$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft File: 5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft (raw, json) Hash identifier: 83XKC/i8InqkkQSWc7nCTbo8Yj631woPqH02F7LdZYw= Subject key identifier: D2:39:B1:14:30:7B:94:2A:46:22:99:EE:41:3A:29:6F:6B:2B:34:33 Authority key identifier: 5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0 Certificate issuer: /CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0 Certificate serial: 7C6EB52DD2162615CAAF5F928B99B87EA278CAA1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft Manifest number: F0 Signing time: Sun 15 Jun 2025 20:58:56 +0000 Manifest this update: Sun 15 Jun 2025 20:53:56 +0000 Manifest next update: Sat 21 Jun 2025 04:06:56 +0000 Files and hashes: 1: 5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl (hash: 34XjnFNinO8GkmOQyAhNqfL255KmUI62ZJoNX28kAtA=) 2: 3137302e38302e39362e302f32322d3234203d3e20323632313931.roa (hash: FfpfXY7dF2RsCEtm+2Yl/5TZqhXS+4FeUgsGtC0XdhY=) 3: 3137302e38302e39362e302f32322d3234203d3e20323634383239.roa (hash: EN6bKmbXr83hCGVgg6+TXQsqLT3vkrz3D6XGxdjqu4k=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 01:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:6e:b5:2d:d2:16:26:15:ca:af:5f:92:8b:99:b8:7e:a2:78:ca:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0 Validity Not Before: Jun 15 20:53:56 2025 GMT Not After : Jun 21 04:06:56 2025 GMT Subject: CN=D239B114307B942A462299EE413A296F6B2B3433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:5f:ef:0a:2a:8b:5c:be:a1:47:c7:f0:b5: 2f:f4:22:a7:50:97:46:39:26:d7:ba:3f:63:60:06: 90:60:fc:b8:35:8f:6c:59:86:f2:a3:8e:dd:42:38: b1:82:16:cf:d4:b5:03:f1:02:63:90:47:7a:af:7c: 63:5c:b3:22:28:a2:99:e3:dc:26:69:ce:51:9f:33: bd:2e:b1:5a:57:32:2a:ff:40:c5:b8:88:17:3c:42: 2d:80:e9:8b:af:87:8f:d6:7e:c2:a9:62:07:53:f1: 11:3a:cd:25:d0:3f:ea:c9:e5:d6:a0:e1:f7:6e:8b: 70:ef:5a:8c:e8:30:aa:73:26:20:92:26:92:a3:2c: a6:70:91:a0:76:0e:03:8a:7f:62:9d:ad:a7:6b:26: 83:d3:1b:23:45:75:45:f4:8b:0d:28:51:6e:c5:b9: 6e:18:1f:59:cb:50:aa:c0:b2:ec:51:f7:f9:21:96: 7d:72:4e:62:93:94:0c:33:b1:58:f6:cb:d4:a6:a8: 3d:fc:a5:25:f3:ee:0b:29:53:8e:bc:ef:48:84:dc: d3:1f:02:de:7a:1b:0d:be:26:ca:f0:19:13:b2:3e: 20:c3:76:41:0c:0b:35:bd:4e:4c:ed:f9:31:84:e2: 4c:a1:08:0f:90:89:88:bf:16:6d:62:f2:91:85:1c: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:39:B1:14:30:7B:94:2A:46:22:99:EE:41:3A:29:6F:6B:2B:34:33 X509v3 Authority Key Identifier: keyid:5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:16:b1:75:a0:f9:68:0d:a4:84:0b:33:00:1e:3e:a5:95:76: 1b:3a:1d:09:81:16:a5:9c:81:6e:84:b7:90:4f:df:11:3f:05: d4:fc:15:cc:d6:45:a1:3b:1a:38:2d:38:de:22:23:a2:8c:2c: f0:6e:50:ad:c6:eb:45:8c:35:6a:1f:f5:62:d3:fd:e4:be:7d: c3:80:c7:ca:57:a8:a5:35:1d:4f:f9:01:7e:0c:31:87:04:a1: 7e:04:e6:64:ec:37:28:76:ee:2d:33:ac:6c:55:8a:07:99:e3: 76:8f:39:ab:db:09:30:9a:9f:86:99:a8:2d:15:cf:83:76:94: c0:9c:b6:35:f5:04:9b:09:55:d2:59:8b:02:7a:f2:63:da:ab: a8:b6:4f:d0:76:67:93:c2:13:fa:6a:dd:23:d7:2d:d7:0d:c5: f1:82:e2:1f:9e:1a:29:04:e0:4f:c3:f9:f6:06:42:e9:5b:1a: bb:38:a8:b6:86:81:5c:68:20:9a:72:75:82:46:7b:95:1c:1d: 49:43:27:f3:f7:dc:43:fe:8e:d2:ac:44:60:f1:bb:cf:78:ac: 53:0a:69:0b:05:5a:77:33:97:e1:6e:93:37:df:21:22:b0:b9: f6:d5:9c:af:16:71:c8:48:56:df:3c:1b:f6:b5:c3:b7:63:2f: 3b:a9:bc:ad -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUfG61LdIWJhXKr1+Si5m4fqJ4yqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUxMjIzQ0M5RENEMEUxRTQwQUNFMTVBMUUzNDkzREUx QjZCNERDMDAeFw0yNTA2MTUyMDUzNTZaFw0yNTA2MjEwNDA2NTZaMDMxMTAvBgNV BAMTKEQyMzlCMTE0MzA3Qjk0MkE0NjIyOTlFRTQxM0EyOTZGNkIyQjM0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXl/vCiqLXL6hR8fwtS/0IqdQ l0Y5Jte6P2NgBpBg/Lg1j2xZhvKjjt1COLGCFs/UtQPxAmOQR3qvfGNcsyIoopnj 3CZpzlGfM70usVpXMir/QMW4iBc8Qi2A6Yuvh4/WfsKpYgdT8RE6zSXQP+rJ5dag 4fdui3DvWozoMKpzJiCSJpKjLKZwkaB2DgOKf2KdradrJoPTGyNFdUX0iw0oUW7F uW4YH1nLUKrAsuxR9/khln1yTmKTlAwzsVj2y9SmqD38pSXz7gspU46870iE3NMf At56Gw2+JsrwGROyPiDDdkEMCzW9Tkzt+TGE4kyhCA+QiYi/Fm1i8pGFHHblAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU0jmxFDB7lCpGIpnuQTopb2srNDMwHwYDVR0j BBgwFoAUXhIjzJ3NDh5ArOFaHjST3htrTcAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNTg1QzVDQzdFNTk2QzA2RjdFNEY3RUY0NEFGRUIxMTE4 Mjc4NDdCMjM5QTUzRkI2NDc5RjQ0QUE2QkU0QzkyLzAvNUUxMjIzQ0M5RENEMEUx RTQwQUNFMTVBMUUzNDkzREUxQjZCNERDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTEyMjNDQzlEQ0QwRTFFNDBB Q0UxNUExRTM0OTNERTFCNkI0REMwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTU4NUM1Q0M3RTU5NkMwNkY3RTRGN0VGNDRBRkVCMTExODI3ODQ3QjIz OUE1M0ZCNjQ3OUY0NEFBNkJFNEM5Mi8wLzVFMTIyM0NDOURDRDBFMUU0MEFDRTE1 QTFFMzQ5M0RFMUI2QjREQzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfFrF1oPloDaSECzMAHj6llXYb Oh0JgRalnIFuhLeQT98RPwXU/BXM1kWhOxo4LTjeIiOijCzwblCtxutFjDVqH/Vi 0/3kvn3DgMfKV6ilNR1P+QF+DDGHBKF+BOZk7Dcodu4tM6xsVYoHmeN2jzmr2wkw mp+GmagtFc+DdpTAnLY19QSbCVXSWYsCevJj2quotk/QdmeTwhP6at0j1y3XDcXx guIfnhopBOBPw/n2BkLpWxq7OKi2hoFcaCCacnWCRnuVHB1JQyfz99xD/o7SrERg 8bvPeKxTCmkLBVp3M5fhbpM33yEisLn21ZyvFnHISFbfPBv2tcO3Yy87qbyt -----END CERTIFICATE-----Generated at Tue Jun 17 11:48:45 2025 by rpki-client