$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft File: 3424CAC085E77B82A8878925FC49A646944DB380.mft (raw, json) Hash identifier: cPEG8l7n6oSz5kLABW2rGadAu68075gWWMhL5jE3C/0= Subject key identifier: D7:55:0B:8B:6A:14:18:EC:F3:5C:11:C1:CC:96:91:01:E6:42:79:77 Authority key identifier: 34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80 Certificate issuer: /CN=3424CAC085E77B82A8878925FC49A646944DB380 Certificate serial: 01088EE07E9E6FB0859BB51839E3C63EF7D9BBFE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft Manifest number: CB Signing time: Sat 05 Apr 2025 11:38:30 +0000 Manifest this update: Sat 05 Apr 2025 11:33:30 +0000 Manifest next update: Fri 11 Apr 2025 03:24:30 +0000 Files and hashes: 1: 323830333a666634303a3a2f33322d3332203d3e20323633373939.roa (hash: P8b7ZOEerp/NGHhCOgMX088+SfPKoRjkexqL8HKe8+4=) 2: 3136382e3139352e3231362e302f32322d3234203d3e20323633373939.roa (hash: EXnLTY5U73HI8SEYhr8O6uuT4l4emJMRsqDGEG/d054=) 3: 3424CAC085E77B82A8878925FC49A646944DB380.crl (hash: hLejOUy6+J/3nJi63ZN8jHjcFuuHViA7A8I8ktKj4rY=) 4: 3136382e3139352e3231362e302f32322d3232203d3e20323633373939.roa (hash: 256L5xAhaOtJaHtIXft9UY+WCURmLfsxx/fWc1QYxOY=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:08:8e:e0:7e:9e:6f:b0:85:9b:b5:18:39:e3:c6:3e:f7:d9:bb:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3424CAC085E77B82A8878925FC49A646944DB380 Validity Not Before: Apr 5 11:33:30 2025 GMT Not After : Apr 11 03:24:30 2025 GMT Subject: CN=D7550B8B6A1418ECF35C11C1CC969101E6427977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:f6:f9:6e:e5:f7:be:92:18:03:91:ae:8b: 56:8e:75:fa:1b:b7:fd:9b:cd:54:c6:f3:29:52:8b: e9:4f:ba:0c:84:c9:71:7a:ed:82:e5:0f:ae:2c:d7: ae:60:ba:cf:3a:70:d0:3d:55:d9:55:7a:be:fb:8d: f8:17:69:7a:4f:8e:0e:13:92:2a:d0:b4:1e:40:39: 06:6d:de:89:62:07:6b:ea:46:b2:7d:d2:3f:21:57: d4:a7:6a:e5:9c:6a:4e:dc:80:75:3c:ab:d9:52:b6: 3e:29:e3:7d:81:25:be:db:09:4c:87:a5:9a:ab:e6: f3:a6:fa:d7:b8:f1:67:d3:98:92:0a:76:e5:cc:f1: 99:68:f8:16:e2:cc:3a:e2:8a:36:4d:84:a0:56:8c: a4:a0:b2:5b:aa:37:db:fd:bc:79:c1:34:25:34:ea: b4:15:b4:29:25:df:cd:9d:94:a1:e8:55:fd:6e:dc: f6:b8:be:02:62:e7:b7:1e:92:1e:f8:d6:59:4f:ad: 04:34:db:35:97:fb:20:25:0d:e5:e0:29:bb:9a:ce: bc:ea:b5:9a:d5:f0:2c:a2:0e:0f:23:1c:34:5b:8f: bc:7e:54:b0:51:0a:2c:43:43:fd:4b:65:1f:66:f8: 93:e7:b9:b1:4e:10:8a:87:8d:8b:44:f7:3e:b4:03: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:55:0B:8B:6A:14:18:EC:F3:5C:11:C1:CC:96:91:01:E6:42:79:77 X509v3 Authority Key Identifier: keyid:34:24:CA:C0:85:E7:7B:82:A8:87:89:25:FC:49:A6:46:94:4D:B3:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3424CAC085E77B82A8878925FC49A646944DB380.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23FA4088CD9CCAC1CE76FC0DF08CF7A90EA938BF5DAD53BE889EB981A44E8A61/0/3424CAC085E77B82A8878925FC49A646944DB380.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c1:3e:ce:5c:79:b3:86:cb:f5:1b:83:e6:0a:75:35:84:ce: 3a:64:cd:e9:42:7a:5a:29:1c:a5:ec:a9:ff:c4:5c:24:aa:4b: 36:6e:17:fd:71:6c:e6:b6:a5:e9:69:2d:c7:6d:c7:71:6f:d7: 0e:57:8b:a6:5c:92:63:e1:18:d7:ad:99:81:1d:26:a8:0c:cb: 39:88:65:f9:4b:81:64:a0:a3:5a:b2:51:bc:16:db:10:38:cf: e9:62:de:9f:1e:cf:76:4d:f8:bf:bd:b5:25:83:5c:16:b4:a9: f9:53:2d:2e:a2:18:d4:23:1b:c5:25:c1:b1:b7:4f:71:0d:fd: a9:ee:94:21:99:11:90:e3:bf:f0:17:3e:87:4d:5b:96:27:a5: 15:2b:b3:8f:83:4d:ba:c6:05:8b:ad:fc:14:1a:97:12:ef:ae: 9f:42:c8:e9:34:d5:87:71:80:36:f4:bd:08:65:49:b5:46:93: 5c:c8:bc:fc:4b:97:54:24:25:97:ad:ff:c5:d6:10:36:cf:54: e0:29:fc:28:b0:5e:81:2c:e8:83:f8:0a:42:0d:65:10:6a:89: c3:5b:aa:a6:21:9b:ef:1c:c1:94:74:4e:96:ca:70:0c:6f:66: c8:7b:b6:e6:4c:25:aa:a0:c1:55:a5:9a:17:25:14:6b:ef:43: cf:3f:bc:e1 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAQiO4H6eb7CFm7UYOePGPvfZu/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyNENBQzA4NUU3N0I4MkE4ODc4OTI1RkM0OUE2NDY5 NDREQjM4MDAeFw0yNTA0MDUxMTMzMzBaFw0yNTA0MTEwMzI0MzBaMDMxMTAvBgNV BAMTKEQ3NTUwQjhCNkExNDE4RUNGMzVDMTFDMUNDOTY5MTAxRTY0Mjc5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gPb5buX3vpIYA5Gui1aOdfob t/2bzVTG8ylSi+lPugyEyXF67YLlD64s165gus86cNA9VdlVer77jfgXaXpPjg4T kirQtB5AOQZt3oliB2vqRrJ90j8hV9SnauWcak7cgHU8q9lStj4p432BJb7bCUyH pZqr5vOm+te48WfTmJIKduXM8Zlo+BbizDriijZNhKBWjKSgsluqN9v9vHnBNCU0 6rQVtCkl382dlKHoVf1u3Pa4vgJi57cekh741llPrQQ02zWX+yAlDeXgKbuazrzq tZrV8CyiDg8jHDRbj7x+VLBRCixDQ/1LZR9m+JPnubFOEIqHjYtE9z60A8uPAgMB AAGjggLTMIICzzAdBgNVHQ4EFgQU11ULi2oUGOzzXBHBzJaRAeZCeXcwHwYDVR0j BBgwFoAUNCTKwIXne4Koh4kl/EmmRpRNs4AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy8yM0ZBNDA4OENEOUNDQUMxQ0U3NkZDMERGMDhDRjdBOTBF QTkzOEJGNURBRDUzQkU4ODlFQjk4MUE0NEU4QTYxLzAvMzQyNENBQzA4NUU3N0I4 MkE4ODc4OTI1RkM0OUE2NDY5NDREQjM4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDI0Q0FDMDg1RTc3QjgyQTg4 Nzg5MjVGQzQ5QTY0Njk0NERCMzgwLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvMjNGQTQwODhDRDlDQ0FDMUNFNzZGQzBERjA4Q0Y3QTkwRUE5MzhCRjVE QUQ1M0JFODg5RUI5ODFBNDRFOEE2MS8wLzM0MjRDQUMwODVFNzdCODJBODg3ODky NUZDNDlBNjQ2OTQ0REIzODAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRwT7OXHmzhsv1G4PmCnU1hM46 ZM3pQnpaKRyl7Kn/xFwkqks2bhf9cWzmtqXpaS3Hbcdxb9cOV4umXJJj4RjXrZmB HSaoDMs5iGX5S4FkoKNaslG8FtsQOM/pYt6fHs92Tfi/vbUlg1wWtKn5Uy0uohjU IxvFJcGxt09xDf2p7pQhmRGQ47/wFz6HTVuWJ6UVK7OPg026xgWLrfwUGpcS766f QsjpNNWHcYA29L0IZUm1RpNcyLz8S5dUJCWXrf/F1hA2z1TgKfwosF6BLOiD+ApC DWUQaonDW6qmIZvvHMGUdE6WynAMb2bIe7bmTCWqoMFVpZoXJRRr70PPP7zh -----END CERTIFICATE-----Generated at Mon Apr 7 05:10:48 2025 by rpki-client