$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft File: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft (raw, json) Hash identifier: dh3wNv6SwlJK7FPlErZUkBh8uamUKhuU1G0vFCHkq0c= Subject key identifier: 4D:7C:71:EE:69:F2:81:EA:0B:AE:43:4D:9A:B5:B3:96:EA:CB:D1:8E Authority key identifier: AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C Certificate issuer: /CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Certificate serial: 5BC3D0FDB07440B3AC8F41B114FF6BE496746CBF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft Manifest number: CA Signing time: Fri 04 Apr 2025 18:43:26 +0000 Manifest this update: Fri 04 Apr 2025 18:38:26 +0000 Manifest next update: Thu 10 Apr 2025 00:11:26 +0000 Files and hashes: 1: AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl (hash: dvO3eBAHd6ochcQxFM3zu4jpjuNc+P8G//Wm5Wfs/FA=) 2: 323830333a346135303a3a2f33322d3438203d3e20323733313736.roa (hash: 1S7U/necixh7xAZEJOiccJW6Tn6fQBFFDZB4GRKHA+s=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c3:d0:fd:b0:74:40:b3:ac:8f:41:b1:14:ff:6b:e4:96:74:6c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C Validity Not Before: Apr 4 18:38:26 2025 GMT Not After : Apr 10 00:11:26 2025 GMT Subject: CN=4D7C71EE69F281EA0BAE434D9AB5B396EACBD18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:34:c4:f8:75:7d:ca:39:97:26:5a:5e:35: 27:d2:d7:57:90:5e:c1:c7:0e:5f:90:bc:5f:78:6f: 5c:d1:55:b3:bc:3c:20:6b:62:7e:8e:09:0f:2a:94: 79:57:9d:9f:d5:e0:17:24:db:e9:c6:91:28:a6:86: 8b:87:12:5d:21:e3:5f:73:ac:93:62:67:64:7d:cc: 13:c2:7f:06:7e:91:80:30:8d:a0:d2:e3:9f:c8:2d: c9:1c:c0:27:d0:db:d5:b2:75:51:cc:4b:e0:f0:38: 34:90:3a:a5:7f:89:61:cd:e0:52:45:67:66:1d:eb: 60:be:ca:97:39:b0:c1:8a:2a:bc:ce:57:83:bf:9a: c2:cd:4b:11:0c:38:b8:a7:2a:ed:7c:8e:09:53:2c: 46:d8:73:76:ca:12:3c:46:2c:7e:4c:20:29:04:11: aa:c0:a5:42:75:52:54:21:de:fc:d7:cd:d6:ab:c5: 8c:b1:9c:aa:8f:8e:d6:ff:9f:64:ef:df:0e:6c:d7: 3c:47:76:a1:e1:71:62:a7:9b:5a:d4:de:e3:9a:b1: fb:20:aa:07:e0:20:06:ef:2f:3f:2b:10:8d:aa:24: ab:69:73:db:9b:c3:52:08:ce:21:0b:94:0b:64:9e: 58:e7:09:ba:96:5b:20:58:7e:7e:82:72:cd:ba:7f: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7C:71:EE:69:F2:81:EA:0B:AE:43:4D:9A:B5:B3:96:EA:CB:D1:8E X509v3 Authority Key Identifier: keyid:AA:F8:1A:6E:79:CF:F0:B1:C4:EE:FB:C3:2C:FD:3B:31:44:A5:10:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2398E214B806ED5F6BEAF9C0FD5865563759531D820B4671F4A7EF64438D6/0/AAF81A6E79CFF0B1C4EEFBC32CFD3B3144A5104C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2a:12:ac:5b:0b:67:bf:0f:03:0b:76:22:45:9f:3e:dd:02: 52:9e:05:3b:6c:6d:01:a5:21:c3:f7:78:09:27:fb:81:3c:b6: eb:c2:db:bb:4b:ed:86:02:0b:1b:ea:70:f4:96:56:e9:6f:36: ef:a5:b5:b8:ec:64:1d:50:c6:e8:bc:9e:5f:3b:9b:44:cc:57: 7a:47:11:ee:51:f1:49:08:df:a3:55:bd:ee:9d:05:b4:9c:1e: 31:69:05:15:6c:55:71:66:12:29:05:6d:6c:23:4e:d1:aa:4b: 14:19:2e:94:8b:d5:79:13:d9:d2:92:8d:9b:08:e3:5d:c4:98: 06:f1:40:dd:08:c3:f8:93:e0:e0:76:ad:3a:63:27:9c:5a:34: dc:f4:ac:34:a3:6d:88:29:64:39:f2:4b:54:cc:28:ff:e1:e0: 0c:58:a1:58:ff:66:71:ee:68:a3:83:36:ab:b8:f8:cb:80:66: 50:50:79:43:c9:77:88:85:f2:0a:2c:bf:49:52:be:69:61:60: c3:a5:bd:6b:58:39:77:e5:ef:58:6d:5b:51:7c:48:94:cc:27: 7c:68:05:9a:4d:bd:a3:3a:dd:fb:0c:f8:07:b8:b1:1d:27:33: 1d:2a:1b:18:c0:50:9d:17:51:4e:ea:56:45:28:8e:ce:97:b0: 24:7e:8a:fd -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUW8PQ/bB0QLOsj0GxFP9r5JZ0bL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFGODFBNkU3OUNGRjBCMUM0RUVGQkMzMkNGRDNCMzE0 NEE1MTA0QzAeFw0yNTA0MDQxODM4MjZaFw0yNTA0MTAwMDExMjZaMDMxMTAvBgNV BAMTKDREN0M3MUVFNjlGMjgxRUEwQkFFNDM0RDlBQjVCMzk2RUFDQkQxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCzTE+HV9yjmXJlpeNSfS11eQ XsHHDl+QvF94b1zRVbO8PCBrYn6OCQ8qlHlXnZ/V4Bck2+nGkSimhouHEl0h419z rJNiZ2R9zBPCfwZ+kYAwjaDS45/ILckcwCfQ29WydVHMS+DwODSQOqV/iWHN4FJF Z2Yd62C+ypc5sMGKKrzOV4O/msLNSxEMOLinKu18jglTLEbYc3bKEjxGLH5MICkE EarApUJ1UlQh3vzXzdarxYyxnKqPjtb/n2Tv3w5s1zxHdqHhcWKnm1rU3uOasfsg qgfgIAbvLz8rEI2qJKtpc9ubw1IIziELlAtknljnCbqWWyBYfn6Ccs26fzoLAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUTXxx7mnygeoLrkNNmrWzlurL0Y4wHwYDVR0j BBgwFoAUqvgabnnP8LHE7vvDLP07MUSlEEwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wOEUyMzk4RTIxNEI4MDZFRDVGNkJFQUY5QzBGRDU4NjU1 NjM3NTk1MzFEODIwQjQ2NzFGNEE3RUY2NDQzOEQ2LzAvQUFGODFBNkU3OUNGRjBC MUM0RUVGQkMzMkNGRDNCMzE0NEE1MTA0Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQUY4MUE2RTc5Q0ZGMEIxQzRF RUZCQzMyQ0ZEM0IzMTQ0QTUxMDRDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMDhFMjM5OEUyMTRCODA2RUQ1RjZCRUFGOUMwRkQ1ODY1NTYzNzU5NTMx RDgyMEI0NjcxRjRBN0VGNjQ0MzhENi8wL0FBRjgxQTZFNzlDRkYwQjFDNEVFRkJD MzJDRkQzQjMxNDRBNTEwNEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsKhKsWwtnvw8DC3YiRZ8+3QJS ngU7bG0BpSHD93gJJ/uBPLbrwtu7S+2GAgsb6nD0llbpbzbvpbW47GQdUMbovJ5f O5tEzFd6RxHuUfFJCN+jVb3unQW0nB4xaQUVbFVxZhIpBW1sI07RqksUGS6Ui9V5 E9nSko2bCONdxJgG8UDdCMP4k+Dgdq06YyecWjTc9Kw0o22IKWQ58ktUzCj/4eAM WKFY/2Zx7mijgzaruPjLgGZQUHlDyXeIhfIKLL9JUr5pYWDDpb1rWDl35e9YbVtR fEiUzCd8aAWaTb2jOt37DPgHuLEdJzMdKhsYwFCdF1FO6lZFKI7Ol7Akfor9 -----END CERTIFICATE-----Generated at Sat Apr 5 11:26:50 2025 by rpki-client