$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft File: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft (raw, json) Hash identifier: 3Rf9N8NDt+etYOIiuBCL7i1TYhg5SuoizvD6EZtzQ80= Subject key identifier: D4:79:4F:EB:64:1A:23:E5:39:60:DF:43:D1:C4:7A:82:03:6D:C3:C5 Authority key identifier: 3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC Certificate issuer: /CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC Certificate serial: 6470493067BE9B6CCC0B99F33C976DA73B64B1B2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft Manifest number: 64 Signing time: Thu 17 Apr 2025 01:08:54 +0000 Manifest this update: Thu 17 Apr 2025 01:03:54 +0000 Manifest next update: Tue 22 Apr 2025 22:51:54 +0000 Files and hashes: 1: 34352e3233392e36382e302f32322d3234203d3e203238353339.roa (hash: weojV1OCMtf9wFio1+L4InJ+6+PbsFJGyo6ZF3Bg2Bw=) 2: 3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl (hash: mNJiVVdaB0n0XwfB/QSiJt0xBbRDhR+ho0qnLa3n5l4=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:70:49:30:67:be:9b:6c:cc:0b:99:f3:3c:97:6d:a7:3b:64:b1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC Validity Not Before: Apr 17 01:03:54 2025 GMT Not After : Apr 22 22:51:54 2025 GMT Subject: CN=D4794FEB641A23E53960DF43D1C47A82036DC3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:5a:a8:ca:fb:3d:ec:91:75:54:d7:66:9c: 8d:50:80:a8:77:6a:fb:eb:a0:10:70:4e:69:12:a2: c8:d6:d1:d1:46:6a:1c:bd:b4:83:e8:3c:dd:65:a9: d1:75:ef:cb:b5:d3:87:82:8e:77:3c:8b:33:76:5d: 02:e0:16:30:04:04:d4:4a:9e:14:09:03:91:65:1e: f2:f6:95:cc:65:c9:ac:f0:50:bc:07:72:64:71:c6: f0:79:06:1a:17:9d:ce:8a:bb:7e:b8:8a:e1:01:21: a9:21:81:01:52:75:29:ba:a6:51:ee:8d:be:d0:a2: 6d:20:85:e3:6e:81:b1:1a:7b:fd:40:2f:16:31:b5: 92:2e:89:bf:f4:fd:a6:bb:97:55:1f:6a:2f:7a:dd: fa:85:dd:da:6d:dd:5a:64:06:51:5b:32:cc:91:28: 7c:44:f4:24:e7:6f:96:a9:a8:60:e6:89:5f:b7:84: 1b:3a:3c:14:bf:84:86:77:ef:9e:79:82:07:db:da: 74:d9:2c:3c:fc:cc:f8:c7:67:81:42:0a:eb:8a:fc: cd:34:00:c5:34:e8:1f:ef:ee:12:72:a1:81:33:4d: 07:e7:98:35:1b:22:22:b4:1c:3f:64:92:6b:95:17: 19:ee:b1:42:f7:9e:8e:05:a4:90:20:be:73:fa:c5: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:4F:EB:64:1A:23:E5:39:60:DF:43:D1:C4:7A:82:03:6D:C3:C5 X509v3 Authority Key Identifier: keyid:3B:8D:8C:3F:F0:C2:3C:7E:11:E8:96:CB:FF:8B:4E:C6:2D:EA:6D:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F6BAB412A90BA53A0FC1F3C54B2B1540FC2D10DE822A18FDE5EB086FA9A8A89/0/3B8D8C3FF0C23C7E11E896CBFF8B4EC62DEA6DAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9e:87:39:5c:97:1d:7c:b5:06:52:bf:9b:68:ad:52:75:69: 51:74:79:69:e6:d3:3c:cb:de:59:84:b7:d0:20:0a:dc:d5:b1: 7a:db:da:d6:da:17:a3:a9:06:dc:0d:3d:a6:14:f4:d0:0c:58: f2:b8:5c:32:dd:aa:24:d9:a4:cb:f8:c9:9b:53:b8:79:d9:38: d5:e3:06:47:09:64:69:1f:ca:5a:02:e9:7b:c1:a1:f8:2e:4d: 67:e0:f8:3d:28:22:c7:fd:8c:84:83:3b:9b:98:d8:a7:b1:da: 96:0c:78:ef:34:95:4d:b8:27:55:9a:34:5f:7f:fa:30:3a:e3: 22:98:8e:d6:07:21:27:d6:ed:e5:9b:8b:37:64:05:b4:9d:92: 6c:f4:ee:c2:30:9a:a0:13:d8:a0:e0:36:ab:3f:3d:91:6e:c3: c6:aa:43:37:b9:92:ee:5b:c8:61:29:b9:45:c3:55:25:da:56: 6f:c8:2a:9a:d7:d0:70:30:f8:74:bf:74:34:83:39:76:57:31: b6:7e:cd:36:e1:e4:85:b1:c8:3c:ba:0e:4b:47:7e:d2:2d:54: 68:0d:54:53:c6:83:e7:65:fc:57:e2:93:7e:a2:63:53:a7:09: 71:b1:c1:12:bf:1e:fa:69:59:cc:ba:82:9a:60:66:28:53:12: a6:b1:0a:49 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUZHBJMGe+m2zMC5nzPJdtpztksbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4RDhDM0ZGMEMyM0M3RTExRTg5NkNCRkY4QjRFQzYy REVBNkRBQzAeFw0yNTA0MTcwMTAzNTRaFw0yNTA0MjIyMjUxNTRaMDMxMTAvBgNV BAMTKEQ0Nzk0RkVCNjQxQTIzRTUzOTYwREY0M0QxQzQ3QTgyMDM2REMzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdlqoyvs97JF1VNdmnI1QgKh3 avvroBBwTmkSosjW0dFGahy9tIPoPN1lqdF178u104eCjnc8izN2XQLgFjAEBNRK nhQJA5FlHvL2lcxlyazwULwHcmRxxvB5BhoXnc6Ku364iuEBIakhgQFSdSm6plHu jb7Qom0gheNugbEae/1ALxYxtZIuib/0/aa7l1Ufai963fqF3dpt3VpkBlFbMsyR KHxE9CTnb5apqGDmiV+3hBs6PBS/hIZ37555ggfb2nTZLDz8zPjHZ4FCCuuK/M00 AMU06B/v7hJyoYEzTQfnmDUbIiK0HD9kkmuVFxnusUL3no4FpJAgvnP6xQEHAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU1HlP62QaI+U5YN9D0cR6ggNtw8UwHwYDVR0j BBgwFoAUO42MP/DCPH4R6JbL/4tOxi3qbawwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8wRjZCQUI0MTJBOTBCQTUzQTBGQzFGM0M1NEIyQjE1NDBG QzJEMTBERTgyMkExOEZERTVFQjA4NkZBOUE4QTg5LzAvM0I4RDhDM0ZGMEMyM0M3 RTExRTg5NkNCRkY4QjRFQzYyREVBNkRBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjhEOEMzRkYwQzIzQzdFMTFF ODk2Q0JGRjhCNEVDNjJERUE2REFDLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMEY2QkFCNDEyQTkwQkE1M0EwRkMxRjNDNTRCMkIxNTQwRkMyRDEwREU4 MjJBMThGREU1RUIwODZGQTlBOEE4OS8wLzNCOEQ4QzNGRjBDMjNDN0UxMUU4OTZD QkZGOEI0RUM2MkRFQTZEQUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATnoc5XJcdfLUGUr+baK1SdWlR dHlp5tM8y95ZhLfQIArc1bF629rW2hejqQbcDT2mFPTQDFjyuFwy3aok2aTL+Mmb U7h52TjV4wZHCWRpH8paAul7waH4Lk1n4Pg9KCLH/YyEgzubmNinsdqWDHjvNJVN uCdVmjRff/owOuMimI7WByEn1u3lm4s3ZAW0nZJs9O7CMJqgE9ig4DarPz2RbsPG qkM3uZLuW8hhKblFw1Ul2lZvyCqa19BwMPh0v3Q0gzl2VzG2fs024eSFscg8ug5L R37SLVRoDVRTxoPnZfxX4pN+omNTpwlxscESvx76aVnMuoKaYGYoUxKmsQpJ -----END CERTIFICATE-----Generated at Fri Apr 18 22:29:08 2025 by rpki-client