$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft File: FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft (raw, json) Hash identifier: L5OjAkVNfo3Nw5YntOT3cAro0rLjYCthXeRMwiv+cIQ= Subject key identifier: 35:AE:B2:AC:02:5F:99:39:30:B5:1A:1E:5D:87:AF:50:B8:58:E5:17 Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90 Certificate issuer: /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790 Certificate serial: 453CFAA35CA5B62CE5E17F98EC68FDFFF7FEB918 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft Manifest number: CC Signing time: Fri 18 Apr 2025 08:47:46 +0000 Manifest this update: Fri 18 Apr 2025 08:42:46 +0000 Manifest next update: Wed 23 Apr 2025 16:31:46 +0000 Files and hashes: 1: FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl (hash: 5CMs8sd6HHUsdXGYtPpb6C10K+Dl3U15jGWZH0zMogs=) 2: 323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa (hash: ZfOff7SqfHXRn/eHzIpB9NJ8eiuSXWQf5FRRWZW+WMY=) 3: 34352e3138382e3231392e302f32342d3234203d3e20323639383434.roa (hash: o1CtWFmm1iYAEHlmYU6qbJHOxBRSEcrAqO3Y+pjmBQI=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 20:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3c:fa:a3:5c:a5:b6:2c:e5:e1:7f:98:ec:68:fd:ff:f7:fe:b9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790 Validity Not Before: Apr 18 08:42:46 2025 GMT Not After : Apr 23 16:31:46 2025 GMT Subject: CN=35AEB2AC025F993930B51A1E5D87AF50B858E517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:2a:65:1e:ee:7e:f5:11:e2:bf:f7:fb:03: 32:12:42:6e:e4:b6:2c:d3:03:4c:6a:2f:bf:13:1f: 0c:53:26:01:aa:12:6c:9d:44:5d:00:7b:4e:7c:bf: 4a:97:b0:5b:63:41:43:a8:d6:65:98:72:94:3f:c7: 99:e2:cd:55:f0:b0:30:af:17:82:56:c1:0b:dc:6e: 05:e9:d4:94:ab:36:ea:10:1e:60:e1:ce:90:32:15: db:00:5a:dd:2d:42:ec:77:d0:22:a8:32:e0:ec:20: f2:2b:0d:1f:00:4b:71:73:df:f8:08:19:ae:87:29: e9:96:e3:a6:3e:99:80:1e:17:c0:dc:98:cc:8a:2a: 2c:31:6a:04:d3:7e:a5:a6:9a:bf:a1:01:56:ca:75: 3f:93:e9:3e:1e:d0:2e:ff:ea:13:8a:97:d4:48:ba: 60:5d:69:d1:80:e0:ce:db:a6:bb:b1:0b:6c:c8:67: 25:aa:0b:72:05:52:b6:bc:c2:a7:61:b4:38:b7:e0: 15:87:45:c4:ab:a0:98:73:43:4c:1f:2d:71:78:83: f0:63:74:b0:5b:80:0a:ce:5d:6f:81:f7:5d:39:6f: c8:34:e2:15:50:73:05:93:dc:55:91:c8:16:f9:18: f7:12:f2:13:c6:be:f0:37:38:48:47:43:d6:d1:a2: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AE:B2:AC:02:5F:99:39:30:B5:1A:1E:5D:87:AF:50:B8:58:E5:17 X509v3 Authority Key Identifier: keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4d:23:9f:54:f1:30:a4:09:54:14:92:e6:ac:3a:d9:ef:6c: 94:a0:c2:75:a3:dc:eb:48:80:ff:0f:06:86:d4:fb:06:b2:0e: 74:92:ca:da:87:b2:18:8e:70:90:7c:98:ff:51:1a:18:ac:6b: f4:f1:d8:eb:22:b2:47:dd:6f:cd:16:4a:c5:04:ed:50:0f:83: 07:95:fd:52:7c:c9:b5:13:06:e1:66:d2:97:e5:35:bc:20:a1: 43:ed:f6:95:e1:96:03:ae:ca:da:0d:ae:80:19:e9:1e:44:15: a7:d1:a1:64:af:76:9f:40:85:a9:68:b1:6e:ae:3a:0e:26:04: f9:f9:b5:a2:3e:22:42:77:2c:fc:96:00:18:e0:cb:43:6c:d4: c0:54:c8:77:74:24:ca:69:d3:ef:5e:4b:72:74:84:0b:6b:8d: 68:30:1e:7c:e2:c5:50:7f:da:67:6f:c6:c7:3c:7d:ae:e7:d6: 40:1b:64:35:44:31:3a:44:fd:51:8d:1a:43:a2:f6:ce:94:7e: 80:e9:7d:dd:18:f5:61:b0:61:ec:7f:32:7d:ca:06:1c:63:d1: c1:8f:b7:cc:5f:2b:93:21:b6:99:73:a2:47:cd:af:f7:13:f1: a7:eb:a2:af:c9:39:97:6d:a1:ea:56:d2:74:41:9b:eb:53:2c: 00:f2:ae:f6 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIURTz6o1yltizl4X+Y7Gj9//f+uRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDFFMTRENUNGNDdBRTY1RkJGQzUzQjdGNTc3Q0VD NzFCQjc5MDAeFw0yNTA0MTgwODQyNDZaFw0yNTA0MjMxNjMxNDZaMDMxMTAvBgNV BAMTKDM1QUVCMkFDMDI1Rjk5MzkzMEI1MUExRTVEODdBRjUwQjg1OEU1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpCplHu5+9RHiv/f7AzISQm7k tizTA0xqL78THwxTJgGqEmydRF0Ae058v0qXsFtjQUOo1mWYcpQ/x5nizVXwsDCv F4JWwQvcbgXp1JSrNuoQHmDhzpAyFdsAWt0tQux30CKoMuDsIPIrDR8AS3Fz3/gI Ga6HKemW46Y+mYAeF8DcmMyKKiwxagTTfqWmmr+hAVbKdT+T6T4e0C7/6hOKl9RI umBdadGA4M7bpruxC2zIZyWqC3IFUra8wqdhtDi34BWHRcSroJhzQ0wfLXF4g/Bj dLBbgArOXW+B9105b8g04hVQcwWT3FWRyBb5GPcS8hPGvvA3OEhHQ9bRov8nAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUNa6yrAJfmTkwtRoeXYevULhY5RcwHwYDVR0j BBgwFoAU/5QeFNXPR65l+/xTt/V3zscbt5AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8xODhBMUQ0OThDMzAxQUExNTZGODExQzdDRDhFMjI1OTBB QTU0NkQ1REZBM0VGMDdDRDY1MDUzMTQ5Nzg3ODdDLzAvRkY5NDFFMTRENUNGNDdB RTY1RkJGQzUzQjdGNTc3Q0VDNzFCQjc5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjk0MUUxNEQ1Q0Y0N0FFNjVG QkZDNTNCN0Y1NzdDRUM3MUJCNzkwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMTg4QTFENDk4QzMwMUFBMTU2RjgxMUM3Q0Q4RTIyNTkwQUE1NDZENURG QTNFRjA3Q0Q2NTA1MzE0OTc4Nzg3Qy8wL0ZGOTQxRTE0RDVDRjQ3QUU2NUZCRkM1 M0I3RjU3N0NFQzcxQkI3OTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7TSOfVPEwpAlUFJLmrDrZ72yU oMJ1o9zrSID/DwaG1PsGsg50ksrah7IYjnCQfJj/URoYrGv08djrIrJH3W/NFkrF BO1QD4MHlf1SfMm1EwbhZtKX5TW8IKFD7faV4ZYDrsraDa6AGekeRBWn0aFkr3af QIWpaLFurjoOJgT5+bWiPiJCdyz8lgAY4MtDbNTAVMh3dCTKadPvXktydIQLa41o MB584sVQf9pnb8bHPH2u59ZAG2Q1RDE6RP1RjRpDovbOlH6A6X3dGPVhsGHsfzJ9 ygYcY9HBj7fMXyuTIbaZc6JHza/3E/Gn66KvyTmXbaHqVtJ0QZvrUywA8q72 -----END CERTIFICATE-----Generated at Fri Apr 18 22:45:12 2025 by rpki-client