$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft File: BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft (raw, json) Hash identifier: yMeKkosjQlVXWDHunPjMpfnBHzqAIfaz+UU5N6o+us4= Subject key identifier: C9:C9:D6:AB:60:4D:82:5B:8A:8B:F4:CA:4F:37:74:DB:2A:9F:13:2F Authority key identifier: BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7 Certificate issuer: /CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7 Certificate serial: 1820D6D19A4FC9204FF832CE5A4A1D1A1D80C88E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft Manifest number: D5 Signing time: Fri 09 May 2025 11:16:07 +0000 Manifest this update: Fri 09 May 2025 11:11:07 +0000 Manifest next update: Wed 14 May 2025 02:00:07 +0000 Files and hashes: 1: 3138312e3232342e3139392e302f32342d3234203d3e20323732303638.roa (hash: y8RjqaR1+jlD/CLpe7yUilcrJe6OadhXzrRNJKQDmFs=) 2: 323830333a643331303a3a2f33322d3438203d3e20323732303638.roa (hash: FSoCslfLPaxH187OItbFpX2Ja19w27sZFd6D46Nj6IE=) 3: BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl (hash: sHCeE5RNyeMX9/u6DV+RXb090EOSBVnY6yCmesFpezY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 00:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:20:d6:d1:9a:4f:c9:20:4f:f8:32:ce:5a:4a:1d:1a:1d:80:c8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBFEAF49CCCA7EA7E944649178535787F34F0D7 Validity Not Before: May 9 11:11:07 2025 GMT Not After : May 14 02:00:07 2025 GMT Subject: CN=C9C9D6AB604D825B8A8BF4CA4F3774DB2A9F132F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:f5:07:64:2c:ac:cd:6b:57:a2:21:dd:ac: 6a:88:f0:7f:77:f9:64:03:11:94:7f:ee:8a:52:90: d1:60:34:7f:93:13:e6:87:e5:89:56:69:d3:ab:6c: 7e:36:f2:7c:7d:a5:59:de:47:b5:9d:0d:93:8d:2f: 2d:71:08:13:91:a1:c4:79:2d:14:64:2b:76:5a:3d: 56:1c:77:ab:80:f8:46:12:90:0c:45:f7:f6:ab:e0: 95:32:70:1c:30:32:7a:c9:c0:70:a4:d3:6d:30:fa: 6b:36:bf:88:a5:97:97:10:b4:51:80:09:99:c1:a3: 21:bc:db:fb:29:10:78:e9:e5:54:89:38:b0:30:aa: c2:d4:b0:7e:5b:80:59:7c:b7:ed:81:59:f0:f4:4c: 31:25:bc:14:3f:75:bd:83:a3:f3:5a:74:0d:1a:3f: 2e:ad:64:02:b7:c6:81:62:bf:32:7a:10:f7:6e:7d: bb:65:00:19:2f:95:81:73:30:7d:dc:f0:07:6c:ff: 7f:1d:d1:1c:e1:29:7d:77:4f:cb:19:9e:1b:cb:3b: 6f:16:90:e0:63:3f:3b:94:2f:e8:4f:10:0f:d9:d3: 6b:fa:42:1c:b3:4a:b7:87:ed:a7:2d:f8:00:25:da: 1e:cf:f8:94:1f:ad:a3:33:23:23:a6:43:09:ee:a5: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C9:D6:AB:60:4D:82:5B:8A:8B:F4:CA:4F:37:74:DB:2A:9F:13:2F X509v3 Authority Key Identifier: keyid:BF:BF:EA:F4:9C:CC:A7:EA:7E:94:46:49:17:85:35:78:7F:34:F0:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7151CDBD7F5782F5CDE677BA1A3DEB4FF1099B6BC88E1CD3A40D9E8297F1BFA1/0/BFBFEAF49CCCA7EA7E944649178535787F34F0D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4a:11:38:7c:e0:2b:a3:41:d8:6f:c1:47:ed:3a:73:b5:63: b8:76:b4:59:1e:93:40:73:0c:56:8d:61:c4:36:ca:2a:77:6b: 9c:b9:75:9b:e2:3f:c2:ac:bf:fb:06:78:b2:5b:4b:cb:63:ed: b9:90:1d:87:9e:7a:27:87:7e:5d:09:31:fe:80:de:0c:8a:d6: 36:ea:b2:ca:ec:8e:43:66:7f:c8:77:05:ed:a9:9a:71:34:7e: 0e:d8:cf:9c:d7:d8:29:d3:9a:da:4f:99:a9:b2:6e:68:71:77: 4f:bb:17:81:52:51:10:07:d9:ba:3a:4e:13:a7:51:77:c2:fe: 7e:99:cb:03:6d:17:2b:b0:63:49:1c:37:72:db:3f:7d:59:de: 55:9a:a6:96:16:11:67:db:5d:19:bd:e5:3e:7d:8d:55:a8:40: 4c:ba:ec:2a:fc:db:cf:d1:ef:3d:3a:9c:20:83:b6:8b:e9:4d: 4a:8d:11:1e:41:bc:85:de:f9:02:a8:9a:b9:4b:da:35:48:e4: 37:41:3f:e9:54:3a:a7:cc:f8:30:d5:2d:81:de:a6:79:94:3c: e1:f2:1a:77:2b:5d:f0:84:e9:65:ab:f8:4d:71:e2:17:67:3f: c6:91:ca:67:94:2f:5f:96:dd:9e:13:d0:a5:39:d6:3f:d5:6e: c1:e8:fd:00 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUGCDW0ZpPySBP+DLOWkodGh2AyI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZCRkVBRjQ5Q0NDQTdFQTdFOTQ0NjQ5MTc4NTM1Nzg3 RjM0RjBENzAeFw0yNTA1MDkxMTExMDdaFw0yNTA1MTQwMjAwMDdaMDMxMTAvBgNV BAMTKEM5QzlENkFCNjA0RDgyNUI4QThCRjRDQTRGMzc3NERCMkE5RjEzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNfUHZCyszWtXoiHdrGqI8H93 +WQDEZR/7opSkNFgNH+TE+aH5YlWadOrbH428nx9pVneR7WdDZONLy1xCBORocR5 LRRkK3ZaPVYcd6uA+EYSkAxF9/ar4JUycBwwMnrJwHCk020w+ms2v4ill5cQtFGA CZnBoyG82/spEHjp5VSJOLAwqsLUsH5bgFl8t+2BWfD0TDElvBQ/db2Do/NadA0a Py6tZAK3xoFivzJ6EPdufbtlABkvlYFzMH3c8Ads/38d0RzhKX13T8sZnhvLO28W kOBjPzuUL+hPEA/Z02v6QhyzSreH7act+AAl2h7P+JQfraMzIyOmQwnupRMXAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUycnWq2BNgluKi/TKTzd02yqfEy8wHwYDVR0j BBgwFoAUv7/q9JzMp+p+lEZJF4U1eH808NcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy83MTUxQ0RCRDdGNTc4MkY1Q0RFNjc3QkExQTNERUI0RkYx MDk5QjZCQzg4RTFDRDNBNDBEOUU4Mjk3RjFCRkExLzAvQkZCRkVBRjQ5Q0NDQTdF QTdFOTQ0NjQ5MTc4NTM1Nzg3RjM0RjBENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkJGRUFGNDlDQ0NBN0VBN0U5 NDQ2NDkxNzg1MzU3ODdGMzRGMEQ3LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvNzE1MUNEQkQ3RjU3ODJGNUNERTY3N0JBMUEzREVCNEZGMTA5OUI2QkM4 OEUxQ0QzQTQwRDlFODI5N0YxQkZBMS8wL0JGQkZFQUY0OUNDQ0E3RUE3RTk0NDY0 OTE3ODUzNTc4N0YzNEYwRDcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2ShE4fOAro0HYb8FH7TpztWO4 drRZHpNAcwxWjWHENsoqd2ucuXWb4j/CrL/7BniyW0vLY+25kB2Hnnonh35dCTH+ gN4MitY26rLK7I5DZn/IdwXtqZpxNH4O2M+c19gp05raT5mpsm5ocXdPuxeBUlEQ B9m6Ok4Tp1F3wv5+mcsDbRcrsGNJHDdy2z99Wd5VmqaWFhFn210ZveU+fY1VqEBM uuwq/NvP0e89Opwgg7aL6U1KjREeQbyF3vkCqJq5S9o1SOQ3QT/pVDqnzPgw1S2B 3qZ5lDzh8hp3K13whOllq/hNceIXZz/GkcpnlC9flt2eE9ClOdY/1W7B6P0A -----END CERTIFICATE-----Generated at Sat May 10 03:43:14 2025 by rpki-client