$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft File: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft (raw, json) Hash identifier: WUwjbN733bjv3p4a6m3xA6CE3edK8gQzz+c/r9/8898= Subject key identifier: 65:45:22:1A:92:71:C6:A2:CD:50:FC:0C:BB:18:AF:05:09:0B:12:A2 Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A Certificate issuer: /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Certificate serial: 26A51F4BE1BCA43817CEFD0BCC42BA7FAB5B0C40 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft Manifest number: CD Signing time: Sat 05 Apr 2025 14:20:09 +0000 Manifest this update: Sat 05 Apr 2025 14:15:09 +0000 Manifest next update: Thu 10 Apr 2025 13:03:09 +0000 Files and hashes: 1: 34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (hash: /0gy1miHRoy/ostSkAVmkit9ibYLsGQ/IUPZTZwCW20=) 2: 34352e3136312e34342e302f32342d3234203d3e20323636393032.roa (hash: 9jaD8ScaSBtZgY1McxVIxZirAvjcAcgSOFZqFeK76+o=) 3: 34352e3136312e34362e302f32342d3234203d3e20323636393032.roa (hash: xDW4Lo9hVeYDQd0CfzQjVI0iUuT8tc/GgroA2Aw5kCM=) 4: 323830313a31353a663030303a3a2f34382d3438203d3e20323636393032.roa (hash: KyyYuN0Yyj5ZO2OssZou9c0xljNW9QC9IlHwmAWoHQg=) 5: 25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl (hash: xbwitq7ahAkkOuWt8AB9Cla7mBwfWdp3frbz5aiy6tM=) 6: 34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (hash: R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=) 7: 34352e3136312e34342e302f32322d3232203d3e20323636393032.roa (hash: wff5HMuPjRY+aZAF2OdCcw6nUxf458UNR9ehNwtR7m8=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a5:1f:4b:e1:bc:a4:38:17:ce:fd:0b:cc:42:ba:7f:ab:5b:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A Validity Not Before: Apr 5 14:15:09 2025 GMT Not After : Apr 10 13:03:09 2025 GMT Subject: CN=6545221A9271C6A2CD50FC0CBB18AF05090B12A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:54:a4:31:5e:0f:3e:ab:6c:2a:c4:e6:d3: 56:ff:1a:c9:a1:df:28:3e:da:e2:c2:be:17:3d:93: c0:26:f8:6b:78:a3:f7:f8:0a:66:e0:18:b3:ae:8d: 5a:ed:ee:cd:8a:99:b0:ca:73:8b:8d:41:d9:d9:ee: 41:15:76:42:66:a7:71:9a:e8:21:75:a2:3d:13:30: 71:aa:09:62:21:b2:16:2f:90:c6:49:f8:36:fb:e7: df:a8:9e:e0:d7:55:da:c7:56:ee:25:4d:b2:af:60: 91:ca:c5:17:bb:3c:74:d0:6e:f4:fe:72:c9:61:45: 35:8d:aa:6c:4a:66:fb:5e:2c:6b:e5:6e:be:38:e8: d2:32:1a:3a:6d:38:42:4a:97:2e:cf:48:7e:dc:00: 89:85:e7:7e:3d:76:28:73:61:dd:36:49:ac:67:45: 71:d1:db:c6:df:4e:18:8c:c1:78:9d:02:97:6b:6e: 43:44:ba:d6:bb:ab:66:eb:f9:03:dd:61:ec:c8:70: de:c0:bb:b9:3b:be:48:b1:d4:ae:38:ee:6e:59:21: 19:6c:ce:2f:2f:f3:2e:9e:cf:ed:c7:69:58:00:82: 36:8b:9b:27:78:88:7b:3d:2e:c1:e6:87:03:02:ce: fb:b4:d9:85:92:64:d5:1f:6d:0e:e8:96:68:d0:b8: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:45:22:1A:92:71:C6:A2:CD:50:FC:0C:BB:18:AF:05:09:0B:12:A2 X509v3 Authority Key Identifier: keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:98:a8:c9:14:48:e4:47:68:d2:d2:47:a7:b7:d4:44:0f:1d: 16:ad:aa:c1:a5:d7:3c:00:2e:81:42:67:7f:ba:3d:59:54:53: 15:cf:1d:a6:e5:92:49:90:a5:2b:96:8f:9c:73:7f:ed:0b:5b: 26:94:d9:49:6c:93:1d:12:59:b1:99:35:af:6b:90:c9:64:20: dc:71:18:ae:0d:01:af:88:ef:b7:4f:36:c8:a6:3e:63:8d:c2: e5:3d:95:6e:4f:3e:58:db:9b:7c:8f:e7:39:ff:e1:6c:ee:45: 23:08:ed:91:5a:9e:f7:69:8b:7e:1f:0f:2d:c0:cf:e1:c8:e7: 6d:b3:14:be:e4:cc:8d:b0:55:26:a6:18:fe:5d:3e:97:01:9d: e8:0e:e4:63:c9:2d:89:0d:08:b9:9f:16:52:7e:9d:d4:00:97: 17:76:11:cf:0e:00:b8:e9:8b:e3:bd:bc:e6:0b:ad:bc:5c:7b: 8c:37:22:b6:54:9f:57:5d:74:fe:a9:f2:00:dd:13:8d:60:05: ce:ed:ec:b8:9e:b8:84:ed:c2:fb:e6:dd:51:32:83:f9:88:ee: 8d:3f:e2:6a:c6:87:e0:c4:44:23:21:f0:1c:bb:60:8d:af:0a: a8:a2:08:7e:bf:83:59:cf:b4:67:c7:ab:41:f3:6e:de:53:31: 02:6c:27:75 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJqUfS+G8pDgXzv0LzEK6f6tbDEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdGMDREQ0NEN0M1 QzI2NDA2QTAeFw0yNTA0MDUxNDE1MDlaFw0yNTA0MTAxMzAzMDlaMDMxMTAvBgNV BAMTKDY1NDUyMjFBOTI3MUM2QTJDRDUwRkMwQ0JCMThBRjA1MDkwQjEyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnVSkMV4PPqtsKsTm01b/Gsmh 3yg+2uLCvhc9k8Am+Gt4o/f4CmbgGLOujVrt7s2KmbDKc4uNQdnZ7kEVdkJmp3Ga 6CF1oj0TMHGqCWIhshYvkMZJ+Db759+onuDXVdrHVu4lTbKvYJHKxRe7PHTQbvT+ cslhRTWNqmxKZvteLGvlbr446NIyGjptOEJKly7PSH7cAImF5349dihzYd02Saxn RXHR28bfThiMwXidApdrbkNEuta7q2br+QPdYezIcN7Au7k7vkix1K447m5ZIRls zi8v8y6ez+3HaVgAgjaLmyd4iHs9LsHmhwMCzvu02YWSZNUfbQ7olmjQuF5/AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUZUUiGpJxxqLNUPwMuxivBQkLEqIwHwYDVR0j BBgwFoAUJfKO8ND5OlKLNeB/BNzNfFwmQGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQy M0FEQzQyOEE5NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1 MjhCMzVFMDdGMDREQ0NEN0M1QzI2NDA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUYyOEVGMEQwRjkzQTUyOEIz NUUwN0YwNERDQ0Q3QzVDMjY0MDZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlFMEUyQjUwM0U0MjNBREM0MjhB OTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzI1RjI4RUYwRDBGOTNBNTI4QjM1RTA3 RjA0RENDRDdDNUMyNjQwNkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBOmKjJFEjkR2jS0kent9REDx0W rarBpdc8AC6BQmd/uj1ZVFMVzx2m5ZJJkKUrlo+cc3/tC1smlNlJbJMdElmxmTWv a5DJZCDccRiuDQGviO+3TzbIpj5jjcLlPZVuTz5Y25t8j+c5/+Fs7kUjCO2RWp73 aYt+Hw8twM/hyOdtsxS+5MyNsFUmphj+XT6XAZ3oDuRjyS2JDQi5nxZSfp3UAJcX dhHPDgC46YvjvbzmC628XHuMNyK2VJ9XXXT+qfIA3RONYAXO7ey4nriE7cL75t1R MoP5iO6NP+JqxofgxEQjIfAcu2CNrwqoogh+v4NZz7Rnx6tB827eUzECbCd1 -----END CERTIFICATE-----Generated at Sun Apr 6 21:20:26 2025 by rpki-client