$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft File: 3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft (raw, json) Hash identifier: TSUHbAWzeLiOUGDePjjF/5Srf0wEM58sPCoJrW6PZxs= Subject key identifier: D9:F4:07:66:2B:07:C1:9B:89:E8:CA:E0:BA:D7:48:CC:FF:C7:BE:54 Authority key identifier: 38:02:AD:95:B7:CA:CA:97:DD:F1:7A:EB:D1:AA:A9:14:EE:98:8E:98 Certificate issuer: /CN=3802AD95B7CACA97DDF17AEBD1AAA914EE988E98 Certificate serial: 4EB9C170A0280F8BD71BB437C17335B4047F7157 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft Manifest number: ED Signing time: Fri 20 Jun 2025 15:29:58 +0000 Manifest this update: Fri 20 Jun 2025 15:24:58 +0000 Manifest next update: Wed 25 Jun 2025 19:02:58 +0000 Files and hashes: 1: 34352e3233372e35322e302f32332d3233203d3e203532333138.roa (hash: Qpc8Xafi+7AHWwwtWYDUOqS8hu5mKTz8j5YiTyl4194=) 2: 323830313a31663a373030303a3a2f34382d3438203d3e203532333138.roa (hash: Kfvr5R9prHiIS6VB2ko57uvQAn4L4NXIsOgke+ci+k0=) 3: 3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl (hash: M0swLcfTK2TNlyvdau8eKzMyJB4GK5149d2uFY+SAnk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 19:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b9:c1:70:a0:28:0f:8b:d7:1b:b4:37:c1:73:35:b4:04:7f:71:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3802AD95B7CACA97DDF17AEBD1AAA914EE988E98 Validity Not Before: Jun 20 15:24:58 2025 GMT Not After : Jun 25 19:02:58 2025 GMT Subject: CN=D9F407662B07C19B89E8CAE0BAD748CCFFC7BE54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:f7:41:82:95:8b:7b:ef:46:25:0d:c3:c7: 18:0b:f4:62:38:06:21:b6:13:b7:29:ae:ce:af:b9: 29:f0:c6:c9:e6:22:82:79:27:6c:47:77:d0:b3:23: 06:eb:e7:49:e9:6a:25:0b:97:f6:e6:e3:8c:41:36: 3e:47:0e:1b:4f:ed:a2:c3:9c:e1:46:09:84:68:72: 3f:53:0f:c9:fc:c3:f3:6d:f4:24:66:ee:53:c1:32: e5:6b:e1:6a:0a:bc:e3:fa:74:6e:04:1f:7b:ce:f5: 8b:93:f6:5a:7e:1b:6b:0c:3d:25:82:28:dc:31:2a: e9:cd:74:73:d3:bc:07:cf:0d:07:fd:5a:bf:1f:5e: b2:2b:ea:4c:4c:40:27:f8:16:a8:1a:66:cd:9f:fa: f6:0c:a8:56:7b:8a:55:cf:00:de:83:cd:46:ee:f9: 12:8f:fd:4f:f3:20:6d:7f:0f:02:46:c1:b6:c5:6a: ad:6b:41:b4:76:16:29:c4:1a:61:4a:c1:f7:89:85: 67:c5:08:22:44:bd:f0:42:68:db:04:be:f4:67:de: 8c:b7:3c:e6:9b:ac:17:3d:e9:0d:e5:03:73:39:00: 8d:a4:b8:76:77:86:07:2f:21:b8:69:70:bf:a5:e2: 34:ab:b8:4a:d0:1c:b0:88:54:77:8f:d8:30:4d:1c: e0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F4:07:66:2B:07:C1:9B:89:E8:CA:E0:BA:D7:48:CC:FF:C7:BE:54 X509v3 Authority Key Identifier: keyid:38:02:AD:95:B7:CA:CA:97:DD:F1:7A:EB:D1:AA:A9:14:EE:98:8E:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BDC4006B2D7EA9E59D54B452005C51A260DD47CC6CABA7D577D1CE2D13801/0/3802AD95B7CACA97DDF17AEBD1AAA914EE988E98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:08:d2:98:99:34:71:c9:a2:56:30:41:f0:d5:46:1d:0f:9d: 74:7a:8e:0a:f3:97:4c:4a:b1:a2:6e:2f:cf:58:5e:ad:64:27: 3b:49:79:86:0f:d7:8c:71:f5:44:0c:0c:b0:70:69:a6:5f:e3: 85:a6:ad:6c:c1:78:fc:2a:e7:6b:5e:2f:19:4b:b5:78:ec:fe: 41:b2:3c:8d:fe:1a:95:da:7f:a9:ae:c6:61:62:c4:c0:61:c8: d3:99:22:00:0b:85:54:d2:3b:eb:f9:9e:17:e4:00:78:9b:9e: e5:b6:9c:fe:da:72:fd:3c:8f:43:7c:d7:9b:01:b0:24:19:48: 4a:1b:73:f6:96:0b:9f:ea:4a:ed:c5:e2:b5:a0:95:f3:ca:fc: b1:bd:a0:5f:cd:1a:6a:90:66:14:88:b9:87:e9:ca:53:29:a5: 9a:7f:37:6b:24:5a:b1:2e:0f:bb:55:55:91:19:49:b9:8d:02: d3:f8:8a:4e:93:9d:c0:9c:62:e4:6d:16:2a:e6:38:f6:0a:df: a8:58:35:63:bb:bd:fd:bc:43:e7:cf:5f:9b:6a:d9:41:bf:82: c8:0f:b1:ff:70:33:d3:12:b5:7b:a9:07:03:ab:bf:58:e5:ca: 4c:12:b7:95:17:f7:5d:b2:75:5a:95:ee:70:0e:f3:8a:2d:10: 66:08:a3:6e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTrnBcKAoD4vXG7Q3wXM1tAR/cVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgwMkFEOTVCN0NBQ0E5N0RERjE3QUVCRDFBQUE5MTRF RTk4OEU5ODAeFw0yNTA2MjAxNTI0NThaFw0yNTA2MjUxOTAyNThaMDMxMTAvBgNV BAMTKEQ5RjQwNzY2MkIwN0MxOUI4OUU4Q0FFMEJBRDc0OENDRkZDN0JFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7PdBgpWLe+9GJQ3DxxgL9GI4 BiG2E7cprs6vuSnwxsnmIoJ5J2xHd9CzIwbr50npaiULl/bm44xBNj5HDhtP7aLD nOFGCYRocj9TD8n8w/Nt9CRm7lPBMuVr4WoKvOP6dG4EH3vO9YuT9lp+G2sMPSWC KNwxKunNdHPTvAfPDQf9Wr8fXrIr6kxMQCf4FqgaZs2f+vYMqFZ7ilXPAN6DzUbu +RKP/U/zIG1/DwJGwbbFaq1rQbR2FinEGmFKwfeJhWfFCCJEvfBCaNsEvvRn3oy3 POabrBc96Q3lA3M5AI2kuHZ3hgcvIbhpcL+l4jSruErQHLCIVHeP2DBNHOB3AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU2fQHZisHwZuJ6MrgutdIzP/HvlQwHwYDVR0j BBgwFoAUOAKtlbfKypfd8Xrr0aqpFO6YjpgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy81RDVCREM0MDA2QjJEN0VBOUU1OUQ1NEI0NTIwMDVDNTFB MjYwREQ0N0NDNkNBQkE3RDU3N0QxQ0UyRDEzODAxLzAvMzgwMkFEOTVCN0NBQ0E5 N0RERjE3QUVCRDFBQUE5MTRFRTk4OEU5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zODAyQUQ5NUI3Q0FDQTk3RERG MTdBRUJEMUFBQTkxNEVFOTg4RTk4LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNUQ1QkRDNDAwNkIyRDdFQTlFNTlENTRCNDUyMDA1QzUxQTI2MERENDdD QzZDQUJBN0Q1NzdEMUNFMkQxMzgwMS8wLzM4MDJBRDk1QjdDQUNBOTdEREYxN0FF QkQxQUFBOTE0RUU5ODhFOTgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmCNKYmTRxyaJWMEHw1UYdD510 eo4K85dMSrGibi/PWF6tZCc7SXmGD9eMcfVEDAywcGmmX+OFpq1swXj8KudrXi8Z S7V47P5BsjyN/hqV2n+prsZhYsTAYcjTmSIAC4VU0jvr+Z4X5AB4m57ltpz+2nL9 PI9DfNebAbAkGUhKG3P2lguf6krtxeK1oJXzyvyxvaBfzRpqkGYUiLmH6cpTKaWa fzdrJFqxLg+7VVWRGUm5jQLT+IpOk53AnGLkbRYq5jj2Ct+oWDVju739vEPnz1+b atlBv4LID7H/cDPTErV7qQcDq79Y5cpMEreVF/ddsnVale5wDvOKLRBmCKNu -----END CERTIFICATE-----Generated at Sun Jun 22 19:07:32 2025 by rpki-client