$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft File: 5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft (raw, json) Hash identifier: yAy7+CkwpIg3X11dTqI6XVzBDfKRR8nUua6Un6iXw4k= Subject key identifier: 4F:50:76:64:C3:72:4D:92:D0:9B:5E:8D:34:F1:82:7A:31:17:90:07 Authority key identifier: 5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A Certificate issuer: /CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A Certificate serial: 2BDEE32DBB54D18F85813BA7164834BFD39401FE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft Manifest number: F2 Signing time: Sun 22 Jun 2025 01:10:07 +0000 Manifest this update: Sun 22 Jun 2025 01:05:07 +0000 Manifest next update: Fri 27 Jun 2025 20:51:07 +0000 Files and hashes: 1: 323830333a323334303a3a2f33322d3332203d3e20323634363839.roa (hash: oGEpVKYagiIk9lMEYwwvGuNW7erZW5GelhxgzBo0Lfo=) 2: 5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl (hash: CcoAocqamMfwRBufE5HM8YfcvDaAYsAV5wyG5BC4nb8=) 3: 3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa (hash: RXMLQSJlUvdQJjQ+d9jGG4i6809finknMguDa1lKaSY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 25 Jun 2025 23:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:de:e3:2d:bb:54:d1:8f:85:81:3b:a7:16:48:34:bf:d3:94:01:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A Validity Not Before: Jun 22 01:05:07 2025 GMT Not After : Jun 27 20:51:07 2025 GMT Subject: CN=4F507664C3724D92D09B5E8D34F1827A31179007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:2f:c1:fa:a8:1d:ec:80:1f:38:cd:ed:93: 2f:bc:5b:f9:48:9a:76:f8:c0:86:53:46:97:b3:f9: 55:69:cd:6c:d5:44:e3:bd:3b:94:1f:6d:a8:dd:c0: 12:c8:57:34:aa:04:21:b3:7f:60:e4:8e:12:f9:9a: 66:74:54:72:f3:eb:da:8a:8e:26:84:be:d3:cb:aa: 3f:15:94:bc:e5:09:b9:39:b4:1f:61:73:a9:ba:b0: d4:7b:2d:8d:2d:17:00:0f:18:55:ce:54:c3:74:c3: 87:db:9c:ae:cf:0b:46:f3:43:0c:ff:ef:9e:5c:8f: 1e:83:70:08:a7:f6:71:93:52:70:8d:4b:c3:49:87: 6e:12:a0:a8:f1:1d:1d:70:6c:cd:d3:e0:d8:5b:bd: 58:69:30:4f:b3:63:40:bb:e9:b9:1d:6b:1a:a7:80: 68:30:23:9e:d6:a5:2d:62:86:14:c9:9e:24:50:d0: 46:51:42:01:dc:c8:39:cb:56:8a:10:98:b2:34:8a: 0f:58:91:f3:bc:16:55:7d:cd:a1:3b:00:d3:d2:df: 93:ef:38:86:1c:5f:42:f0:a5:16:40:cc:ed:2e:73: 2f:a0:ae:eb:90:b4:2f:d7:21:01:28:ab:db:42:f5: 09:10:24:1d:e1:f0:83:8d:ad:4c:cb:44:fe:6e:41: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:50:76:64:C3:72:4D:92:D0:9B:5E:8D:34:F1:82:7A:31:17:90:07 X509v3 Authority Key Identifier: keyid:5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:34:0d:c5:e5:5f:ed:48:76:00:69:d1:f1:0d:77:45:40:c1: 70:19:3b:1d:ab:f1:8d:64:2b:51:b8:ad:c7:13:60:80:40:7c: 94:ce:d9:5b:fa:e8:81:08:f6:75:b6:1d:a7:79:b3:45:09:0e: 31:d7:65:df:b5:ca:d1:74:98:34:3b:40:13:3c:4e:0f:c0:e6: 3e:94:98:aa:11:a5:76:23:4b:ba:0f:bf:e3:03:5b:4f:db:ec: 23:58:db:76:94:54:45:84:4b:20:ed:72:a7:9d:b0:66:b9:74: 4a:09:58:fe:3e:ca:ce:67:47:29:d0:64:e6:d5:02:9d:52:ce: 9b:7e:4d:e6:97:28:3d:99:1c:7e:1b:6d:99:c1:83:83:46:70: 31:33:d7:8f:8d:8b:09:0b:0b:b9:12:72:5b:9b:db:21:82:7f: 13:bf:4a:0e:e4:62:ef:ee:80:77:58:e3:35:ab:8f:08:ab:64: 79:d9:4e:71:53:47:3d:95:14:af:0e:36:e4:45:4a:e1:aa:46: 52:fe:1c:d8:67:56:bc:a0:6b:f1:3b:47:97:36:4b:96:c8:3a: dd:cf:b0:0a:a2:a2:15:1d:7f:d6:0c:8d:1c:15:38:06:8d:23: 80:da:4c:df:fc:df:1a:34:4b:01:18:47:33:ea:26:1f:83:d3: 74:81:84:ae -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUK97jLbtU0Y+FgTunFkg0v9OUAf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRDQ4OERBNDVGMUFGQzZGRkM5QzQ0NDczMjEzOTIx NEJGRDQ3QTAeFw0yNTA2MjIwMTA1MDdaFw0yNTA2MjcyMDUxMDdaMDMxMTAvBgNV BAMTKDRGNTA3NjY0QzM3MjREOTJEMDlCNUU4RDM0RjE4MjdBMzExNzkwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCICS/B+qgd7IAfOM3tky+8W/lI mnb4wIZTRpez+VVpzWzVROO9O5QfbajdwBLIVzSqBCGzf2DkjhL5mmZ0VHLz69qK jiaEvtPLqj8VlLzlCbk5tB9hc6m6sNR7LY0tFwAPGFXOVMN0w4fbnK7PC0bzQwz/ 755cjx6DcAin9nGTUnCNS8NJh24SoKjxHR1wbM3T4NhbvVhpME+zY0C76bkdaxqn gGgwI57WpS1ihhTJniRQ0EZRQgHcyDnLVooQmLI0ig9YkfO8FlV9zaE7ANPS35Pv OIYcX0LwpRZAzO0ucy+gruuQtC/XIQEoq9tC9QkQJB3h8IONrUzLRP5uQbFfAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUT1B2ZMNyTZLQm16NNPGCejEXkAcwHwYDVR0j BBgwFoAUWj1IjaRfGvxv/JxERzITkhS/1HowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9DRjEwQjQ2NTkyMzBFMTdGODJEM0JEMzZCOTU2NzI5M0VC NUI2RkQwREIwMTA0RTM4MTJDOTU0QzQwRkREMTVBLzAvNUEzRDQ4OERBNDVGMUFG QzZGRkM5QzQ0NDczMjEzOTIxNEJGRDQ3QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QTNENDg4REE0NUYxQUZDNkZG QzlDNDQ0NzMyMTM5MjE0QkZENDdBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvQ0YxMEI0NjU5MjMwRTE3RjgyRDNCRDM2Qjk1NjcyOTNFQjVCNkZEMERC MDEwNEUzODEyQzk1NEM0MEZERDE1QS8wLzVBM0Q0ODhEQTQ1RjFBRkM2RkZDOUM0 NDQ3MzIxMzkyMTRCRkQ0N0EubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwNA3F5V/tSHYAadHxDXdFQMFw GTsdq/GNZCtRuK3HE2CAQHyUztlb+uiBCPZ1th2nebNFCQ4x12XftcrRdJg0O0AT PE4PwOY+lJiqEaV2I0u6D7/jA1tP2+wjWNt2lFRFhEsg7XKnnbBmuXRKCVj+PsrO Z0cp0GTm1QKdUs6bfk3mlyg9mRx+G22ZwYODRnAxM9ePjYsJCwu5EnJbm9shgn8T v0oO5GLv7oB3WOM1q48Iq2R52U5xU0c9lRSvDjbkRUrhqkZS/hzYZ1a8oGvxO0eX NkuWyDrdz7AKoqIVHX/WDI0cFTgGjSOA2kzf/N8aNEsBGEcz6iYfg9N0gYSu -----END CERTIFICATE-----Generated at Sun Jun 22 17:41:58 2025 by rpki-client