$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft File: BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft (raw, json) Hash identifier: q1vpYhxwRT+OoLhMrNwjYtrD360CXv6C3+MY4dE/Rgk= Subject key identifier: F2:B8:42:DE:02:90:60:6E:5B:2D:73:2A:98:66:E6:98:60:3F:69:39 Authority key identifier: BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86 Certificate issuer: /CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886 Certificate serial: 63E26983FC1DCF111DDBA29779731B6AB9F4AB72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft Manifest number: E3 Signing time: Fri 09 May 2025 08:54:36 +0000 Manifest this update: Fri 09 May 2025 08:49:36 +0000 Manifest next update: Wed 14 May 2025 22:21:36 +0000 Files and hashes: 1: 3136342e3136332e3133322e302f32322d3234203d3e203532343638.roa (hash: q5yJrUI9mGGHdjpWilPP8xhWWH4yOdhWej3RQmmD8PA=) 2: BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl (hash: /kJ+PfNy/aDimyYgDufQnoVMTnXbOnhxFEH7W77TKPs=) 3: 323830333a353763303a3a2f33322d3438203d3e20323634363638.roa (hash: AJFdj9LMJzBq55DiN5Ieh/Fx/AUOdl/cDCKDSms1eIc=) 4: 323830333a353763303a3a2f33322d3438203d3e203532343638.roa (hash: 9cpozkOT2iP1G8VBjYdpENxiPQdkDwL3DLsn8InoC34=) 5: 3136342e3136332e3133322e302f32322d3234203d3e20323634363638.roa (hash: WQZjJHmCLVzOG9N/VNKVy9HwfUCL6PBQq9vvZVgjK2g=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 23:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e2:69:83:fc:1d:cf:11:1d:db:a2:97:79:73:1b:6a:b9:f4:ab:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886 Validity Not Before: May 9 08:49:36 2025 GMT Not After : May 14 22:21:36 2025 GMT Subject: CN=F2B842DE0290606E5B2D732A9866E698603F6939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bc:bf:04:ff:33:de:9c:68:5f:aa:24:7d:aa: 30:d9:e6:e1:f6:97:f1:8b:9b:06:ca:3c:d8:88:ec: 19:eb:96:9a:bf:b3:b8:5b:24:0a:30:9a:72:17:2f: e2:4c:ba:8b:3d:10:09:54:d5:99:f9:4b:1c:82:3a: f9:c3:50:82:b8:5a:0f:41:c4:4c:58:3f:38:62:fd: 38:ca:58:ca:6a:c7:7b:e6:5d:97:64:c4:5f:f8:d4: e4:c6:57:0c:de:e3:43:84:e8:bc:df:ff:cf:d6:d0: 0c:0c:f9:13:9d:65:a7:1b:e7:49:95:61:3f:23:be: 44:7d:d5:8a:33:05:38:fe:c3:40:14:8f:1b:fb:d6: cd:41:ec:23:49:3d:7d:16:b4:ad:2f:20:e9:3e:5a: 58:29:ab:1a:ee:7f:45:2d:08:a0:81:63:9a:f3:af: c6:d0:ff:0f:ee:3c:1d:d9:e2:bb:89:55:fa:24:54: 21:d7:c3:be:82:04:d1:3f:25:11:0c:7f:69:d3:9f: 87:8b:3a:9d:c5:93:d1:c5:1c:17:89:ae:5e:bc:fe: db:85:be:a5:86:a2:13:60:ce:2a:57:ee:af:64:b9: e6:ca:38:4f:43:03:42:a1:5e:6f:00:9d:56:1a:68: 72:f4:38:41:6d:10:cc:94:55:79:53:42:5a:03:2d: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B8:42:DE:02:90:60:6E:5B:2D:73:2A:98:66:E6:98:60:3F:69:39 X509v3 Authority Key Identifier: keyid:BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2a:fb:95:d9:9f:98:7a:ce:a0:69:fe:80:e2:74:b5:8b:4a: 0d:de:bb:5c:d2:21:1f:94:00:0d:a4:19:5d:f5:1b:7f:34:4c: b9:e1:3b:43:db:11:22:d6:83:2d:70:ee:3d:df:13:ad:66:07: bf:89:42:21:e7:cc:0b:93:12:67:bb:23:06:5c:f9:31:d7:44: 89:0b:f6:9b:14:54:07:b9:2e:41:81:ee:0d:8b:ee:13:27:0e: 6b:0a:1e:98:81:98:60:5f:40:36:86:1c:c6:aa:7d:77:2f:37: 2a:4d:cf:3a:d4:19:cc:a3:b6:2a:f6:5d:b5:df:ee:0c:32:b5: 9b:91:84:fe:18:9a:fd:31:83:ef:7e:50:d4:7a:1b:89:ea:38: f6:42:ee:ce:49:7c:9a:1e:2e:7e:79:c2:0b:7c:e8:af:53:cb: 86:f0:95:13:37:d6:12:53:0a:49:f0:d1:ec:09:d4:ff:be:1b: f6:78:e3:34:af:42:be:05:a4:f5:3b:de:a5:26:82:de:cf:21: e3:a1:59:c4:b6:b9:c1:3e:5a:b4:89:be:80:3d:08:8d:b2:b8: 99:a9:85:21:ed:eb:e0:50:2c:fa:ed:8a:61:42:54:78:47:4f: bf:ca:27:86:df:f5:97:b2:c1:de:56:be:bd:df:08:c5:59:75: 71:69:e2:37 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUY+Jpg/wdzxEd26KXeXMbarn0q3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0M0NDOURBNURGMkU4NkNERTI3NkM2REQ1RjgyNkYx NjJBNTg4NjAeFw0yNTA1MDkwODQ5MzZaFw0yNTA1MTQyMjIxMzZaMDMxMTAvBgNV BAMTKEYyQjg0MkRFMDI5MDYwNkU1QjJENzMyQTk4NjZFNjk4NjAzRjY5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavL8E/zPenGhfqiR9qjDZ5uH2 l/GLmwbKPNiI7Bnrlpq/s7hbJAowmnIXL+JMuos9EAlU1Zn5SxyCOvnDUIK4Wg9B xExYPzhi/TjKWMpqx3vmXZdkxF/41OTGVwze40OE6Lzf/8/W0AwM+ROdZacb50mV YT8jvkR91YozBTj+w0AUjxv71s1B7CNJPX0WtK0vIOk+Wlgpqxruf0UtCKCBY5rz r8bQ/w/uPB3Z4ruJVfokVCHXw76CBNE/JREMf2nTn4eLOp3Fk9HFHBeJrl68/tuF vqWGohNgzipX7q9kuebKOE9DA0KhXm8AnVYaaHL0OEFtEMyUVXlTQloDLc5bAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU8rhC3gKQYG5bLXMqmGbmmGA/aTkwHwYDVR0j BBgwFoAUukPMnaXfLobN4nbG3V+CbxYqWIYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84RDc1QUEzMTk5QkZBREQ4MUUyRkE1NkJFREM1N0JFREVD RDcxOUJDOUUwNjNGOUY3N0U2NzMwQzRDNUNCNEZELzAvQkE0M0NDOURBNURGMkU4 NkNERTI3NkM2REQ1RjgyNkYxNjJBNTg4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQTQzQ0M5REE1REYyRTg2Q0RF Mjc2QzZERDVGODI2RjE2MkE1ODg2LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOEQ3NUFBMzE5OUJGQUREODFFMkZBNTZCRURDNTdCRURFQ0Q3MTlCQzlF MDYzRjlGNzdFNjczMEM0QzVDQjRGRC8wL0JBNDNDQzlEQTVERjJFODZDREUyNzZD NkRENUY4MjZGMTYyQTU4ODYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaKvuV2Z+Yes6gaf6A4nS1i0oN 3rtc0iEflAANpBld9Rt/NEy54TtD2xEi1oMtcO493xOtZge/iUIh58wLkxJnuyMG XPkx10SJC/abFFQHuS5Bge4Ni+4TJw5rCh6YgZhgX0A2hhzGqn13LzcqTc861BnM o7Yq9l213+4MMrWbkYT+GJr9MYPvflDUehuJ6jj2Qu7OSXyaHi5+ecILfOivU8uG 8JUTN9YSUwpJ8NHsCdT/vhv2eOM0r0K+BaT1O96lJoLezyHjoVnEtrnBPlq0ib6A PQiNsriZqYUh7evgUCz67YphQlR4R0+/yieG3/WXssHeVr693wjFWXVxaeI3 -----END CERTIFICATE-----Generated at Fri May 9 15:04:52 2025 by rpki-client