$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft File: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft (raw, json) Hash identifier: J1IQ8KMSnS6HBataMcgmm3LlHYEeTzexl8DcCwr05j0= Subject key identifier: 6B:1C:35:E9:4D:67:98:8E:57:EB:27:25:E9:87:CA:0F:68:4C:12:A6 Authority key identifier: AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF Certificate issuer: /CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Certificate serial: 40711B1AA4713026F0FEB06BB0EE146509E70BBF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft Manifest number: D7 Signing time: Wed 07 May 2025 00:56:08 +0000 Manifest this update: Wed 07 May 2025 00:51:08 +0000 Manifest next update: Sun 11 May 2025 08:52:08 +0000 Files and hashes: 1: 323830333a346265303a3a2f33322d3438203d3e20323730303738.roa (hash: e93lsq181dWo8xkn84usZu3Ea1Z+yoCo2KQIwjRn9xs=) 2: 3230302e37312e38302e302f32332d3234203d3e20323730303738.roa (hash: +JLSd5uFHqiUCm06ecF1x9vzbqFut/G4zYIvoGDlY28=) 3: AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl (hash: 51IItwPFk+/XKXdjgsMF8OGnYUQP63iUdbkNYtfgMg4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:71:1b:1a:a4:71:30:26:f0:fe:b0:6b:b0:ee:14:65:09:e7:0b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF855402AB8DCC9E940E7B1627DEDD822C25A8AF Validity Not Before: May 7 00:51:08 2025 GMT Not After : May 11 08:52:08 2025 GMT Subject: CN=6B1C35E94D67988E57EB2725E987CA0F684C12A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:eb:eb:45:b6:d5:9a:e1:43:55:51:9d:88: b2:70:2d:6f:10:89:55:f6:c6:b7:e2:99:4b:5b:0b: 26:68:c4:e5:bb:ac:ec:f9:9a:6f:92:02:40:dd:2b: ba:b4:e3:0e:ac:16:af:3a:fa:61:9b:7a:9b:9c:7f: 1c:66:05:63:30:ab:3e:20:71:f5:7d:83:be:55:c1: 28:ba:3e:00:5c:2f:32:0e:28:4b:3b:a4:9c:96:2c: 14:df:06:e7:1d:a3:a8:e3:ce:fa:81:5d:13:1e:b3: f3:f2:2f:f3:ec:6a:8b:e1:df:51:61:9e:2d:af:b4: 2a:96:c0:02:eb:84:8e:b7:0b:0c:49:2d:b9:9c:8a: 7e:b1:aa:ef:9e:d0:65:ba:95:50:26:50:ee:cd:81: 1c:4d:d0:47:ba:02:e8:2b:ce:e5:be:b6:a5:5c:6c: ff:34:a8:f6:cf:f2:0e:72:1d:52:ea:5b:96:59:89: 2e:50:be:84:51:ad:81:57:e9:ab:2e:31:e9:7d:76: f5:76:89:46:79:9a:f6:1e:2e:ee:64:5a:f7:64:c9: 1f:22:9e:93:ae:e2:8b:58:7f:db:e2:76:bc:45:fd: 70:e4:9e:1c:5c:1f:19:2d:9d:94:c0:54:bf:6c:cb: 1f:f3:0c:8a:16:eb:28:dc:fd:57:af:5e:02:67:66: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:35:E9:4D:67:98:8E:57:EB:27:25:E9:87:CA:0F:68:4C:12:A6 X509v3 Authority Key Identifier: keyid:AF:85:54:02:AB:8D:CC:9E:94:0E:7B:16:27:DE:DD:82:2C:25:A8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA96D8A85B594311B2DE2B8AC01CB929BC9D2D9BAC952F5E083DEDE0011011/0/AF855402AB8DCC9E940E7B1627DEDD822C25A8AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3f:c0:58:08:ac:a1:da:81:75:fe:89:3a:b0:78:f2:cf:45: 71:aa:16:82:03:d3:ba:28:b3:fc:6d:6a:fa:c1:32:ea:fc:2a: f4:c8:6d:cf:f2:3f:e0:d4:cb:f3:bd:ce:11:7a:12:32:dd:c9: f0:6a:c2:95:c6:4e:73:a9:fd:2d:1c:2b:b7:76:de:47:f1:87: bd:06:48:86:c0:2f:09:fc:0f:65:6c:f0:8b:0c:9c:dc:ef:d5: 78:41:d2:07:cf:04:4c:b1:c4:0f:69:b8:50:16:f9:41:91:67: 69:74:48:11:ad:59:f5:6f:7b:34:dd:28:e4:33:10:51:0e:d3: e3:43:1b:6d:d8:78:a1:35:27:0e:55:53:cf:20:61:1a:d2:fc: fa:9b:48:aa:81:97:6a:91:0d:9c:80:8d:44:d2:9b:79:ba:79: 45:44:c5:46:5f:98:68:b3:f0:2c:e5:a5:d6:09:b1:08:0c:81: ac:3e:8b:dc:f9:50:c3:3b:c1:63:77:d7:2b:1e:98:f3:74:82: b5:dd:f2:42:ef:8f:c5:30:ad:c6:12:e8:95:65:17:e1:e8:8f: 1e:d7:10:71:ce:6f:42:c4:a4:05:38:32:b1:ca:de:a3:90:bb: 81:39:90:3d:7d:96:fd:9f:82:cf:80:90:53:e7:7e:82:4f:6d: 40:1c:49:52 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUQHEbGqRxMCbw/rBrsO4UZQnnC78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4NTU0MDJBQjhEQ0M5RTk0MEU3QjE2MjdERUREODIy QzI1QThBRjAeFw0yNTA1MDcwMDUxMDhaFw0yNTA1MTEwODUyMDhaMDMxMTAvBgNV BAMTKDZCMUMzNUU5NEQ2Nzk4OEU1N0VCMjcyNUU5ODdDQTBGNjg0QzEyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jOvrRbbVmuFDVVGdiLJwLW8Q iVX2xrfimUtbCyZoxOW7rOz5mm+SAkDdK7q04w6sFq86+mGbepucfxxmBWMwqz4g cfV9g75VwSi6PgBcLzIOKEs7pJyWLBTfBucdo6jjzvqBXRMes/PyL/Psaovh31Fh ni2vtCqWwALrhI63CwxJLbmcin6xqu+e0GW6lVAmUO7NgRxN0Ee6AugrzuW+tqVc bP80qPbP8g5yHVLqW5ZZiS5QvoRRrYFX6asuMel9dvV2iUZ5mvYeLu5kWvdkyR8i npOu4otYf9vidrxF/XDknhxcHxktnZTAVL9syx/zDIoW6yjc/VevXgJnZhGHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUaxw16U1nmI5X6ycl6YfKD2hMEqYwHwYDVR0j BBgwFoAUr4VUAquNzJ6UDnsWJ97dgiwlqK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82MEVBOTZEOEE4NUI1OTQzMTFCMkRFMkI4QUMwMUNCOTI5 QkM5RDJEOUJBQzk1MkY1RTA4M0RFREUwMDExMDExLzAvQUY4NTU0MDJBQjhEQ0M5 RTk0MEU3QjE2MjdERUREODIyQzI1QThBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRjg1NTQwMkFCOERDQzlFOTQw RTdCMTYyN0RFREQ4MjJDMjVBOEFGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjBFQTk2RDhBODVCNTk0MzExQjJERTJCOEFDMDFDQjkyOUJDOUQyRDlC QUM5NTJGNUUwODNERURFMDAxMTAxMS8wL0FGODU1NDAyQUI4RENDOUU5NDBFN0Ix NjI3REVERDgyMkMyNUE4QUYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQP8BYCKyh2oF1/ok6sHjyz0Vx qhaCA9O6KLP8bWr6wTLq/Cr0yG3P8j/g1Mvzvc4RehIy3cnwasKVxk5zqf0tHCu3 dt5H8Ye9BkiGwC8J/A9lbPCLDJzc79V4QdIHzwRMscQPabhQFvlBkWdpdEgRrVn1 b3s03SjkMxBRDtPjQxtt2HihNScOVVPPIGEa0vz6m0iqgZdqkQ2cgI1E0pt5unlF RMVGX5hos/As5aXWCbEIDIGsPovc+VDDO8Fjd9crHpjzdIK13fJC74/FMK3GEuiV ZRfh6I8e1xBxzm9CxKQFODKxyt6jkLuBOZA9fZb9n4LPgJBT536CT21AHElS -----END CERTIFICATE-----Generated at Wed May 7 22:59:55 2025 by rpki-client