$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft File: 9D2820894F6D41941116396B192CCF8017618F44.mft (raw, json) Hash identifier: x84UPkNSlK301PeKVp2B0Tbo2WSffnb6BJ819D+Vdag= Subject key identifier: 3D:DC:44:92:83:94:99:2A:F0:17:88:D0:36:53:0D:2A:4E:C4:BB:34 Authority key identifier: 9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44 Certificate issuer: /CN=9D2820894F6D41941116396B192CCF8017618F44 Certificate serial: 1199CF0272F884E0CBA200EF827A0B4B18D38C90 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft Manifest number: D0 Signing time: Mon 07 Apr 2025 20:02:24 +0000 Manifest this update: Mon 07 Apr 2025 19:57:24 +0000 Manifest next update: Sun 13 Apr 2025 13:56:24 +0000 Files and hashes: 1: 3133312e3232312e36342e302f32322d3234203d3e20323635373938.roa (hash: H1conceKs3KYf0BCP7SqZQsJe7CkX4TRtQ2icAnCBCU=) 2: 9D2820894F6D41941116396B192CCF8017618F44.crl (hash: 12EadXoiZ1SJrKeBo16F0w9kBK8KNIyJ4QK8YF0YfrM=) 3: 323830333a636238303a3a2f33322d3438203d3e20323635373938.roa (hash: aCU6Rs9ePNEUWEjA4LL/xRFEOkM8xbSGTT38sL74FoA=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:99:cf:02:72:f8:84:e0:cb:a2:00:ef:82:7a:0b:4b:18:d3:8c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D2820894F6D41941116396B192CCF8017618F44 Validity Not Before: Apr 7 19:57:24 2025 GMT Not After : Apr 13 13:56:24 2025 GMT Subject: CN=3DDC44928394992AF01788D036530D2A4EC4BB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7a:0a:34:47:3b:1a:5c:59:0a:54:0c:75:6c: 76:9a:4b:7f:44:48:ae:be:34:ee:44:8f:44:34:6e: 84:0d:6d:81:2b:24:62:70:f6:f7:2a:5f:c6:65:28: 57:c4:40:c5:b5:d7:4b:75:fd:94:64:03:b2:fd:53: 9a:98:70:19:2a:ed:a5:96:f4:11:d4:a9:30:cd:d5: f0:f1:cb:75:95:3f:92:e5:d4:64:0d:84:a7:be:6f: 96:48:a3:a5:e4:74:3c:84:98:00:05:a6:b6:34:02: 05:3d:f8:19:de:33:8c:21:fd:d7:e9:67:77:b7:52: 2c:57:ba:37:6b:84:16:2b:46:bf:65:ad:64:eb:0a: 76:50:d5:45:87:b4:bb:c8:bd:c9:72:14:d1:a7:49: 50:1e:73:78:d4:0f:32:b5:48:60:e1:a6:d5:f3:cb: 8e:e2:e7:cb:c5:6b:9c:3b:c0:3b:2e:86:e8:a2:35: 04:8a:6e:16:95:2f:0d:4f:ad:c9:09:f3:58:16:57: 51:3b:57:95:9a:1d:b8:1d:3d:c6:38:af:ba:b9:86: 1a:68:5e:a4:36:23:73:e7:cd:ae:a7:ae:d3:9b:a1: 35:f1:c3:30:c0:9d:d7:e0:8a:19:86:af:02:af:69: 06:43:88:32:02:8a:15:02:5e:19:a5:b3:86:53:5f: 7e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DC:44:92:83:94:99:2A:F0:17:88:D0:36:53:0D:2A:4E:C4:BB:34 X509v3 Authority Key Identifier: keyid:9D:28:20:89:4F:6D:41:94:11:16:39:6B:19:2C:CF:80:17:61:8F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D2820894F6D41941116396B192CCF8017618F44.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220D655CE1609C246E89BDC1042E51C467801A7D0CE67C9FDADC6307D7325B62/0/9D2820894F6D41941116396B192CCF8017618F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:68:aa:06:80:58:63:6c:6b:d8:64:4e:4a:77:ef:6c:47:9d: 3c:40:80:8f:09:64:ec:a0:7b:ee:27:cb:b2:f9:7d:6f:62:5b: 26:2a:d4:22:b3:10:c0:54:e7:5c:4b:84:3b:f2:94:9f:07:79: 12:47:4a:7e:e0:29:a3:e7:b1:46:e6:e6:3e:85:9e:78:94:f8: 5a:3c:17:dd:81:aa:99:03:b2:15:26:c8:fc:1f:ec:93:2e:24: 51:ed:76:ee:1c:1b:a2:a8:a3:dd:46:a8:ff:1f:69:f5:7a:08: 54:4e:dd:55:a5:70:81:cf:81:1d:80:4c:49:b5:57:f4:07:9a: b7:b3:ab:4b:23:9f:ba:c2:6d:ae:36:ff:be:40:5f:bd:a9:bd: 4e:7d:93:e8:1f:ba:7b:10:a6:55:ae:99:34:5f:a2:4f:a3:48: 19:7b:2c:cb:75:f4:2e:72:dc:7f:84:3e:15:44:cb:ac:b4:9b: 30:e9:e7:5b:11:7a:ad:da:d4:9b:90:ac:70:82:26:cb:22:d2: f8:03:ba:7c:8e:83:f1:8d:12:ca:ff:f3:de:37:d3:f3:31:b7: ab:e8:a5:d8:98:70:45:00:55:dc:1f:2b:6b:4e:c4:95:95:5f: b7:9a:68:73:ed:cd:aa:71:0f:13:15:20:86:cf:ea:bc:10:23: 23:31:fc:d5 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUEZnPAnL4hODLogDvgnoLSxjTjJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyODIwODk0RjZENDE5NDExMTYzOTZCMTkyQ0NGODAx NzYxOEY0NDAeFw0yNTA0MDcxOTU3MjRaFw0yNTA0MTMxMzU2MjRaMDMxMTAvBgNV BAMTKDNEREM0NDkyODM5NDk5MkFGMDE3ODhEMDM2NTMwRDJBNEVDNEJCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAego0RzsaXFkKVAx1bHaaS39E SK6+NO5Ej0Q0boQNbYErJGJw9vcqX8ZlKFfEQMW110t1/ZRkA7L9U5qYcBkq7aWW 9BHUqTDN1fDxy3WVP5Ll1GQNhKe+b5ZIo6XkdDyEmAAFprY0AgU9+BneM4wh/dfp Z3e3UixXujdrhBYrRr9lrWTrCnZQ1UWHtLvIvclyFNGnSVAec3jUDzK1SGDhptXz y47i58vFa5w7wDsuhuiiNQSKbhaVLw1PrckJ81gWV1E7V5WaHbgdPcY4r7q5hhpo XqQ2I3Pnza6nrtOboTXxwzDAndfgihmGrwKvaQZDiDICihUCXhmls4ZTX37RAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUPdxEkoOUmSrwF4jQNlMNKk7EuzQwHwYDVR0j BBgwFoAUnSggiU9tQZQRFjlrGSzPgBdhj0QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yMjBENjU1Q0UxNjA5QzI0NkU4OUJEQzEwNDJFNTFDNDY3 ODAxQTdEMENFNjdDOUZEQURDNjMwN0Q3MzI1QjYyLzAvOUQyODIwODk0RjZENDE5 NDExMTYzOTZCMTkyQ0NGODAxNzYxOEY0NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDI4MjA4OTRGNkQ0MTk0MTEx NjM5NkIxOTJDQ0Y4MDE3NjE4RjQ0LmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjIwRDY1NUNFMTYwOUMyNDZFODlCREMxMDQyRTUxQzQ2NzgwMUE3RDBD RTY3QzlGREFEQzYzMDdENzMyNUI2Mi8wLzlEMjgyMDg5NEY2RDQxOTQxMTE2Mzk2 QjE5MkNDRjgwMTc2MThGNDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOaKoGgFhjbGvYZE5Kd+9sR508 QICPCWTsoHvuJ8uy+X1vYlsmKtQisxDAVOdcS4Q78pSfB3kSR0p+4Cmj57FG5uY+ hZ54lPhaPBfdgaqZA7IVJsj8H+yTLiRR7XbuHBuiqKPdRqj/H2n1eghUTt1VpXCB z4EdgExJtVf0B5q3s6tLI5+6wm2uNv++QF+9qb1OfZPoH7p7EKZVrpk0X6JPo0gZ eyzLdfQuctx/hD4VRMustJsw6edbEXqt2tSbkKxwgibLItL4A7p8joPxjRLK//Pe N9PzMber6KXYmHBFAFXcHytrTsSVlV+3mmhz7c2qcQ8TFSCGz+q8ECMjMfzV -----END CERTIFICATE-----Generated at Tue Apr 8 00:37:06 2025 by rpki-client