$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft File: BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft (raw, json) Hash identifier: vZh73laECs8HFSRoGSUA1/W6OWVTlg/RhQaVow/ftIA= Subject key identifier: E3:64:ED:E8:4C:51:08:94:44:E8:19:FE:09:60:5A:5A:35:15:27:A1 Authority key identifier: BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2 Certificate issuer: /CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2 Certificate serial: 52A0D687B9E581FE825D788C1A80BB8DA7FC5F8E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft Manifest number: E0 Signing time: Fri 09 May 2025 22:17:27 +0000 Manifest this update: Fri 09 May 2025 22:12:27 +0000 Manifest next update: Tue 13 May 2025 23:20:27 +0000 Files and hashes: 1: 34352e3233372e3137322e302f32322d3234203d3e20323636383233.roa (hash: L7d+0WJdqSqYpoD3RVzURmtrFSo7UM8rtKV9FP3JhE8=) 2: BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl (hash: i47z48+TDky/KM5yumWOT9SHMEmahkrXYhX7fTkEjvQ=) 3: 323830333a323461303a3a2f33322d3438203d3e20323636383233.roa (hash: 0UF7lN3yk5hABu8yrop4hVb6wwkKlgl5x53aQUyw6vI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 23:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a0:d6:87:b9:e5:81:fe:82:5d:78:8c:1a:80:bb:8d:a7:fc:5f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2 Validity Not Before: May 9 22:12:27 2025 GMT Not After : May 13 23:20:27 2025 GMT Subject: CN=E364EDE84C51089444E819FE09605A5A351527A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:88:90:d4:23:a3:69:09:90:33:36:18:44: 36:59:99:a5:7b:96:8f:d2:b5:4b:f3:96:36:b8:f8: d9:82:c9:5c:eb:be:4e:57:73:cb:13:e8:a0:47:df: de:28:87:40:98:26:09:64:08:9a:e3:f1:b9:e4:67: 50:64:b8:48:0f:97:a8:2a:2a:12:f6:7d:ee:fa:f2: 15:7d:2f:9e:9e:59:9d:0d:68:47:a2:8e:d6:50:01: 83:d4:2a:06:cb:4f:c6:f7:1d:90:20:f8:fe:cc:bf: 7a:dc:51:a3:f5:ce:20:f8:9e:50:17:27:f5:ac:1f: a6:90:f5:15:14:de:69:1e:af:11:26:a7:ee:0b:e5: 52:d0:a7:2a:0a:b8:a9:73:4d:64:41:d8:c7:b5:19: 6f:dd:90:c5:c5:c6:ec:95:00:6f:e1:d7:bb:13:d0: 0d:83:1c:e4:93:8e:ed:f3:1d:18:a7:fc:5e:02:51: 18:15:15:63:84:ad:d1:e6:d9:fc:48:85:03:9d:15: 14:0e:63:6a:ae:aa:66:61:db:04:df:57:e7:b6:65: 2c:c8:3e:19:7e:f0:ca:96:1f:4e:3a:a7:1a:16:10: 2d:f9:9d:30:45:ac:84:55:e6:e1:5b:52:1f:21:26: e7:bb:eb:b0:ed:1a:c5:15:0e:26:7f:ef:c7:5b:03: aa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:64:ED:E8:4C:51:08:94:44:E8:19:FE:09:60:5A:5A:35:15:27:A1 X509v3 Authority Key Identifier: keyid:BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:33:2d:4f:01:d9:bd:ff:9e:d1:53:b0:42:62:67:20:2b:8c: b5:94:5f:f7:57:01:8f:76:10:c0:3f:e9:6e:44:ac:f9:6c:f9: a4:97:8c:6c:3e:12:1a:22:08:eb:11:34:6a:b1:4f:b7:f6:c0: 89:6f:fe:ff:21:90:c8:70:22:ea:60:ac:48:dd:49:33:7c:18: cf:27:45:a5:a8:7e:fc:d3:2f:56:5a:35:14:0d:8b:81:ac:85: 43:de:92:04:b7:a9:26:37:de:70:a5:e2:b0:d4:ac:98:30:2e: a1:9e:24:7d:44:78:16:7b:04:36:41:29:26:3c:bc:e2:6a:22: 42:dc:1f:c2:4f:0c:25:7e:f5:f9:c2:03:8b:e5:2b:1f:0d:11: ac:6a:9b:b0:17:cd:55:5d:4b:a5:57:ca:11:cf:7a:aa:6d:dd: 05:f6:9f:56:dd:3f:00:65:20:2b:7b:80:cb:91:36:d8:a3:96: 79:e3:53:66:69:6c:2f:b4:0b:e5:56:0f:d6:94:b8:0d:84:e5: 7d:79:37:79:9a:57:53:a6:d4:35:d5:23:68:ca:10:c5:05:4c: ad:e7:79:00:43:bc:20:5e:20:13:a4:c3:f7:bd:3b:2d:ca:4e: 35:44:c1:51:e6:1e:77:96:63:99:c3:60:b4:eb:f9:93:91:c3: 1e:ac:0b:97 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUqDWh7nlgf6CXXiMGoC7jaf8X44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1NjRDM0I1REEyRjdFQ0VCODVDQkM1NzBEMTY1MUJG MUJENjJBMjAeFw0yNTA1MDkyMjEyMjdaFw0yNTA1MTMyMzIwMjdaMDMxMTAvBgNV BAMTKEUzNjRFREU4NEM1MTA4OTQ0NEU4MTlGRTA5NjA1QTVBMzUxNTI3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZYiQ1COjaQmQMzYYRDZZmaV7 lo/StUvzlja4+NmCyVzrvk5Xc8sT6KBH394oh0CYJglkCJrj8bnkZ1BkuEgPl6gq KhL2fe768hV9L56eWZ0NaEeijtZQAYPUKgbLT8b3HZAg+P7Mv3rcUaP1ziD4nlAX J/WsH6aQ9RUU3mkerxEmp+4L5VLQpyoKuKlzTWRB2Me1GW/dkMXFxuyVAG/h17sT 0A2DHOSTju3zHRin/F4CURgVFWOErdHm2fxIhQOdFRQOY2quqmZh2wTfV+e2ZSzI Phl+8MqWH046pxoWEC35nTBFrIRV5uFbUh8hJue767DtGsUVDiZ/78dbA6rFAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU42Tt6ExRCJRE6Bn+CWBaWjUVJ6EwHwYDVR0j BBgwFoAUvVZMO12i9+zrhcvFcNFlG/G9YqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy85ODczMTU1QjA1MkFCREY3OUU1RkZCREI5NzM1ODU5NzA4 MUM5MTIyQzFBMkY1MUEwNTRFNEZFMkNGMENENTgyLzAvQkQ1NjRDM0I1REEyRjdF Q0VCODVDQkM1NzBEMTY1MUJGMUJENjJBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRDU2NEMzQjVEQTJGN0VDRUI4 NUNCQzU3MEQxNjUxQkYxQkQ2MkEyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvOTg3MzE1NUIwNTJBQkRGNzlFNUZGQkRCOTczNTg1OTcwODFDOTEyMkMx QTJGNTFBMDU0RTRGRTJDRjBDRDU4Mi8wL0JENTY0QzNCNURBMkY3RUNFQjg1Q0JD NTcwRDE2NTFCRjFCRDYyQTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/My1PAdm9/57RU7BCYmcgK4y1 lF/3VwGPdhDAP+luRKz5bPmkl4xsPhIaIgjrETRqsU+39sCJb/7/IZDIcCLqYKxI 3UkzfBjPJ0WlqH780y9WWjUUDYuBrIVD3pIEt6kmN95wpeKw1KyYMC6hniR9RHgW ewQ2QSkmPLziaiJC3B/CTwwlfvX5wgOL5SsfDRGsapuwF81VXUulV8oRz3qqbd0F 9p9W3T8AZSAre4DLkTbYo5Z541NmaWwvtAvlVg/WlLgNhOV9eTd5mldTptQ11SNo yhDFBUyt53kAQ7wgXiATpMP3vTstyk41RMFR5h53lmOZw2C06/mTkcMerAuX -----END CERTIFICATE-----Generated at Sat May 10 22:48:44 2025 by rpki-client