgXxZlEzXqwoFvHk3V2cDUIxkCC/WQLA97F ujhVUnlr8DYUP4OMabhX/JpJtu+xIiw6pjcE7Ez5nlt6n1DHoumD9qviA4cFCFn8 Qp6wXFGZ8kcSeq9wiWqdmJ/T45/ey/EubRxisu0Uz7rBCw9bXt8mI/XVyyrX -----END CERTIFICATE-----Generated at Thu May 8 19:29:46 2025 by rpki-client