$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft File: B3AA883DF802251B99A42D7F578AD8768A729025.mft (raw, json) Hash identifier: YVZgxWTH0d93CuOnnAhSpgTBvnkB1FXcvuQvS86pM5M= Subject key identifier: 97:4D:37:B4:F8:40:CD:52:B2:96:4B:CE:F0:CB:D2:52:1F:DB:D2:77 Authority key identifier: B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25 Certificate issuer: /CN=B3AA883DF802251B99A42D7F578AD8768A729025 Certificate serial: 735FBE230CE685C9ECF98D1E3A9F040D8EF3AB3F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft Manifest number: EA Signing time: Fri 20 Jun 2025 12:12:55 +0000 Manifest this update: Fri 20 Jun 2025 12:07:55 +0000 Manifest next update: Wed 25 Jun 2025 05:33:55 +0000 Files and hashes: 1: 34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa (hash: Ed+TINyonQnupa0zUhcJ76o7sv/DoNLs4QOtK5r729M=) 2: 323830333a653036303a3a2f33322d3332203d3e20323632313931.roa (hash: EWub1SRff2IJH3KVefIE4z3IZH5UpnMFkvS4QpcUCyg=) 3: B3AA883DF802251B99A42D7F578AD8768A729025.crl (hash: ByllylovYZpMZirhi9mEl1u7JmwMUeELkHIVM0En0Bk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 05:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5f:be:23:0c:e6:85:c9:ec:f9:8d:1e:3a:9f:04:0d:8e:f3:ab:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3AA883DF802251B99A42D7F578AD8768A729025 Validity Not Before: Jun 20 12:07:55 2025 GMT Not After : Jun 25 05:33:55 2025 GMT Subject: CN=974D37B4F840CD52B2964BCEF0CBD2521FDBD277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:8e:8a:78:20:ac:0b:c7:43:2e:86:ee:1f: a6:c1:3f:56:83:fc:58:0c:f0:4c:32:23:cc:6f:c1: 02:40:a7:dc:b2:34:71:00:46:4a:89:c5:36:68:e2: b2:01:b3:0d:e3:4f:48:f9:50:57:af:f0:19:f9:0b: 87:e0:26:b3:81:e6:76:fd:e2:2e:d5:4d:87:27:d5: c8:b7:30:90:6b:c6:72:f3:f7:0a:b5:b9:1d:23:3b: ba:a6:ab:ac:5b:39:85:c1:61:c0:d3:06:e8:6d:04: 31:86:d9:d7:bd:1f:a5:8e:64:74:bb:21:d2:e7:e3: 4c:0b:4a:52:c0:f6:71:ea:a6:da:b2:c5:a8:c6:ea: c3:ee:ce:1e:cb:ef:43:31:d4:fc:a3:f9:9e:2c:d0: 8b:cb:dc:aa:99:bf:be:de:fb:59:2f:82:ea:10:e0: 7d:6b:91:3f:fb:85:a5:64:86:75:7d:8b:c1:dd:aa: 87:31:c4:84:70:6b:53:d6:88:0d:d5:c2:06:b8:92: 03:f0:82:a1:c8:c9:30:0e:4b:25:75:ce:51:5b:26: 48:46:3e:ea:a2:10:a5:c2:52:57:c9:58:94:ba:49: 22:e9:27:62:4b:90:86:2f:be:ce:b7:5d:63:6d:19: fc:2d:03:48:af:39:dc:9f:24:06:d5:38:1d:ee:48: 9a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4D:37:B4:F8:40:CD:52:B2:96:4B:CE:F0:CB:D2:52:1F:DB:D2:77 X509v3 Authority Key Identifier: keyid:B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d0:03:75:f6:8c:fa:e0:09:89:dc:b2:f1:12:9d:69:f0:4c: bd:ed:6a:be:02:a7:07:49:fd:d4:6c:82:f8:90:2b:3a:92:53: aa:d0:ac:3d:79:86:7b:0d:42:b6:85:a7:cb:84:34:56:e9:d5: 99:53:59:56:30:29:be:43:42:f4:57:58:21:69:59:65:86:57: cb:51:f5:68:c1:2f:cb:f4:84:c1:48:76:ef:fd:ac:48:c7:08: 79:f1:10:70:b3:a4:18:e7:30:33:05:d9:ec:f4:ef:c5:72:49: 28:70:a9:2e:a0:d3:7c:79:1c:b4:83:4e:61:8b:e0:0b:a5:96: 17:13:91:45:b4:87:bd:eb:09:3c:c4:de:b0:07:18:ff:43:7b: 14:18:e6:4c:8b:52:c6:f0:fe:ac:87:25:18:06:37:82:0c:01: aa:9e:a8:f1:67:83:c9:ce:63:08:2a:0c:74:02:ec:11:9b:7f: 85:bb:84:25:ea:63:14:06:bf:b1:bf:aa:b8:24:b5:74:06:55: 5c:cc:b0:c1:fa:12:11:a1:1b:e4:e7:4d:89:ed:9c:d1:fc:c1: bf:1c:78:96:98:0a:a7:1c:c3:c2:5f:75:3e:09:6c:bf:48:c3: 57:84:a1:cb:c4:59:0f:dc:16:9f:14:bf:de:50:c3:05:b8:db: 1a:6e:97:f5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUc1++Iwzmhcns+Y0eOp8EDY7zqz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBQTg4M0RGODAyMjUxQjk5QTQyRDdGNTc4QUQ4NzY4 QTcyOTAyNTAeFw0yNTA2MjAxMjA3NTVaFw0yNTA2MjUwNTMzNTVaMDMxMTAvBgNV BAMTKDk3NEQzN0I0Rjg0MENENTJCMjk2NEJDRUYwQ0JEMjUyMUZEQkQyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2B46KeCCsC8dDLobuH6bBP1aD /FgM8EwyI8xvwQJAp9yyNHEARkqJxTZo4rIBsw3jT0j5UFev8Bn5C4fgJrOB5nb9 4i7VTYcn1ci3MJBrxnLz9wq1uR0jO7qmq6xbOYXBYcDTBuhtBDGG2de9H6WOZHS7 IdLn40wLSlLA9nHqptqyxajG6sPuzh7L70Mx1Pyj+Z4s0IvL3KqZv77e+1kvguoQ 4H1rkT/7haVkhnV9i8HdqocxxIRwa1PWiA3Vwga4kgPwgqHIyTAOSyV1zlFbJkhG PuqiEKXCUlfJWJS6SSLpJ2JLkIYvvs63XWNtGfwtA0ivOdyfJAbVOB3uSJp1AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUl003tPhAzVKylkvO8MvSUh/b0ncwHwYDVR0j BBgwFoAUs6qIPfgCJRuZpC1/V4rYdopykCUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy80QUFEMzgxRDU2QkIxMjQ2RjlBMDgyMTBCMDJDN0QwNDE0 QkM5OEM4Q0Q3RjlBNjI2ODdERjdCRkNDQTVGNEFFLzAvQjNBQTg4M0RGODAyMjUx Qjk5QTQyRDdGNTc4QUQ4NzY4QTcyOTAyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CM0FBODgzREY4MDIyNTFCOTlB NDJEN0Y1NzhBRDg3NjhBNzI5MDI1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNEFBRDM4MUQ1NkJCMTI0NkY5QTA4MjEwQjAyQzdEMDQxNEJDOThDOENE N0Y5QTYyNjg3REY3QkZDQ0E1RjRBRS8wL0IzQUE4ODNERjgwMjI1MUI5OUE0MkQ3 RjU3OEFEODc2OEE3MjkwMjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAv0AN19oz64AmJ3LLxEp1p8Ey9 7Wq+AqcHSf3UbIL4kCs6klOq0Kw9eYZ7DUK2hafLhDRW6dWZU1lWMCm+Q0L0V1gh aVllhlfLUfVowS/L9ITBSHbv/axIxwh58RBws6QY5zAzBdns9O/FckkocKkuoNN8 eRy0g05hi+ALpZYXE5FFtIe96wk8xN6wBxj/Q3sUGOZMi1LG8P6shyUYBjeCDAGq nqjxZ4PJzmMIKgx0AuwRm3+Fu4Ql6mMUBr+xv6q4JLV0BlVczLDB+hIRoRvk502J 7ZzR/MG/HHiWmAqnHMPCX3U+CWy/SMNXhKHLxFkP3BafFL/eUMMFuNsabpf1 -----END CERTIFICATE-----Generated at Sun Jun 22 05:10:29 2025 by rpki-client