$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft File: 20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft (raw, json) Hash identifier: pd6XnkgV+Ho01irysGlkfouts0oTFcSpNN5ah8AuBN0= Subject key identifier: 5C:3F:2A:AF:F1:01:74:D1:3D:4A:4B:E7:07:5D:07:5D:03:B1:E5:AE Authority key identifier: 20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75 Certificate issuer: /CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75 Certificate serial: 3041011657E80EC54720BB4F3E3A180477C5A337 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft Manifest number: DE Signing time: Thu 08 May 2025 12:57:44 +0000 Manifest this update: Thu 08 May 2025 12:52:44 +0000 Manifest next update: Tue 13 May 2025 08:37:44 +0000 Files and hashes: 1: 323830333a653363303a3a2f33322d3438203d3e20323635373339.roa (hash: dvzwargEWguyR8iOmj+URH/WbQtPtG3se+Bb5q/B/+w=) 2: 20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl (hash: MxjJBh8ZdAlsraaHvqkw45MYQJ5F2JIqh/Aslewr718=) 3: 34352e372e3235322e302f32322d3234203d3e20323635373339.roa (hash: oWQSqlcdx4/yT7qjsV+illIbnlSc+E/9dg4NF7vSbYk=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 08:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:41:01:16:57:e8:0e:c5:47:20:bb:4f:3e:3a:18:04:77:c5:a3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75 Validity Not Before: May 8 12:52:44 2025 GMT Not After : May 13 08:37:44 2025 GMT Subject: CN=5C3F2AAFF10174D13D4A4BE7075D075D03B1E5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:99:b1:40:1b:1c:f9:39:11:4f:ca:98:25: 7c:41:5f:91:80:26:9c:62:53:e8:4f:a3:18:5b:26: 8b:d4:9b:b8:9b:9e:94:17:7c:87:e7:ad:95:a3:70: 19:b6:8a:4c:bc:18:26:b3:bf:be:84:65:de:36:13: e6:73:9d:0a:51:3e:ee:73:d3:ed:68:fa:6b:65:aa: ae:08:c8:7e:4b:d1:95:07:c7:6a:60:d8:8c:a5:57: eb:90:0a:78:4b:73:fc:e8:c8:96:84:12:88:45:51: 69:76:97:41:c0:41:5c:00:55:b1:2c:c1:0d:7b:35: 29:8e:e8:6d:8b:39:b6:38:3c:dc:75:80:fd:e3:d5: 57:e3:8c:d3:23:87:0d:ab:07:cc:45:c7:fe:b6:2a: ee:63:bb:4c:2b:46:fa:9b:09:02:34:78:25:f7:4e: 18:1a:9c:86:85:49:fe:55:20:75:9e:05:e8:51:77: 91:1a:15:94:5d:c4:e9:e7:7d:bc:f4:46:42:a3:aa: da:83:50:09:6d:69:8c:55:19:1e:cb:e4:8e:60:1d: cc:48:cd:b4:32:dc:7d:8b:c2:b4:61:9b:42:26:80: 6e:e1:25:d3:88:32:b0:47:05:a0:bb:34:8d:ac:7d: ce:69:a5:0b:06:69:9d:af:88:c2:03:72:d4:95:89: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3F:2A:AF:F1:01:74:D1:3D:4A:4B:E7:07:5D:07:5D:03:B1:E5:AE X509v3 Authority Key Identifier: keyid:20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:83:e5:a0:44:79:8a:6e:8c:5b:45:25:cb:b1:21:8a:48:45: 28:87:31:95:43:2b:7a:01:9f:e7:6c:a3:fe:35:d7:97:f8:cb: 7c:f5:c2:61:ad:66:a6:0b:45:d9:17:d8:14:9a:a9:ff:0b:08: de:69:27:dd:ab:a9:54:2a:77:f4:ee:08:7a:90:5c:c1:91:b4: 1e:b7:ee:f3:3e:57:0b:eb:7e:7d:f3:a1:c9:89:c3:1a:68:06: a7:68:d0:03:3b:21:b4:d5:19:7a:24:79:81:0e:3b:2f:ba:ee: e9:e3:ee:15:c5:8e:9a:e0:51:69:54:f0:35:be:1a:ad:ea:bb: 7e:ac:24:40:54:d2:72:83:e1:04:13:a6:15:d5:43:d4:8c:a9: 98:2a:47:f6:d1:c9:6c:a3:47:9b:02:e0:7b:84:8e:eb:f4:17: 8a:59:b4:11:95:09:bd:39:e1:71:cb:8e:0d:33:cd:5f:d3:d3: fb:17:75:c6:72:12:aa:c0:2c:6e:8d:4d:80:12:d4:22:c7:58: db:79:2e:2c:da:b7:82:f4:8a:9d:79:89:53:0c:de:9a:db:0d: b6:4e:63:e1:05:0a:6b:24:ea:bd:b1:b1:a3:ed:88:3a:f9:01: 7c:83:1b:02:1f:4b:53:0c:54:a9:0d:bf:9c:20:52:db:e3:1c: 86:c9:a4:0e -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUMEEBFlfoDsVHILtPPjoYBHfFozcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNTgwQTUyQzE1QTdCMEVDMkI1QTI0M0U1RTUyMTdE NkRFOUU3NTAeFw0yNTA1MDgxMjUyNDRaFw0yNTA1MTMwODM3NDRaMDMxMTAvBgNV BAMTKDVDM0YyQUFGRjEwMTc0RDEzRDRBNEJFNzA3NUQwNzVEMDNCMUU1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVJmxQBsc+TkRT8qYJXxBX5GA JpxiU+hPoxhbJovUm7ibnpQXfIfnrZWjcBm2iky8GCazv76EZd42E+ZznQpRPu5z 0+1o+mtlqq4IyH5L0ZUHx2pg2IylV+uQCnhLc/zoyJaEEohFUWl2l0HAQVwAVbEs wQ17NSmO6G2LObY4PNx1gP3j1VfjjNMjhw2rB8xFx/62Ku5ju0wrRvqbCQI0eCX3 ThganIaFSf5VIHWeBehRd5EaFZRdxOnnfbz0RkKjqtqDUAltaYxVGR7L5I5gHcxI zbQy3H2LwrRhm0ImgG7hJdOIMrBHBaC7NI2sfc5ppQsGaZ2viMIDctSViRtTAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUXD8qr/EBdNE9SkvnB10HXQOx5a4wHwYDVR0j BBgwFoAUILWApSwVp7DsK1okPl5SF9bennUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CNzFGQTkxN0FDNUQ0QkIxRTI1ODNEMTBFQjk0N0RFOUQ3 MENBMzQwMkE1NzAzOEQzNkNEMUIwMjYwOTMxMDA1LzAvMjBCNTgwQTUyQzE1QTdC MEVDMkI1QTI0M0U1RTUyMTdENkRFOUU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEI1ODBBNTJDMTVBN0IwRUMy QjVBMjQzRTVFNTIxN0Q2REU5RTc1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQjcxRkE5MTdBQzVENEJCMUUyNTgzRDEwRUI5NDdERTlENzBDQTM0MDJB NTcwMzhEMzZDRDFCMDI2MDkzMTAwNS8wLzIwQjU4MEE1MkMxNUE3QjBFQzJCNUEy NDNFNUU1MjE3RDZERTlFNzUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBog+WgRHmKboxbRSXLsSGKSEUo hzGVQyt6AZ/nbKP+NdeX+Mt89cJhrWamC0XZF9gUmqn/CwjeaSfdq6lUKnf07gh6 kFzBkbQet+7zPlcL635986HJicMaaAanaNADOyG01Rl6JHmBDjsvuu7p4+4VxY6a 4FFpVPA1vhqt6rt+rCRAVNJyg+EEE6YV1UPUjKmYKkf20clso0ebAuB7hI7r9BeK WbQRlQm9OeFxy44NM81f09P7F3XGchKqwCxujU2AEtQix1jbeS4s2reC9IqdeYlT DN6a2w22TmPhBQprJOq9sbGj7Yg6+QF8gxsCH0tTDFSpDb+cIFLb4xyGyaQO -----END CERTIFICATE-----Generated at Sat May 10 05:21:09 2025 by rpki-client