$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft File: E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft (raw, json) Hash identifier: GmoINVnaT+afO2uByIKJ5KOTsWVfo6C6YEV5fOCSjww= Subject key identifier: BB:E4:3E:AC:7C:72:E2:E9:8B:CA:B1:C7:B4:F5:D7:A3:EB:F4:72:86 Authority key identifier: E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2 Certificate issuer: /CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2 Certificate serial: 3A6B1CDBDAF8E6E31FF57161A48A2816F18008B1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft Manifest number: 05 Signing time: Tue 29 Apr 2025 07:25:29 +0000 Manifest this update: Tue 29 Apr 2025 07:20:29 +0000 Manifest next update: Mon 05 May 2025 04:25:29 +0000 Files and hashes: 1: E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl (hash: qavcmGxF9bZbQs7aHbF9CWEmfUpfcWOGpfOF5opeGew=) 2: 323830333a646635303a3a2f33322d3438203d3e20323733393533.roa (hash: rXJHooALxtqUoqtc5ejw7QdDd9EkWLD+ss3DQG66d3o=) 3: 323830333a646635303a3a2f33322d3438203d3e20323634383237.roa (hash: N8nRydDsI2tiV6DHAMhvtvi2V5MfGNZnPYiz+i/wyDM=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 May 2025 04:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6b:1c:db:da:f8:e6:e3:1f:f5:71:61:a4:8a:28:16:f1:80:08:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2 Validity Not Before: Apr 29 07:20:29 2025 GMT Not After : May 5 04:25:29 2025 GMT Subject: CN=BBE43EAC7C72E2E98BCAB1C7B4F5D7A3EBF47286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:ed:4c:37:b4:5d:73:ec:6a:8d:1d:da:b9: 42:e3:5d:55:d6:0e:69:64:d2:13:88:ef:f2:12:40: 11:b7:0d:f2:5a:86:0b:3d:67:98:32:fe:ba:63:52: c9:6a:25:23:33:bb:58:3b:2a:75:3b:44:df:66:34: ed:23:dc:84:3e:e5:98:d8:c4:2b:2b:dd:26:96:97: 77:a7:40:4c:9f:ae:66:31:1c:67:93:d2:02:b3:cc: 5e:4b:86:af:4c:05:ba:68:59:ff:e5:ac:d4:48:1b: 68:d5:cc:8c:06:4a:26:2b:1d:d3:43:af:76:1d:6b: b6:e9:11:2c:b3:4e:f9:72:1b:f5:17:1f:93:f7:53: 30:a5:a9:02:e3:ea:ae:59:9d:21:36:8e:87:e2:51: 5b:3f:44:00:d1:41:87:cd:54:59:e0:50:ec:58:23: 54:13:31:ff:a9:a6:34:03:be:e6:3e:cf:cc:01:1e: 2e:07:5e:29:75:22:b3:c7:8d:05:64:32:70:bd:3d: 2b:50:f4:3f:eb:fd:35:76:e6:a6:34:08:45:ba:15: 30:7c:ff:95:50:2e:2a:5e:a8:80:75:8e:ff:b8:7b: e8:11:36:c4:4a:4e:05:81:cb:db:0a:30:42:b2:ec: a5:4d:3a:3d:d7:34:08:fc:c6:2e:26:b6:ff:16:35: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:3E:AC:7C:72:E2:E9:8B:CA:B1:C7:B4:F5:D7:A3:EB:F4:72:86 X509v3 Authority Key Identifier: keyid:E8:A8:EC:36:5B:A4:70:C9:FD:93:13:63:3F:D8:9A:A1:C7:DD:16:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA7DB9156A4719B46F9F32350C6E3C59B0083F3FC2053D58DE99ECF34006417/0/E8A8EC365BA470C9FD9313633FD89AA1C7DD16E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e7:80:8e:ee:08:fc:f3:62:bf:48:e5:69:51:d4:58:95:94: 7a:27:7d:56:c8:9d:a2:32:d7:62:c0:b3:2b:56:d5:e5:6b:3e: ed:c5:01:41:30:38:ff:05:01:a8:14:66:5c:ee:3f:f0:6d:3c: 33:f8:db:d8:36:02:24:1e:83:4c:80:a1:60:25:02:4e:3c:7c: 0f:62:ca:e6:8d:2f:b4:92:7a:62:53:11:78:f6:fb:57:f5:9b: 0e:8c:20:4e:6f:61:39:99:f4:3c:e2:da:db:93:6b:62:ee:31: 49:27:4f:36:16:bc:d7:43:ad:70:d8:75:de:ff:3f:cd:b3:02: d7:76:9d:ac:21:44:eb:ed:9c:bf:62:88:b3:1e:6b:1b:e0:17: 5a:62:d4:83:dc:80:b1:02:9d:53:44:63:c2:d4:bc:50:35:d6: df:d1:31:05:fe:8e:b0:4d:d8:3b:5c:1c:9f:28:68:31:76:e1: 4a:13:a9:38:a5:c2:cf:fd:87:1a:60:e9:79:6b:bd:b6:8d:5e: 90:40:62:1e:ed:31:0f:ee:61:e9:55:e2:ff:a5:08:70:a5:c1: 3a:3d:87:de:51:4e:f8:fd:64:fc:22:b9:f4:01:b8:34:42:16: 54:a2:71:e1:e2:ac:f8:e9:44:60:69:e0:23:00:75:2c:1a:2d: 72:ec:4f:79 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUOmsc29r45uMf9XFhpIooFvGACLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThBOEVDMzY1QkE0NzBDOUZEOTMxMzYzM0ZEODlBQTFD N0REMTZFMjAeFw0yNTA0MjkwNzIwMjlaFw0yNTA1MDUwNDI1MjlaMDMxMTAvBgNV BAMTKEJCRTQzRUFDN0M3MkUyRTk4QkNBQjFDN0I0RjVEN0EzRUJGNDcyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90u1MN7Rdc+xqjR3auULjXVXW Dmlk0hOI7/ISQBG3DfJahgs9Z5gy/rpjUslqJSMzu1g7KnU7RN9mNO0j3IQ+5ZjY xCsr3SaWl3enQEyfrmYxHGeT0gKzzF5Lhq9MBbpoWf/lrNRIG2jVzIwGSiYrHdND r3Yda7bpESyzTvlyG/UXH5P3UzClqQLj6q5ZnSE2jofiUVs/RADRQYfNVFngUOxY I1QTMf+ppjQDvuY+z8wBHi4HXil1IrPHjQVkMnC9PStQ9D/r/TV25qY0CEW6FTB8 /5VQLipeqIB1jv+4e+gRNsRKTgWBy9sKMEKy7KVNOj3XNAj8xi4mtv8WNSXbAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUu+Q+rHxy4umLyrHHtPXXo+v0coYwHwYDVR0j BBgwFoAU6KjsNlukcMn9kxNjP9iaocfdFuIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkE3REI5MTU2QTQ3MTlCNDZGOUYzMjM1MEM2RTNDNTlC MDA4M0YzRkMyMDUzRDU4REU5OUVDRjM0MDA2NDE3LzAvRThBOEVDMzY1QkE0NzBD OUZEOTMxMzYzM0ZEODlBQTFDN0REMTZFMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOEE4RUMzNjVCQTQ3MEM5RkQ5 MzEzNjMzRkQ4OUFBMUM3REQxNkUyLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQUZBN0RCOTE1NkE0NzE5QjQ2RjlGMzIzNTBDNkUzQzU5QjAwODNGM0ZD MjA1M0Q1OERFOTlFQ0YzNDAwNjQxNy8wL0U4QThFQzM2NUJBNDcwQzlGRDkzMTM2 MzNGRDg5QUExQzdERDE2RTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ54CO7gj882K/SOVpUdRYlZR6 J31WyJ2iMtdiwLMrVtXlaz7txQFBMDj/BQGoFGZc7j/wbTwz+NvYNgIkHoNMgKFg JQJOPHwPYsrmjS+0knpiUxF49vtX9ZsOjCBOb2E5mfQ84trbk2ti7jFJJ082FrzX Q61w2HXe/z/NswLXdp2sIUTr7Zy/YoizHmsb4BdaYtSD3ICxAp1TRGPC1LxQNdbf 0TEF/o6wTdg7XByfKGgxduFKE6k4pcLP/YcaYOl5a722jV6QQGIe7TEP7mHpVeL/ pQhwpcE6PYfeUU74/WT8Irn0Abg0QhZUonHh4qz46URgaeAjAHUsGi1y7E95 -----END CERTIFICATE-----Generated at Thu May 1 18:00:34 2025 by rpki-client