$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft File: 5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft (raw, json) Hash identifier: cY3uLALKsUwiAzuDiHIJ3KDIvfIayBUoDuyJz1w9MFw= Subject key identifier: 3D:BC:4F:5D:7D:F1:E3:2E:1E:9B:09:10:62:2E:9B:5F:83:9A:BD:93 Authority key identifier: 5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0 Certificate issuer: /CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0 Certificate serial: 7AA07D1F1E348681AB06ED1ED24A6E7EBF1A5EC4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft Manifest number: D8 Signing time: Tue 29 Apr 2025 20:02:53 +0000 Manifest this update: Tue 29 Apr 2025 19:57:53 +0000 Manifest next update: Mon 05 May 2025 03:21:53 +0000 Files and hashes: 1: 3137302e38302e39362e302f32322d3234203d3e20323634383239.roa (hash: EN6bKmbXr83hCGVgg6+TXQsqLT3vkrz3D6XGxdjqu4k=) 2: 5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl (hash: psgf5JtaZtH9RjPwUsQ1i6vZBMh89nYsDGxFE1fSm7Q=) 3: 3137302e38302e39362e302f32322d3234203d3e20323632313931.roa (hash: FfpfXY7dF2RsCEtm+2Yl/5TZqhXS+4FeUgsGtC0XdhY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 16:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a0:7d:1f:1e:34:86:81:ab:06:ed:1e:d2:4a:6e:7e:bf:1a:5e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0 Validity Not Before: Apr 29 19:57:53 2025 GMT Not After : May 5 03:21:53 2025 GMT Subject: CN=3DBC4F5D7DF1E32E1E9B0910622E9B5F839ABD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:51:fb:a0:4d:25:d8:b5:31:1e:55:70:74: 50:60:1f:07:5b:ca:3c:f4:8d:29:d2:7b:63:ef:92: dd:ae:d3:88:3e:ca:59:c9:23:0f:7b:1a:d3:b9:3d: be:a9:2c:ab:ad:ea:af:59:d8:50:bf:2d:44:c2:e6: f7:ad:73:53:96:12:4d:67:d5:4d:08:47:ea:f3:f7: 33:e5:1c:77:39:62:b0:09:9d:9f:60:a9:62:11:8b: 14:e8:91:52:76:c6:4c:07:42:11:71:9e:33:43:f8: 7d:aa:e9:41:a8:6e:25:ef:83:1a:44:de:20:90:1b: 74:7a:b3:6e:27:a0:82:dd:8c:a2:d2:c1:60:1b:b3: 3a:c8:a1:6a:ba:6f:c6:17:d7:58:f8:94:a8:0c:fe: 1a:c9:f8:18:64:3e:2f:2e:b8:06:c4:f5:8d:66:19: 17:14:82:fc:7a:c7:35:a3:85:86:9a:1a:cc:59:4c: 0a:c2:7e:25:aa:5e:80:4d:c5:9e:c5:05:0e:0b:02: bd:ff:41:24:b9:f3:3f:6d:43:f5:f1:b5:87:4c:89: 63:4d:f8:69:36:03:c7:7d:40:72:a9:74:36:1d:f3: c2:6f:9c:4b:ef:91:bc:ac:db:37:e1:51:e2:fb:a0: dd:65:4a:15:ec:b8:1c:79:5f:4d:9e:77:ee:68:74: a7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BC:4F:5D:7D:F1:E3:2E:1E:9B:09:10:62:2E:9B:5F:83:9A:BD:93 X509v3 Authority Key Identifier: keyid:5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:51:3b:a2:0f:ea:63:bf:44:20:7d:4b:d1:a0:26:c0:9f:97: 6c:d4:73:3d:63:6d:dc:22:08:59:05:84:59:1d:7a:3d:c0:74: bf:ca:48:b6:41:26:fe:e5:12:db:1a:48:fd:ed:29:6d:57:d8: 30:37:e9:68:15:b8:33:16:46:8d:db:ae:c8:b1:5f:e8:35:1c: 4c:d0:26:42:4f:02:ad:c1:b6:86:4e:41:6d:a2:5e:38:d1:66: b5:e5:ea:14:43:19:db:c1:bf:a4:74:27:86:98:b8:a1:f7:d8: 3e:d8:c0:5c:11:d5:d8:0b:49:1f:16:8a:e7:98:f3:96:30:c7: 1d:b7:a5:ec:fd:0d:3c:56:da:ba:15:ab:12:48:b7:94:78:a0: 1b:6d:c0:a3:05:95:a9:a3:a7:24:99:8b:34:18:09:37:2b:bd: 75:c4:ac:6a:3d:34:89:e5:15:65:73:6d:6a:ea:0c:73:6e:c5: 08:e9:12:a8:20:a1:19:40:b6:44:e4:8e:a1:62:f8:3f:11:b8: b1:8c:ac:cc:41:eb:4f:46:be:f7:c9:c9:5c:78:41:cb:74:d4: 24:82:8b:93:b6:14:39:15:b6:cc:72:c5:27:a6:79:eb:24:5a: fb:6c:a9:7f:5a:1d:a5:90:9f:da:51:15:4a:5f:93:20:3a:4c: b2:0f:56:40 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUeqB9Hx40hoGrBu0e0kpufr8aXsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUxMjIzQ0M5RENEMEUxRTQwQUNFMTVBMUUzNDkzREUx QjZCNERDMDAeFw0yNTA0MjkxOTU3NTNaFw0yNTA1MDUwMzIxNTNaMDMxMTAvBgNV BAMTKDNEQkM0RjVEN0RGMUUzMkUxRTlCMDkxMDYyMkU5QjVGODM5QUJEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIf1H7oE0l2LUxHlVwdFBgHwdb yjz0jSnSe2Pvkt2u04g+ylnJIw97GtO5Pb6pLKut6q9Z2FC/LUTC5vetc1OWEk1n 1U0IR+rz9zPlHHc5YrAJnZ9gqWIRixTokVJ2xkwHQhFxnjND+H2q6UGobiXvgxpE 3iCQG3R6s24noILdjKLSwWAbszrIoWq6b8YX11j4lKgM/hrJ+BhkPi8uuAbE9Y1m GRcUgvx6xzWjhYaaGsxZTArCfiWqXoBNxZ7FBQ4LAr3/QSS58z9tQ/XxtYdMiWNN +Gk2A8d9QHKpdDYd88JvnEvvkbys2zfhUeL7oN1lShXsuBx5X02ed+5odKetAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPbxPXX3x4y4emwkQYi6bX4OavZMwHwYDVR0j BBgwFoAUXhIjzJ3NDh5ArOFaHjST3htrTcAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BNTg1QzVDQzdFNTk2QzA2RjdFNEY3RUY0NEFGRUIxMTE4 Mjc4NDdCMjM5QTUzRkI2NDc5RjQ0QUE2QkU0QzkyLzAvNUUxMjIzQ0M5RENEMEUx RTQwQUNFMTVBMUUzNDkzREUxQjZCNERDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RTEyMjNDQzlEQ0QwRTFFNDBB Q0UxNUExRTM0OTNERTFCNkI0REMwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQTU4NUM1Q0M3RTU5NkMwNkY3RTRGN0VGNDRBRkVCMTExODI3ODQ3QjIz OUE1M0ZCNjQ3OUY0NEFBNkJFNEM5Mi8wLzVFMTIyM0NDOURDRDBFMUU0MEFDRTE1 QTFFMzQ5M0RFMUI2QjREQzAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARUTuiD+pjv0QgfUvRoCbAn5ds 1HM9Y23cIghZBYRZHXo9wHS/yki2QSb+5RLbGkj97SltV9gwN+loFbgzFkaN267I sV/oNRxM0CZCTwKtwbaGTkFtol440Wa15eoUQxnbwb+kdCeGmLih99g+2MBcEdXY C0kfFornmPOWMMcdt6Xs/Q08Vtq6FasSSLeUeKAbbcCjBZWpo6ckmYs0GAk3K711 xKxqPTSJ5RVlc21q6gxzbsUI6RKoIKEZQLZE5I6hYvg/EbixjKzMQetPRr73yclc eEHLdNQkgouTthQ5FbbMcsUnpnnrJFr7bKl/Wh2lkJ/aURVKX5MgOkyyD1ZA -----END CERTIFICATE-----Generated at Wed Apr 30 18:04:44 2025 by rpki-client