$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft File: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft (raw, json) Hash identifier: bJa4y0gIxZcDUq7wUjHZZXPp3O3GzcZbpfnh5rqfuzM= Subject key identifier: EA:A2:E6:9F:D4:21:9C:5D:31:4F:F6:BA:72:9F:90:37:A6:C3:BF:F2 Authority key identifier: 20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 Certificate issuer: /CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Certificate serial: 0A57C2D23899D813D304F4BFDEC1B10653A53B6A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft Manifest number: D3 Signing time: Mon 05 May 2025 22:25:32 +0000 Manifest this update: Mon 05 May 2025 22:20:31 +0000 Manifest next update: Sun 11 May 2025 14:57:31 +0000 Files and hashes: 1: 20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl (hash: SE1V+EiN3tbylz/g6p2TKSkNav39jFFDP6FWra/PdDw=) 2: 323830333a653532303a3a2f33322d3438203d3e20323636363837.roa (hash: RFp/7paxrjEnmz7NX5siL1qxhM8AW6ttH3PE4IdU9z0=) 3: 34352e3232392e34342e302f32322d3234203d3e20323636363837.roa (hash: NXCrnc5k/R7cRXtnojYKX0tyR9Gzw9zx/b4X8zIv+Lk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:57:c2:d2:38:99:d8:13:d3:04:f4:bf:de:c1:b1:06:53:a5:3b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5 Validity Not Before: May 5 22:20:31 2025 GMT Not After : May 11 14:57:31 2025 GMT Subject: CN=EAA2E69FD4219C5D314FF6BA729F9037A6C3BFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:9a:d5:c9:2a:dc:9e:18:24:0d:2b:3b:05: 7b:da:e4:e7:b9:7a:b6:e3:87:05:73:92:0c:1e:08: 32:0f:58:61:21:fe:20:60:dd:3e:9e:ea:80:b2:6b: f3:ca:40:f7:79:fb:29:95:b2:45:15:1e:a7:5f:ac: ea:5e:f6:f7:d2:5b:a5:de:ea:a5:44:91:74:e2:67: 0f:8b:72:e9:f6:b0:85:08:0c:45:6d:ec:09:03:8c: 2c:b5:7f:da:3d:e5:76:e9:57:d2:62:21:03:26:f2: fc:dc:12:92:45:2a:09:df:01:fb:d5:41:70:8c:71: cc:53:fe:eb:27:b5:11:3c:22:b2:c2:3c:c3:16:fb: 71:3d:3d:75:dd:39:f7:41:4b:a2:0e:af:db:1c:a8: 6f:72:23:94:e9:8c:cc:98:7e:a9:43:53:fe:65:8b: 89:e9:03:c2:8e:7b:5e:26:73:bf:cd:39:f8:8c:0c: 67:67:1a:24:4a:c9:24:1f:b3:d1:4c:16:65:27:74: 2a:50:61:9c:bc:44:61:7e:59:3d:a6:6a:06:d4:3b: ce:c4:3c:1a:f2:00:f5:9f:d2:58:33:37:56:e4:5a: ab:60:cf:7e:b4:77:9e:fb:b2:31:06:03:fe:47:23: 4d:67:ce:8e:b9:65:3c:73:04:82:2d:06:d6:b0:01: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A2:E6:9F:D4:21:9C:5D:31:4F:F6:BA:72:9F:90:37:A6:C3:BF:F2 X509v3 Authority Key Identifier: keyid:20:E5:FE:45:89:C1:CE:47:2D:39:C9:FF:10:EE:1A:6E:4D:5C:BF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67A0ED362E68FF42E188A1058CBDF747A7DD93A358EA173B7A5EBA327B365A52/0/20E5FE4589C1CE472D39C9FF10EE1A6E4D5CBFC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e5:02:5c:f4:d4:de:34:44:17:26:bf:29:c0:5e:b5:90:66: 62:ce:43:78:dd:e0:d9:87:9e:fe:4c:95:48:2b:bb:a0:ec:df: 54:2b:4c:07:d9:30:b1:9c:bd:62:ed:cd:4b:01:be:97:f8:2e: a7:85:3b:3e:4f:98:e7:a2:cf:3a:15:5e:6c:df:8b:a4:c7:e5: f5:bf:df:91:a0:71:c5:16:d4:61:82:33:fe:6b:df:86:87:08: b6:d7:2e:2a:df:43:0d:5e:cb:a3:d8:88:4a:16:9f:ba:7b:91: 5a:d5:a8:8e:07:b8:b2:12:c4:df:dd:f8:b6:4f:e4:64:0a:f0: a6:4b:dd:cc:96:09:97:04:f2:d2:50:be:e1:07:3c:91:bd:69: f3:c4:2d:bb:fd:bd:af:5c:de:cc:15:4b:47:be:a2:e9:34:7b: d3:9b:77:d9:aa:67:8e:3d:78:70:2b:61:e7:5d:13:ba:e3:46: a6:5e:a3:6c:79:3a:ea:96:1d:68:ea:ff:fa:a3:1c:48:c7:f4: b8:43:9b:b9:76:f3:8d:a6:21:40:ca:ec:74:04:ea:4b:8a:90: fa:2d:cc:e1:d1:85:38:54:ef:5b:83:01:ef:86:06:3e:60:0b: 54:c0:a2:9c:d1:6e:5a:ad:5a:d4:e6:53:a6:76:02:0d:5d:f0: 71:cb:e0:0d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUClfC0jiZ2BPTBPS/3sGxBlOlO2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFNUZFNDU4OUMxQ0U0NzJEMzlDOUZGMTBFRTFBNkU0 RDVDQkZDNTAeFw0yNTA1MDUyMjIwMzFaFw0yNTA1MTExNDU3MzFaMDMxMTAvBgNV BAMTKEVBQTJFNjlGRDQyMTlDNUQzMTRGRjZCQTcyOUY5MDM3QTZDM0JGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqB5rVySrcnhgkDSs7BXva5Oe5 erbjhwVzkgweCDIPWGEh/iBg3T6e6oCya/PKQPd5+ymVskUVHqdfrOpe9vfSW6Xe 6qVEkXTiZw+Lcun2sIUIDEVt7AkDjCy1f9o95XbpV9JiIQMm8vzcEpJFKgnfAfvV QXCMccxT/usntRE8IrLCPMMW+3E9PXXdOfdBS6IOr9scqG9yI5TpjMyYfqlDU/5l i4npA8KOe14mc7/NOfiMDGdnGiRKySQfs9FMFmUndCpQYZy8RGF+WT2magbUO87E PBryAPWf0lgzN1bkWqtgz360d577sjEGA/5HI01nzo65ZTxzBIItBtawAY6ZAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU6qLmn9QhnF0xT/a6cp+QN6bDv/IwHwYDVR0j BBgwFoAUIOX+RYnBzkctOcn/EO4abk1cv8UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy82N0EwRUQzNjJFNjhGRjQyRTE4OEExMDU4Q0JERjc0N0E3 REQ5M0EzNThFQTE3M0I3QTVFQkEzMjdCMzY1QTUyLzAvMjBFNUZFNDU4OUMxQ0U0 NzJEMzlDOUZGMTBFRTFBNkU0RDVDQkZDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEU1RkU0NTg5QzFDRTQ3MkQz OUM5RkYxMEVFMUE2RTRENUNCRkM1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNjdBMEVEMzYyRTY4RkY0MkUxODhBMTA1OENCREY3NDdBN0REOTNBMzU4 RUExNzNCN0E1RUJBMzI3QjM2NUE1Mi8wLzIwRTVGRTQ1ODlDMUNFNDcyRDM5QzlG RjEwRUUxQTZFNEQ1Q0JGQzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAH5QJc9NTeNEQXJr8pwF61kGZi zkN43eDZh57+TJVIK7ug7N9UK0wH2TCxnL1i7c1LAb6X+C6nhTs+T5jnos86FV5s 34ukx+X1v9+RoHHFFtRhgjP+a9+Ghwi21y4q30MNXsuj2IhKFp+6e5Fa1aiOB7iy EsTf3fi2T+RkCvCmS93MlgmXBPLSUL7hBzyRvWnzxC27/b2vXN7MFUtHvqLpNHvT m3fZqmeOPXhwK2HnXRO640amXqNseTrqlh1o6v/6oxxIx/S4Q5u5dvONpiFAyux0 BOpLipD6Lczh0YU4VO9bgwHvhgY+YAtUwKKc0W5arVrU5lOmdgINXfBxy+AN -----END CERTIFICATE-----Generated at Wed May 7 17:40:31 2025 by rpki-client