$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft File: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft (raw, json) Hash identifier: eDQJKgUGSbh+zYvtUII7ApRnGkLAMEH9u1P3kFUzbD8= Subject key identifier: 23:F8:C5:9C:33:D6:80:CE:BC:EE:9D:A9:51:61:8C:B5:D8:CD:80:7D Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 Certificate issuer: /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Certificate serial: 50EC49537E26DA63A4C8E569C0EB0791C7ECC65A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft Manifest number: DA Signing time: Tue 06 May 2025 11:07:49 +0000 Manifest this update: Tue 06 May 2025 11:02:49 +0000 Manifest next update: Mon 12 May 2025 02:51:49 +0000 Files and hashes: 1: 989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl (hash: 1r+WPsdLskHo1GaOn7PS2lFffhxraaoRTiIOTqWyjVw=) 2: 3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (hash: yu6Oe96ukjaDp8hbPn99XX1vIiICPSDbRovWaVfLzMY=) 3: 3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (hash: H7aEYtu6WVcmBJ/LYyjuVlTRTtiGzazA09PbwXTdxgA=) 4: 3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (hash: ki3ZXbLXCKJHkqFilvfhr6bdVrQBibKeIAqRvGGaKaU=) 5: 3133312e3139362e33392e302f32342d3234203d3e20323632313839.roa (hash: AsEHVSdxN/om5UYh7LmOx7ME5F/4rOyHrR6Vp7TmmYs=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ec:49:53:7e:26:da:63:a4:c8:e5:69:c0:eb:07:91:c7:ec:c6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5 Validity Not Before: May 6 11:02:49 2025 GMT Not After : May 12 02:51:49 2025 GMT Subject: CN=23F8C59C33D680CEBCEE9DA951618CB5D8CD807D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:54:2c:c6:10:06:1e:b7:84:37:a1:95:84:77: f6:99:d4:e3:3a:58:9d:b7:54:4b:b8:0f:10:26:46: dc:42:54:52:ec:6a:cb:04:3f:23:58:ca:1a:7e:ae: 18:f4:2c:91:e2:51:a0:1a:f6:05:39:bc:d3:7a:bd: 7c:8c:e9:0b:4b:83:76:4e:f9:51:75:d7:69:e0:5d: cc:a5:b5:df:44:36:7d:a2:d3:03:41:b3:dc:02:ba: 2c:c6:e9:0d:33:d5:c8:91:66:c4:08:af:ef:76:3b: 63:44:d8:23:b2:79:5e:c2:c5:97:e9:60:26:1e:65: 15:6f:68:fa:51:3d:ea:02:9a:fc:43:93:f7:2b:92: b7:b4:10:cb:c8:cd:b9:45:e9:50:28:6a:48:3f:cf: 9c:25:8f:c9:39:d3:81:65:a9:ef:18:e5:76:2c:8d: c7:1f:a8:7f:d7:fb:50:0d:6b:30:19:8a:6e:1a:f4: 8a:af:df:20:24:e7:29:1c:d2:b9:4f:1a:87:ad:1e: d1:84:d1:a1:ea:31:8b:2f:fe:96:f3:4c:6c:d9:f9: 94:0d:11:59:cf:ac:be:4b:d8:a7:34:7a:45:f6:2a: f6:ac:e1:23:2a:f7:f6:d9:e6:e9:10:da:d2:ee:c9: a2:98:f7:17:70:8a:d4:fb:25:80:aa:ac:02:b8:54: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F8:C5:9C:33:D6:80:CE:BC:EE:9D:A9:51:61:8C:B5:D8:CD:80:7D X509v3 Authority Key Identifier: keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9f:bd:59:9a:72:a2:70:81:e0:02:44:eb:eb:13:6e:8a:12: 39:2a:dd:dd:f6:0b:5f:72:90:ba:7e:ee:7f:07:1b:c5:68:ea: 1d:f8:09:a5:aa:7a:b1:97:ce:43:78:6b:2a:12:30:c4:a8:40: a0:47:a1:b9:3a:2b:33:10:25:55:d2:96:53:b3:19:0b:c4:4c: d9:eb:c3:f4:a4:0e:05:15:ba:95:e7:1a:6b:2b:78:15:14:ff: 55:97:45:90:8f:15:61:1c:6e:d0:da:6f:82:db:e4:97:73:06: 28:6e:93:e6:5b:ef:54:30:5b:5f:77:3d:30:89:68:c7:ae:9a: 1a:36:53:db:66:cb:0f:68:e0:44:df:2e:4e:a7:4f:21:95:d2: 82:1d:29:8e:52:e6:43:cb:fd:33:22:86:6f:68:1e:32:aa:5a: 31:9e:b4:a3:1f:3d:f9:21:52:ea:a0:53:56:14:cc:5d:29:df: a0:13:20:77:0b:f5:51:cd:f3:a5:33:a7:5a:35:9f:75:c7:aa: 2c:23:2e:eb:eb:64:96:51:27:cb:21:06:cf:10:44:48:1c:9f: 2a:5f:ef:15:8a:6a:cf:6d:10:a2:3f:b1:ab:49:30:33:29:51: 8f:71:98:cd:fa:cb:fa:ab:56:af:52:f9:50:0a:6f:30:0e:75: 2e:76:ef:d1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUUOxJU34m2mOkyOVpwOsHkcfsxlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5QUZEM0E5MTI1RERDODhBRENFMkI2REZCQzYzN0Uz OEE3MTFGNTAeFw0yNTA1MDYxMTAyNDlaFw0yNTA1MTIwMjUxNDlaMDMxMTAvBgNV BAMTKDIzRjhDNTlDMzNENjgwQ0VCQ0VFOURBOTUxNjE4Q0I1RDhDRDgwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlVCzGEAYet4Q3oZWEd/aZ1OM6 WJ23VEu4DxAmRtxCVFLsassEPyNYyhp+rhj0LJHiUaAa9gU5vNN6vXyM6QtLg3ZO +VF112ngXcyltd9ENn2i0wNBs9wCuizG6Q0z1ciRZsQIr+92O2NE2COyeV7CxZfp YCYeZRVvaPpRPeoCmvxDk/crkre0EMvIzblF6VAoakg/z5wlj8k504Flqe8Y5XYs jccfqH/X+1ANazAZim4a9Iqv3yAk5ykc0rlPGoetHtGE0aHqMYsv/pbzTGzZ+ZQN EVnPrL5L2Kc0ekX2Kvas4SMq9/bZ5ukQ2tLuyaKY9xdwitT7JYCqrAK4VJ9vAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUI/jFnDPWgM687p2pUWGMtdjNgH0wHwYDVR0j BBgwFoAUmJr9OpEl3ciK3OK237xjfjinEfUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9CQjA1NjMwMEY3MDM0NEZFRjA2RkNFOTQwNjQ1MDI4Mjkz NzAwMUVBMUM3M0JGQzQzQjBBMDQ2NTc5MEE1REU0LzAvOTg5QUZEM0E5MTI1RERD ODhBRENFMkI2REZCQzYzN0UzOEE3MTFGNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85ODlBRkQzQTkxMjVEREM4OEFE Q0UyQjZERkJDNjM3RTM4QTcxMUY1LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQkIwNTYzMDBGNzAzNDRGRUYwNkZDRTk0MDY0NTAyODI5MzcwMDFFQTFD NzNCRkM0M0IwQTA0NjU3OTBBNURFNC8wLzk4OUFGRDNBOTEyNUREQzg4QURDRTJC NkRGQkM2MzdFMzhBNzExRjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJn71ZmnKicIHgAkTr6xNuihI5 Kt3d9gtfcpC6fu5/BxvFaOod+Amlqnqxl85DeGsqEjDEqECgR6G5OiszECVV0pZT sxkLxEzZ68P0pA4FFbqV5xprK3gVFP9Vl0WQjxVhHG7Q2m+C2+SXcwYobpPmW+9U MFtfdz0wiWjHrpoaNlPbZssPaOBE3y5Op08hldKCHSmOUuZDy/0zIoZvaB4yqlox nrSjHz35IVLqoFNWFMxdKd+gEyB3C/VRzfOlM6daNZ91x6osIy7r62SWUSfLIQbP EERIHJ8qX+8VimrPbRCiP7GrSTAzKVGPcZjN+sv6q1avUvlQCm8wDnUudu/R -----END CERTIFICATE-----Generated at Tue May 6 21:50:41 2025 by rpki-client