$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft File: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft (raw, json) Hash identifier: Q0WwI1oZIW4XYXo66R3k8WJ4De4rgxr+vuEVCp9DMVY= Subject key identifier: 5E:3F:86:5C:AC:CF:C0:D4:D6:F3:45:4A:C3:B2:39:C8:3E:29:54:D2 Authority key identifier: BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC Certificate issuer: /CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Certificate serial: 0E58ED0755289AAAEB26A9F7252DB94E3117A3F3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft Manifest number: D3 Signing time: Thu 08 May 2025 04:47:46 +0000 Manifest this update: Thu 08 May 2025 04:42:46 +0000 Manifest next update: Mon 12 May 2025 19:57:46 +0000 Files and hashes: 1: BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl (hash: hnjUtx5CLY3NlDhmWiY2bt9flGlRRhIS7NmyhBsg+u4=) 2: 323830333a326665303a3a2f33322d3332203d3e20323731373831.roa (hash: qXLUa1DFAZMrZIlzarnZaCXNOtAwLQ/Wi2JutVkZxnE=) 3: 3137392e35312e3230382e302f32322d3234203d3e20323731373831.roa (hash: qefcdKBbQ8rTrMpgo/t4zhuWfrSW4R/8kvtNUQX7kms=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:58:ed:07:55:28:9a:aa:eb:26:a9:f7:25:2d:b9:4e:31:17:a3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC Validity Not Before: May 8 04:42:46 2025 GMT Not After : May 12 19:57:46 2025 GMT Subject: CN=5E3F865CACCFC0D4D6F3454AC3B239C83E2954D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:56:69:68:0d:ca:57:aa:92:cd:11:f3:79: df:94:9c:ac:c9:0e:1e:7b:ed:d7:9b:58:ed:12:50: d1:14:eb:01:73:60:ac:d4:db:45:9d:db:57:16:c6: 71:dc:df:fa:32:35:4d:9f:00:4b:22:85:cf:bf:bc: 60:1d:2f:16:51:05:50:28:a3:ba:fe:7a:85:fd:df: dc:93:99:0d:5a:47:10:39:dd:9e:e6:81:97:44:5c: 8a:3f:df:32:41:87:9d:61:10:12:46:f8:86:73:5d: a8:d0:8a:33:86:c6:c2:97:5a:51:fb:d0:f2:e3:43: ea:51:15:9a:69:95:a9:35:14:01:b4:95:0c:9a:f8: b4:e8:5c:cc:cf:0c:c7:03:3f:01:a6:12:8f:44:bf: a7:de:5e:56:3a:8e:62:2e:86:b0:6b:27:c2:33:4a: 4d:aa:a3:54:25:8e:72:91:ed:e9:7a:55:86:bd:36: 9b:08:e3:60:9b:77:ae:e9:10:e2:5f:ad:05:08:c5: 37:75:2e:a7:67:cc:af:90:8d:79:e9:a5:fb:6a:16: 2d:ab:65:49:2e:fe:57:1f:ad:4f:a8:44:31:82:a2: 5b:c5:1d:20:92:89:13:ce:71:92:e1:b4:31:49:cc: 5c:9a:b8:d3:58:ac:27:fb:08:58:92:04:d7:65:07: c4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3F:86:5C:AC:CF:C0:D4:D6:F3:45:4A:C3:B2:39:C8:3E:29:54:D2 X509v3 Authority Key Identifier: keyid:BF:91:FE:0B:71:20:FE:C1:B0:2E:20:F4:EB:88:A4:DD:FA:1B:7F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B28AC549303B74A1C49CA076B974F0636B03B79F9E0335B6FDBBFD60EA918348/0/BF91FE0B7120FEC1B02E20F4EB88A4DDFA1B7FFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5b:f0:30:f5:50:4b:44:73:56:40:37:e1:80:3c:8a:0c:36: 3d:55:ec:73:32:fa:f8:79:38:9d:e5:93:ac:87:85:91:9f:79: d3:d6:26:18:2a:df:ac:e3:93:0c:3f:e0:41:bf:03:2f:b3:24: e8:92:84:92:5c:3a:74:4f:d6:c5:8a:a0:84:c1:83:8a:5d:df: 6d:4d:3c:3f:ad:88:93:54:3a:bf:42:79:64:8f:e0:4e:21:11: 96:0f:1a:e8:73:99:a7:16:91:9f:26:9e:0f:eb:4c:bd:00:1d: f7:14:db:6c:fa:d0:eb:a2:9c:c4:29:8e:3f:17:81:24:79:76: d1:44:63:8a:69:2d:8d:20:c7:3c:6d:e9:29:7d:c3:06:83:a0: 64:fb:0b:ca:0d:44:59:e4:70:d0:eb:ab:13:0e:f3:eb:f9:cf: b5:98:fe:18:48:a4:c2:b0:0b:b5:94:3b:6a:31:28:1e:21:6a: 4d:0b:c8:92:9f:2e:24:47:11:93:90:ea:5d:f6:a8:4a:4f:5b: 3a:69:3d:1b:2c:ff:9b:1e:16:20:d6:14:76:ce:39:bd:d9:68: 56:f8:2a:d7:89:30:ba:a3:8b:16:8f:84:5f:4b:4c:4a:c9:d9: f5:9c:17:33:64:f5:ea:52:be:26:11:10:ba:e1:5b:d4:d9:5a: 29:e5:ec:f5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUDljtB1UomqrrJqn3JS25TjEXo/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5MUZFMEI3MTIwRkVDMUIwMkUyMEY0RUI4OEE0RERG QTFCN0ZGQzAeFw0yNTA1MDgwNDQyNDZaFw0yNTA1MTIxOTU3NDZaMDMxMTAvBgNV BAMTKDVFM0Y4NjVDQUNDRkMwRDRENkYzNDU0QUMzQjIzOUM4M0UyOTU0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6a1ZpaA3KV6qSzRHzed+UnKzJ Dh577debWO0SUNEU6wFzYKzU20Wd21cWxnHc3/oyNU2fAEsihc+/vGAdLxZRBVAo o7r+eoX939yTmQ1aRxA53Z7mgZdEXIo/3zJBh51hEBJG+IZzXajQijOGxsKXWlH7 0PLjQ+pRFZpplak1FAG0lQya+LToXMzPDMcDPwGmEo9Ev6feXlY6jmIuhrBrJ8Iz Sk2qo1QljnKR7el6VYa9NpsI42Cbd67pEOJfrQUIxTd1LqdnzK+QjXnppftqFi2r ZUku/lcfrU+oRDGColvFHSCSiRPOcZLhtDFJzFyauNNYrCf7CFiSBNdlB8SBAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXj+GXKzPwNTW80VKw7I5yD4pVNIwHwYDVR0j BBgwFoAUv5H+C3Eg/sGwLiD064ik3fobf/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CMjhBQzU0OTMwM0I3NEExQzQ5Q0EwNzZCOTc0RjA2MzZC MDNCNzlGOUUwMzM1QjZGREJCRkQ2MEVBOTE4MzQ4LzAvQkY5MUZFMEI3MTIwRkVD MUIwMkUyMEY0RUI4OEE0RERGQTFCN0ZGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRjkxRkUwQjcxMjBGRUMxQjAy RTIwRjRFQjg4QTREREZBMUI3RkZDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjI4QUM1NDkzMDNCNzRBMUM0OUNBMDc2Qjk3NEYwNjM2QjAzQjc5RjlF MDMzNUI2RkRCQkZENjBFQTkxODM0OC8wL0JGOTFGRTBCNzEyMEZFQzFCMDJFMjBG NEVCODhBNERERkExQjdGRkMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeW/Aw9VBLRHNWQDfhgDyKDDY9 VexzMvr4eTid5ZOsh4WRn3nT1iYYKt+s45MMP+BBvwMvsyTokoSSXDp0T9bFiqCE wYOKXd9tTTw/rYiTVDq/Qnlkj+BOIRGWDxroc5mnFpGfJp4P60y9AB33FNts+tDr opzEKY4/F4EkeXbRRGOKaS2NIMc8bekpfcMGg6Bk+wvKDURZ5HDQ66sTDvPr+c+1 mP4YSKTCsAu1lDtqMSgeIWpNC8iSny4kRxGTkOpd9qhKT1s6aT0bLP+bHhYg1hR2 zjm92WhW+CrXiTC6o4sWj4RfS0xKydn1nBczZPXqUr4mERC64VvU2Vop5ez1 -----END CERTIFICATE-----Generated at Thu May 8 06:51:11 2025 by rpki-client