$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.mft File: AABC402EE2FAF415F9D03091D83BA93DC6107FEC.mft (raw, json) Hash identifier: 3B/CZ2MfZgPqkGJ3UEGXxLvvXou+LdIBsNKcyUdI0f0= Subject key identifier: FB:CC:2F:5C:23:A7:C9:5E:58:31:FE:73:BC:FA:FD:06:76:50:CD:2B Authority key identifier: AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC Certificate issuer: /CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC Certificate serial: 4D4EC037EF70FB5100DF198C5B23B8D202A039CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.mft Manifest number: D5 Signing time: Mon 05 May 2025 09:07:20 +0000 Manifest this update: Mon 05 May 2025 09:02:20 +0000 Manifest next update: Sat 10 May 2025 14:13:20 +0000 Files and hashes: 1: 34352e3136352e3136382e302f32322d3234203d3e20323635373033.roa (hash: zu7iBUO+My31R8+rzJ/Mse5sBKtc2JYkaQjsUs9jdng=) 2: 34352e3136352e3136382e302f32322d3234203d3e20323637373137.roa (hash: LY/G1wps0xt7ywHbuCJAurUiV45Jq8Zhb1caaUo3drk=) 3: AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl (hash: 3xl2KB7MYVOXlyDP+Dk1hlt2jaAHdGccWRijEbc2dh0=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 23:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4e:c0:37:ef:70:fb:51:00:df:19:8c:5b:23:b8:d2:02:a0:39:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC Validity Not Before: May 5 09:02:20 2025 GMT Not After : May 10 14:13:20 2025 GMT Subject: CN=FBCC2F5C23A7C95E5831FE73BCFAFD067650CD2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:a3:f6:0f:c7:2d:9d:98:b6:8b:a9:25:b7: 76:8c:87:2d:52:10:71:4e:ed:63:93:54:d4:d5:28: 64:5c:8f:ad:63:03:af:b7:1a:61:83:87:e0:f3:5c: 1d:64:a7:c8:1d:20:f3:29:7a:66:9a:b9:63:50:22: 2f:bf:20:7d:2b:de:83:0b:1c:8d:e2:10:5d:96:12: f0:95:df:9c:5f:02:ae:0f:00:3f:f6:e2:cb:e4:0b: e6:5e:16:9c:5c:9e:72:bc:5b:f1:b5:9c:fc:a0:95: 53:76:43:d5:5e:52:10:7b:08:28:94:9a:c8:e4:5d: b4:bd:84:72:80:b2:c1:4b:71:09:92:90:f9:d8:2d: c0:d5:fe:4d:c9:31:e8:bf:53:1e:6b:27:f9:c7:6a: be:b2:96:8b:72:4b:54:ba:74:ab:26:b2:2d:74:07: f9:f8:3b:66:38:2d:7b:d7:d1:89:47:1c:a6:37:fc: 6f:e9:45:b3:06:6b:9a:37:b9:10:38:37:eb:e0:10: 64:27:4c:05:29:05:d0:b5:8a:ea:27:cd:f8:63:33: 08:c6:5a:b9:f1:18:e3:c0:87:bb:ee:db:46:95:06: 15:13:c7:23:34:05:23:a3:76:f8:ec:0e:13:a1:40: 15:73:58:5c:83:43:c0:62:6d:ed:81:65:8e:c6:f9: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CC:2F:5C:23:A7:C9:5E:58:31:FE:73:BC:FA:FD:06:76:50:CD:2B X509v3 Authority Key Identifier: keyid:AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:29:95:2c:c1:b0:f7:41:4c:97:9c:7a:b9:0e:14:4c:73:f5: d1:7c:50:a6:09:3e:19:92:67:c2:c9:3a:41:ae:61:db:ed:b5: 03:30:e1:f0:67:f0:da:39:e1:c0:85:f8:de:09:47:1f:90:e5: c3:c9:41:83:a5:0d:d8:2c:09:d5:11:f1:4b:2e:b2:09:83:c3: 1e:71:52:32:9b:bb:4a:70:4f:e9:45:4d:80:0a:4e:e3:b4:86: cd:f1:97:bc:86:cf:46:c1:ca:3a:2d:40:0c:69:76:83:44:5a: 44:5f:07:0d:f7:08:c3:f2:48:fc:7d:0d:d9:22:61:86:4c:87: af:01:72:e9:ce:c2:93:0e:69:f3:6a:af:16:9f:a7:b4:9d:77: 62:31:fb:ba:b0:26:cc:b0:d8:b9:a0:d8:27:71:4c:fb:f6:f5: 0f:4d:e6:b8:06:9a:cb:43:1e:47:c4:64:92:10:3e:28:af:6c: f6:4e:f4:28:ba:22:40:0a:b7:15:1a:30:99:7a:97:8c:64:d1: 60:03:63:6c:a7:5e:b1:39:f7:b9:19:22:89:48:2a:6f:12:75: 5f:ab:4d:57:6d:9b:ff:d8:43:7d:5c:b5:0c:79:c5:7d:c7:23: ed:8c:a8:f3:4b:36:f1:bb:1c:da:7a:33:54:16:94:53:7a:e2: 56:3b:f9:f3 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUTU7AN+9w+1EA3xmMWyO40gKgOc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFCQzQwMkVFMkZBRjQxNUY5RDAzMDkxRDgzQkE5M0RD NjEwN0ZFQzAeFw0yNTA1MDUwOTAyMjBaFw0yNTA1MTAxNDEzMjBaMDMxMTAvBgNV BAMTKEZCQ0MyRjVDMjNBN0M5NUU1ODMxRkU3M0JDRkFGRDA2NzY1MENEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2maP2D8ctnZi2i6klt3aMhy1S EHFO7WOTVNTVKGRcj61jA6+3GmGDh+DzXB1kp8gdIPMpemaauWNQIi+/IH0r3oML HI3iEF2WEvCV35xfAq4PAD/24svkC+ZeFpxcnnK8W/G1nPyglVN2Q9VeUhB7CCiU msjkXbS9hHKAssFLcQmSkPnYLcDV/k3JMei/Ux5rJ/nHar6ylotyS1S6dKsmsi10 B/n4O2Y4LXvX0YlHHKY3/G/pRbMGa5o3uRA4N+vgEGQnTAUpBdC1iuonzfhjMwjG WrnxGOPAh7vu20aVBhUTxyM0BSOjdvjsDhOhQBVzWFyDQ8Bibe2BZY7G+UKlAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU+8wvXCOnyV5YMf5zvPr9BnZQzSswHwYDVR0j BBgwFoAUqrxALuL69BX50DCR2DupPcYQf+wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OTMzQUFFN0M3OEI4RDY5OTRENTE0OTgwREIwMzc0QUYy ODE2RTEzMEU1OUUzNTZFMTNBMEE3ODcxNDg1NkFBLzAvQUFCQzQwMkVFMkZBRjQx NUY5RDAzMDkxRDgzQkE5M0RDNjEwN0ZFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUJDNDAyRUUyRkFGNDE1RjlE MDMwOTFEODNCQTkzREM2MTA3RkVDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODkzM0FBRTdDNzhCOEQ2OTk0RDUxNDk4MERCMDM3NEFGMjgxNkUxMzBF NTlFMzU2RTEzQTBBNzg3MTQ4NTZBQS8wL0FBQkM0MDJFRTJGQUY0MTVGOUQwMzA5 MUQ4M0JBOTNEQzYxMDdGRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5KZUswbD3QUyXnHq5DhRMc/XR fFCmCT4ZkmfCyTpBrmHb7bUDMOHwZ/DaOeHAhfjeCUcfkOXDyUGDpQ3YLAnVEfFL LrIJg8MecVIym7tKcE/pRU2ACk7jtIbN8Ze8hs9Gwco6LUAMaXaDRFpEXwcN9wjD 8kj8fQ3ZImGGTIevAXLpzsKTDmnzaq8Wn6e0nXdiMfu6sCbMsNi5oNgncUz79vUP Tea4BprLQx5HxGSSED4or2z2TvQouiJACrcVGjCZepeMZNFgA2Nsp16xOfe5GSKJ SCpvEnVfq01XbZv/2EN9XLUMecV9xyPtjKjzSzbxuxzaejNUFpRTeuJWO/nz -----END CERTIFICATE-----Generated at Tue May 6 00:31:24 2025 by rpki-client