$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB859F6A0197AFA502323DBE0C740F132FD275C51D1B77E09527D6510E0F6F54/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.mft File: D35B116C5B51A3B6D7A521E0343F6510FC602FBC.mft (raw, json) Hash identifier: h+kt1D5AcRfIDQy5PBwxLB8891I7mhB82dPnQqauDpg= Subject key identifier: 3E:E9:BA:F3:D3:93:23:9D:F5:70:38:E3:00:97:67:B2:62:A7:AE:AC Authority key identifier: D3:5B:11:6C:5B:51:A3:B6:D7:A5:21:E0:34:3F:65:10:FC:60:2F:BC Certificate issuer: /CN=D35B116C5B51A3B6D7A521E0343F6510FC602FBC Certificate serial: 0E52C6DA490A696AB7BD18E2916C9E57E6971020 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AB859F6A0197AFA502323DBE0C740F132FD275C51D1B77E09527D6510E0F6F54/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.mft Manifest number: 58 Signing time: Wed 07 May 2025 04:58:33 +0000 Manifest this update: Wed 07 May 2025 04:53:33 +0000 Manifest next update: Mon 12 May 2025 10:37:33 +0000 Files and hashes: 1: D35B116C5B51A3B6D7A521E0343F6510FC602FBC.crl (hash: E+XG16j/3LFHy0+NIvW2tA5arwWhVcOxZ6DptM9TbPE=) 2: 323830313a3136323a3a2f34342d3438203d3e203138373437.roa (hash: +JBCSkzseV2p/eFgng/jBxs02RmHVv2iIjdMPlEs7EY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AB859F6A0197AFA502323DBE0C740F132FD275C51D1B77E09527D6510E0F6F54/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.crl rsync://repository.lacnic.net/rpki/lacnic/AB859F6A0197AFA502323DBE0C740F132FD275C51D1B77E09527D6510E0F6F54/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 10:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:52:c6:da:49:0a:69:6a:b7:bd:18:e2:91:6c:9e:57:e6:97:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D35B116C5B51A3B6D7A521E0343F6510FC602FBC Validity Not Before: May 7 04:53:33 2025 GMT Not After : May 12 10:37:33 2025 GMT Subject: CN=3EE9BAF3D393239DF57038E3009767B262A7AEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1e:dd:96:09:eb:1b:d6:9a:a5:f9:b1:f7:5b: fa:dc:23:ea:e5:87:30:95:c0:00:76:ab:4e:f4:a6: 25:f8:32:db:1f:b2:3e:b8:12:73:57:b4:8c:b8:66: 7c:ff:73:e6:70:b1:4a:bb:8e:5a:25:e3:ce:fe:e2: aa:ec:af:d1:4d:65:b4:b7:83:91:5c:a0:be:3e:bd: 20:f7:51:f7:32:18:a7:4b:2a:96:d1:03:e6:43:79: 8e:d3:ec:16:65:ec:1f:f9:e7:f9:1d:e0:61:f6:c0: 82:fe:10:94:6d:79:74:db:6c:6f:42:9b:b5:0b:1c: 22:af:62:16:1a:aa:ba:0d:d3:6e:4f:be:71:12:0f: 76:a8:6e:bf:ad:0d:62:a0:4f:70:e3:c9:9a:b2:e6: 26:bd:b5:1b:6c:ef:89:06:25:21:88:2c:9b:cd:73: 0f:e1:ca:9e:46:04:2d:38:97:3b:ea:fe:b9:c8:dc: 77:38:77:57:9f:63:08:4a:e7:11:74:e9:a0:a7:43: f4:51:34:1a:37:03:38:a3:e4:90:a9:95:b1:2b:a1: 34:0f:57:57:b2:bf:5f:23:dc:b3:4c:f3:65:bd:f8: 7a:00:b9:02:9e:88:9b:d1:e7:3c:91:e3:18:04:52: 6b:ad:7c:78:12:6c:55:fd:73:b7:a3:4e:20:8e:75: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:BA:F3:D3:93:23:9D:F5:70:38:E3:00:97:67:B2:62:A7:AE:AC X509v3 Authority Key Identifier: keyid:D3:5B:11:6C:5B:51:A3:B6:D7:A5:21:E0:34:3F:65:10:FC:60:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AB859F6A0197AFA502323DBE0C740F132FD275C51D1B77E09527D6510E0F6F54/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB859F6A0197AFA502323DBE0C740F132FD275C51D1B77E09527D6510E0F6F54/0/D35B116C5B51A3B6D7A521E0343F6510FC602FBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:bf:ac:72:4e:05:8f:25:78:39:96:96:6c:a1:2c:de:75:5a: 53:b6:85:33:76:51:0b:c9:52:11:05:b0:0f:62:96:65:3d:18: fe:ad:40:70:54:00:51:6c:c7:1a:7c:58:27:77:26:66:b6:2c: 18:29:97:91:2b:ca:9f:86:ba:ce:fb:17:2c:16:30:1c:7c:5d: dc:ba:3b:21:0a:6d:d9:83:d5:39:19:30:3f:42:7a:3a:f8:8c: 07:76:95:bc:2e:39:d7:e2:80:20:5c:df:37:f4:ef:48:3e:37: 2c:34:38:13:35:00:e3:21:96:5f:38:34:fd:e7:c7:00:da:c7: 5f:74:b3:55:29:51:9c:5d:9d:9c:85:5d:93:7c:4c:09:9d:a5: 4d:07:eb:aa:dc:bf:76:9b:b1:9a:df:91:d5:08:de:f8:45:ce: 51:1c:25:77:cc:10:a1:91:f4:f7:25:9f:74:36:96:bb:63:51: f3:d4:10:b9:d3:9a:3f:e1:2d:81:7a:2f:8a:23:3b:f3:65:6e: 50:ea:96:e3:f3:79:80:4e:a5:39:36:11:77:be:c0:08:cc:c3: cd:cb:47:06:de:30:cb:03:47:a2:83:80:c6:24:5f:df:14:cf: d7:62:81:9d:6d:89:83:e2:06:34:83:8c:a7:92:42:5e:22:1b: d8:f7:c9:99 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDlLG2kkKaWq3vRjikWyeV+aXECAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1QjExNkM1QjUxQTNCNkQ3QTUyMUUwMzQzRjY1MTBG QzYwMkZCQzAeFw0yNTA1MDcwNDUzMzNaFw0yNTA1MTIxMDM3MzNaMDMxMTAvBgNV BAMTKDNFRTlCQUYzRDM5MzIzOURGNTcwMzhFMzAwOTc2N0IyNjJBN0FFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUHt2WCesb1pql+bH3W/rcI+rl hzCVwAB2q070piX4Mtsfsj64EnNXtIy4Znz/c+ZwsUq7jlol487+4qrsr9FNZbS3 g5FcoL4+vSD3UfcyGKdLKpbRA+ZDeY7T7BZl7B/55/kd4GH2wIL+EJRteXTbbG9C m7ULHCKvYhYaqroN025PvnESD3aobr+tDWKgT3DjyZqy5ia9tRts74kGJSGILJvN cw/hyp5GBC04lzvq/rnI3Hc4d1efYwhK5xF06aCnQ/RRNBo3Azij5JCplbEroTQP V1eyv18j3LNM82W9+HoAuQKeiJvR5zyR4xgEUmutfHgSbFX9c7ejTiCOdddBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPum689OTI531cDjjAJdnsmKnrqwwHwYDVR0j BBgwFoAU01sRbFtRo7bXpSHgND9lEPxgL7wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BQjg1OUY2QTAxOTdBRkE1MDIzMjNEQkUwQzc0MEYxMzJG RDI3NUM1MUQxQjc3RTA5NTI3RDY1MTBFMEY2RjU0LzAvRDM1QjExNkM1QjUxQTNC NkQ3QTUyMUUwMzQzRjY1MTBGQzYwMkZCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzVCMTE2QzVCNTFBM0I2RDdB NTIxRTAzNDNGNjUxMEZDNjAyRkJDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUI4NTlGNkEwMTk3QUZBNTAyMzIzREJFMEM3NDBGMTMyRkQyNzVDNTFE MUI3N0UwOTUyN0Q2NTEwRTBGNkY1NC8wL0QzNUIxMTZDNUI1MUEzQjZEN0E1MjFF MDM0M0Y2NTEwRkM2MDJGQkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzv6xyTgWPJXg5lpZsoSzedVpT toUzdlELyVIRBbAPYpZlPRj+rUBwVABRbMcafFgndyZmtiwYKZeRK8qfhrrO+xcs FjAcfF3cujshCm3Zg9U5GTA/Qno6+IwHdpW8LjnX4oAgXN839O9IPjcsNDgTNQDj IZZfODT958cA2sdfdLNVKVGcXZ2chV2TfEwJnaVNB+uq3L92m7Ga35HVCN74Rc5R HCV3zBChkfT3JZ90Npa7Y1Hz1BC505o/4S2Bei+KIzvzZW5Q6pbj83mATqU5NhF3 vsAIzMPNy0cG3jDLA0eig4DGJF/fFM/XYoGdbYmD4gY0g4ynkkJeIhvY98mZ -----END CERTIFICATE-----Generated at Thu May 8 22:17:51 2025 by rpki-client