$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft File: 24CA8C9C613F74DE73C0153A83A206D0476833FF.mft (raw, json) Hash identifier: 3jHFW/sJhKqi4xKm//ZDT9yAmK+3whdRAJOCEs2JWeA= Subject key identifier: CF:C1:32:4B:6E:8B:E6:1A:B1:13:1A:C6:9C:9B:0D:E7:6B:E2:5B:15 Authority key identifier: 24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF Certificate issuer: /CN=24CA8C9C613F74DE73C0153A83A206D0476833FF Certificate serial: 24DF33A68214262C275CA1D14EDA13D2E34E4263 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft Manifest number: E3 Signing time: Mon 02 Jun 2025 13:22:00 +0000 Manifest this update: Mon 02 Jun 2025 13:17:00 +0000 Manifest next update: Sat 07 Jun 2025 20:05:00 +0000 Files and hashes: 1: 34352e3138322e34332e302f32342d3234203d3e203532343638.roa (hash: j4pxhGczcvfub+1pWmQ3u0tMIFrBZCIDiCOow0FuYXU=) 2: 323830333a623536303a3a2f33322d3332203d3e203532343638.roa (hash: /XnPWU8TN21UwONbR3guY36ahmD93W3hsdLPKNH4mQ8=) 3: 24CA8C9C613F74DE73C0153A83A206D0476833FF.crl (hash: wiVcwomVmnkvwj1ewk32EBuASVtNf9Od+ln7BnUgnAE=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 20:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:df:33:a6:82:14:26:2c:27:5c:a1:d1:4e:da:13:d2:e3:4e:42:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24CA8C9C613F74DE73C0153A83A206D0476833FF Validity Not Before: Jun 2 13:17:00 2025 GMT Not After : Jun 7 20:05:00 2025 GMT Subject: CN=CFC1324B6E8BE61AB1131AC69C9B0DE76BE25B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5c:cc:f8:98:20:54:15:61:76:02:be:b6:3b: 8b:25:9d:4f:78:99:40:4b:52:42:a9:1d:42:47:73: 11:e4:61:08:c6:0b:9c:a3:cd:d6:f3:b0:b5:1f:9d: 90:d1:c8:11:67:ae:66:5f:ac:98:9b:70:5c:e8:ad: 41:3b:12:fd:f8:a5:74:14:f8:5d:29:1e:c6:12:1f: 8c:25:59:53:65:e6:b5:74:b0:5d:24:56:cc:aa:be: 3b:8e:c5:5a:a1:35:fc:91:b7:11:8f:41:d6:17:59: 86:78:dc:9c:a9:72:60:d1:91:75:21:64:af:ee:8d: cb:16:4a:01:80:4b:0b:f7:a8:59:35:51:48:22:51: 59:c7:2a:61:90:00:73:e9:1a:a9:00:0b:f5:be:25: 92:6c:5f:e3:3c:f8:93:51:05:93:df:7d:df:24:b3: 94:af:13:23:9d:01:09:c5:35:c9:56:47:99:58:14: 9c:78:de:ce:53:00:7b:cf:4f:9c:10:ea:98:f1:98: 57:51:0b:40:ba:47:79:7f:3c:a8:87:6a:29:85:04: 39:b1:32:d2:78:e7:72:c1:bf:41:52:eb:ba:0a:7d: d0:ad:10:4b:f1:8d:e1:55:53:02:a6:1e:fc:9d:40: ef:b8:48:41:c6:4a:fc:62:ed:e5:ef:9f:bb:66:99: 00:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C1:32:4B:6E:8B:E6:1A:B1:13:1A:C6:9C:9B:0D:E7:6B:E2:5B:15 X509v3 Authority Key Identifier: keyid:24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:55:18:33:b6:95:ca:d8:32:05:1d:a3:51:67:97:8a:64:93: d4:79:b2:f2:20:00:0e:ae:13:0a:01:ff:16:6f:fc:a3:23:6c: 7c:b7:52:39:b4:ac:6d:0c:ea:97:0f:ae:5f:95:56:c0:31:23: 68:2a:e7:40:9d:2f:07:03:59:7e:02:ae:13:23:61:78:3f:e0: e6:dc:8d:ac:cc:c0:f9:a3:e8:00:e6:6b:8e:3d:c1:5f:0f:d8: ac:af:a5:5f:e4:5a:7a:dc:fd:84:c5:4a:75:e5:c6:09:53:86: d0:20:de:cd:47:d3:ac:f7:49:3d:62:2c:77:b2:ee:4a:c2:2d: 02:db:9d:de:89:8d:c3:19:41:53:9d:0c:c3:28:69:bd:93:4a: 9c:77:71:e2:9b:8d:53:b7:16:a4:ce:15:74:04:c5:fc:27:a2: 57:f2:b1:1f:0b:ab:11:95:66:2f:53:21:a4:99:91:12:c1:eb: 99:ed:ed:9d:d8:b4:f8:d7:ae:a1:08:46:76:18:cb:81:af:e9: fc:27:82:26:80:6e:4a:8e:c7:4d:e7:e2:77:70:c1:21:1c:78: f9:98:6a:c2:33:65:9b:e5:4a:88:43:03:2c:bb:a3:80:cf:54: 8c:01:6d:3a:2a:7e:e1:27:0f:b7:9c:4e:82:75:d2:cd:90:f0: 69:9e:73:06 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJN8zpoIUJiwnXKHRTtoT0uNOQmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRDQThDOUM2MTNGNzRERTczQzAxNTNBODNBMjA2RDA0 NzY4MzNGRjAeFw0yNTA2MDIxMzE3MDBaFw0yNTA2MDcyMDA1MDBaMDMxMTAvBgNV BAMTKENGQzEzMjRCNkU4QkU2MUFCMTEzMUFDNjlDOUIwREU3NkJFMjVCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXMz4mCBUFWF2Ar62O4slnU94 mUBLUkKpHUJHcxHkYQjGC5yjzdbzsLUfnZDRyBFnrmZfrJibcFzorUE7Ev34pXQU +F0pHsYSH4wlWVNl5rV0sF0kVsyqvjuOxVqhNfyRtxGPQdYXWYZ43JypcmDRkXUh ZK/ujcsWSgGASwv3qFk1UUgiUVnHKmGQAHPpGqkAC/W+JZJsX+M8+JNRBZPffd8k s5SvEyOdAQnFNclWR5lYFJx43s5TAHvPT5wQ6pjxmFdRC0C6R3l/PKiHaimFBDmx MtJ453LBv0FS67oKfdCtEEvxjeFVUwKmHvydQO+4SEHGSvxi7eXvn7tmmQBVAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUz8EyS26L5hqxExrGnJsN52viWxUwHwYDVR0j BBgwFoAUJMqMnGE/dN5zwBU6g6IG0EdoM/8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRDgzNTA3NzNCREUwQzQwMzQxRTQ5RDI4N0EwNjRFNzVD MDMyRDEwOUU1Mjc1RTE2MjQzRDJFOUY4MkRCQzdDLzAvMjRDQThDOUM2MTNGNzRE RTczQzAxNTNBODNBMjA2RDA0NzY4MzNGRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNENBOEM5QzYxM0Y3NERFNzND MDE1M0E4M0EyMDZEMDQ3NjgzM0ZGLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEQ4MzUwNzczQkRFMEM0MDM0MUU0OUQyODdBMDY0RTc1QzAzMkQxMDlF NTI3NUUxNjI0M0QyRTlGODJEQkM3Qy8wLzI0Q0E4QzlDNjEzRjc0REU3M0MwMTUz QTgzQTIwNkQwNDc2ODMzRkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPVRgztpXK2DIFHaNRZ5eKZJPU ebLyIAAOrhMKAf8Wb/yjI2x8t1I5tKxtDOqXD65flVbAMSNoKudAnS8HA1l+Aq4T I2F4P+Dm3I2szMD5o+gA5muOPcFfD9isr6Vf5Fp63P2ExUp15cYJU4bQIN7NR9Os 90k9Yix3su5Kwi0C253eiY3DGUFTnQzDKGm9k0qcd3Him41TtxakzhV0BMX8J6JX 8rEfC6sRlWYvUyGkmZESweuZ7e2d2LT4166hCEZ2GMuBr+n8J4ImgG5KjsdN5+J3 cMEhHHj5mGrCM2Wb5UqIQwMsu6OAz1SMAW06Kn7hJw+3nE6CddLNkPBpnnMG -----END CERTIFICATE-----Generated at Wed Jun 4 12:35:40 2025 by rpki-client